As web threats grows every year, so does the WAF market. Web application firewall is known to be the final resolution on protecting web server. But how will WAF be deployed in the future? According to the Gartner report in 2017, the potential of WAF is still high. WAF share of web protection in 2017 was 84%, followed by IPS that scored 61%. WAF also scored top 3 technology for protecting the web. The typical type of WAF, the appliance market is slowly decreasing. While appliance, so called “the box” is still covers the majority of WAF solution, the portion of cloud and SaaS are arising to be a new star. One of the reason why cloud based WAF is quickly growing is the difficulty of maintenance of appliance type. The distribution and management takes enough time and man power to make potential customers to forfeit their security. While cloud security and remote hosting application method is continually growing enough to cover the whole aspect of WAF function, the difficulty of appliance has its limit to grow. AIONCLOUD is one of the examples. AIONCLOUD can support clients with easy management and cost effective approach where appliance type can’t possibly match. As people begin to trust the performance of cloud infrastructure, SECaaS will become the new WAF standard.