What it does
KeiWall sits in front of web applications as a reverse proxy and inspects every request. High-precision signature rules catch known attack shapes, and a few very small, purpose-built models add a learned check, small enough to run inline on every request without becoming the bottleneck. Engineering detail is shared under NDA.
Why small models, not one big one
A WAF sits on the hot path of every request. A multi-megabyte classifier is a latency and memory tax on every request; very small models leave room to run the learned check inline.
Versions
The firewall is written in Go; a MAX-native version is in development.
cross-references
