TEST SECURITY RULES LIKE CODE WITH THE FASTLY WAF SIMULATOR

Summary from the TLDR InfoSec newsletter

For developers, treating is sacrosanct. In security, it's too often an afterthought - WAF rules are only validated during pentesting... or in an actual attack.