Auditable. Exportable. Built for the questionnaire.
Real-time analytics across traffic, threats, and rules — plus one-click compliance reports formatted for the frameworks your auditors actually ask about.
Dashboard → Evidence PDF
Understand what's happening, at a glance.
Everything is available as interactive dashboards and exportable as CSV, JSON, or Prometheus metrics for your own observability stack.
Ready-to-use visibility
A complete, queryable record.
Request ID logs
Every request gets a unique ID logged on ingress and egress, with full request/response correlation.
Tenant access logs
Attributed to the specific tenant or customer in multi-tenant deployments.
Domain metrics
Request volume, error rates, and latency per protected domain.
WAF rule metrics
Which rules fire, how often, against which sources.
Bot category metrics
What's hitting you and what action was taken.
Rule change audit trail
Every configuration change, who made it, when, and what changed.
The evidence your auditor wants, in one click.
PCI-DSS v4
Covers Requirement 6.4.2 with the artefacts assessors request.
NIS2
Incident reports formatted to the directive's structured reporting timelines.
GDPR
What was processed, where, with which controls applied.
ISO 27001
Control mappings for the relevant Annex A controls.
SOC 2
Evidence for the relevant Trust Services Criteria.
Cyber Essentials Plus
The technical controls evidence assessors specifically request.
Why this matters.
Assembling WAF coverage evidence for a PCI-DSS audit typically takes a small team several days. With CrownWall it’s a single export. For many customers, this one feature is the reason they switched.