How the claims on these pages are checked
Testing and evidence
DAV NGWAF is tested at four levels: unit and replay tests in the build, installation verification, live lab tests, and Red Hat's certification test suite.
Build-time tests
| Test | Result |
|---|---|
| Rust test suite | 285 passed, 2 ignored (November 11, 2026) |
| Native ML against reference cases | All 2,013 fixtures within tolerance; no verdict changes |
| Golden traffic replays | Recorded traffic replayed through the engine; decisions match the expected results |
Installation verification
Each installation checks inputs and installed files against the SHA-256 manifest, confirms ownership and modes, verifies the engine runs as the service account, and validates the sudo rule before installing it.
Live lab tests
A RHEL 10.2 lab server and a separate client on the same network were used to measure detection and enforcement: paced probes, a directory scan, an already-open connection, and XDP versus nftables-only drops. Results, methods and timestamps are published in the lab report.
Production
DAV NGWAF has protected the company's own production websites since late 2025, including an AlmaLinux server on AWS Graviton (ARM64). Live verification reports are published hourly.
Red Hat certification
Certification ID 744987, Red Hat Enterprise Linux 10 Application, target RHEL 10.2 x86_64. Test runs have been recorded on a RHEL 10.2 lab host and, for diagnostic comparison, on Microsoft Azure. Self-check and sosreport tests pass. Remaining findings, including kernel release lookup and driver warnings reported by the supportability check, are being worked through with Red Hat in the certification case. The move from ipset to native nftables removes the dependency on unmaintained kernel modules.