skills.rest
lauhon
lauhonCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

application-security

Manage Datadog ASM WAF rules, exclusion filters, and application security threat signals.

5|2|Updated Mar 9, 2026
Search Tags:#owasp#threat detection#waf#datadog#application security#asm#security signals
One-click install
npx skills add https://github.com/lauhon/pi --skill application-security-lauhon
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: application-security
Source: https://github.com/lauhon/pi/tree/main/skills/application-security
Command: npx skills add https://github.com/lauhon/pi --skill application-security-lauhon

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Security teams need to monitor application-level attacks and manage WAF configuration in Datadog, but navigating ASM APIs, security signals, and protection rules manually is time-consuming and error-prone. ## Core Features & Use Cases - Threat Detection: Query Datadog security signals filtered by attack type (SQL injection, XSS, SSRF, credential stuffing), severity, service, and blocked status. - WAF Management: Create, update, and delete WAF exclusion filters and custom rules via the Application Security API v2. - Use Case: When you notice a spike in SQL injection attempts against your /api/users endpoint, use this Skill to query the attack signals, identify the source IPs, and get guidance on creating a custom WAF rule to block the attacker. ## Quick Start Ask the agent to show all application security threats detected in the last 24 hours.

Frequently Asked Questions about application-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I query Datadog application security signals?▼

Use the pup CLI with the security signals command and filter by source:asm. You can narrow results by attack technique, severity status, service name, or time range such as --from="24h".

How do I create a WAF exclusion filter in Datadog ASM?▼

Send a POST request to /api/v2/remote_config/products/asm/waf/exclusion_filters with a name, description, enabled flag, and filter conditions like path_glob, IPs, and HTTP methods. This is commonly used to exclude health checks or internal traffic.

What permissions are required for Datadog Application Security API?▼

You need appsec_protect_read to view WAF rules and exclusions, appsec_protect_write to modify them, and security_monitoring_signals_read to query security signals. Set these on your Datadog API and application keys.

Which languages does Datadog ASM support?▼

ASM supports Java, .NET, Node.js, Python, Ruby, Go, and PHP through their respective dd-trace libraries. Each language has a minimum tracer version, such as dd-trace-java 1.8.0+ or ddtrace 1.9.0+ for Python and Ruby.

Why am I not seeing any ASM security signals?▼

Missing signals usually mean ASM is not enabled, the tracer library version is too old, or DD_APPSEC_ENABLED is not set to true. It can also simply mean no attacks were detected in the queried time range.

Related Skills

Explore More Software Engineering Skills→
engineers-hub-ltd-in-house-projectengineers-hub-ltd-in-house-project

datadog-apm

Configure Datadog APM tracing, custom spans, monitors, and SLOs.

Official
Advanced
Happy-Technologies-LLCHappy-Technologies-LLC
34

correlation-insights

Correlate security incidents with events, vulnerabilities, and threat intelligence.

Official
Advanced
elasticelastic
546

observability-service-health

Assess APM service health by querying Observability APIs and Elasticsearch.

Official
Advanced
mfcollins3mfcollins3

azure-web-application-firewall

Configure and tune Azure WAF policies across Front Door and Application Gateway.

Community
Advanced