Table of Contents

1. 1. Introduction
2. 2. Differences from WafCharm
3. 3. Important notes on subscribing to MR Plus
4. 4. Conclusion

1. Introduction

We are pleased to announce the release of Managed Rules Plus on August 19th, 2025.

Managed Rules Plus (also known as WafCharm Lite and abbreviated as MR Plus) is a new plan designed as a simplified version of WafCharm. It is available for purchase through AWS Marketplace. When used together with CSC Managed Rules, MR Plus enables cost-efficient operation of WAF rules.

The term “CSC Managed Rules” refers to the following products:

• Cyber Security Cloud Managed Rules for AWS WAF -HighSecurity OWASP Set-
• Cyber Security Cloud Managed Rules for AWS WAF -API Gateway/Serverless-

2. Differences from WafCharm

WafCharm is a service that applies rules to AWS WAF to protect against common web attacks. A subscription to WafCharm provides its rule sets, an automated denylist feature that updates suspicious IP addresses, as well as operational tools such as monthly reports, detection notifications, and WAF log search.

With MR Plus, when used together with the applicable CSC Managed Rules, you gain additional support for CSC Managed Rules along with the following operational features:

• Automated denylist feature that updates suspicious IP addresses
• Monthly reports available through the WafCharm Console

For more details, please see What is Managed Rules Plus?

3. Important notes on subscribing to MR Plus

To use MR Plus, you must subscribe through its product detail page on AWS Marketplace:
Managed Rule Plus for AWS WAF by WafCharm (link to AWS Marketplace product detail page)

On AWS Marketplace, we also provide WafCharm, listed separately as WafCharm for AWS Marketplace. Please note that each has its own product detail page.

You cannot use both WafCharm and MR Plus with the same AWS account ID. If you are already subscribed to WafCharm for AWS Marketplace, you will need to use a different AWS account ID when subscribing to MR Plus.

4. Conclusion

We have introduced our newly released Managed Rules Plus (MR Plus). If you are already subscribed to one of the CSC Managed Rules listed above and are looking to add optional operational features, we encourage you to consider using MR Plus.