After years of web application firewall (WAF) vendors building and buying adjacent application security tools, like bot management and API security, most have consolidated their offerings into unified web application protection platforms. However, customers must ask questions about the data model, UI, and pricing bundles to ensure that they are really getting a platform. Even if a vendor offers a true web application protection platform, customers may still prefer point solutions in specialized areas. Security pros should use this report to learn about the current state and future of web application protection platforms to determine whether a platform will meet their needs.