2.9.22
Released 28 Oct 2026
Official TQ Codeworks website
Web application firewall rules agent
TQ Codeworks edits your waf rules and reads logs on Windows 10/11. Version 2.9.22 runs tests with a web app firewall today.
Read the block logs and fix the false positive rule for the login path.
- read_file
logs/block.log3 matches - grep
path /login3 matches - edit_file
waf-rules.txt+1 line - Shell
your config-test commandexit 0 - write_file
waf-rules-fixed.txtsaved
waiting for your OK before the next stepRejectAccept
34 MB
Setup program size
25 MB
Single .exe file
13
Interface languages
Windows 10/11
x64 architecture
No telemetry
Runs locally on PC
Manage your web application firewall policy
The agent reads your configuration files and block logs to spot false positives and edits your web application firewall rules to show a diff before you accept changes. Stay in control. You stay in control with Ask first mode for every change. This release is version 2.9.22 for Windows users.
Fix waf false positives
The agent uses grep to scan block logs and count the most blocked paths, and it edits the configuration file to fix false positives before you deploy. Review the diff. Shell runs a test command against staging to verify the fix. Cron runs prompts on a schedule to re-read the logs and keep rules current. Version 2.9.22 is the current release that helps you learn how to tune your policy. You approve the change in Ask first mode before deployment to ensure safety.
Tool trace
grep path /login → 3 matches
edit_file waf-rules.txt → +1 line
Shell your config-test command → exit 0Rate limiting for the login path
TQ Codeworks edits your WAF policy with edit_file and uses Shell to validate syntax before you deploy them to production servers. Ready now. The agent reads your configuration with read_file and checks logs using grep for false positives. A counter shows files created, edited and read during the session. You review the plan in Plan only mode before deployment of the changes. The current version 2.9.22 is released 28 Oct 2026 for Windows 10 and 11 x64 systems.
Tool trace
edit_file waf-rules.txt → saved
Shell waf-check → exit 0
grep "rule 10" waf-rules.txt → 1 matchWeb app firewall staging
Deploy rules to a staging copy first to test harmless sample requests, and the agent uses http_get to check the status code for normal requests. Review the result. The interface supports 13 languages for global teams who need clear communication. You verify the results in the chat window to ensure accuracy. The agent uses read_file to load config files from the working folder. Check the diff before accepting the changes to prevent errors.
Tool trace
http_get /login → 200 OK
http_get /login?bad=1 → 403 BlockedReading documentation and locating config files
The agent uses grep to search your WAF configuration files and http_get to verify that the staging URL returns the expected status for a normal request, ensuring rules are correct. Check the rules. You can set per uri rate limiting in a waf to control traffic flow effectively. Edit the settings with edit_file and review the diff before accepting the changes. Run the build command to apply changes to the configuration on Windows 10/11. Verify the configuration by listing the directory again to confirm all files are present.
Tool trace
http_get docs.html → 200 OK
list_dir . → 5 filesHow it differs from a typical chat assistant
TQ Codeworks v2.9.22 runs the tools itself and shows each real result, so fixing waf false positives becomes straightforward for your site today. Real results appear.
| Typical chat assistant | TQ Codeworks | |
|---|---|---|
| Action | Suggests steps | Runs tools |
| Result | Text description | Real exit code |
| Files | Shows diff | Edits file |
| Control | Manual copy | Ask first mode |
How to get started
- Download the 34 MB setup program for Windows 10 or 11.
- Run the installer or use the 25 MB portable .exe file.
- Select your model endpoint and test the connection with the Test button.
- Open your WAF configuration file in the chat working folder.
Who uses it and when
Beginners use the agent to write their first waf policy for a small site and read the logs to fix false positives with narrow exceptions. Keep safe. The current version 2.9.22 is ready for download now.
They read block logs to spot false positives and tune configurations for high traffic apps because they run shell commands to test staging copies before blocking changes. Logs guide decisions. Where to place a waf affects the entire security policy.
Developers use the agent to integrate these rules into their workflow, and they edit files to check syntax while running linters to verify correctness. Check every diff. They use SSH to read logs on a server they own.
Frequently asked questions
What is a web application firewall?
A web application firewall inspects HTTP requests at the application layer and applies rules to allow, log or block traffic based on specific conditions, so you keep the rules in version control. It is one layer. This protects your site from common attacks and ensures security.
Is tqcoders.com the official TQ Codeworks website?
Yes, tqcoders.com is the official TQ Codeworks website, and the installer is not code-signed yet, so you must compare its SHA-256 checksum with the published manifest using certutil before running it. SmartScreen may warn. Run the program after the checksum matches to verify the file integrity.
Does the agent filter traffic itself?
No, the agent prepares and checks the rules you deploy, so it is not in the network path to filter traffic itself. It checks rules. It reads your configuration files to verify them before you apply them.
How does it help with fixing waf false positives?
Fixing waf false positives means adjusting rules so that valid traffic is not blocked, and the agent reads logs to identify these errors precisely. It reads logs. The agent edits the file and shows the diff for review.
Where does it sit in front of the web app?
A web application firewall sits in front of the web app as a reverse proxy, server module or provider service to inspect traffic and it works at the application layer, which is how it protects your site by filtering requests. It filters traffic. This simple mechanism ensures that only valid requests reach your application server.
What is the set of rules for a site?
The rule set defines the specific conditions and actions for requests, and the agent helps you write and tune them effectively for your site. Keep it safe. Version control tracks every change to the rules you deploy for your site today.
What is an open source waf?
An open source waf is an engine whose source code is public, so you choose it by licence, support, performance and how well you can read the logs. It is open source. This definition clarifies the concept for your policy decisions.
Start managing your rules
Download TQ Codeworks v2.9.22 for Windows 10 or 11, because the agent reads your logs, edits your configuration and runs your tests. Action.
Download TQ Codeworks for Windows ↗Explore the site
Every page of this website is available in 20 languages.
Product features ↗ Model configuration ↗ Workflow examples ↗ Download installer ↗ FAQ details ↗ Privacy policy ↗
