While many companies are deploying Web application firewalls (WAFs) to comply with the Payment Card Industry Data Security Standards (PCI DSS), other firms are beginning to realize alternative benefits of the devices.