Shield WAF is an Arcjet security building block that developers add through an Arcjet SDK to protect individual routes or an entire application from application-layer attacks such as SQL injection. It supports dry-run logging and live blocking modes, with decisions visible in the Arcjet dashboard.