WAF (web application firewall)

A Web Application Firewall analyses traffic coming into the site and rejects requests matching known attack patterns (for example SQL injection attempts or exploitation of a fresh flaw). It works like a bouncer at the door.

A WAF is especially valuable as a "virtual patch": it can block an attack on a vulnerability before you manage to update the plugin. It does not replace updates, but it buys priceless time.