Is our website protected by any kind of Web Application Firewall?

Your site is protected by AWS WAF service and uses a collection of their managed rules along with some custom ones for our use.