1. A method implemented at a web application firewall, comprising: providing generic rules applicable to all tenants; authenticating one or more tenants; registering tenant information of the one or more tenants, including mapping a pattern with a tenant type and a tenant identifier, wherein the tenant type comprises a uniform resource locator (URL) path, Sub Domain or Custom Domain; identifying, based on the tenant information, at least one of the one or more tenants which is associated with a hypertext transfer protocol (HTTP) request; identifying rules associated to and specific to each of the one or more identified tenants, wherein identifying the rules including customizing at least one of the generic rules based on data usage of at least one of the one or more identified tenants; and implementing the identified rules associated to and specific to each of the one or more identified tenants.