11. A system of generating a representation of a plurality of learned rules from a learning engine of an application firewall based on a history of uniform resource locator (URL) communications with a web server, comprising: a learning engine of an application firewall, determining a plurality of learned rules based on a history of URL communications with a web server, each of the plurality of learned rules assigned a URL string, each URL string comprising a path to a resource; and a visualizer executing on a device, categorizing a subset of the plurality of learned rules under a first check type of a plurality of check types, generating a first tree representation of URL strings of the subset of learned rules, each node of the first tree representation corresponding to a segment of the URL strings identified based on application of a first delimiter to the URL strings to segment the URL strings into a first plurality of segments, each of the first plurality of URL strings comprising multiple segments identified based on application of the first selected delimiter, and generating, responsive to changing the first delimiter to a second selected delimiter for the same URL strings via the visualizer responsive to a user operating the visualizer, a second tree representation of the same URL strings of the subset of learned rules change, each node of the second tree corresponding to a segment of the URL strings identified based on application of the second selected delimiter to the URL strings to segment the URL strings into a second plurality of segments, the change allowing a visual comparison of hierarchical distributions of the first plurality of segments and the second plurality of segments between the first tree and the second tree, and distributions of the subset of learned rules corresponding to the first plurality of segments and the second plurality of segments.
11. A system of generating a representation of a plurality of learned rules from a learning engine of an application firewall based on a history of uniform resource locator (URL) communications with a web server, comprising: a learning engine of an application firewall, determining a plurality of learned rules based on a history of URL communications with a web server, each of the plurality of learned rules assigned a URL string, each URL string comprising a path to a resource; and a visualizer executing on a device, categorizing a subset of the plurality of learned rules under a first check type of a plurality of check types, generating a first tree representation of URL strings of the subset of learned rules, each node of the first tree representation corresponding to a segment of the URL strings identified based on application of a first delimiter to the URL strings to segment the URL strings into a first plurality of segments, each of the first plurality of URL strings comprising multiple segments identified based on application of the first selected delimiter, and generating, responsive to changing the first delimiter to a second selected delimiter for the same URL strings via the visualizer responsive to a user operating the visualizer, a second tree representation of the same URL strings of the subset of learned rules change, each node of the second tree corresponding to a segment of the URL strings identified based on application of the second selected delimiter to the URL strings to segment the URL strings into a second plurality of segments, the change allowing a visual comparison of hierarchical distributions of the first plurality of segments and the second plurality of segments between the first tree and the second tree, and distributions of the subset of learned rules corresponding to the first plurality of segments and the second plurality of segments. 20. The system of claim 11 , wherein the visualizer generates the second tree representation of the URL strings responsive to changing the first delimiter to the second delimiter, the second delimiter selected based on one or more of: the first check type, an attribute of the first tree representation, and a characteristic of the URL strings.