OpenWAF Verify now shows the brand of the site it protects. Give a client a brand (name, optional accent colour, SVG or PNG logo up to 12 KB) and the widget and the browser challenge page of its domains show its logo with a small «Protected by OpenWAF | Privacy | Terms» line; the Branded block page uses it too. Domains without a client brand show your white-label brand, which replaces OpenWAF entirely and links to your own privacy and terms pages when you set them (new privacy_url and terms_url). The accent colour follows data-accent, then the zone's challenge.color, then the brand's accent, then #2456e8.
The logo travels in the signed edge configuration and is served from your own host at /__waf/challenge/v1/brand/<sha256>.svg, so the widget keeps working under default-src 'self' and loads nothing from third parties.
The dashboard shows a live preview of a client's brand (light and dark) in Clients › the client › Brand, and Security → Verification links to it. Client brands are managed there, with ctl client-brand, the API (/v1/orgs/{org}/clients/{client}/brand) and the MCP tools get_client_brand, set_client_brand and delete_client_brand.