# OpenWAF Verify — your client's brand, and white label

> The Verify widget and the browser challenge page show the zone's client brand with «Protected by OpenWAF», or your agency's white-label brand.

[OpenWAF Verify](https://developers.openwaf.dev/waf/verify-widget/#brand) now shows the brand of the site it protects. Give a [client a brand](https://developers.openwaf.dev/fundamentals/agencies-and-clients/#client-brand) (name, optional accent colour, SVG or PNG logo up to 12 KB) and the widget and the browser challenge page of its domains show its logo with a small «Protected by OpenWAF | Privacy | Terms» line; the **Branded** block page uses it too. Domains without a client brand show your [white-label brand](https://developers.openwaf.dev/fundamentals/white-label/#brand), which replaces OpenWAF entirely and links to your own privacy and terms pages when you set them (new `privacy_url` and `terms_url`). The accent colour follows `data-accent`, then the zone's `challenge.color`, then the brand's accent, then `#2456e8`.

The logo travels in the signed edge configuration and is served from your own host at `/__waf/challenge/v1/brand/<sha256>.svg`, so the widget keeps working under `default-src 'self'` and loads nothing from third parties.

The dashboard shows a live preview of a client's brand (light and dark) in **Clients ›** the client **› Brand**, and **Security → Verification** links to it. Client brands are managed there, with `ctl client-brand`, the API (`/v1/orgs/{org}/clients/{client}/brand`) and the MCP tools `get_client_brand`, `set_client_brand` and `delete_client_brand`.