Type of Firewall | WordPress.org

Hello,

I would like to get more information about the Firewall of Login lockdown.
How is it implemented? Its not implemented through .htaccess “auto prepend file”.

So how is it loaded as first “firewall”?

Trying to figure out if we need a WAF (wordfence) or we have enough with Login lockdown firewall + custom .htaccess headers.

thanks!