The main function of a web application firewall is to protect web applications from various types of cyber threats, such as SQL injection, cross-site scripting (XSS), and DDoS attacks. It filters and monitors HTTP traffic between a web application and the internet, implementing security policies to prevent exploitation of vulnerabilities and ensure data integrity.