Cloudflare vs NGINX App Protect comparison

Cancel
You must select at least 2 products to compare!
Cloudflare Logo
8,896 views|7,547 comparisons
96% willing to recommend
F5 Logo
3,410 views|2,539 comparisons
95% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Cloudflare and NGINX App Protect based on real PeerSpot user reviews.

Find out in this report how the two Distributed Denial of Service (DDOS) Protection solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Cloudflare vs. NGINX App Protect Report (Updated: May 2020).
772,649 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The DDoS protection is the most valuable aspect of the solution.""Centralized, full-featured DNS.""The most valuable feature of Cloudflare is the GUI. You are able to control the solution very well through the interface. There is a lot of functionality that is embedded in the service.""From what I've seen so far, there are no negatives to report as of yet""When using services like Heroku, Cloudflare is very useful for CNAME flattening. I also use it for their end-to-end SSL with TLS authentication on nginx for securing servers.""The technical support is good.""It's very user-friendly.""The most valuable feature of Cloudflare is that it has a free version. They give us the free version with the anti-DDoS features and also the load balancing solution."

More Cloudflare Pros →

"I tested specific features and evaluated the solution against the Web Application Firewall. I conducted research to test different detection percentages. I did not use it directly for protection but for evaluation purposes.""The most valuable feature of NGINX App Protect is the reverse proxy.""NGINX App Protect is stable.""NGINX App Protect has complete control over the HTTP session.""It is a stable solution.""The policies are flexible based on the technologies you use.""WAF is useful to track mitigation, inclusion, prevention, and the parametric firewall.""It has the best documentation features."

More NGINX App Protect Pros →

Cons
"Cloudflare does not have an on-premise solution. If they had different approaches they could be better suited to accommodate more customers, such as on-premise and hybrid deployments. For example, hybrid deployments would be useful where you could move the traffic from the enterprise to the cloud.""One area of improvement is in the Access Rules. Hypothetically, if we wanted to block or challenge traffic outside of the United States, the only way to currently do that (as far as I know) is to enter every single country outside of the United States. That could be a labor intensive job. A solution could be to enable users to create a rule where traffic is only allowed within a certain country.""It should have easier documentation for the configuration. It's very technical and people who aren't technical should also be able to do the configuration.""Support response time could be improved.""It would be beneficial for us if Cloudflare could offer a scrubbing solution. This would involve taking a snapshot of my website and keeping it live during a DDoS attack, ensuring uninterrupted service for our users. DDoS attacks are typically short in duration, and having Cloudflare maintain the site's availability from its secure network would enhance the overall user experience. I would appreciate it if Cloudflare could consider implementing this feature. Many organizations already utilize similar capabilities in their CDN platforms, where a static snapshot of the web page is displayed during DDoS attacks. In terms of features, Cloudflare needs to enhance its resilience and stay more focused on adopting new technologies. For instance, solutions like F5 XC Box, Access Solution, and Distributed Cloud Solution have impressive features, and Cloudflare should strive to match and exceed those capabilities. There's a need for improvement in areas like AI-based DDoS attacks and Layer 7 WAF features. Cloudflare should prioritize enhancements in areas such as behavioral DDoS and protection against SQL injection attacks, considering the prevalent trend of public exposure to the internet for business reasons. Overall, Cloudflare needs to invest more in advancing its feature set.""We're facing challenges due to an upgrade in the machine learning model. The problem arises from some users abusing the APIs, resulting in an influx of suspicious traffic. Cloudflare's learning model mistakenly identifies this traffic as human. Consequently, it assigns it a higher trust score, akin to legitimate human traffic, causing complications in our architecture. Previously, such traffic would have been categorized as suspicious, enabling us to apply appropriate blocking rules. However, we encounter difficulties distinguishing between genuine and suspicious traffic with the new categorization. Despite these challenges, overall, Cloudflare remains the preferred solution compared to Azure, AWS CloudFront, and Google Cloud Armor.""If they improve on the placement of their data centers, it would be better. I'm living in a remote area. I would like to connect to them without any kind of lag.""I would like Cloudflare to offer a dedicated account manager for large enterprise clients like us."

More Cloudflare Cons →

"The price of NGINX App Protect could improve.""Right now, the tool doesn't provide an option revolving around update feeds, specifically the signature update option in the UI.""As far as scalability, it takes a long time for deployment.""The setup of NGINX App Protect is complex. The full process took one week to complete. Additionally, we had to change the network infrastructure platform which took one month.""The solution needs to be improved in the e-commerce portal.""The product's user interface is an area with shortcomings as it can be quite confusing for users, making it an area where improvements are required.""Currently, the policies have to be handled manually, and you have to create from scratch, which can be a bit time-consuming, in a large environment.""NGINX App Protect could improve security."

More NGINX App Protect Cons →

Pricing and Cost Advice
  • "So far I use free tier and happy with it. You can subscribe to business package if needed."
  • "I think the pricing is competitive. I think as far as licensing is concerned it's pretty straightforward because it's based on domain. It's just that sometimes domains could be tricky with some customers."
  • "There are no additional costs beyond the standard licensing fees."
  • "The cost primarily depends on the size of the organization."
  • "We don't have any issues with the price."
  • "The price is reasonable."
  • "The solution is expensive when compared to other products but offers unlimited bandwidth."
  • "It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
  • More Cloudflare Pricing and Cost Advice →

  • "The licensing fees for this solution are pretty expensive for what it does, but there is no alternative."
  • "Our licensing costs are about $40,000 a year."
  • "Really understand the licensing model, because we underestimated that."
  • "There are no additional fees."
  • "NGINX is not expensive."
  • "The pricing is reasonable because NGINX operates on an instance basis."
  • "There is a license needed to use NGINX App Protect."
  • "There are not any additional costs we had to pay to use NGINX App Protect."
  • More NGINX App Protect Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Distributed Denial of Service (DDOS) Protection solutions are best for your needs.
    772,649 professionals have used our research since 2012.
    Comparison Review
    Anonymous User
    Questions from the Community
    Top Answer:Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GRE tunnels. We have decreased site load times on Mobile 3G from 8 to 1,6 seconds by… more »
    Top Answer:Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
    Top Answer:The solution has yearly, three-year, and five-year subscriptions.
    Top Answer:NGINX App Protect could provide a better user interface.
    Ranking
    Views
    8,896
    Comparisons
    7,547
    Reviews
    17
    Average Words per Review
    520
    Rating
    8.4
    Views
    3,410
    Comparisons
    2,539
    Reviews
    9
    Average Words per Review
    334
    Rating
    8.7
    Comparisons
    Also Known As
    NGINX WAF, NGINX Web Application Firewall
    Learn More
    Overview

    Cloudflare is a highly-regarded Content Delivery Network (CDN) and a Distribution Denial of Service (DDoS) protection solution. The robust global cloud platform that is Cloudflare ensures users are able to connect to the internet quickly, securely, and reliably. Cloudflare is one of the world's largest networks in the marketplace today. Using Cloudflare, businesses, educational entities, NGOs, vloggers, bloggers, and anyone else with an internet presence can use the solution and experience more secure, faster websites and applications.

    Currently, there are millions of internet locations on Cloudflare, and the Cloudflare network continues to grow every day by the thousands. The solution is able to fulfill the requests for millions of websites seamlessly and serves on average 45 million HTTP requests per second.

    Cloudflare has safe, secure data centers in close to 300 cities worldwide to ensure every client request is filled as quickly as possible. It is Cloudflare’s edge network that makes this possible by keeping content and other services as close to each client as possible, so the information requests are always only seconds away.

    Many organizations that work in democracy, civil society, human rights, or the arts are able to access Cloudflare highest levels of protection for free via Project Galileo. Additionally, official election websites can be secured from hacking and fraud through Cloudflare’s Project Athenian, also at no additional cost.

    Cloudflare can also help organizations of all sizes develop a robust zero-trust strategy to ensure the highest levels of productivity and profitability. Employees, stakeholders, and end-users have a greater level of satisfaction and overall improved user experience, which can, in turn, result in higher revenues and overall ROI. Zero-trust and BYOD ( bring your own device) access ensure end-users and employees always have the best resources and technology available to them at all times.



    Cloudflare Benefits

    Cloudflare has many benefits. Some of its most valuable benefits include:

    • Faster load times
    • Robust DNS security
    • Intuitive cloud Web Application Firewall (WAF)
    • Free universal SSL
    • Image Enhancement
    • Automatic Browser Caching
    • Next-generation cloud load balancer
    • Accelerated Mobile Pages (AMP)
    • Rate Limiting
    • Minification
    • Zero-trust capabilities 
    • Cost-effective
    • Reduced carbon footprint

    Reviews from Real Users

    “Many websites require an SSL certificate because they sell stuff and want SSL. Cloudflare comes with an SSL certificate built in. It's automatic. You sign yourself up for Cloudflare, and an SSL certificate automatically protects your website. If you have a connection between your website and your host, the server, Cloudflare, and the host, you don't necessarily need a certificate.”  Spencer M., Owner at Tech Exchange

    “What I like best about Cloudflare is that my company can use it to trace and manage applications and monitor traffic. The solution tells you if there's a spike in traffic. Cloudflare also sends you a link to check your equipment and deployment and track it through peering, so it's a valuable tool.” Daniel P., Network engineer at Ufinet

    The most valuable feature of Cloudflare is the GUI. You are able to control the solution very well through the interface. There is a lot of functionality that is embedded in the service.” A PeerSpot user who is a Competence Center Manager at a tech services company. 

    NGINX App Protect application security solution combines the efficacy of advanced F5 web application firewall (WAF) technology with the agility and performance of NGINX Plus. The solution runs natively on NGINX Plus and addresses some of the most difficult challenges facing modern DevOps environments:

    • Integrating security controls directly into the development automation pipeline
    • Applying and managing security for modern and distributed application environments such as containers and microservices
    • Providing the right level of security controls without impacting release and go-to-market velocity
    • Complying with security and regulatory requirements

    NGINX App Protect offers:

    • Expanded security beyond basic signatures to ensure adequate controls
    • F5 app‑security technology for efficacy superior to ModSecurity and other WAFs
    • Confidently run in “blocking” mode in production with proven F5 expertise
    • High‑confidence signatures for extremely low false positives
    • Increases visibility, integrating with third‑party analytics solutions
    • Integrates security and WAF natively into the CI/CD pipeline
    • Deploys as a lightweight software package that is agnostic of underlying infrastructure
    • Facilitates declarative policies for “security as code” and integration with DevOps tools
    • Decreases developer burden and provides feedback loop for quick security remediation
    • Accelerates time to market and reduces costs with DevSecOps‑automated security
    Sample Customers
    Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
    Information Not Available
    Top Industries
    REVIEWERS
    Financial Services Firm22%
    Comms Service Provider22%
    Engineering Company13%
    Energy/Utilities Company9%
    VISITORS READING REVIEWS
    Educational Organization38%
    Computer Software Company11%
    Financial Services Firm8%
    Comms Service Provider4%
    REVIEWERS
    Financial Services Firm33%
    Comms Service Provider33%
    Insurance Company17%
    Computer Software Company17%
    VISITORS READING REVIEWS
    Computer Software Company19%
    Financial Services Firm11%
    Comms Service Provider7%
    Healthcare Company7%
    Company Size
    REVIEWERS
    Small Business65%
    Midsize Enterprise12%
    Large Enterprise23%
    VISITORS READING REVIEWS
    Small Business18%
    Midsize Enterprise46%
    Large Enterprise36%
    REVIEWERS
    Small Business30%
    Midsize Enterprise25%
    Large Enterprise45%
    VISITORS READING REVIEWS
    Small Business25%
    Midsize Enterprise15%
    Large Enterprise61%
    Buyer's Guide
    Cloudflare vs. NGINX App Protect
    May 2020
    Find out what your peers are saying about Cloudflare vs. NGINX App Protect and other solutions. Updated: May 2020.
    772,649 professionals have used our research since 2012.

    Cloudflare is ranked 1st in Distributed Denial of Service (DDOS) Protection with 57 reviews while NGINX App Protect is ranked 15th in Web Application Firewall (WAF) with 20 reviews. Cloudflare is rated 8.4, while NGINX App Protect is rated 8.2. The top reviewer of Cloudflare writes "It's easy to set up because you point the DNS to it, and it's working in under 15 minutes". On the other hand, the top reviewer of NGINX App Protect writes "Capable of complete automation but is costly ". Cloudflare is most compared with Akamai, Azure Front Door, Imperva DDoS, AWS Shield and Microsoft Azure Application Gateway, whereas NGINX App Protect is most compared with Microsoft Azure Application Gateway, AWS WAF, Fortinet FortiWeb, F5 Advanced WAF and Azure Web Application Firewall. See our Cloudflare vs. NGINX App Protect report.

    We monitor all Distributed Denial of Service (DDOS) Protection reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.