Cloudflare vs Wallarm NG WAF comparison

Cancel
You must select at least 2 products to compare!
Cloudflare Logo
8,520 views|7,297 comparisons
96% willing to recommend
Wallarm Logo
374 views|311 comparisons
100% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Cloudflare and Wallarm NG WAF based on real PeerSpot user reviews.

Find out what your peers are saying about Cloudflare, NETSCOUT, Akamai and others in Distributed Denial of Service (DDOS) Protection.
To learn more, read our detailed Distributed Denial of Service (DDOS) Protection Report (Updated: May 2024).
772,679 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The simplicity of the overall dashboard makes it a great product for a user like me who has less understanding of the internet than a developer or other more technical people. It gives me peace of mind. I also love the easy customization of the Page Rules.""Cloudflare is a security SaaS provider that provides security and protects us from any application layer attack.""The most valuable feature is the web application firewall.""The UI is good.""The web application firewall brought us good security and a view of the accesses/blocks of the entire domain and subdomain that were accessed both by region (country) and IPs.""I rate its stability a ten out of ten.""The most valuable feature of Cloudflare is the GUI. You are able to control the solution very well through the interface. There is a lot of functionality that is embedded in the service.""New and innovative way to protect the client's data."

More Cloudflare Pros →

"Helps us to monitor situation in regards to attacks to our sites and prevents a lot of them."

More Wallarm NG WAF Pros →

Cons
"It should be easier to collect the logs with companies like Sumo. However, based on my discussions with the salespeople, I understand that's how they make their money. With the enterprise product, they want people doing those kinds of enterprise features to do the logging. They want them to pay a lot of money, and that's where I have an issue with them. That should be a default. You should be able to get the log no matter what. The logging should be universal.""We're facing challenges due to an upgrade in the machine learning model. The problem arises from some users abusing the APIs, resulting in an influx of suspicious traffic. Cloudflare's learning model mistakenly identifies this traffic as human. Consequently, it assigns it a higher trust score, akin to legitimate human traffic, causing complications in our architecture. Previously, such traffic would have been categorized as suspicious, enabling us to apply appropriate blocking rules. However, we encounter difficulties distinguishing between genuine and suspicious traffic with the new categorization. Despite these challenges, overall, Cloudflare remains the preferred solution compared to Azure, AWS CloudFront, and Google Cloud Armor.""It would be beneficial for us if Cloudflare could offer a scrubbing solution. This would involve taking a snapshot of my website and keeping it live during a DDoS attack, ensuring uninterrupted service for our users. DDoS attacks are typically short in duration, and having Cloudflare maintain the site's availability from its secure network would enhance the overall user experience. I would appreciate it if Cloudflare could consider implementing this feature. Many organizations already utilize similar capabilities in their CDN platforms, where a static snapshot of the web page is displayed during DDoS attacks. In terms of features, Cloudflare needs to enhance its resilience and stay more focused on adopting new technologies. For instance, solutions like F5 XC Box, Access Solution, and Distributed Cloud Solution have impressive features, and Cloudflare should strive to match and exceed those capabilities. There's a need for improvement in areas like AI-based DDoS attacks and Layer 7 WAF features. Cloudflare should prioritize enhancements in areas such as behavioral DDoS and protection against SQL injection attacks, considering the prevalent trend of public exposure to the internet for business reasons. Overall, Cloudflare needs to invest more in advancing its feature set.""The product needs to improve its automation.""DNS Management.""Even if I wanted to, I wouldn't be able to buy Cloudflare in my country.""Cloudflare's console should be made more user-friendly.""Cloudflare could offer a better view or maybe dashboards of the main resources used in the client."

More Cloudflare Cons →

"The biggest problem for us was the stability and speed using the first version of Wallarm. Now, it is fine."

More Wallarm NG WAF Cons →

Pricing and Cost Advice
  • "So far I use free tier and happy with it. You can subscribe to business package if needed."
  • "I think the pricing is competitive. I think as far as licensing is concerned it's pretty straightforward because it's based on domain. It's just that sometimes domains could be tricky with some customers."
  • "There are no additional costs beyond the standard licensing fees."
  • "The cost primarily depends on the size of the organization."
  • "We don't have any issues with the price."
  • "The price is reasonable."
  • "The solution is expensive when compared to other products but offers unlimited bandwidth."
  • "It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
  • More Cloudflare Pricing and Cost Advice →

  • "​Pricing must be cheaper than the competition and the licensing must be good.​"
  • More Wallarm NG WAF Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Distributed Denial of Service (DDOS) Protection solutions are best for your needs.
    772,679 professionals have used our research since 2012.
    Comparison Review
    Anonymous User
    Questions from the Community
    Top Answer:Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GRE tunnels. We have decreased site load times on Mobile 3G from 8 to 1,6 seconds by… more »
    Top Answer:Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
    Ask a question

    Earn 20 points

    Ranking
    Views
    8,520
    Comparisons
    7,297
    Reviews
    18
    Average Words per Review
    508
    Rating
    8.3
    Views
    374
    Comparisons
    311
    Reviews
    0
    Average Words per Review
    0
    Rating
    N/A
    Comparisons
    Also Known As
    Wallarm NG-WAF
    Learn More
    Overview

    Cloudflare is a highly-regarded Content Delivery Network (CDN) and a Distribution Denial of Service (DDoS) protection solution. The robust global cloud platform that is Cloudflare ensures users are able to connect to the internet quickly, securely, and reliably. Cloudflare is one of the world's largest networks in the marketplace today. Using Cloudflare, businesses, educational entities, NGOs, vloggers, bloggers, and anyone else with an internet presence can use the solution and experience more secure, faster websites and applications.

    Currently, there are millions of internet locations on Cloudflare, and the Cloudflare network continues to grow every day by the thousands. The solution is able to fulfill the requests for millions of websites seamlessly and serves on average 45 million HTTP requests per second.

    Cloudflare has safe, secure data centers in close to 300 cities worldwide to ensure every client request is filled as quickly as possible. It is Cloudflare’s edge network that makes this possible by keeping content and other services as close to each client as possible, so the information requests are always only seconds away.

    Many organizations that work in democracy, civil society, human rights, or the arts are able to access Cloudflare highest levels of protection for free via Project Galileo. Additionally, official election websites can be secured from hacking and fraud through Cloudflare’s Project Athenian, also at no additional cost.

    Cloudflare can also help organizations of all sizes develop a robust zero-trust strategy to ensure the highest levels of productivity and profitability. Employees, stakeholders, and end-users have a greater level of satisfaction and overall improved user experience, which can, in turn, result in higher revenues and overall ROI. Zero-trust and BYOD ( bring your own device) access ensure end-users and employees always have the best resources and technology available to them at all times.



    Cloudflare Benefits

    Cloudflare has many benefits. Some of its most valuable benefits include:

    • Faster load times
    • Robust DNS security
    • Intuitive cloud Web Application Firewall (WAF)
    • Free universal SSL
    • Image Enhancement
    • Automatic Browser Caching
    • Next-generation cloud load balancer
    • Accelerated Mobile Pages (AMP)
    • Rate Limiting
    • Minification
    • Zero-trust capabilities 
    • Cost-effective
    • Reduced carbon footprint

    Reviews from Real Users

    “Many websites require an SSL certificate because they sell stuff and want SSL. Cloudflare comes with an SSL certificate built in. It's automatic. You sign yourself up for Cloudflare, and an SSL certificate automatically protects your website. If you have a connection between your website and your host, the server, Cloudflare, and the host, you don't necessarily need a certificate.”  Spencer M., Owner at Tech Exchange

    “What I like best about Cloudflare is that my company can use it to trace and manage applications and monitor traffic. The solution tells you if there's a spike in traffic. Cloudflare also sends you a link to check your equipment and deployment and track it through peering, so it's a valuable tool.” Daniel P., Network engineer at Ufinet

    The most valuable feature of Cloudflare is the GUI. You are able to control the solution very well through the interface. There is a lot of functionality that is embedded in the service.” A PeerSpot user who is a Competence Center Manager at a tech services company. 

    Protect any API. In any environment. Against any threats.

    Wallarm is the platform Dev, Sec, and Ops teams choose to build cloud-native applications securely, monitor them for modern threats, and get alerted when threats arise. Whether you protect some of the legacy apps or brand new cloud-native APIs, Wallarm multi-cloud platform provides key components to secure your business against emerging threats.

    -> Robust protection for the entire application portfolio

    Mitigate threats against OWASP Top 10 threats, business logic abuse, bad bots, account takeover (ATO), and more. Get the robust API protection that no other WAF can provide.

    -> Quick integrations

    Setup cross-team workloads via your existing DevOps and security toolchain (SOARs, SIEMs). Setup triggers and noise-free alerts in Slack and other messengers, PagerDuty, and more.

    -> Blocking mode and compliance with no hassle

    Forget issues with false positives. Wallarm’s new libDetection and core signature-less attack detection provide low false positives from day one.

    -> Unparalleled visibility into malicious traffic

    Gain full insights about attacks and attackers in the responsive Wallarm Console. Enjoy the Dashboard, reach search, and reporting capabilities.

    -> Automated Incident Response

    Reduce manual analysis and noise level. Automated Threat Verification can dissect potentially harmful attacks from millions of random scans and report vulnerabilities.

    -> Understand Your Attack Surface

    You can’t protect what you don’t know. Utilize the attack surface and shadow resources to track changes. Identify misconfiguration issues and vulnerable applications and resources.

    Sample Customers
    Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
    Panasonic. Miro. Rappi. Wargaming. Gannett. Omio. Acronis. Workforce Software. Tipalti. SEMRush.
    Top Industries
    REVIEWERS
    Financial Services Firm22%
    Comms Service Provider22%
    Engineering Company13%
    Energy/Utilities Company9%
    VISITORS READING REVIEWS
    Educational Organization38%
    Computer Software Company11%
    Financial Services Firm8%
    Comms Service Provider4%
    VISITORS READING REVIEWS
    Computer Software Company15%
    Financial Services Firm11%
    Comms Service Provider7%
    Insurance Company6%
    Company Size
    REVIEWERS
    Small Business65%
    Midsize Enterprise12%
    Large Enterprise23%
    VISITORS READING REVIEWS
    Small Business18%
    Midsize Enterprise46%
    Large Enterprise36%
    VISITORS READING REVIEWS
    Small Business25%
    Midsize Enterprise16%
    Large Enterprise58%
    Buyer's Guide
    Distributed Denial of Service (DDOS) Protection
    May 2024
    Find out what your peers are saying about Cloudflare, NETSCOUT, Akamai and others in Distributed Denial of Service (DDOS) Protection. Updated: May 2024.
    772,679 professionals have used our research since 2012.

    Cloudflare is ranked 1st in Distributed Denial of Service (DDOS) Protection with 57 reviews while Wallarm NG WAF is ranked 34th in Web Application Firewall (WAF). Cloudflare is rated 8.4, while Wallarm NG WAF is rated 8.6. The top reviewer of Cloudflare writes "It's easy to set up because you point the DNS to it, and it's working in under 15 minutes". On the other hand, the top reviewer of Wallarm NG WAF writes "Active threat detection and adaptive rules are the most valuable for us". Cloudflare is most compared with Akamai, Azure Front Door, Imperva DDoS, AWS Shield and Microsoft Azure Application Gateway, whereas Wallarm NG WAF is most compared with Salt Security, Noname Security, AWS WAF, F5 Advanced WAF and 42Crunch API Security Platform.

    We monitor all Distributed Denial of Service (DDOS) Protection reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.