Compare AWS WAF vs. Cloudflare Web Application Firewall

Cancel
You must select at least 2 products to compare!
Most Helpful Review
Find out what your peers are saying about F5, Amazon, Fortinet and others in Web Application Firewall (WAF). Updated: October 2020.
442,194 professionals have used our research since 2012.
Quotes From Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros
"The most valuable feature is the security, making sure that files are protected, preventing unauthorized users from accessing the system.""The most valuable feature is the way it blocks threats to external applications.""It's simple, easy to use.""It is a one-click WAF with no effort needed.""It is Amazon. Everything is scalable. It is beyond what we need.""The customized billing is the most valuable feature.""The initial setup was very straightforward. Deployment took about ten minutes or less.""The ability to take multiple data sets and match those data sets together is the solution's most valuable feature. The data lake that comes with it is very useful because that allows us to match data sets with different configurations that we wouldn't normally be able to match."

More AWS WAF Pros »

"It is configurable via API.""It is a SaaS solution unlike much of the competition."

More Cloudflare Web Application Firewall Pros »

Cons
"They have to do more to improve, to innovate more features. They need to increase the security. It has to be more active in detecting threats.""In a future release I would like to see automation. There's no interaction between the applications and that makes it tedious. We have to do the preparation all over again for each of our other applications.""The user experience, the interface, is lacking. Sometimes it's hard to find certain areas that it has alerted on.""We need more support as we go global.""In a future release of this solution, I would like to see additional management features to make things simpler.""They should work to define more threats, add more security, and make it more compliant with more security companies.""The solution is cloud-based, and therefore the billing model that comes with it could be more intuitive, in my opinion. It's very easy to not fully understand how you tag things for billing and then you can quite easily run up a high bill without realizing it. The solution needs to be more intuitive around the tagging system, which enables the billing. Right now, I have a cloud architect that does that on our behalf and it isn't something that a business user could use because it still requires quite a lot of technical knowledge to do effectively.""For now, there is no feature to protect against attack of the bad bots"

More AWS WAF Cons »

"The ModSecurity core rules need to be updated."

More Cloudflare Web Application Firewall Cons »

Pricing and Cost Advice
"It's an annual subscription.""There are no costs in addition to the standard licensing fees.""There are different scale options available for WAF.""AWS is not that costly by comparison. They are maybe close to $40 per month. I think it was between $29 or $39.""It has a variable pricing scheme."

More AWS WAF Pricing and Cost Advice »

"The pricing model is very straightforward compared to the competition. You just pay per month for the product and usage."

More Cloudflare Web Application Firewall Pricing and Cost Advice »

report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
442,194 professionals have used our research since 2012.
Questions from the Community
Top Answer: The most valuable aspect is that it protects our code. It's a bit difficult to overwrite code in our application. It also protects against threats.
Top Answer: The price of the product is fair enough and one of the product's advantages. Their price is good compared to other vendors.
Top Answer: Sometimes it's a bit difficult to check the rules because when you apply a rule, sometimes it's too much and we need to rewrite the rules and make compromises on the rules because it will block too… more »
Ask a question

Earn 20 points

Ranking
Views
8,265
Comparisons
6,812
Reviews
13
Average Words per Review
500
Avg. Rating
7.7
Views
33
Comparisons
14
Reviews
1
Average Words per Review
664
Avg. Rating
7.0
Popular Comparisons
Compared 11% of the time.
Compared 11% of the time.
Compared 8% of the time.
Also Known As
AWS Web Application FirewallCloudflare WAF
Learn
Amazon
Cloudflare
Overview

AWS WAF is a web application firewall that helps protect your web applications from common web exploits that could affect application availability, compromise security, or consume excessive resources. AWS WAF gives you control over which traffic to allow or block to your web applications by defining customizable web security rules. You can use AWS WAF to create custom rules that block common attack patterns, such as SQL injection or cross-site scripting, and rules that are designed for your specific application. New rules can be deployed within minutes, letting you respond quickly to changing traffic patterns. Also, AWS WAF includes a full-featured API that you can use to automate the creation, deployment, and maintenance of web security rules.

Cloudflare Web Application Firewall's intuitive dashboard enables users to build powerful rules through easy clicks and also provides Terraform integration. Every request to the WAF is inspected against the rule engine and the threat intelligence curated from protecting over 27 Million websites. Suspicious requests can be blocked, challenged or logged as per the needs of the user while legitimate requests are routed to the destination, agnostic of whether it lives on-premise or in the cloud. Analytics and Cloudflare Logs enable visibility into actionable metrics for the user.

Offer
Learn more about AWS WAF
Learn more about Cloudflare Web Application Firewall
Sample Customers
eVitamins, 9Splay, Senao Internationalcrunchbase, udacity, marketo, okcupid, zendesk
Top Industries
VISITORS READING REVIEWS
Computer Software Company32%
Media Company20%
Comms Service Provider15%
Government4%
No Data Available
Company Size
REVIEWERS
Small Business21%
Midsize Enterprise36%
Large Enterprise43%
No Data Available
Find out what your peers are saying about F5, Amazon, Fortinet and others in Web Application Firewall (WAF). Updated: October 2020.
442,194 professionals have used our research since 2012.
AWS WAF is ranked 3rd in Web Application Firewall (WAF) with 13 reviews while Cloudflare Web Application Firewall is ranked 19th in Web Application Firewall (WAF) with 1 review. AWS WAF is rated 7.6, while Cloudflare Web Application Firewall is rated 7.0. The top reviewer of AWS WAF writes "Use this product to make it possible to deploy web applications securely". On the other hand, the top reviewer of Cloudflare Web Application Firewall writes "A SaaS solution that is API configurable and a convenient part of a suite but needs updating of core rules". AWS WAF is most compared with Microsoft Azure Application Gateway, Akamai Kona Site Defender, F5 BIG-IP, Imperva Incapsula and Imperva SecureSphere Web Application Firewall, whereas Cloudflare Web Application Firewall is most compared with .

See our list of best Web Application Firewall (WAF) vendors.

We monitor all Web Application Firewall (WAF) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.