We performed a comparison between Citrix Web App and API Protection and Cloudflare based on real PeerSpot user reviews.
Find out in this report how the two Web Application Firewall (WAF) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The stability is good. If there is a problem, the load will be shifted to other sites automatically, which has been a good experience for us."
"The solution's technical support is good."
"I like the solution's simplicity compared to Citrix's on-prem solutions."
"I prefer this solution because of its user-friendly interface. I find it simple and close to what I am currently using, which is Citrix Fortiva Access for Multi-Factor Authentication. I appreciate the familiar user interface and troubleshooting tools it offers."
"The work balancing applications are the most valuable feature."
"The advantage of Citrix Web App and API Protection is just its graphic user interface for beginners. The solution is nothing special, but we have to use it for the corporation. Another advantage of Citrix Web App and API Protection is that we have our copy to test things and get the know-how of it."
"We have good customer support."
"When our primary link goes down I can still get to my Cisco devices and the NetScaler devices on-prem because of the SDN solution. If the internet connection at one of the branches goes down, we can still route them, they still get internet based on the SDN solution through one of the other sites. They can carry on working."
"Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications."
"I rate its stability a ten out of ten."
"The web application firewall brought us good security and a view of the accesses/blocks of the entire domain and subdomain that were accessed both by region (country) and IPs."
"New and innovative way to protect the client's data."
"The most valuable feature of Cloudflare is the GUI. You are able to control the solution very well through the interface. There is a lot of functionality that is embedded in the service."
"What I like best about Cloudflare is that my company can use it to trace and manage applications and monitor traffic. The solution tells you if there's a spike in traffic. Cloudflare also sends you a link to check your equipment and deployment and track it through peering, so it's a valuable tool."
"The solution offers the flexibility to control configuration rules."
"We're using dynamic components to build flexible pages to create and manage Git merge requests for code and reviews."
"The user interface could be more friendly. Some wizards and other documentation for administrators, as well as some use cases, helps us to understand the solution."
"The configuration for its web application firewall is complicated."
"The product could be improved by making it easier to use and easier to implement."
"I am not an expert in this solution, but simplicity and user-friendly interfaces are crucial for me. I would appreciate advice from Citrix, particularly in the form of an interactive guide for API protection. It would be helpful if they could provide specific points and recommendations for cybersecurity, indicating areas that need attention or improvement. I find such interactive guidance valuable."
"The reporting is not so good. They don't have an application to connect the logs."
"Security could be improved because then I can get rid of my Cisco firewalls. If they improve the security then I could run my security, my proxy, my firewalling and my SDN solution on one device instead of having to have multiple devices."
"The solution's pricing is a big concern and should be improved."
"Citrix Web App and API Protection could improve in the area of licensing"
"In the last two years, there has been a certain amount of downtime when using the VDM."
"Cloudflare could offer a better view or maybe dashboards of the main resources used in the client."
"There are some issues with the CDN services."
"For the free and Pro plans, Cloudflare could use a simple bot to provide information to users. This would improve support, especially for less advanced users who utilize the free components."
"One area of improvement is in the Access Rules. Hypothetically, if we wanted to block or challenge traffic outside of the United States, the only way to currently do that (as far as I know) is to enter every single country outside of the United States. That could be a labor intensive job. A solution could be to enable users to create a rule where traffic is only allowed within a certain country."
"It should confirm audit findings of the assigned area with auditees to ensure that the audit conclusions are based on an accurate understanding of the issues."
"The pricing could be improved."
"It should have easier documentation for the configuration. It's very technical and people who aren't technical should also be able to do the configuration."
More Citrix Web App and API Protection Pricing and Cost Advice →
Citrix Web App and API Protection is ranked 20th in Web Application Firewall (WAF) with 10 reviews while Cloudflare is ranked 1st in Distributed Denial of Service (DDOS) Protection with 56 reviews. Citrix Web App and API Protection is rated 8.0, while Cloudflare is rated 8.4. The top reviewer of Citrix Web App and API Protection writes "Has a good graphic user interface for beginners, but lacks real-time notifications, alerts, and artificial intelligence". On the other hand, the top reviewer of Cloudflare writes "It's easy to set up because you point the DNS to it, and it's working in under 15 minutes". Citrix Web App and API Protection is most compared with F5 Advanced WAF, Azure Front Door, Fortinet FortiWeb and AWS WAF, whereas Cloudflare is most compared with Akamai, Azure Front Door, Imperva DDoS, AWS Shield and Microsoft Azure Application Gateway. See our Citrix Web App and API Protection vs. Cloudflare report.
We monitor all Web Application Firewall (WAF) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.