F5 Shape Security vs Imperva DDoS comparison

Cancel
You must select at least 2 products to compare!
F5 Logo
1,068 views|656 comparisons
100% willing to recommend
Imperva Logo
4,129 views|3,502 comparisons
94% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between F5 Shape Security and Imperva DDoS based on real PeerSpot user reviews.

Find out what your peers are saying about NICE, ThreatMetrix, FICO and others in Fraud Detection and Prevention.
To learn more, read our detailed Fraud Detection and Prevention Report (Updated: March 2024).
767,847 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The most valuable feature of the solution is the ease of configuration.""F5 Shape Security's most valuable feature is performance."

More F5 Shape Security Pros →

"Real-time monitoring is also a great tool, as you may watch several parameters in real time.""It is an effective threat mitigation tool.""It fits our requirements, as well as our budget.""There are quite a few useful Imperva Incapsula features. For example, one of them is the reports. The graphics are very good and it's easy to configure. The whole process is very fast and reliable too. They have good tech support as well.""An improvement has been to our website: It increases the speed of our response, the capacity of the site, and optimizes the bandwidth.​""The technical support is excellent.""The solution is very good at intercepting traffic before it gets to our data centers.""Provides Anti-DDoS protection, as well as other protections like SQL injection, Cross-Site Scripting, and antiscanner. These types of protection are valuable to the business due to the daily attacks on our portals, and that often cannot be seen without a tool like this."

More Imperva DDoS Pros →

Cons
"The tool's price is high.""I want the solution's custom exclusion rules to be more granular."

More F5 Shape Security Cons →

"Imperva DDoS does not provide version control.""Certificate management could be improved.""The product could use a broader scope in the area of policies.""It would be better if we were able to manage and apply changes to multiple websites/web applications, and search WAF logs for multiple websites, via the Incapsula dashboard.""Imperva always needs to adjust to new versions of cyber attacks, it needs to be faster, improve the resiliency of the software of the solution.""Users would benefit from better documentation. There is official documentation, but sometimes we need more detail. We have some use cases that are not so run of the mill. It would be great if there was a knowledge base that we could go to for more answers.""Imperva should have more points of presence in Africa.""We had an issue when securing the web applications for DDoS protection."

More Imperva DDoS Cons →

Pricing and Cost Advice
  • "The solution is moderately priced."
  • More F5 Shape Security Pricing and Cost Advice →

  • "For enterprise contracts you will be in touch with a dedicated account manager who will guide you regarding licensing."
  • "​Although the pricing can be a little high, it is worth the protection and security that it offers.​"
  • "The data packages are higher than our needs so we end up paying for data that we don't use."
  • "The cost is on par with other solutions such as Cloudflare and Akamai."
  • "It is not expensive compared to the other similar solutions in this category."
  • "It is a very expensive solution. The price is very high. A lot of customers tell us that they would love to use Imperva more. I have some customers who have 50 websites, but they have only 10 websites on Imperva because of the price. They would love to have all their websites running through Imperva, but they can't. They have to choose the more critical websites to protect because the price is very high. It is a very good product, but it is too expensive. If you buy a plan for 20 megabytes and you don't consume all of your 20 megabytes, it is okay, but if you consume more, you are charged for the superior traffic."
  • "The cost is somewhere around $10,000 a site. For every site, you pay individually. For every DNS entry, you have you pay."
  • "It is expensive."
  • More Imperva DDoS Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Fraud Detection and Prevention solutions are best for your needs.
    767,847 professionals have used our research since 2012.
    Comparison Review
    Anonymous User
    Questions from the Community
    Top Answer:An aspect that sets automation apart as an attack vector is its ability to mimic legitimate user behavior and evade traditional security measures. Automated attacks can simulate human-like… more »
    Top Answer:One key component is the Shape Defense Engine. It sends telemetry to the Shape AI Cloud, a highly secure data system where machine learning algorithms analyze the data to detect patterns of automation… more »
    Top Answer:F5 Shape Security can protect web apps as well. It’s a bit complicated, but goes something like this: The platform employs a JavaScript-based collection of client signals to gather data on user… more »
    Top Answer:We use Imperva DDoS to stop DDoS attacks and reduce the amount of unwanted queries against web services or web scraping.
    Top Answer:The solution is very affordable. It's based on the traffic utilization, the average traffic utilization, not the DDoS traffic. Therefore, if you're being DDoSed, you don't pay extra for the absorption… more »
    Top Answer:It’s hard to think of an improvement. The three-second service level agreement is already better than the competition. You would ordinarily say something like API protection. However, they've got that… more »
    Ranking
    Views
    1,068
    Comparisons
    656
    Reviews
    2
    Average Words per Review
    255
    Rating
    8.5
    Views
    4,129
    Comparisons
    3,502
    Reviews
    5
    Average Words per Review
    443
    Rating
    8.2
    Comparisons
    Also Known As
    Shape Security
    Imperva Incapsula
    Learn More
    Overview

    The Shape technology platform, covered by 50+ patents, stops automated fraud and other attacks on web and mobile applications, including credential stuffing, account takeover, scraping, and unauthorized aggregation. Shape is one of the largest processors of login traffic in the world, protects more than 1.3 billion user accounts, and prevented more than $1 billion in fraud losses last year.

    Shape solutions leverage artificial intelligence and machine learning, among other technologies, to accurately determine in real-time if an application request is from a fraudulent source, and if so, effectively mitigate. As soon as new countermeasures are deployed, 5%-10% of attackers will typically attempt to retool and start a new attack. Shape solutions adapt and maintain full efficacy even as attackers evolve.

    The world's leading banks, airlines, retailers, hotel chains, and federal agencies rely on Shape as their primary line of defense against sophisticated cybercrime.

    Shape Solutions:

    Shape Recognize: Identify returning, known users of your website and reduce authentication friction for these users. This enables organizations using Recognize a persistent and secure login experience where good users face less login challenges while still increasing online safety.

    Shape AI Fraud Engine (SAFE): SAFE connects context across different browsers and devices used by the same user, as well as observations from across Shape’s entire network. This allows Shape's AI engine to drive down fraud each month as its engine consumes more data.

    F5 Device ID+: A real-time and precise device identifier using advanced signal collection and machine learning to assign a unique fingerprint to each device visiting your site. Simple deployment with immediate results for security, networking, and fraud. Better understand the unique devices visiting your applications.

    Shape Enterprise Defense: Invisibly protect every application from attack, fraud, and abuse. Defending the world's largest companies, Shape knows whether a request is bot or human driven and if the intent is malicious or benign. This allows Shape to prevent fraud in real-time; manage aggregated and partner access to applications and provide new data for better customer insights.

    Shape was recognized by Cybercrime Magazine as one of the Hot 150 Cybersecurity companies in 2019 and CB Insights 2019 AI 100 most promising artificial intelligence startups across the globe.

    Imperva DDoS is a solution that offers protection for web applications and websites and all their associated business-critical data from cyberattacks. The cloud-based application delivery service helps improve user experiences by improving their performance. Through its security platform, Imperva DDoS also provides DDoS mitigation, a web application firewall, and a global load balancer, and includes a content delivery network — all designed to maximize performance.

    Imperva DDoS Features

    Imperva DDoS has many valuable key features. Some of the most useful ones include:

    • API security
    • Web application firewall
    • Bot management
    • Application delivery
    • Runtime protection (RASP)
    • Discovery and assessment
    • Data protection
    • Data risk analytics
    • Data privacy
    • Application delivery control (ADC)
    • Content delivery network (CDN)
    • DDoS mitigation
    • Global server load-balancing (GSLB)
    • Web application firewall (WAF)
    • Client-side protection
    • Runtime protection

    Imperva DDoS Benefits

    There are several benefits to implementing Imperva DDoS. Some of the biggest advantages the solution offers include:

    • Reduce web application risk: Imperva DDoS includes automatic policy creation and fast rule propagation that give your IT and security departments the ability to use third-party code without risk while working at the pace of DevOps.
    • Security from edge to database: Imperva DDoS’s WAF feature secures from edge to database, so the traffic you receive is only the traffic you want.
    • Safeguard sensitive and personal data: Imperva DDoS provides visibility into sensitive and personal data, with the controls to protect that data and the ability to unify management across cloud, on-premises, and in hybrid environments to help accommodate changing threats, new regulations, and challenging audits.

    Reviews from Real Users

    Below are some reviews and helpful feedback written by Imperva DDoS users.

    PeerSpot user, Etienne W., CDN & Cybersecurity Engineer - Web performance & security at CDN Tech / Ecritel, says, “It is a good solution that allows us to protect websites. It is stable, scalable, quick and easy to use.” He goes on to explain, “WAF protection works almost out-of-the-box. The Anti-DDoS mitigation in less than 1s, I saw it many times in production, I can say it works. CDN has high performances, and the Smart Caching mode is really "smart" (you can do some efficient caching even if you're not a specialist). Its unique interface for managing security performance and ease of use are the most valuable features of this solution."

    An IT Senior Manager at an outsourcing company mentions, “The most valuable features are DDoS protection. The Incapsula [Imperva DDoS] environment helps us monitor all the web activity. All the web activity is passed through their WAF cloud services, then that can help us to monitor those activities. That can help protect against DDoS hacking.”

    Another PeerSpot reviewer, Ben D., Sales Executive at EVVO LABS, comments, "Imperva Incapsula [DDoS] has many valuable features. One, it protects the top 10 OWASP vulnerability, the open web application software platform, this is standard. Secondly, it protects against broken authentication. As well, it has remote execution of code."

    A Solutions Architect at a financial services firm states, “The solution's most valuable aspect is that it is easy to configure. The solution keeps itself up to date itself and there's no customization that we need to do. It makes it extremely easy and cuts back on the amount of work required, and saves us on man-hours.”

    Sample Customers
    Wells Fargo, Loblaw, JetBlue, Zoosk
    Hitachi, BNZ, Bitstamp, Moz, InnoGames, BTCChina, Wix, LivePerson, Zillow and more.
    Top Industries
    VISITORS READING REVIEWS
    Financial Services Firm33%
    Healthcare Company10%
    Retailer7%
    Computer Software Company6%
    REVIEWERS
    Financial Services Firm19%
    Non Tech Company11%
    Marketing Services Firm8%
    Insurance Company8%
    VISITORS READING REVIEWS
    Financial Services Firm16%
    Computer Software Company16%
    Manufacturing Company7%
    Comms Service Provider7%
    Company Size
    VISITORS READING REVIEWS
    Small Business10%
    Midsize Enterprise9%
    Large Enterprise81%
    REVIEWERS
    Small Business49%
    Midsize Enterprise13%
    Large Enterprise38%
    VISITORS READING REVIEWS
    Small Business24%
    Midsize Enterprise14%
    Large Enterprise62%
    Buyer's Guide
    Fraud Detection and Prevention
    March 2024
    Find out what your peers are saying about NICE, ThreatMetrix, FICO and others in Fraud Detection and Prevention. Updated: March 2024.
    767,847 professionals have used our research since 2012.

    F5 Shape Security is ranked 7th in Fraud Detection and Prevention with 2 reviews while Imperva DDoS is ranked 6th in Distributed Denial of Service (DDOS) Protection with 74 reviews. F5 Shape Security is rated 8.6, while Imperva DDoS is rated 8.8. The top reviewer of F5 Shape Security writes "Easy to configure and blocks bot attacks for web users". On the other hand, the top reviewer of Imperva DDoS writes "I like the content monitoring feature which I haven't seen in other WAF solutions". F5 Shape Security is most compared with Akamai Bot Manager, Cloudflare, Akamai App and API Protector, HUMAN BotGuard for Applications and IBM Trusteer, whereas Imperva DDoS is most compared with Cloudflare, Akamai, Arbor DDoS and Radware DefensePro.

    We monitor all Fraud Detection and Prevention reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.