Try our new research platform with insights from 80,000+ expert users

Cloudflare vs Imperva Web Application Firewall comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
76
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (13th)
Imperva Web Application Fir...
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
52
Ranking in other categories
Web Application Firewall (WAF) (7th)
 

Mindshare comparison

While both are Security Services solutions, they serve different purposes. Cloudflare is designed for Distributed Denial-of-Service (DDoS) Protection and holds a mindshare of 19.8%, up 19.1% compared to last year.
Imperva Web Application Firewall, on the other hand, focuses on Web Application Firewall (WAF), holds 5.8% mindshare, down 6.7% since last year.
Distributed Denial-of-Service (DDoS) Protection
Web Application Firewall (WAF)
 

Featured Reviews

Carlos Alam Hernandez Baruch - PeerSpot reviewer
Fast and secure deployments simplify operations for government and fintech clients
It is a fast and secure DNS. It is very easy to deploy, and my customers are happy with this tool. Additionally, the CDN performance in Mexico is excellent, providing fast service and tools. It offers reliability during high-traffic periods, ensuring no impact on the environment. It helps my clients avoid using on-premise boxes, simplifying operations as they only use the prices on Cloudflare.
Mitesh D Patel - PeerSpot reviewer
Effectively defends against threats like cross-site scripting (XSS), SQL injection, and others
It does bring value. For example, consider a BFSI customer. Their application is critical and represents their brand. Without a WAF, an attack could take their application down, harming their reputation. It leads to hampering the customer's workflow. With an Imperva WAF, they protect against attacks like DDoS or SQL injection, ensuring their application remains available and customers are happy. That's the main benefit for both the customer and the organization. The impact depends on the customer's use case. If their business primarily operates online, a CDN is beneficial for traffic optimization. Moreover, the integration options depend on the specific use case of our customers. Generally, integration capabilities are good with SIEM (Security Information and Event Management) parts.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"When using services like Heroku, Cloudflare is very useful for CNAME flattening. I also use it for their end-to-end SSL with TLS authentication on nginx for securing servers."
"It is a fast and secure DNS."
"It is a stable solution. I rate the stability a ten out of ten...I rate the scalability a ten out of ten."
"I rate its stability a ten out of ten."
"The simplicity of the overall dashboard makes it a great product for a user like me who has less understanding of the internet than a developer or other more technical people. It gives me peace of mind. I also love the easy customization of the Page Rules."
"Cloudflare has many features."
"Generally, I am satisfied with this product."
"There are key things that are used for our enterprise customers, such as Lambda and DNS."
"Imperva Web Application Firewall is a highly stable solution and is very mature."
"Imperva Web Application Firewall is stable."
"The configurability of the tools and the ease of operation to be the most valuable feature of Imperva."
"Its inline transferring mode is the most valuable because it is 100% transparent. When you change the IP, there is no change on the network side. If you can't and want to try to reach an IP, you can reach the server IP. There are many other advanced security features in it. The smallest appliances of Imperva can handle the highest traffic at a customer site. For example, a smaller appliance from Imperva can provide you the same security as an F5 product."
"There are some features that are configured by default, so even without doing much, it can still provide a level of protection."
"The solution is scalable."
"It works right out of the box once you integrate the application."
"If you are using the appliance as opposed to the virtual deployment, it can stand as the network layer-two and provide real transparency."
 

Cons

"Cloudflare doesn't have a reverse lookup. We can only do a DNS lookup to get the IP address from the hostname. It doesn't work if you want to look up the hostname from an IPA address."
"Cloudflare could offer a better view or maybe dashboards of the main resources used in the client."
"We are a product integrator and reseller, and we would like to have a better partner relationship, similar to a channel sales relationship. Sometimes we are on our own or get diverted by Cloudflare because they have direct sales, which competes with us and makes it difficult to build a relationship with this company since we want to be an MSP or a managed service provider for the solution."
"The tool needs to improve caching of servers. The product needs to include PFX certificate as well."
"There could be more courses with engineers. I like e-learning, however, having a specialist in a classroom is more comfortable for me."
"Sometimes their more advanced caching tools can cause higher first-byte times and problems with JavaScript."
"An integrated SSO feature would be useful for Cloudflare DNS."
"It would be good if Cloudflare could have more servers for better traffic routing or an increase in the traffic routed. This is what I'd like to improve in Cloudflare."
"The solution works for particular zones but isn't always the best solution for all zones."
"The Imperva Web Application Firewall automations are good, but there is still room for improvement with them."
"There's always room for improvement. Occasionally, there might be false-positive alerts."
"I think that better bot protection is needed in this solution."
"Imperva Web Application Firewall could improve the API integration. It was complex for us. Additionally, The onboarding could be better."
"The user interface could be better."
"I don't really use it and therefore can't speak to areas of improvement."
"The reporting is missing some features, such as: only two export formats, and the time period does not include the last day, week, year."
 

Pricing and Cost Advice

"That is one of the great features. I was able to access the majority of the features and services for free."
"The pricing for the service is reasonable, neither excessively cheap nor prohibitively expensive. It aligns well with the value of their solution."
"The pricing depends on the usage, but the cheapest would be around 5,000 USD a month."
"The tool is a premium product, so it is very expensive."
"The solution has many features but there are ones that you need to pay for. Sometimes you have to find out which is available for free and which you have to pay for."
"The solution is expensive when compared to other products but offers unlimited bandwidth."
"The cost primarily depends on the size of the organization."
"The price is reasonable."
"Imperva Web Application Firewall's pricing is expensive."
"Imperva’s pricing is a bit higher in the market since it offers a full-blown WAF."
"It is very costly, but the return on investment is very high. Its cost was around $70,000, and we got it back in just six months."
"The tool is expensive."
"Imperva Web Application Firewall is expensive."
"The price of this solution is a little bit high compared to competitors."
"It's an excellent product, but it can be very costly."
"Imperva Web Application Firewall price is higher compared to other solutions. However, everything is included in the price."
report
Use our free recommendation engine to learn which Distributed Denial-of-Service (DDoS) Protection solutions are best for your needs.
859,579 professionals have used our research since 2012.
 

Comparison Review

it_user68487 - PeerSpot reviewer
Nov 6, 2013
CloudFlare vs Incapsula: Web Application Firewall
CloudFlare vs Incapsula: Round 2 Web Application Firewall Comparative Penetration Testing Analysis Report v1.0 Summary This document contains the results of a second comparative penetration test conducted by a team of security specialists at Zero Science Lab against two cloud-based Web…
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Comms Service Provider
10%
Financial Services Firm
9%
Educational Organization
8%
Financial Services Firm
16%
Computer Software Company
12%
Insurance Company
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GRE tunnels. We have decreased site load times on Mobile 3G from 8 to 1,6 seconds ...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service that offers great redundancy and advanced security with built-in unmetered and ...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
Is Citrix ADC (formerly Netscaler) the best ADC to use and if not why?
For ADC, any ADC can do a good job. But in case if you want to add WAF functionality to the same ADC hardware you have to look for other ADC's like F5, Imperva, Radware, Fortinet, etc.
DDoS solutions: Any other solutions to consider aside from Radware DDoS Protection Service and F5 Silverline DDoS Protection?
You can have a look to Imperva Cloud WAF, the anti-DDoS mitigation is under 1s and works very well. I observed a lot of DDoS attacks that were well managed (even not seen by the customer) by Imperv...
 

Also Known As

Cloudflare DNS
No data available
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
BlueCross BlueShield, eHarmony, EMF Broadcasting, GE Healthcare, Metro Bank, The Motley Fool, Siemens
Find out what your peers are saying about Cloudflare vs. Imperva Web Application Firewall and other solutions. Updated: February 2023.
859,579 professionals have used our research since 2012.