Try our new research platform with insights from 80,000+ expert users
Cloudflare Web Application Firewall Logo

Cloudflare Web Application Firewall Reviews

Vendor: Cloudflare
4.2 out of 5
Badge Leader
Leave a review

What is Cloudflare Web Application Firewall?

Cloudflare Web Application Firewall's intuitive dashboard enables users to build powerful rules through easy clicks and also provides Terraform integration. Every request to the WAF is inspected against the rule engine and the threat intelligence curated from protecting over 27 Million websites. Suspicious requests can be blocked, challenged or logged as per the needs of the user while legitimate requests are routed to the destination, agnostic of whether it lives on-premise or in the cloud. Analytics and Cloudflare Logs enable visibility into actionable metrics for the user.

Get the Cloudflare Web Application Firewall Buyer's Guide and find out what your peers are saying about Cloudflare Web Application Firewall, Prisma Cloud by Palo Alto Networks, Imperva Application Security Platform and more!
Cloudflare Web Application Firewall is the #6 ranked solution in top Web Application Firewalls. PeerSpot users give Cloudflare Web Application Firewall an average rating of 8.4 out of 10. Cloudflare Web Application Firewall is most commonly compared to Prisma Cloud by Palo Alto Networks: Cloudflare Web Application Firewall vs Prisma Cloud by Palo Alto Networks. Cloudflare Web Application Firewall is popular among the large enterprise segment, accounting for 47% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 15% of all views.
Buyer's Guide
Cloudflare Web Application Firewall
October 2025
Get the report
Helped 869,202 peers since 2012

Featured Cloudflare Web Application Firewall reviews

Read more reviews

Cloudflare Web Application Firewall mindshare

As of October 2025, the mindshare of Cloudflare Web Application Firewall in the Web Application Firewall (WAF) category stands at 6.5%, up from 6.2% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Web Application Firewall (WAF) Market Share Distribution
ProductMarket Share (%)
Cloudflare Web Application Firewall6.5%
F5 Advanced WAF9.0%
Microsoft Azure Application Gateway7.5%
Other77.0%
Web Application Firewall (WAF)

PeerResearch reports based on Cloudflare Web Application Firewall reviews

TypeTitleDate
CategoryWeb Application Firewall (WAF)Oct 8, 2025Download
ProductReviews, tips, and advice from real usersOct 8, 2025Download
ComparisonCloudflare Web Application Firewall vs F5 Advanced WAFOct 8, 2025Download
ComparisonCloudflare Web Application Firewall vs AWS WAFOct 8, 2025Download
ComparisonCloudflare Web Application Firewall vs Microsoft Azure Application GatewayOct 8, 2025Download
Suggested products
TitleRatingMindshareRecommending
Prisma Cloud by Palo Alto Networks4.21.7%98%111 interviewsAdd to research
Imperva Application Security Platform4.37.5%95%133 interviewsAdd to research
 
 
Key learnings from peers

Valuable Features

Cloudflare Web Application Firewall offers valuable features like its SaaS nature with API configurability, effective OWASP and managed rulesets, ease of configuration, user-friendly interface, scalability, affordability, and straightforward installation. It excels in preventing web application attacks, provides comprehensive services under one umbrella, and delivers stable performance with fast support. Key elements include DDoS protection, caching, rate limiting, DNS setup, zero trust policy, custom rules, managed rulesets, anomaly detection, IP access rules, and bot protection.
  • "Cloudflare has positively impacted my organization by making it easier for me to handle and set up DNS for multiple clients; I can easily go in and access their accounts, make changes they need, and it's a one-stop shop."
  • "The stability of Cloudflare Web Application Firewall deserves a perfect 10 out of 10."
  • "The setup process is very simple for me."

Room for Improvement

Cloudflare Web Application Firewall's documentation is complex for new users, integration with AWS and Azure is challenging, and ModSecurity's version is outdated. Users find it difficult to track modified rules due to excessive rules, and reporting lacks granularity. Better integration with platforms is needed, alongside improvements in log management, latency, rate limiting, and real-time authentication. Customer support requires enhancement, especially for Indian customers, and a more user-friendly dashboard is suggested.
  • "The user interface is very simple and straightforward, but users need knowledge about DNS to accomplish tasks."
  • "They need to improve their support because getting a response for basic requests took around 48 hours, which is too long."
  • "The product can improve by having more multitenancy capability, which is currently not available."

ROI

Users report immediate ROI from Cloudflare Web Application Firewall, with key benefits in site visibility and uptime essential for e-commerce and banking services. While it doesn't directly impact bandwidth costs, its caching system helps reduce these expenses. Determining exact savings is challenging due to fixed enterprise plan fees and multiple influencing factors. Users consistently experience ROI from its implementation.

Pricing

Cloudflare Web Application Firewall's pricing uses a subscription-based model, typically paid monthly or annually without upfront infrastructure costs. Users find its cost competitive and generally more affordable than competitors, with pricing starting at $20 and up to $200 monthly. Enterprise subscriptions offer advanced features like DDoS protection. Although some international businesses find it relatively expensive, many consider the pricing reasonable and flexible, albeit less transparent for enterprises. Support is generally included without extra charges.
  • "It is not too pricey."
  • "It starts at $20 and can easily go up to $200 monthly"
  • "Cloudflare Web Application Firewall is more affordable than other solutions."

Popular Use Cases

Cloudflare Web Application Firewall is primarily utilized as a SaaS-based firewall, securing web applications and servers, routing traffic, managing threats, and implementing proxy features. It protects against DDoS attacks and malicious traffic, enabling secure authentication and authorization. Various sectors use it, including manufacturing and banking, for comprehensive security functions and to manage customer platforms. It encompasses features like load balancing, CDN, order routing, and DNS zone configuration.

Service and Support

Cloudflare Web Application Firewall's customer service generally receives positive feedback for technical support, being responsive and helpful. Many users report satisfaction without frequent need for assistance. However, Indian users note limitations in local support, experiencing difficulty in communication. Feedback varies with some expressing dissatisfaction with customer service responsiveness, while others rate it highly, mentioning quick issue resolution and helpful documentation. Some users recommend SLA-based plans for optimal support experiences.

Deployment

Cloudflare Web Application Firewall's initial setup is frequently described as easy and straightforward, often requiring minimal personnel and taking a short time, like a few hours or days. Some face challenges due to documentation, especially solo users without enterprise support. The setup involves simple domain and configuration tasks. Advanced configurations and maintenance might require more time, but basic deployment is accessible even to those with limited technical knowledge, making it suitable for small to large entities.

Scalability

Cloudflare Web Application Firewall offers strong scalability, highly rated by various users for its ability to scale effortlessly. Many large organizations effectively utilize it, handling extensive user numbers with ease, supported by APIs for automation. While cost concerns arise, the scalability itself is frequently rated near perfect. Users highlight its capability to integrate more features as needed, and it functions reliably without constant oversight, providing round-the-clock protection.

Stability

Users are confident in the stability of Cloudflare Web Application Firewall. Many rate its stability highly, often nine or ten out of ten. The firewall is praised for its reliability, showing no crashes, bugs, or glitches. Some users mention it successfully handles DDoS attacks and offers effective filtering options. There have been rare downtimes, but they were resolved quickly. Users switching from other solutions value its stable performance and advanced security features.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our Cloudflare Web Application Firewall Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company SizeCount
Small Business12
Midsize Enterprise6
Large Enterprise6
By reviewers
By visitors reading reviews
Company SizeCount
Small Business259
Midsize Enterprise132
Large Enterprise353
By visitors reading reviews

Top industries

By visitors reading reviews
Computer Software Company
15%
Financial Services Firm
8%
Manufacturing Company
8%
Comms Service Provider
8%
Media Company
6%
Government
6%
Educational Organization
4%
Insurance Company
4%
Construction Company
4%
Outsourcing Company
4%
Healthcare Company
4%
Retailer
4%
Real Estate/Law Firm
3%
Hospitality Company
3%
University
3%
Energy/Utilities Company
3%
Non Profit
2%
Consumer Goods Company
2%
Performing Arts
2%
Legal Firm
1%
Wholesaler/Distributor
1%
Recreational Facilities/Services Company
1%
Transportation Company
1%
Pharma/Biotech Company
1%
Marketing Services Firm
1%

Compare Cloudflare Web Application Firewall with alternative products

Go!

Learn more about Cloudflare Web Application Firewall

Cloudflare Web Application Firewall was previously known as Cloudflare WAF.

Cloudflare Web Application Firewall customers

crunchbase, udacity, marketo, okcupid, zendesk

Related questions

  • 62
Which lesser known firewall product has the best chance at unseating the market leaders?
  • 43
Which WAF solution would you recommend to cater to 100 to 125 concurrent sessions?
  • 68
What do you recommend for a securing Web Application?
  • 34
Fortinet vs Sophos? Help choose a NGFW solution that can replace Microsoft TMG.
  • 32
Imperva WAF vs. Barracuda: Which One is Better?
  • 131
F5 vs. Imperva WAF?
  • 188
When should companies use SSL Inspection?
  • 428
How does a WAF help to protect against DDoS attacks?
  • 337
NGFW with URL Filtering vs Web Proxy
  • 40
What's right for me? Fortinet or Citrix?

Product Categories

Product Categories
Web Application Firewall (WAF)

Popular Comparisons

Popular Comparisons
Prisma Cloud by Palo Alto Networks vs Cloudflare Web Application Firewall Logo
Prisma Cloud by Palo Alto Networks vs Cloudflare Web Application Firewall
Imperva Application Security Platform vs Cloudflare Web Application Firewall Logo
Imperva Application Security Platform vs Cloudflare Web Application Firewall
Azure Front Door vs Cloudflare Web Application Firewall Logo
Azure Front Door vs Cloudflare Web Application Firewall
Microsoft Azure Application Gateway vs Cloudflare Web Application Firewall Logo
Microsoft Azure Application Gateway vs Cloudflare Web Application Firewall
F5 Advanced WAF vs Cloudflare Web Application Firewall Logo
F5 Advanced WAF vs Cloudflare Web Application Firewall
Fortinet FortiWeb vs Cloudflare Web Application Firewall Logo
Fortinet FortiWeb vs Cloudflare Web Application Firewall
AWS WAF vs Cloudflare Web Application Firewall Logo
AWS WAF vs Cloudflare Web Application Firewall
NetScaler vs Cloudflare Web Application Firewall Logo
NetScaler vs Cloudflare Web Application Firewall
Akamai App and API Protector vs Cloudflare Web Application Firewall Logo
Akamai App and API Protector vs Cloudflare Web Application Firewall
Azure Web Application Firewall vs Cloudflare Web Application Firewall Logo
Azure Web Application Firewall vs Cloudflare Web Application Firewall
Radware Alteon vs Cloudflare Web Application Firewall Logo
Radware Alteon vs Cloudflare Web Application Firewall
Fastly vs Cloudflare Web Application Firewall Logo
Fastly vs Cloudflare Web Application Firewall
NGINX App Protect vs Cloudflare Web Application Firewall Logo
NGINX App Protect vs Cloudflare Web Application Firewall
Radware Cloud WAF Service vs Cloudflare Web Application Firewall Logo
Radware Cloud WAF Service vs Cloudflare Web Application Firewall
Check Point CloudGuard WAF vs Cloudflare Web Application Firewall Logo
Check Point CloudGuard WAF vs Cloudflare Web Application Firewall
See all alternatives
 
Cloudflare Web Application Firewall Reviews Summary
Author infoRatingReview Summary
IT Manager at Amla Commerce4.0Cloudflare Web Application Firewall effectively protects our global sites from attackers with features like WAF, rate limiter, and bot protection. Despite its benefits, support response times are slow. I've observed a positive return on investment with this solution.
Owner at Hga consulting5.0I've used Cloudflare Web Application Firewall across all client domains for years; it's easy to set up, integrates well with DNS, offers strong protection and analytics, and the support and pricing have consistently met my needs.
Network Architect at a computer software company with 11-50 employees4.5I use Cloudflare Web Application Firewall for securing web apps and DDoS protection, valuing its rate limiting, custom rules, and operational manageability. However, it needs more multitenancy features. I prefer Cloudflare and also use Azure Application Gateway.
Senior Enterprise Security Architect at HGS - Hinduja Global Solutions4.5As a senior enterprise architect, I utilize Cloudflare Web Application Firewall for DDoS protection and data injection security. Although it features a vast signature repository, the learning curve is lengthy. Improvements in AI integration and web filtering are needed.
Head of Software Development at Obase4.0No summary available
Senior Software Engineer at FalconX4.0I primarily use Cloudflare Web Application Firewall for routing and monitoring purposes. It's easy to set up, supports caching for static content, and stays updated on security vulnerabilities. However, I've noticed some latency issues that could be improved.
Information Security Lead - Blue Team at FinAccel Pte Ltd.3.5I use Cloudflare Web Application Firewall to protect applications from DDoS attacks. While it's affordable and cloud-native, it lacks port forwarding and additional customer support channels like WhatsApp. I chose it over F5 NGINX, which doesn't support cloud-native environments.
Cloud Business Developer at GWS Cloud4.5I'm highly satisfied with Cloudflare Web Application Firewall because it's user-friendly, enabling quick issue identification and solution deployment. However, improvements are needed based on customer requirements. It efficiently resolves our problems, providing necessary features.