Cloudflare is a highly-regarded Content Delivery Network (CDN) and a Distribution Denial of Service (DDoS) protection solution. The robust global cloud platform that is Cloudflare ensures users are able to connect to the internet quickly, securely, and reliably. Cloudflare is one of the world's largest networks in the marketplace today. Using Cloudflare, businesses, educational entities, NGOs, vloggers, bloggers, and anyone else with an internet presence can use the solution and experience more secure, faster websites and applications.
So far I use free tier and happy with it. You can subscribe to business package if needed.
There are no additional costs beyond the standard licensing fees.
So far I use free tier and happy with it. You can subscribe to business package if needed.
There are no additional costs beyond the standard licensing fees.
Prisma Cloud by Palo Alto Networks is preferred over AWS WAF due to competitive pricing, ease of deployment, comprehensive security capabilities, and top-notch customer service. Users reported cost savings, advanced threat detection, and effective compliance processes as key advantages of Prisma Cloud. On the other hand, AWS WAF received praise for its effectiveness in protecting against web threats and seamless integration with other AWS services. However, users identified complex setup processes and the need for more customization options as areas for improvement. Ultimately, the flexibility, security features, and high-quality customer support of Prisma Cloud make it the preferred choice for many organizations.
Checkmarx One is an enterprise cloud-native application security platform focused on providing cross-tool, correlated results to help AppSec and developer teams prioritize where to focus time and resources.
The pricing is competitive and provides a lower TCO (total cost of ownership) for achieving application security.
I believe pricing is better compared to other commercial tools.
The pricing is competitive and provides a lower TCO (total cost of ownership) for achieving application security.
I believe pricing is better compared to other commercial tools.
Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications. Traditional load balancers operate at the transport layer (OSI layer 4 - TCP and UDP) and route traffic based on source IP address and port, to a destination IP address and port.
It is not expensive.
Every solution comes with a license and cost. Microsoft provides the license and the total cost is for the maintenance every year.
It is not expensive.
Every solution comes with a license and cost. Microsoft provides the license and the total cost is for the maintenance every year.
Azure Front Door is a global, scalable entry-point that uses the Microsoft global edge network to create fast, secure, and widely scalable web applications. With Front Door, you can transform your global consumer and enterprise applications into robust, high-performing personalized modern applications with contents that reach a global audience through Azure.
It is on a pay-as-you-go basis.
The solution is expensive.
It is on a pay-as-you-go basis.
The solution is expensive.
F5 BIG-IP LTM optimizes the speed and reliability of your apps via both network and application layers. Using real-time protocol and traffic management decisions based on app and server and connection management conditions, and TCP and content offloading, BIG-IP LTM dramatically improves application and infrastructure responsiveness. BIG-IP LTM's architecture includes protocol awareness to control traffic for the most important applications. BIG-IP LTM tracks the dynamic performance levels of servers and delivers SSL performance and visibility for inbound and outbound traffic, to protect the user experience by encrypting everything from the client to the server.
Though functionality is high, its cost can be considered slightly higher than its competitors.
The only area that has room for improvement would be pricing, so its competitors do not have a say.
Though functionality is high, its cost can be considered slightly higher than its competitors.
The only area that has room for improvement would be pricing, so its competitors do not have a say.
Fortinet FortiWeb is a Web Application Firewall (WAF) that protects your web applications and APIs from attacks targeting known as well as unknown vulnerabilities. As the surface of your web applications evolves with each change of existing features and deployment of new features, your APIs are left exposed. Fortinet FortiWeb provides the board protection capabilities required to protect web applications without sacrificing performance or manageability.
Cheaper than others.
FortiWeb can be purchased in VM mode for a lower price and the same features.
Cheaper than others.
FortiWeb can be purchased in VM mode for a lower price and the same features.
F5 Advanced WAF is a web application security solution for financial and government sectors, e-commerce, and public-facing websites. It offers protection against various attacks, including botnets, web scraping, and foreign entities. The solution can be deployed on-premises or in the cloud and is often used with other security tools. Its most valuable features include DDoS and DNS attack protection, SSL uploading, anomaly detection, and the ability to input custom rules.
The pricing is too high.
I think the price is very high.
The pricing is too high.
I think the price is very high.
Imperva Web Application Firewall is a versatile solution that protects web applications and databases from various attacks, including DDoS, cross-site scripting, and SQL injection attacks. It offers data security, availability, and access control and can be deployed on-premises or on the cloud.
Everybody complains about the price of this solution.
The cost of this solution depends on the platform.
Everybody complains about the price of this solution.
The cost of this solution depends on the platform.
Cloudflare Web Application Firewall's intuitive dashboard enables users to build powerful rules through easy clicks and also provides Terraform integration. Every request to the WAF is inspected against the rule engine and the threat intelligence curated from protecting over 27 Million websites. Suspicious requests can be blocked, challenged or logged as per the needs of the user while legitimate requests are routed to the destination, agnostic of whether it lives on-premise or in the cloud. Analytics and Cloudflare Logs enable visibility into actionable metrics for the user.
The pricing model is very straightforward compared to the competition. You just pay per month for the product and usage.
We pay $210 per month for CloudFlare WAF.
The pricing model is very straightforward compared to the competition. You just pay per month for the product and usage.
We pay $210 per month for CloudFlare WAF.
Imperva DDoS is a solution that offers protection for web applications and websites and all their associated business-critical data from cyberattacks. The cloud-based application delivery service helps improve user experiences by improving their performance. Through its security platform, Imperva DDoS also provides DDoS mitigation, a web application firewall, and a global load balancer, and includes a content delivery network — all designed to maximize performance.
For enterprise contracts you will be in touch with a dedicated account manager who will guide you regarding licensing.
Although the pricing can be a little high, it is worth the protection and security that it offers.
For enterprise contracts you will be in touch with a dedicated account manager who will guide you regarding licensing.
Although the pricing can be a little high, it is worth the protection and security that it offers.
Akamai App & API Protector brings together web application firewall, bot mitigation, API security, and Layer 7 DDoS protection into a single solution. It quickly identifies vulnerabilities and mitigates threats across your entire web and API estates — even for the most complex distributed architectures. Recognized as the leading attack detection solution on the market, App & API Protector is easy to implement and use. It delivers automatic updates for security protections and provides holistic visibility into traffic and attacks.
Akamai is very expensive.
There is no license at all for Akamai. They are going to charge us only for the usage.
Akamai is very expensive.
There is no license at all for Akamai. They are going to charge us only for the usage.
Azure Web Application Firewall (WAF) provides centralized protection of your web applications from common exploits and vulnerabilities. Web applications are increasingly targeted by malicious attacks that exploit commonly known vulnerabilities. SQL injection and cross-site scripting are among the most common attacks.
We have an enterprise agreement with Microsoft and the pricing is good.
The price is for this solution is fair and there is a license needed.
We have an enterprise agreement with Microsoft and the pricing is good.
The price is for this solution is fair and there is a license needed.
Tenable.io Web Application Scanning safely, accurately and automatically scans your web applications, providing deep visibility into vulnerabilities and valuable context to prioritize remediation.
The pricing is okay.
It follows the same licensing scheme as Tenable.io and Tenable. sc.
The pricing is okay.
It follows the same licensing scheme as Tenable.io and Tenable. sc.
Radware Alteon is an application delivery controller (ADC) solution that provides global load balancing for all web, cloud and mobile-based applications. The solution is designed to help your organization simplify operations while ensuring resilience and SLA. It manages application traffic across both data and cloud center locations, optimizing availability and performance. In addition, Radware Alteon integrates multiple application protection services to provide protection against an array of cyberthreats.
It has a good price point and is more reasonable than other comparable products
Radware Alteon is less expensive than many of the other competitors.
It has a good price point and is more reasonable than other comparable products
Radware Alteon is less expensive than many of the other competitors.
NGINX App Protect application security solution combines the efficacy of advanced F5 web application firewall (WAF) technology with the agility and performance of NGINX Plus. The solution runs natively on NGINX Plus and addresses some of the most difficult challenges facing modern DevOps environments:
The licensing fees for this solution are pretty expensive for what it does, but there is no alternative.
Our licensing costs are about $40,000 a year.
The licensing fees for this solution are pretty expensive for what it does, but there is no alternative.
Our licensing costs are about $40,000 a year.
Barracuda Web Application Firewall is a game-changing cloud-connected security solution that enables organizations to safeguard both their applications and their data from an ever-growing array of advanced cyber threats. It offers protection from cyber attacks that target not only data and applications stored on the cloud but also those that are housed on web servers. 43% of the time a breach takes place via a compromised application. Barracuda Web Application Firewall prevents these types of breaches from occurring.
The pricing is less compared to other web applications.
They have competitive pricing.
The pricing is less compared to other web applications.
They have competitive pricing.
F5's Silverline Managed Services is a SaaS solution delivering DDoS protection, managed Web Application Firewall (WAF) services, and managed Shape Security Fraud and Anti-bot solutions.
The price of F5 Silverline Managed Services could be reduced.
The product’s pricing is reasonable.
The price of F5 Silverline Managed Services could be reduced.
The product’s pricing is reasonable.
In my opinion, Fastly is priced competitively.
It is an expensive solution.
In my opinion, Fastly is priced competitively.
It is an expensive solution.
SPAs, APIs, mobile—the evolution of application technology is measured in months, not years. Is your web application security testing tool designed to keep up? AppSpider lets you collect all the information needed to test all the apps so that you aren’t left with gaping application risks.
It is expensive if you want to buy the Enterprise version that is able to scan multiple applications at once.
The price is pretty fair.
It is expensive if you want to buy the Enterprise version that is able to scan multiple applications at once.
The price is pretty fair.
I’d simply say it’s really worth it.
Sucuri offers different plans, both the standard plan and an advanced plan. So there are different plans to choose from.
I’d simply say it’s really worth it.
Sucuri offers different plans, both the standard plan and an advanced plan. So there are different plans to choose from.
Only NetScaler uses a one-pass architecture for traffic processing that enables it to perform web application firewall (WAF) inspection in a single pass. This significantly reduces the latency of each request for optimal application performance. And because advanced WAF capabilities come built in with NetScaler, there’s no need to purchase a separate WAF solution.
We have all the features and functions of Citrix because we have a premium license.
For partners, NetScaler is not as expensive price-wise versus F5.
We have all the features and functions of Citrix because we have a premium license.
For partners, NetScaler is not as expensive price-wise versus F5.
The HUMAN Defense Platform is a comprehensive cybersecurity solution designed to protect businesses from digital fraud and abuse across various online touchpoints. It offers multi-surface protection for ad platforms, web applications, mobile apps, and APIs, ensuring a secure digital presence. The platform focuses on disrupting fraudulent activities in real-time using advanced analytics and machine learning, making it difficult for attackers to succeed. Leveraging a vast global threat network, it identifies and blocks suspicious activities based on real-time threat intelligence. Designed for scalability and automation, it frees up security teams to focus on strategic initiatives. Key threats mitigated include account takeover (ATO), card-not-present (CNP) fraud, scraped data abuse, bot attacks, and malvertising.
Radware’s Cloud WAF provides enterprise-grade, continuously adaptive web application security protection. Based on Radware’s ICSA Labs certified, market-leading web application firewall, it provides full coverage of OWASP Top-10 threats and zero-day attacks, while implementing both negative and positive web application security models to automatically adapt protections to evolving threats and protected assets.
The pricing is fair; it's neither particularly cheap nor expensive.
The pricing is fair. We compared Radware to others using industry reviews and Radware is at the top right now.
The pricing is fair; it's neither particularly cheap nor expensive.
The pricing is fair. We compared Radware to others using industry reviews and Radware is at the top right now.
The Fastly Next-Gen WAF (powered by Signal Sciences) provides web application and API protection, RASP, rate limiting, bot protection and DDoS purpose built to eliminate the challenges of legacy WAF.
Signal Sciences is pretty cheap compared to other solutions.
The product has an affordable cost.
Signal Sciences is pretty cheap compared to other solutions.
The product has an affordable cost.
The tool's pricing is good.
I rate the product price a four on a scale of one to ten, where one is a low price, and ten is a high price.
The tool's pricing is good.
I rate the product price a four on a scale of one to ten, where one is a low price, and ten is a high price.
Reblaze is a cloud-based, fully managed protective shield for sites and web applications. Hostile traffic is blocked in the cloud, before it reaches the protected network.
On a monthly basis we pay $750.
I believe that for the six instances we have right now, it's costing us $16,000 per month.
On a monthly basis we pay $750.
I believe that for the six instances we have right now, it's costing us $16,000 per month.
Protect any API. In any environment. Against any threats.
Pricing must be cheaper than the competition and the licensing must be good.
Pricing must be cheaper than the competition and the licensing must be good.
Real website security means protection from the inside out as well as the outside in. SiteLock does it all -- daily scanning, automatic malware removal, web app firewall, a global CDN for a blazingly fast website and our support team is here for you 24/7. Our dynamic Trust Seal shows visitors your website is safe, increasing conversions and ROI.
You can't just stop auto-renew from your billing panel, the way you can with reputable businesses.
You can't just stop auto-renew from your billing panel, the way you can with reputable businesses.
Radware Bot Manager is a comprehensive solution designed to protect websites, mobile applications, and APIs from automated attacks. It uses advanced machine learning algorithms to detect and mitigate bot traffic in real-time, ensuring that legitimate users can access your services without interruption. With Bot Manager, you can gain visibility into your traffic patterns, identify malicious bots, and customize your security policies to meet your specific needs. Whether you're dealing with credential stuffing, content scraping, or other types of bot attacks, Bot Manager has the tools you need to stay ahead of the curve. With its easy-to-use interface and flexible deployment options, Bot Manager is the ideal solution for businesses of all sizes looking to safeguard their online assets.
We pay a fair price for each application we wish to protect.
It is fairly priced.
We pay a fair price for each application we wish to protect.
It is fairly priced.
The problem of internet security is almost as old as the internet itself. But there is a reliable solution: Airlock Suite from Ergon. Airlock Suite is underpinned by superb Swiss engineering expertise, many years of experience and well thought-out concepts that master the most complex challenges. Airlock Suite deals with the issues of filtering and authentication in one complete and coordinated solution - setting new standards for usability and services.
The tool is cheap.
The tool is cheap.
Cwatch delivers robust website protection from hackers - while it helps you stay calm when online. It does not just stop with protection but helps in scanning the website to remove malware instantly. It is a complete website security tool that delivers state-of-the-art protection techniques to ensure SMB website security from simple to complex threat landscape. It ensures early threat detection, instant solution and sophisticated preventive measures.
Comodo cWatch’s first level, which has fewer features, costs $7.
Comodo cWatch’s first level, which has fewer features, costs $7.
Barracuda WAF-as-a-Service is a comprehensive solution designed to provide application security, DDoS protection, SSL authentication, protocol support, and application delivery. It is a plug-and-play solution with automated policies, simple configuration, and easy rule creation.
It's very difficult for me to give an estimate of the cost. All I know is that we sell the box itself as a service.
The product is expensive but it offers flexible pricing. It could be affordable.
It's very difficult for me to give an estimate of the cost. All I know is that we sell the box itself as a service.
The product is expensive but it offers flexible pricing. It could be affordable.
Virsec Security Platform (VSP) is an enterprise cybersecurity solution that continuously protects application, web and host workloads against advanced cyber threats and neutralizes zero-day exploits with zero dwell time (milliseconds). The Virsec Security Platform (VSP) aligns with Zero Trust Architectural approaches and presents a portfolio of compensating security controls that automate the enforcement of runtime execution of authorized processes, scripts, libraries and dependencies that harden Windows and Linux Host OS (Operating System) server, application, and web workloads at runtime.
I would rate the solution's pricing an eight out of ten.
I would rate the solution's pricing an eight out of ten.
AppTrana is designed to address the shortcomings in existing cloud security solutions which claim to provide comprehensive protection using only technology based cookie cutter solutions. Welcome to the new world of AppTrana where your entire application security is custom built by experts based on your existing risk posture.
Indusface AppTrana is an affordable and cost-effective solution.
Indusface AppTrana is an affordable and cost-effective solution.
A web application firewall (WAF) capability provides defense of websites and web applications from hackers and malware by filtering and monitoring HTTP traffic between a web app and the Internet. The WAF protects against a variety of application layer attacks including credential theft, code injection, cross-site scripting (XSS), cookie poisoning, CSRF, SQL injection, DoS, ransomware, and more. ModSecurity, sometimes referred to as ModSec, is an open-source web security framework that when combined with rules allows users to build WAFs for free.
Beyond the basic capabilities of traditional negative and positive security models, DenyAll’s scoring mechanism, user behavior tracking and advanced detection engines deliver best-of-breed security that won’t let you down. None of our customers have made the headlines with security breaches.
Avi iWAF leverages software-defined architecture and its strategic location on the network to gain real-time application insights. iWAF provides application security teams with an elastic and analytics-driven solution that scales and simplifies policy customization and administration through central management.
Sqreen is the industry’s first provider of Application Security Management (ASM), unifying application security needs into one single platform, giving over 500 companies unprecedented visibility and protection in production. Sqreen enables developers, operations and security teams to scale their security without impacting engineering velocity. The company was founded by security veterans who previously led the offensive security team at Apple. Sqreen is backed by Greylock Partners, Y Combinator, Alven and Point Nine. For more information,
StackPath WAF integrates multiple technologies, including Advanced Browser Validation and IP Reputation and Custom Rules engines, into an intelligent firewall that can be customized to meet your specific protection profile.
The product is affordable.
The product is affordable.
FortiWeb web application firewall (WAF) protects business-critical web applications from attacks that target known and unknown vulnerabilities. Advanced ML-powered features improve security and reduce administrative overhead. Capabilities include anomaly detection, API discovery and protection, bot mitigation, and advanced threat analytics to identify the most critical threats across all protected applications.
FortiWeb Web Application Firewall's pricing is suited for small or medium organizations.
It is a cost-effective product. If you need an extra module in the product, there will be an extra cost in addition to the licensing fee.
FortiWeb Web Application Firewall's pricing is suited for small or medium organizations.
It is a cost-effective product. If you need an extra module in the product, there will be an extra cost in addition to the licensing fee.
Imunify360 is a comprehensive security platform for web-hosting servers. It utilizes highly tailored and integrated components for proactive real-time website protection and web server security. It’s not just antivirus or WAF. Imunify360 combines an Intrusion Prevention and Detection system, a Web Application Firewall, Real-time Antivirus protection, a Network Firewall, and Patch Management components. These elements are seamlessly integrated for flawless interoperability that instantly detects, fixes, and protects from any threats that a web-hosting service may encounter.
Web Application Firewall (WAF) acts as a shield for web apps and websites against multiple attacks such as SQL injection, malicious file execution, cross-site scripting, and more. Powered by Huawei's machine learning technology, WAF intelligently filters out malicious traffic to safeguard data, ensure fast load times, and maintain uptime.
