No more typing reviews! Try our Samantha, our new voice AI agent.

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

AWS WAF offers highly configurable rules and easy deployment, making it beneficial for analyzing and controlling HTTP communications between external users and web applications.
Scalability in AWS WAF is prominent, as it automatically scales with user requirements, providing flexibility across AWS instances.
The pay-as-you-go billing model of AWS WAF allows users to avoid upfront costs and easily terminate usage without penalties.
Geo-restriction features in AWS WAF enhance security by limiting access based on geographical locations and IP addresses.
AWS WAF's managed tools and rules effectively safeguard applications from SQL injections, scripting attacks, and DDoS threats.

CONS

AWS WAF needs to provide better DDoS protection and improve security features to match competitors.
Technical support for AWS WAF requires enhancement in speed, knowledge, and customer service.
AWS WAF should improve documentation, especially for new features, to ensure users have clear, updated guidance.
AWS WAF could benefit from better automation and integration, reducing manual efforts and enhancing interaction with applications.
The pricing model of AWS WAF could be more transparent and affordable, particularly for small clients.
 

AWS WAF Pros review quotes

Azam S M - PeerSpot reviewer
Infrastructure Lead at Danat Fz LLC
Oct 9, 2025
The biggest benefit of AWS WAF for us is to filter malicious requests, so we can protect our environment and application from malicious actors.
Eucharia Okafor - PeerSpot reviewer
DevOps Engineer at a tech vendor with 1,001-5,000 employees
Dec 22, 2025
AWS WAF has helped to strengthen the security of my environment; it has also helped to improve the posture of our application, prevent all DDoS attacks and unnecessary traffic and SQL injection that is reducing the performance of our application.
Shashank N - PeerSpot reviewer
Security Engineer Dev Sec Ops at a outsourcing company with 1,001-5,000 employees
May 10, 2026
The initial setup is easy.
Learn what your peers think about AWS WAF. Get advice and tips from experienced pros sharing their opinions. Updated: May 2026.
896,034 professionals have used our research since 2012.
reviewer1340643 - PeerSpot reviewer
Security Engineer at a computer software company with 1,001-5,000 employees
Apr 8, 2025
Some valuable features of AWS WAF include its seamless integration and ease of orchestration within the AWS platform.
Abdalla Kenawy - PeerSpot reviewer
AWS DevOps SRE/Infrastructure Engineer at Capgemini
Oct 30, 2024
The automation of blocking for security attacks is valuable, with AWS applying rate limiting.
Kavin Kalaiarasu - PeerSpot reviewer
Security Analyst at M2P Fintech
Jan 6, 2025
The cloud-native nature of AWS is crucial since most of our workload is in AWS, making AWS WAF native to Amazon Web Services.
EN
OCI/AWS Consultant at a government with 11-50 employees
Nov 11, 2024
AWS WAF acts as a barrier, analyzing HTTP communications between external users and web applications.
reviewer2143125 - PeerSpot reviewer
Director of Security Architecture at a healthcare company with 10,001+ employees
Jul 23, 2024
We integrate AWS WAF with several platforms within cloud hosting and other security solutions and provisions in our business. Regarding AI, it's been around for about 20 years, so it's not new. It's just a new buzzword. I've been in security for 30 years and remember using AI when I started 25-30 years ago. We have multiple forms of AI within our business.
Sita Thomas - PeerSpot reviewer
Associate Vice President - Engineering at Fedo.ai
Nov 27, 2024
One of the most valuable features of AWS WAF is its ability to filter web app traffic, allowing us to specify conditions such as IP addresses and HTTP headers.
AshishGautam - PeerSpot reviewer
IT Project Manager at Rajiv Gandhi Cancer Institute In India
Dec 27, 2023
The product's initial setup phase was very simple.
 

AWS WAF Cons review quotes

Azam S M - PeerSpot reviewer
Infrastructure Lead at Danat Fz LLC
Oct 9, 2025
One of the things that should be improved in AWS WAF is the monitoring; we need to identify the requests and where they are coming from.
Eucharia Okafor - PeerSpot reviewer
DevOps Engineer at a tech vendor with 1,001-5,000 employees
Dec 22, 2025
AWS WAF can be improved if the dashboard is enhanced in such a way that everything will be displayed automatically without you going in there to see what is going on.
Shashank N - PeerSpot reviewer
Security Engineer Dev Sec Ops at a outsourcing company with 1,001-5,000 employees
May 10, 2026
The issue with AWS WAF is that the rule structure is very complicated and it is very hard to maintain.
Learn what your peers think about AWS WAF. Get advice and tips from experienced pros sharing their opinions. Updated: May 2026.
896,034 professionals have used our research since 2012.
reviewer1340643 - PeerSpot reviewer
Security Engineer at a computer software company with 1,001-5,000 employees
Apr 8, 2025
AWS WAF's signature sets have room for improvement due to false positives.
Abdalla Kenawy - PeerSpot reviewer
AWS DevOps SRE/Infrastructure Engineer at Capgemini
Oct 30, 2024
Compatibility and integration functionalities, especially with services like Kafka for event-driven messaging, could be better.
Kavin Kalaiarasu - PeerSpot reviewer
Security Analyst at M2P Fintech
Jan 6, 2025
The dashboarding could be improved, and the default metrics provided by AWS WAF could be upgraded.
EN
OCI/AWS Consultant at a government with 11-50 employees
Nov 11, 2024
There is a lot of innovation talk, however, implementation might be lacking.
reviewer2143125 - PeerSpot reviewer
Director of Security Architecture at a healthcare company with 10,001+ employees
Jul 23, 2024
I'd like to see improvements in its usability and functionality. I'm also concerned about being too dependent on the cloud provider's WAF version. For security, using multiple vendors and not putting all our eggs in one basket is better.
Sita Thomas - PeerSpot reviewer
Associate Vice President - Engineering at Fedo.ai
Nov 27, 2024
I find the documentation somewhat complex to implement during the initial stages.
AshishGautam - PeerSpot reviewer
IT Project Manager at Rajiv Gandhi Cancer Institute In India
Dec 27, 2023
The area of reporting in the product needs to have a proper format.