Try our new research platform with insights from 80,000+ expert users

Cloudflare Web Application Firewall pros and cons

Vendor: Cloudflare

4.3 out of 5

26 reviews
95% willing to recommend

Pros & Cons summary

Cloudflare Web Application Firewall enhances site performance and security with OWASP and DDoS protection. It integrates with web technologies, offering caching and a signature repository. Load balancing and DNS zone setup add value. Despite challenges with ModSecurity updates and documentation, it remains user-friendly due to ease of configuration and quick support. However, log integration, reporting, and HVAC system management require improvement, and users report delayed support responses and difficulties with third-party integrations.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.

Prominent pros & cons

PROS

Cloudflare Web Application Firewall integrates well with existing web technologies, significantly enhancing site performance and security.

It offers a wide range of security features, such as OWASP and DDoS protection, thus effectively preventing web application attacks.

The ease of configuration and fast technical support make Cloudflare Web Application Firewall a user-friendly and efficient choice.

Cloudflare Web Application Firewall provides valuable caching features and an extensive signature repository.

Its load balancing, DNS zone setup, and competitive pricing compared to Azure WAF are highly appreciated.

CONS

Cloudflare Web Application Firewall requires updates to its ModSecurity core rules and lacks comprehensive documentation to guide new users.

Improvements are needed in log integration, reporting granularity, and third-party integrations.

Customers report issues with Cloudflare's support responsiveness, particularly for real-time authentication and maintaining rule consistency.

The learning curve for Cloudflare Web Application Firewall can be challenging, with support taking up to 48 hours for basic requests.

There are difficulties in managing integrations, particularly with HVAC systems, due to potential configuration mismatches.

Cloudflare Web Application Firewall Pros review quotes

Superintendent of Cloud Platforms at a manufacturing company with 1,001-5,000 employees

Aug 11, 2020

It is configurable via API.

Read full review

BW

Director of Platform and Information Security at Brace Software

Apr 2, 2021

The security features are valuable. The particular feature we use is called OWASP.

Read full review

MariosChristodoulou

Chief Information Officer at F.P. eSafe Solutions LTD

Jun 11, 2021

Technical support has a very fast response time and they are helpful.

Read full review

Cloudflare Web Application Firewall

Free Report: Cloudflare Web Application Firewall Reviews and More

Learn what your peers think about Cloudflare Web Application Firewall. Get advice and tips from experienced pros sharing their opinions. Updated: February 2026.

883,026 professionals have used our research since 2012.

NB

Nut Benjapornkulpong

Senior Security Consultant at Reliance Industries Ltd

May 31, 2022

The Cloudflare Web Application Firewall's most valuable feature is its ease of configuration.

Read full review

Olawale Komolafe

SOC Analyst at Paystack Inc

Jun 6, 2022

Does a good job preventing web application attacks.

Read full review

Solutions Architect at Amazure Technologies Private Limited

Sep 16, 2022

We like that there's load balancing, firewall capabilities, DDoS protection, et cetera, all covered by Cloudflare.

Read full review

Solutions Architect at Amazure Technologies Private Limited

Feb 7, 2023

Someone with a basic understanding of networking and security will be able to implement the firewall's basic features within 15 minutes.

Read full review

Head of Digital Transformation Department at MERUTE

Jun 14, 2023

It protects web applications efficiently.

Read full review

Senior Solutions Architect at Think Power Solutions

Nov 15, 2023

The initial setup process is simple.

Read full review

JA

reviewer5849132

Chief Information Security Officer at BIGBANK AS

Aug 16, 2023

We extensively use the solution every day. The solution is very stable; we haven’t seen any glitches.

Read full review

Show 10 more reviews (out of 25)

Cloudflare Web Application Firewall Cons review quotes

Superintendent of Cloud Platforms at a manufacturing company with 1,001-5,000 employees

Aug 11, 2020

The ModSecurity core rules need to be updated.

Read full review

BW

Director of Platform and Information Security at Brace Software

Apr 2, 2021

Their documentation could be better. They don't have documentation that explains everything well. They have documentation for everything you're looking for, but they lack a single piece of documentation to tie everything together. As a new user or beginner, it took us a little bit of time to figure out how to put all these things in place.

Read full review

MariosChristodoulou

Chief Information Officer at F.P. eSafe Solutions LTD

Jun 11, 2021

It would be ideal if the solution offered better log integration and more integration with different platforms.

Read full review

Cloudflare Web Application Firewall

Free Report: Cloudflare Web Application Firewall Reviews and More

Learn what your peers think about Cloudflare Web Application Firewall. Get advice and tips from experienced pros sharing their opinions. Updated: February 2026.

883,026 professionals have used our research since 2012.

NB

Nut Benjapornkulpong

Senior Security Consultant at Reliance Industries Ltd

May 31, 2022

The accuracy of the Cloudflare Web Application Firewall could be improved by reducing the number of false-negative alerts.

Read full review

Olawale Komolafe

SOC Analyst at Paystack Inc

Jun 6, 2022

The reporting could be more granular.

Read full review

Solutions Architect at Amazure Technologies Private Limited

Sep 16, 2022

They have some limitations with third-party integrations.

Read full review

Solutions Architect at Amazure Technologies Private Limited

Feb 7, 2023

I have experienced some difficulties with Cloudflare's support as a customer based in India.

Read full review

Head of Digital Transformation Department at MERUTE

Jun 14, 2023

Its stability could be better.

Read full review

Senior Solutions Architect at Think Power Solutions

Nov 15, 2023

There could be an option to duplicate the cluster to maintain the consistency of rules.

Read full review

JA

reviewer5849132

Chief Information Security Officer at BIGBANK AS

Aug 16, 2023

The notification part could be improved. It's very much connected to Web Application Firewall, rate-limiting, and DDoS protection.

Read full review

Show 10 more reviews (out of 25)

Product Categories

Product Categories

Web Application Firewall (WAF)

Popular Comparisons

Popular Comparisons

Prisma Cloud by Palo Alto Networks vs Cloudflare Web Application Firewall

Imperva Application Security Platform vs Cloudflare Web Application Firewall

Fortinet FortiWeb vs Cloudflare Web Application Firewall

Azure Front Door vs Cloudflare Web Application Firewall

F5 Advanced WAF vs Cloudflare Web Application Firewall

Microsoft Azure Application Gateway vs Cloudflare Web Application Firewall

NetScaler vs Cloudflare Web Application Firewall

AWS WAF vs Cloudflare Web Application Firewall

Akamai App and API Protector vs Cloudflare Web Application Firewall

Azure Web Application Firewall vs Cloudflare Web Application Firewall

Radware Alteon vs Cloudflare Web Application Firewall

Fastly vs Cloudflare Web Application Firewall

Check Point CloudGuard WAF vs Cloudflare Web Application Firewall

NGINX App Protect vs Cloudflare Web Application Firewall

Radware Cloud WAF Service vs Cloudflare Web Application Firewall

See all alternatives

Product Categories

Product Categories

Web Application Firewall (WAF)

Popular Comparisons

Popular Comparisons

Prisma Cloud by Palo Alto Networks vs Cloudflare Web Application Firewall

Imperva Application Security Platform vs Cloudflare Web Application Firewall

Fortinet FortiWeb vs Cloudflare Web Application Firewall

Azure Front Door vs Cloudflare Web Application Firewall

F5 Advanced WAF vs Cloudflare Web Application Firewall

Microsoft Azure Application Gateway vs Cloudflare Web Application Firewall

NetScaler vs Cloudflare Web Application Firewall

AWS WAF vs Cloudflare Web Application Firewall

Akamai App and API Protector vs Cloudflare Web Application Firewall

Azure Web Application Firewall vs Cloudflare Web Application Firewall

Radware Alteon vs Cloudflare Web Application Firewall

Fastly vs Cloudflare Web Application Firewall

Check Point CloudGuard WAF vs Cloudflare Web Application Firewall

NGINX App Protect vs Cloudflare Web Application Firewall

Radware Cloud WAF Service vs Cloudflare Web Application Firewall

See all alternatives

Related questions

72

Which lesser known firewall product has the best chance at unseating the market leaders?

44

Which WAF solution would you recommend to cater to 100 to 125 concurrent sessions?

97

What do you recommend for a securing Web Application?

41

Fortinet vs Sophos? Help choose a NGFW solution that can replace Microsoft TMG.

27

Imperva WAF vs. Barracuda: Which One is Better?

85

F5 vs. Imperva WAF?

187

When should companies use SSL Inspection?

199

NGFW with URL Filtering vs Web Proxy

224

How does a WAF help to protect against DDoS attacks?

49

What's right for me? Fortinet or Citrix?