Try our new research platform with insights from 80,000+ expert users

Cloudflare Web Application Firewall pros and cons

Vendor: Cloudflare

4.2 out of 5

25 reviews
95% willing to recommend

Pros & Cons summary

Cloudflare Web Application Firewall offers robust configurability via API, providing essential security features like protection against web and DDoS attacks. Users appreciate its easy setup and performance-enhancing caching and load balancing. While it ensures security with features like zero trust policy, documentation shortcomings complicate setup. Enhancements in log integration and third-party support, and addressing false-negative alerts, latency, and response time issues, particularly in India, would improve user experience and reliability.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.

Prominent pros & cons

PROS

Cloudflare Web Application Firewall is configurable via API and offers a simple setup process.

Its security features and functionalities like OWASP and DDoS protection are highly valuable.

Cloudflare Web Application Firewall is reliable and offers load balancing, firewall capabilities, DNS zone setup, and zero trust policy.

With features like caching and SDRAP, it efficiently protects web applications and improves security posture by blocking bad actors.

It is a cost-effective option compared to Azure WAF, with valuable rate limiting and customization features.

CONS

ModSecurity core rules require updates and documentation lacks cohesiveness, making it difficult for new users to integrate all features.

The accuracy of Cloudflare Web Application Firewall needs improvement by reducing false-negative alerts, and the reporting could be more granular.

There are limitations with third-party integrations, and difficulties with support, particularly for users in different regions like India.

Log integration, platform integration, and stability could be enhanced, with specific mention of difficulties in integration with HVAC systems.

Multitenancy capability is currently lacking, and there is significant latency noticed when traffic passes through Cloudflare Web Application Firewall.

Cloudflare Web Application Firewall Pros review quotes

Superintendent of Cloud Platforms at a manufacturing company with 1,001-5,000 employees

Aug 11, 2020

It is configurable via API.

Read full review

BW

Director of Platform and Information Security at Brace Software

Apr 2, 2021

The security features are valuable. The particular feature we use is called OWASP.

Read full review

MariosChristodoulou

Chief Information Officer at F.P. eSafe Solutions LTD

Jun 11, 2021

Technical support has a very fast response time and they are helpful.

Read full review

Cloudflare Web Application Firewall

Free Report: Cloudflare Web Application Firewall Reviews and More

Learn what your peers think about Cloudflare Web Application Firewall. Get advice and tips from experienced pros sharing their opinions. Updated: December 2025.

879,371 professionals have used our research since 2012.

NB

Nut Benjapornkulpong

Senior Security Consultant at Reliance Industries Ltd

May 31, 2022

The Cloudflare Web Application Firewall's most valuable feature is its ease of configuration.

Read full review

Olawale Komolafe

SOC Analyst at Paystack Inc

Jun 6, 2022

Does a good job preventing web application attacks.

Read full review

Solutions Architect at Amazure Technologies Private Limited

Sep 16, 2022

We like that there's load balancing, firewall capabilities, DDoS protection, et cetera, all covered by Cloudflare.

Read full review

Solutions Architect at Amazure Technologies Private Limited

Feb 7, 2023

Someone with a basic understanding of networking and security will be able to implement the firewall's basic features within 15 minutes.

Read full review

Head of Digital Transformation Department at MERUTE

Jun 14, 2023

It protects web applications efficiently.

Read full review

Senior Solutions Architect at Think Power Solutions

Nov 15, 2023

The initial setup process is simple.

Read full review

JA

Chief Information Security Officer at BIGBANK AS

Aug 16, 2023

We extensively use the solution every day. The solution is very stable; we haven’t seen any glitches.

Read full review

Show 10 more reviews (out of 24)

Cloudflare Web Application Firewall Cons review quotes

Superintendent of Cloud Platforms at a manufacturing company with 1,001-5,000 employees

Aug 11, 2020

The ModSecurity core rules need to be updated.

Read full review

BW

Director of Platform and Information Security at Brace Software

Apr 2, 2021

Their documentation could be better. They don't have documentation that explains everything well. They have documentation for everything you're looking for, but they lack a single piece of documentation to tie everything together. As a new user or beginner, it took us a little bit of time to figure out how to put all these things in place.

Read full review

MariosChristodoulou

Chief Information Officer at F.P. eSafe Solutions LTD

Jun 11, 2021

It would be ideal if the solution offered better log integration and more integration with different platforms.

Read full review

Cloudflare Web Application Firewall

Free Report: Cloudflare Web Application Firewall Reviews and More

Learn what your peers think about Cloudflare Web Application Firewall. Get advice and tips from experienced pros sharing their opinions. Updated: December 2025.

879,371 professionals have used our research since 2012.

NB

Nut Benjapornkulpong

Senior Security Consultant at Reliance Industries Ltd

May 31, 2022

The accuracy of the Cloudflare Web Application Firewall could be improved by reducing the number of false-negative alerts.

Read full review

Olawale Komolafe

SOC Analyst at Paystack Inc

Jun 6, 2022

The reporting could be more granular.

Read full review

Solutions Architect at Amazure Technologies Private Limited

Sep 16, 2022

They have some limitations with third-party integrations.

Read full review

Solutions Architect at Amazure Technologies Private Limited

Feb 7, 2023

I have experienced some difficulties with Cloudflare's support as a customer based in India.

Read full review

Head of Digital Transformation Department at MERUTE

Jun 14, 2023

Its stability could be better.

Read full review

Senior Solutions Architect at Think Power Solutions

Nov 15, 2023

There could be an option to duplicate the cluster to maintain the consistency of rules.

Read full review

JA

Chief Information Security Officer at BIGBANK AS

Aug 16, 2023

The notification part could be improved. It's very much connected to Web Application Firewall, rate-limiting, and DDoS protection.

Read full review

Show 10 more reviews (out of 24)

Product Categories

Product Categories

Web Application Firewall (WAF)

Popular Comparisons

Popular Comparisons

Prisma Cloud by Palo Alto Networks vs Cloudflare Web Application Firewall

Imperva Application Security Platform vs Cloudflare Web Application Firewall

Fortinet FortiWeb vs Cloudflare Web Application Firewall

Azure Front Door vs Cloudflare Web Application Firewall

Microsoft Azure Application Gateway vs Cloudflare Web Application Firewall

F5 Advanced WAF vs Cloudflare Web Application Firewall

NetScaler vs Cloudflare Web Application Firewall

AWS WAF vs Cloudflare Web Application Firewall

Akamai App and API Protector vs Cloudflare Web Application Firewall

Azure Web Application Firewall vs Cloudflare Web Application Firewall

Radware Alteon vs Cloudflare Web Application Firewall

Fastly vs Cloudflare Web Application Firewall

NGINX App Protect vs Cloudflare Web Application Firewall

Check Point CloudGuard WAF vs Cloudflare Web Application Firewall

Radware Cloud WAF Service vs Cloudflare Web Application Firewall

See all alternatives

Product Categories

Product Categories

Web Application Firewall (WAF)

Popular Comparisons

Popular Comparisons

Prisma Cloud by Palo Alto Networks vs Cloudflare Web Application Firewall

Imperva Application Security Platform vs Cloudflare Web Application Firewall

Fortinet FortiWeb vs Cloudflare Web Application Firewall

Azure Front Door vs Cloudflare Web Application Firewall

Microsoft Azure Application Gateway vs Cloudflare Web Application Firewall

F5 Advanced WAF vs Cloudflare Web Application Firewall

NetScaler vs Cloudflare Web Application Firewall

AWS WAF vs Cloudflare Web Application Firewall

Akamai App and API Protector vs Cloudflare Web Application Firewall

Azure Web Application Firewall vs Cloudflare Web Application Firewall

Radware Alteon vs Cloudflare Web Application Firewall

Fastly vs Cloudflare Web Application Firewall

NGINX App Protect vs Cloudflare Web Application Firewall

Check Point CloudGuard WAF vs Cloudflare Web Application Firewall

Radware Cloud WAF Service vs Cloudflare Web Application Firewall

See all alternatives

Related questions

66

Which lesser known firewall product has the best chance at unseating the market leaders?

40

Which WAF solution would you recommend to cater to 100 to 125 concurrent sessions?

79

What do you recommend for a securing Web Application?

36

Fortinet vs Sophos? Help choose a NGFW solution that can replace Microsoft TMG.

23

Imperva WAF vs. Barracuda: Which One is Better?

103

F5 vs. Imperva WAF?

162

When should companies use SSL Inspection?

253

NGFW with URL Filtering vs Web Proxy

261

How does a WAF help to protect against DDoS attacks?

39

What's right for me? Fortinet or Citrix?