Try our new research platform with insights from 80,000+ expert users
Cloudflare Web Application Firewall Logo

Cloudflare Web Application Firewall pros and cons

Vendor: Cloudflare
4.2 out of 5
Badge Leader

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Cloudflare Web Application Firewall is configurable via API and offers a simple setup process.
Its security features and functionalities like OWASP and DDoS protection are highly valuable.
Cloudflare Web Application Firewall is reliable and offers load balancing, firewall capabilities, DNS zone setup, and zero trust policy.
With features like caching and SDRAP, it efficiently protects web applications and improves security posture by blocking bad actors.
It is a cost-effective option compared to Azure WAF, with valuable rate limiting and customization features.

CONS

ModSecurity core rules require updates and documentation lacks cohesiveness, making it difficult for new users to integrate all features.
The accuracy of Cloudflare Web Application Firewall needs improvement by reducing false-negative alerts, and the reporting could be more granular.
There are limitations with third-party integrations, and difficulties with support, particularly for users in different regions like India.
Log integration, platform integration, and stability could be enhanced, with specific mention of difficulties in integration with HVAC systems.
Multitenancy capability is currently lacking, and there is significant latency noticed when traffic passes through Cloudflare Web Application Firewall.
 

Cloudflare Web Application Firewall Pros review quotes

JA
Aug 16, 2023
We extensively use the solution every day. The solution is very stable; we haven’t seen any glitches.
SachidDoshi - PeerSpot reviewer
Apr 9, 2024
There is a huge signature repository
Hitesh R - PeerSpot reviewer
Sep 16, 2022
We like that there's load balancing, firewall capabilities, DDoS protection, et cetera, all covered by Cloudflare.
Learn what your peers think about Cloudflare Web Application Firewall. Get advice and tips from experienced pros sharing their opinions. Updated: October 2025.
872,778 professionals have used our research since 2012.
Hitesh R - PeerSpot reviewer
Feb 7, 2023
Someone with a basic understanding of networking and security will be able to implement the firewall's basic features within 15 minutes.
HA
Oct 7, 2025
Cloudflare has positively impacted my organization by making it easier for me to handle and set up DNS for multiple clients; I can easily go in and access their accounts, make changes they need, and it's a one-stop shop.
KornthawatPhichitoakkhanit - PeerSpot reviewer
Oct 13, 2023
I'm highly satisfied. It's remarkably user-friendly, enabling me to quickly identify issues, and deploy solutions, and it offers the necessary features.
it_user1399293 - PeerSpot reviewer
Aug 11, 2020
It is configurable via API.
BW
Apr 2, 2021
The security features are valuable. The particular feature we use is called OWASP.
reviewer2240130 - PeerSpot reviewer
May 21, 2024
Cloudflare WAF provides protection through rules and functionalities like Cloudflare's SDRAP.
AU
Jun 3, 2025
The stability of Cloudflare Web Application Firewall deserves a perfect 10 out of 10.
 

Cloudflare Web Application Firewall Cons review quotes

JA
Aug 16, 2023
The notification part could be improved. It's very much connected to Web Application Firewall, rate-limiting, and DDoS protection.
SachidDoshi - PeerSpot reviewer
Apr 9, 2024
The solution's learning curve can still be further reduced
Hitesh R - PeerSpot reviewer
Sep 16, 2022
They have some limitations with third-party integrations.
Learn what your peers think about Cloudflare Web Application Firewall. Get advice and tips from experienced pros sharing their opinions. Updated: October 2025.
872,778 professionals have used our research since 2012.
Hitesh R - PeerSpot reviewer
Feb 7, 2023
I have experienced some difficulties with Cloudflare's support as a customer based in India.
HA
Oct 7, 2025
The user interface is very simple and straightforward, but users need knowledge about DNS to accomplish tasks.
KornthawatPhichitoakkhanit - PeerSpot reviewer
Oct 13, 2023
A key challenge arises when dealing with numerous integrations with HVAC systems. Depending on the specifics, there might be some configuration mismatches, which necessitate specific support.
it_user1399293 - PeerSpot reviewer
Aug 11, 2020
The ModSecurity core rules need to be updated.
BW
Apr 2, 2021
Their documentation could be better. They don't have documentation that explains everything well. They have documentation for everything you're looking for, but they lack a single piece of documentation to tie everything together. As a new user or beginner, it took us a little bit of time to figure out how to put all these things in place.
reviewer2240130 - PeerSpot reviewer
May 21, 2024
Support can be challenging at times.
AU
Jun 3, 2025
They need to improve their support because getting a response for basic requests took around 48 hours, which is too long.