Try our new research platform with insights from 80,000+ expert users

Akamai App and API Protector vs Barracuda WAF-as-a-Service comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
77
Ranking in other categories
CDN (1st), WAN Optimization (4th), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Domain Name System (DNS) Security (5th), Cloud Security Posture Management (CSPM) (12th)
Akamai App and API Protector
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
29
Ranking in other categories
Web Application Firewall (WAF) (16th), Distributed Denial-of-Service (DDoS) Protection (8th), Cloud and Data Center Security (14th)
Barracuda WAF-as-a-Service
Average Rating
7.2
Reviews Sentiment
7.4
Number of Reviews
5
Ranking in other categories
Web Application Firewall (WAF) (35th)
 

Featured Reviews

HA
Owner at Hga consulting
Has helped manage client domains with streamlined access control and threat visibility
I don't know what areas could be improved with Cloudflare WAF; Cloudflare is constantly improving and adding features to their feature set. They're doing a good job, and as far as DNS and support for any domains that I create or my clients create, it's mandatory for me to make sure that they have Cloudflare as their DNS provider. The Cloudflare load balancing capability hasn't really helped in enhancing my website's uptime and resiliency because we don't really get that much traffic; it's mostly remote users, and web hosting is done by a web hosting service. It doesn't pay to try to host your own website.
Gavin Pinho - PeerSpot reviewer
Privacy & Risk Management Vice President, Information Security at a computer software company with 501-1,000 employees
Has provided strong protection against evolving threats but still needs support for configuration fine-tuning
The standout features of Akamai App and API Protector are rooted in it being the Web Application Firewall, where all traffic gets scanned, including the implementation of web firewall rules, and after this phase, traffic proceeds through the BMP, which is Bot Management. Akamai App and API Protector exceeds expectations in terms of AI capabilities, and it genuinely combines a plethora of advanced features. The area in which Akamai excels compared to other competitors with a WAF is in threat intelligence, as threats continually evolve, requiring ongoing updates to backend algorithms to effectively capture smart bots, and Akamai's commitment in that regard is backed by an excellent team, while other providers are still catching up.
Hadar Eshel - PeerSpot reviewer
Co-Founder and CEO at Cloudway
Easy to install platform with valuable policy management features
We use the product for securing email systems, protecting websites, and safeguarding web-based applications and portals One significant area for improvement in Barracuda WAF-as-a-Service lies in its market positioning and pricing strategy. Additionally, it could operate in a local data center.…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The attacker won't have details since my public IP is anonymous. It offers us good privacy."
"The features of Cloudflare were found to be more beneficial and led to the decision to utilize it over other options."
"Many websites require an SSL certificate because they sell stuff and want SSL. Cloudflare comes with an SSL certificate built in. It's automatic. You sign yourself up for Cloudflare, and an SSL certificate automatically protects your website. You don't necessarily need a certificate if you have a connection between your website and your host, the server, Cloudflare, and the host."
"We're using dynamic components to build flexible pages to create and manage Git merge requests for code and reviews."
"The DDoS protection is the most valuable aspect of the solution."
"What I like best about Cloudflare is that my company can use it to trace and manage applications and monitor traffic. The solution tells you if there's a spike in traffic. Cloudflare also sends you a link to check your equipment and deployment and track it through peering, so it's a valuable tool."
"There are key things that are used for our enterprise customers, such as Lambda and DNS."
"Easier http to https redirect using page rules"
"The CDN and the WAF features are the best."
"I like that the charges are all based on usage and labor costs. For the time that we spend onboarding almost 252020 FQDN, Akamai charges us only for the traffic usage, but it's only charging us for the labor costs for onboarding."
"The product has a good user interface."
"It enables us to move faster with new products because we have this layer of protection set up in our infrastructure."
"They have a fantastic tool for analyzing and viewing your traffic."
"The solution can scale extremely well."
"The support that we got from their technical team has been fantastic. I have never experienced this level of support from other CDN providers."
"The product is user-friendly."
"It provides an ease of policy management."
"The most valuable features of the solution are it is plug and play, has automated policies, a simple configuration, and is easy to create rules."
"The product's bot protection feature is valuable for our company."
"I like its ability to identify known attacks, including DDOS attacks. It's valuable because software must be able to stop known attacks. Application attacks are evolving all the time. When it comes to software-as-a-service, we need to have software that knows about all the latest attacks. It should also protect against major unknown attacks."
"The solution can be used for threat prevention or as a cloud-to-cloud backup system"
 

Cons

"I think the APIs are a little bit hard for us to work with. The APIs could be more open so that we could integrate better with our SolarWinds or our monitoring solution."
"There might be helpful if there was some web application firewall feature."
"There should be a specific price list for enterprise-level customers."
"Even if I wanted to, I wouldn't be able to buy Cloudflare in my country."
"We're facing challenges due to an upgrade in the machine learning model. The problem arises from some users abusing the APIs, resulting in an influx of suspicious traffic. Cloudflare's learning model mistakenly identifies this traffic as human. Consequently, it assigns it a higher trust score, akin to legitimate human traffic, causing complications in our architecture. Previously, such traffic would have been categorized as suspicious, enabling us to apply appropriate blocking rules. However, we encounter difficulties distinguishing between genuine and suspicious traffic with the new categorization. Despite these challenges, overall, Cloudflare remains the preferred solution compared to Azure, AWS CloudFront, and Google Cloud Armor."
"We have noticed multiple instances where Cloudflare falsely indicates that our servers are down, even when there is no actual load on them. This makes it challenging for us to identify the exact issue."
"The pricing could be improved."
"It should confirm audit findings of the assigned area with auditees to ensure that the audit conclusions are based on an accurate understanding of the issues."
"The WAF features definitely have a lot of room for improvement. A lot of the WAF is really basic. For some products or some of our solutions, we need to run a second layer of more advanced WAF. If it had better layer seven protection then we would not need a second WAF."
"The custom rules must be improved."
"The solution could offer even more integrations."
"The interface is a little bit clunky and can be improved."
"We are experimenting with EdgeWorkers to write our own code at the Edge level. It could grow to be much better."
"It would be better if there weren't any issues with latency. We had latency issues, but I think they are all solved now."
"It could have better analytics and reporting visibility in the OEM console."
"There are some issues with pushing configurations across a network. It still takes about 20 minutes and that means to retract it's another 20 minutes."
"It's a very specific solution that is only requested for a customer's web code or their global IT policy."
"The solution can improve by bundling Security Operation Center (SOC) with the WAF-as-a-Service, it would provide a lot more value to customers."
"We found it a bit slow when accessing it through the web browser. The URL also exposed the user name and the hashed password. When I log into my Barracuda WAF user portal, I could see the username and the hashed password on the URL itself. So, it is not very secure, and it is important to take that off."
"The stability of the product is an area of concern where improvements are required."
"One significant area for improvement in Barracuda WAF-as-a-Service lies in its market positioning and pricing strategy."
 

Pricing and Cost Advice

"The cost primarily depends on the size of the organization."
"A free version of the solution is available."
"It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
"The solution is expensive when compared to other products but offers unlimited bandwidth."
"When you compare Cloudflare DNS to other solutions, such as Akamai, the price is reasonable."
"The pricing depends on the usage, but the cheapest would be around 5,000 USD a month."
"The tool is a premium product, so it is very expensive."
"The solution has many features but there are ones that you need to pay for. Sometimes you have to find out which is available for free and which you have to pay for."
"Price-wise, I would say Akamai's pricing is competitive."
"Its price is slightly high. Every company has a justification for the high price. Overall, it feels worth the money based on how the service has been structured, but we do negotiate it."
"Its price is at the medium level. It is not very high. It is also not very low. It serves the purpose."
"One reason not all people use Akamai is that it is a little bit more expensive than some other providers."
"The solution is expensive."
"The price they are offering is quite reasonable for premium customers, but it's very expensive if you're a small and medium-sized enterprises."
"It's more expensive than others, but the ROI is good for large-scale infrastructure."
"Akamai Web Application Protector is an expensive product."
"It's very difficult for me to give an estimate of the cost. All I know is that we sell the box itself as a service."
"I rate the product's price a five on a scale of one to ten, where one is low, and ten is high. There are no additional costs to be paid apart from the standard licensing fees attached to the solution."
"The product is expensive but it offers flexible pricing. It could be affordable."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
879,768 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Financial Services Firm
10%
Comms Service Provider
10%
Manufacturing Company
8%
Financial Services Firm
19%
Computer Software Company
10%
Manufacturing Company
7%
Performing Arts
7%
Government
15%
Computer Software Company
11%
Financial Services Firm
11%
Insurance Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise8
Large Enterprise25
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise7
Large Enterprise18
No data available
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What is your experience regarding pricing and costs for Akamai Web Application Protector?
The price is higher than others. It could be about 80% to 70% more expensive than other tools. So, it’s not just a sl...
What needs improvement with Akamai Web Application Protector?
There are no significant areas for improvement on the WAF side or for Akamai App and API Protector solution; they are...
What is your primary use case for Akamai Web Application Protector?
The main use case for Akamai App and API Protector is serving as the WAF, Web Application Firewall.
What needs improvement with Barracuda WAF-as-a-Service?
One significant area for improvement in Barracuda WAF-as-a-Service lies in its market positioning and pricing strateg...
What is your primary use case for Barracuda WAF-as-a-Service?
We use the product for securing email systems, protecting websites, and safeguarding web-based applications and portals.
 

Also Known As

Cloudflare DNS
Akamai Web Application Protector, Akamai Kona Site Defender, Akamai Kona DDoS Defender
Barracuda WAF as a Service
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Douglas Omaha Technology Commission, ZALORA, PrintPlanet
Salvation Army
Find out what your peers are saying about Akamai App and API Protector vs. Barracuda WAF-as-a-Service and other solutions. Updated: December 2025.
879,768 professionals have used our research since 2012.