Try our new research platform with insights from 80,000+ expert users

Akamai App and API Protector vs F5 Shape Security comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
76
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (13th)
Akamai App and API Protector
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
28
Ranking in other categories
Web Application Firewall (WAF) (9th), Distributed Denial-of-Service (DDoS) Protection (4th), Cloud and Data Center Security (10th)
F5 Shape Security
Average Rating
8.6
Reviews Sentiment
7.5
Number of Reviews
2
Ranking in other categories
Fraud Detection and Prevention (6th), Bot Management (1st)
 

Mindshare comparison

Web Application Firewall (WAF) Market Share Distribution
ProductMarket Share (%)
Akamai App and API Protector3.4%
F5 Advanced WAF9.2%
Microsoft Azure Application Gateway7.8%
Other79.6%
Web Application Firewall (WAF)
Fraud Detection and Prevention Market Share Distribution
ProductMarket Share (%)
F5 Shape Security2.1%
ThreatMetrix11.3%
FICO Falcon Platform7.6%
Other79.0%
Fraud Detection and Prevention
 

Featured Reviews

Carlos Alam Hernandez Baruch - PeerSpot reviewer
Fast and secure deployments simplify operations for government and fintech clients
It is a fast and secure DNS. It is very easy to deploy, and my customers are happy with this tool. Additionally, the CDN performance in Mexico is excellent, providing fast service and tools. It offers reliability during high-traffic periods, ensuring no impact on the environment. It helps my clients avoid using on-premise boxes, simplifying operations as they only use the prices on Cloudflare.
Bharat Chandra - PeerSpot reviewer
Exceptional support, protects our sites, and provides visibility into traffic
We did a PoC of Akamai and Cloudflare. One area where Akamai can improve is the captcha part. Cloudflare provides a captcha if there are a certain number of threats. For example, I can assign that if there are 10 requests within a second from a single IP, it should send a captcha to the user. The user should fill in the captcha, and only after that, the user should be able to access our website. This captcha feature should be built into Bot Manager. I love this captcha feature of Cloudflare. Other things are good in Akamai. That is why we are using Akamai. Only the captcha part should be implemented.
Nikolay Dimitrov - PeerSpot reviewer
Easy to configure and blocks bot attacks for web users
The solution is deployed on the F5 cloud. The solution's real-time analytics help you see what has been blocked. It helps to see whether the attack category was an automation attack or a fake browser. F5 Shape Security has a normal dashboard. We are doing F5 Shape Security migrations for 30 customers. F5 Shape Security uses Javascript. For a lot of competitors, the Javascript can be reverse-engineered by attackers to bypass the protection. F5 Shape Security has machine learning authentication of the Java script. If you had hacked it, the encryption would have been changed. It's really hard for attackers to reverse engineer the F5 Shape Security JavaScript. Overall, I rate the solution a nine out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Cloudflare is a security SaaS provider that provides security and protects us from any application layer attack."
"We're using dynamic components to build flexible pages to create and manage Git merge requests for code and reviews."
"It's a great product because it's scalable, has great coverage, and is mature with good defenses against DDoS attacks."
"I like Cloudflare's application gateway and DDoS protection."
"The most valuable feature of Cloudflare DNS is security."
"The DDoS protection is the most valuable aspect of the solution."
"Cloudflare DNS is widely used, and it's good for websites. If we use Cloudflare DNS and update one record, it updates in their office instantly."
"Cloudflare has many features."
"The most valuable feature is the DDoS protection, which is the main reason we got it."
"The solution can scale extremely well."
"Features like scalability and uptime are most effective."
"I have contacted the support team of Akamai... I am happy with their responses and answers to my problems."
"The most valuable feature is the custom rules feature. This is because many of our customers require a lot of custom rules. Because it's a very customized project for our customers, I think they have the best of everything already."
"I like that the charges are all based on usage and labor costs. For the time that we spend onboarding almost 252020 FQDN, Akamai charges us only for the traffic usage, but it's only charging us for the labor costs for onboarding."
"The features are powerful and better than F5."
"The CDN and the WAF features are the best."
"F5 Shape Security's most valuable feature is performance."
"The most valuable feature of the solution is the ease of configuration."
 

Cons

"For the free and Pro plans, Cloudflare could use a simple bot to provide information to users. This would improve support, especially for less advanced users who utilize the free components."
"There should be a specific price list for enterprise-level customers."
"It would be good if Cloudflare could have more servers for better traffic routing or an increase in the traffic routed. This is what I'd like to improve in Cloudflare."
"We have noticed multiple instances where Cloudflare falsely indicates that our servers are down, even when there is no actual load on them. This makes it challenging for us to identify the exact issue."
"Cloudflare does not have an on-premise solution. If they had different approaches they could be better suited to accommodate more customers, such as on-premise and hybrid deployments. For example, hybrid deployments would be useful where you could move the traffic from the enterprise to the cloud."
"Cloudflare doesn't have a reverse lookup. We can only do a DNS lookup to get the IP address from the hostname. It doesn't work if you want to look up the hostname from an IPA address."
"One area of improvement is in the Access Rules. Hypothetically, if we wanted to block or challenge traffic outside of the United States, the only way to currently do that (as far as I know) is to enter every single country outside of the United States. That could be a labor intensive job. A solution could be to enable users to create a rule where traffic is only allowed within a certain country."
"The analytics, basically the dashboard, doesn't have much to it."
"The pricing could be reduced a bit."
"Support and the pricing need to improve."
"A lot of piracy happens in India and other countries. If there is a product for protection from piracy, it would be great. For example, there are multiple hackers that hack your event, and there are some channels that pirate and publish the event on some other website. We protect our streaming through DRM and different technologies. We are also protecting the website, but hacking is still happening. If they can work on protecting from piracy, it would be great."
"Customer support has room for improvement."
"One thing I asked them is to integrate the API discovery product that they have and push that data into Akamai App and API Protector so that we do not have two types of reviews to identify the type of traffic. We already know the APIs that are frequently getting used, so analysis becomes easier. We can integrate both products and use them."
"The performance of the cloud monitoring tool is low."
"It's fine for a simple tool, but as I recall, if you encounter a lot of bots, scrapers, and other things, you'll need this tool bot and this other thing they offer called Bot Manager."
"There are some issues with pushing configurations across a network. It still takes about 20 minutes and that means to retract it's another 20 minutes."
"I want the solution's custom exclusion rules to be more granular."
"The tool's price is high."
 

Pricing and Cost Advice

"The pricing depends on the usage, but the cheapest would be around 5,000 USD a month."
"For Cloudflare, I recommend it heavily for small businesses with revenue under a couple of million dollars. Onboarding is easy, and they even have a free plan. This makes it simple for businesses in the $100,000-$500,000 range to try it out and see its value, allowing them to scale up their infrastructure as needed."
"So far I use free tier and happy with it. You can subscribe to business package if needed."
"When you compare Cloudflare DNS to other solutions, such as Akamai, the price is reasonable."
"We are using the free version."
"The pricing for the service is reasonable, neither excessively cheap nor prohibitively expensive. It aligns well with the value of their solution."
"That is one of the great features. I was able to access the majority of the features and services for free."
"I think the pricing is competitive. I think as far as licensing is concerned it's pretty straightforward because it's based on domain. It's just that sometimes domains could be tricky with some customers."
"Cost depends on the volume of traffic."
"Akamai Web Application Protector is an expensive product."
"There is no license at all for Akamai. They are going to charge us only for the usage."
"It's more expensive than others, but the ROI is good for large-scale infrastructure."
"Price-wise, I would say Akamai's pricing is competitive."
"The price they are offering is quite reasonable for premium customers, but it's very expensive if you're a small and medium-sized enterprises."
"The solution is not expensive."
"Based on the billing discussions in the DevOps team, Akamai's cost does not seem to be a major thing. However, LOE is an issue. When it comes to support, we know that even all the competitors do this. For a 30-minute issue, they give us a LOE of one or two hours. That is a basic practice, but that is something we worry about."
"The solution is moderately priced."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
867,370 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Comms Service Provider
11%
Financial Services Firm
10%
Manufacturing Company
7%
Financial Services Firm
20%
Computer Software Company
11%
Manufacturing Company
7%
Performing Arts
5%
Financial Services Firm
31%
Retailer
8%
Healthcare Company
7%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business45
Midsize Enterprise8
Large Enterprise25
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise6
Large Enterprise18
No data available
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What is your experience regarding pricing and costs for Akamai Web Application Protector?
The price is higher than others. It could be about 80% to 70% more expensive than other tools. So, it’s not just a sl...
What needs improvement with Akamai Web Application Protector?
It could have better analytics and reporting visibility in the OEM console.
What do you like most about F5 Shape Security?
The most valuable feature of the solution is the ease of configuration.
What needs improvement with F5 Shape Security?
There could be some improvement in the options to make custom exclusion rules to be more granular. Sometimes, the sol...
What advice do you have for others considering F5 Shape Security?
The solution is deployed on the F5 cloud. The solution's real-time analytics help you see what has been blocked. It h...
 

Also Known As

Cloudflare DNS
Akamai Web Application Protector, Akamai Kona Site Defender, Akamai Kona DDoS Defender
Shape Security
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Douglas Omaha Technology Commission, ZALORA, PrintPlanet
Wells Fargo, Loblaw, JetBlue, Zoosk
Find out what your peers are saying about F5, Amazon Web Services (AWS), Microsoft and others in Web Application Firewall (WAF). Updated: August 2025.
867,370 professionals have used our research since 2012.