Try our new research platform with insights from 80,000+ expert users

Akamai App and API Protector vs Fortinet FortiWeb Cloud WAF-as-a-Service comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
77
Ranking in other categories
CDN (1st), WAN Optimization (4th), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Domain Name System (DNS) Security (5th), Cloud Security Posture Management (CSPM) (12th)
Akamai App and API Protector
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
29
Ranking in other categories
Web Application Firewall (WAF) (16th), Distributed Denial-of-Service (DDoS) Protection (8th), Cloud and Data Center Security (14th)
Fortinet FortiWeb Cloud WAF...
Average Rating
8.8
Reviews Sentiment
6.7
Number of Reviews
7
Ranking in other categories
Web Application Firewall (WAF) (23rd)
 

Featured Reviews

HA
Owner at Hga consulting
Has helped manage client domains with streamlined access control and threat visibility
I don't know what areas could be improved with Cloudflare WAF; Cloudflare is constantly improving and adding features to their feature set. They're doing a good job, and as far as DNS and support for any domains that I create or my clients create, it's mandatory for me to make sure that they have Cloudflare as their DNS provider. The Cloudflare load balancing capability hasn't really helped in enhancing my website's uptime and resiliency because we don't really get that much traffic; it's mostly remote users, and web hosting is done by a web hosting service. It doesn't pay to try to host your own website.
Gavin Pinho - PeerSpot reviewer
Privacy & Risk Management Vice President, Information Security at a computer software company with 501-1,000 employees
Has provided strong protection against evolving threats but still needs support for configuration fine-tuning
The standout features of Akamai App and API Protector are rooted in it being the Web Application Firewall, where all traffic gets scanned, including the implementation of web firewall rules, and after this phase, traffic proceeds through the BMP, which is Bot Management. Akamai App and API Protector exceeds expectations in terms of AI capabilities, and it genuinely combines a plethora of advanced features. The area in which Akamai excels compared to other competitors with a WAF is in threat intelligence, as threats continually evolve, requiring ongoing updates to backend algorithms to effectively capture smart bots, and Akamai's commitment in that regard is backed by an excellent team, while other providers are still catching up.
RA
Global Head - DevOps and AIOps Startegist at a manufacturing company with 10,001+ employees
Cloud security has reduced web attack incidents and protects our public applications and APIs
The best features Fortinet FortiWeb Cloud WAF-as-a-Service offers include managed WAF rules, OWASP protection, bot mitigation, and Fortinet threat intelligence. In day-to-day work, I use all of the features: managed WAF rules, OWASP protection, bot mitigation, and Fortinet threat intelligence. This provides a strong baseline security without requiring deep WAF expertise internally. The integration with the broader Fortinet security system is a plus regarding the features. In terms of its impact on our organization, Fortinet FortiWeb Cloud WAF-as-a-Service has been positively protecting us from security threats and automated attacks. With this layered protection against common web and API attacks, we have noticed that the incidents and risks have been reduced to a greater extent.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature is its usability."
"The most valuable feature is its usability."
"Many websites require an SSL certificate because they sell stuff and want SSL. Cloudflare comes with an SSL certificate built in. It's automatic. You sign yourself up for Cloudflare, and an SSL certificate automatically protects your website. You don't necessarily need a certificate if you have a connection between your website and your host, the server, Cloudflare, and the host."
"Cloudflare DNS is widely used, and it's good for websites. If we use Cloudflare DNS and update one record, it updates in their office instantly."
"There are key things that are used for our enterprise customers, such as Lambda and DNS."
"The tool is user-friendly."
"It is a fast and secure DNS."
"Cloudflare is a security SaaS provider that provides security and protects us from any application layer attack."
"The support that we got from their technical team has been fantastic. I have never experienced this level of support from other CDN providers."
"It is scalable for DDoS."
"The product is user-friendly."
"I have contacted the support team of Akamai... I am happy with their responses and answers to my problems."
"I can attest to its benefits in terms of understanding and mitigating threats...The solution's technical support team seems to be pretty responsive."
"We are getting security for each and every API."
"All the solution's features are very good."
"I like that the charges are all based on usage and labor costs. For the time that we spend onboarding almost 252020 FQDN, Akamai charges us only for the traffic usage, but it's only charging us for the labor costs for onboarding."
"The technical support is really good."
"With this layered protection against common web and API attacks, we have noticed that the incidents and risks have been reduced to a greater extent."
"I rate the overall solution ten out of ten."
"The stability of the solution is excellent."
"Regular updates are one of the aspects I appreciate about Fortinet FortiWeb Cloud WAF-as-a-Service, and it is provided by a leading brand in cybersecurity."
"Fortinet FortiWeb offers a variety of protections, including machine learning that helps protect web applications."
"Fortinet has created a holistic product that integrates features including AI and API protection, with straightforward automation and articulate reporting that even less experienced engineers can use easily."
"It is user-friendly and easy to work with."
 

Cons

"I think the APIs are a little bit hard for us to work with. The APIs could be more open so that we could integrate better with our SolarWinds or our monitoring solution."
"An integrated SSO feature would be useful for Cloudflare DNS."
"Cloudflare doesn't have a reverse lookup. We can only do a DNS lookup to get the IP address from the hostname. It doesn't work if you want to look up the hostname from an IPA address."
"I believe they currently have this feature, but there will most likely be integration with APIs so we can control some features through API."
"The timing aspect can lead to it being considered overpriced. This is a particular concern we have with Cloudflare, as they may struggle with accurately detecting the client."
"It should confirm audit findings of the assigned area with auditees to ensure that the audit conclusions are based on an accurate understanding of the issues."
"We're facing challenges due to an upgrade in the machine learning model. The problem arises from some users abusing the APIs, resulting in an influx of suspicious traffic. Cloudflare's learning model mistakenly identifies this traffic as human. Consequently, it assigns it a higher trust score, akin to legitimate human traffic, causing complications in our architecture. Previously, such traffic would have been categorized as suspicious, enabling us to apply appropriate blocking rules. However, we encounter difficulties distinguishing between genuine and suspicious traffic with the new categorization. Despite these challenges, overall, Cloudflare remains the preferred solution compared to Azure, AWS CloudFront, and Google Cloud Armor."
"There are some issues with the CDN services."
"The performance of the cloud monitoring tool is low."
"A lot of piracy happens in India and other countries. If there is a product for protection from piracy, it would be great. For example, there are multiple hackers that hack your event, and there are some channels that pirate and publish the event on some other website. We protect our streaming through DRM and different technologies. We are also protecting the website, but hacking is still happening. If they can work on protecting from piracy, it would be great."
"One area where Akamai can improve is the captcha part. Cloudflare provides a captcha if there are a certain number of threats. For example, I can assign that if there are 10 requests within a second from a single IP, it should send a captcha to the user. The user should fill in the captcha, and only after that, the user should be able to access our website. This captcha feature should be built into Bot Manager. I love this captcha feature of Cloudflare."
"Could integrate more features for each security."
"The WAF features definitely have a lot of room for improvement. A lot of the WAF is really basic. For some products or some of our solutions, we need to run a second layer of more advanced WAF. If it had better layer seven protection then we would not need a second WAF."
"It would be better if there weren't any issues with latency. We had latency issues, but I think they are all solved now."
"The pricing could be reduced a bit."
"Akamai App and API Protector is very new to me, so I do not have any insights on improvement areas for the product. However, when we ask for some help, it can take some time. We understand that the job is done by professionals, but if that time can be reduced, it would be great."
"The utilization of AI in Fortinet FortiWeb Cloud WAF-as-a-Service still needs to be upgraded and improved."
"The usability of the interface could be improved as it is not user-friendly."
"Fortinet FortiWeb Cloud WAF-as-a-Service could be improved with better logging capabilities, as many come with less spacing, necessitating a FortiSIM for enhanced functionality."
"The only thing I encountered was related to integration, mostly concerning translation."
"Better visibility and more intuitive reporting would be helpful for Fortinet FortiWeb Cloud WAF-as-a-Service."
"The usability of the interface could be improved as it is not user-friendly."
"I do not have any notes on improvement."
 

Pricing and Cost Advice

"We don't have any issues with the price."
"We are using the free tier of the solution."
"For Cloudflare, I recommend it heavily for small businesses with revenue under a couple of million dollars. Onboarding is easy, and they even have a free plan. This makes it simple for businesses in the $100,000-$500,000 range to try it out and see its value, allowing them to scale up their infrastructure as needed."
"The product's pricing is minimal compared to other products."
"The cost primarily depends on the size of the organization."
"That is one of the great features. I was able to access the majority of the features and services for free."
"So far I use free tier and happy with it. You can subscribe to business package if needed."
"The product's pricing is cheap."
"The price they are offering is quite reasonable for premium customers, but it's very expensive if you're a small and medium-sized enterprises."
"It's more expensive than others, but the ROI is good for large-scale infrastructure."
"One reason not all people use Akamai is that it is a little bit more expensive than some other providers."
"Cost depends on the volume of traffic."
"Its price is slightly high. Every company has a justification for the high price. Overall, it feels worth the money based on how the service has been structured, but we do negotiate it."
"If you want quality, you have to pay the price. Its price is fair. Their account managers are also very helpful. They help you a lot with pricing even though they are working with Akamai."
"Akamai Web Application Protector is an expensive product."
"Based on the billing discussions in the DevOps team, Akamai's cost does not seem to be a major thing. However, LOE is an issue. When it comes to support, we know that even all the competitors do this. For a 30-minute issue, they give us a LOE of one or two hours. That is a basic practice, but that is something we worry about."
Information not available
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
879,853 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Financial Services Firm
10%
Comms Service Provider
10%
Manufacturing Company
8%
Financial Services Firm
19%
Computer Software Company
10%
Manufacturing Company
7%
Performing Arts
7%
Energy/Utilities Company
12%
Hospitality Company
9%
Financial Services Firm
9%
Comms Service Provider
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise8
Large Enterprise25
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise7
Large Enterprise18
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise2
Large Enterprise3
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What is your experience regarding pricing and costs for Akamai Web Application Protector?
The price is higher than others. It could be about 80% to 70% more expensive than other tools. So, it’s not just a sl...
What needs improvement with Akamai Web Application Protector?
There are no significant areas for improvement on the WAF side or for Akamai App and API Protector solution; they are...
What is your primary use case for Akamai Web Application Protector?
The main use case for Akamai App and API Protector is serving as the WAF, Web Application Firewall.
What is your experience regarding pricing and costs for Fortinet FortiWeb Cloud WAF-as-a-Service?
My experience with the pricing, setup cost, and licensing for Fortinet FortiWeb Cloud WAF-as-a-Service is good, and i...
What needs improvement with Fortinet FortiWeb Cloud WAF-as-a-Service?
Fortinet FortiWeb Cloud WAF-as-a-Service could be improved with better logging capabilities, as many come with less s...
What is your primary use case for Fortinet FortiWeb Cloud WAF-as-a-Service?
Fortinet FortiWeb Cloud WAF-as-a-Service protects our customers' websites, including e-commerce sites, normal website...
 

Also Known As

Cloudflare DNS
Akamai Web Application Protector, Akamai Kona Site Defender, Akamai Kona DDoS Defender
No data available
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Douglas Omaha Technology Commission, ZALORA, PrintPlanet
Information Not Available
Find out what your peers are saying about Akamai App and API Protector vs. Fortinet FortiWeb Cloud WAF-as-a-Service and other solutions. Updated: December 2025.
879,853 professionals have used our research since 2012.