No more typing reviews! Try our Samantha, our new voice AI agent.

AWS WAF vs R&S Web Application Firewall (DenyAll) comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

AWS WAF
Ranking in Web Application Firewall (WAF)
8th
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
62
Ranking in other categories
No ranking in other categories
R&S Web Application Firewal...
Ranking in Web Application Firewall (WAF)
49th
Average Rating
9.0
Reviews Sentiment
8.5
Number of Reviews
1
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of October 2026, in the Web Application Firewall (WAF) category, the mindshare of AWS WAF is 3.9%, down from 6.6% compared to the previous year. The mindshare of R&S Web Application Firewall (DenyAll) is 0.6%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Web Application Firewall (WAF) Mindshare Distribution
ProductMindshare (%)
AWS WAF3.9%
R&S Web Application Firewall (DenyAll)0.6%
Other95.5%
Web Application Firewall (WAF)
 

Featured Reviews

reviewer2849304 - PeerSpot reviewer
Senior Cloud Security at a healthcare company with 5,001-10,000 employees
Centralized web firewalling has reduced our attack surface and protects multi‑cloud applications
AWS WAF can be improved by not being too sensitive for some data because with some XML, it is sometimes very sensitive. When we upload videos or photos, it is flagged as a malicious pattern, and sometimes it is not sensitive enough because some query patterns that have the capability to perform malicious actions still result in false positives from AWS. It would be better for AWS WAF if it not only had logs but also specific payloads or something that directly included the specific logs so we can have more detail in our analysis. I think it should be better if they improve their capabilities in reducing the attack surface and also have better visibility for OWASP top 10 web applications and the API. Regarding AWS WAF's AI capabilities, its governance and security are very good because our attack surface is mostly reduced. The new dashboard is a bit complicated; it is easier for non-technical users, but for technical professionals, it is sometimes confusing. While the security itself is good and the governance is good, I think it needs to improve the UI or the flow itself. The accuracy and reliability of AWS WAF's output is better than others. With the free version, it has a good filter with the attack surface and the reliability is good, but sometimes we need to adjust. With the free version, we also have to pay some amount of money if the number exceeds the default provided by AWS.
SS
General Manager at 3R Technologie
Geo-localization and IP reputation help to keep our clients secure and more available
The area that should be improved is licensing. When using an active/passive cluster, we have to pay 70% of the master appliance and license for the passive server that does not work. Since we know that only one server works at a time, we should pay only one license for the appliances and for the support as well. In my opinion, this has to be improved. If possible, the client software should be a web application instead of downloading software for the management. This can avoid login problems when they update or patch.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Their technical support has been quite good."
"AWS WAF is a stable solution. The performance of the solution is very good."
"I'm satisfied with AWS WAF, and I've had no issues with it."
"The most valuable feature of the solution is the ability to integrate central sets. It protects from intrusion attacks such as scripting and SQL injections."
"AWS WAF acts as a barrier, analyzing HTTP communications between external users and web applications."
"We do have a lot of external applications which are exposed to the internet and WAF provides protection for them."
"Because it integrates with the existing AWS solution, we get a lot of support without having to do much extra work."
"This product supplies options for web security for applications accessing sensitive information."
"The three most valuable features that I noticed are the geo-localization of the user, the IP reputation, and the compartmental analysis."
"By publishing the application without fear, my customer has created new revenue by making the website available anytime and anywhere."
 

Cons

"I am not satisfied with AWS technical support."
"The solution could improve by having better rules, they are very basic at the moment. There are more attacks coming and we have to use third-party solutions, such as FIA. The features are not sufficient to prevent all the attacks, such as DDoS. Overall the solution should be more secure."
"For uniformity, AWS has a well-accepted framework. However, it'll be better for us if we could have some more documented guidelines on how the specific business should be structured and the roles that the cloud recommends."
"I would like to see the addition of more advanced rate-limiting features in the next release. It would be beneficial to extend rate limiting beyond just web servers to the main node level."
"The price could be improved."
"The dashboarding could be improved, and the default metrics provided by AWS WAF could be upgraded."
"I believe there is a need to move towards real-time analysis with the help of AI and intelligent systems in the future. This would reduce the reliance on manual work and enhance the functionality of detection protection. By incorporating AI-driven data analysis and data science techniques, we can improve the solution's user-friendliness, security compatibility, and accuracy."
"The pricing model is complicated."
"The area that should be improved is licensing."
 

Pricing and Cost Advice

"AWS WAF has reasonable pricing."
"It has a variable pricing scheme."
"The product’s pricing is reasonable."
"For Kubernetes microservices, AWS is more expensive compared to OCI. AWS costs approximately 70 cents per hour, while OCI is 50% cheaper."
"The pricing should be more affordable, especially as it pertains to small clients."
"It's an annual subscription."
"There are no separate licensing costs we pay for since it is included in the plan we purchase."
"There are different scale options available for WAF."
Information not available
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
919,809 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Manufacturing Company
9%
Comms Service Provider
8%
Outsourcing Company
7%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business22
Midsize Enterprise12
Large Enterprise28
No data available
 

Questions from the Community

What are the limitations of AWS WAF vs alternative WAFs?
Hi Varun, I have had experienced with several WAF deployments and deep technical assessments of the following: 1. Imperva WAF 2. F5 WAF 3. Polarisec Cloud WAF Typical limitations on cloud WAF is t...
How does AWS WAF compare to Microsoft Azure Application Gateway?
Our organization ran comparison tests to determine whether Amazon’s Web Service Web Application Firewall or Microsoft Azure Application Gateway web application firewall software was the better fit ...
What is your experience regarding pricing and costs for AWS WAF?
AWS WAF is affordable; it depends on the number of rules you apply. The licensing cost for AWS WAF is just pay-as-you-go; it is a service-based model.
Which Web Application Firewall (WAF) would you recommend? R&S or Imperva?
Imperva is a strong choice, given their security focus and ongoing R&D into the product in areas such as bot management.
 

Also Known As

AWS Web Application Firewall
Rohde & Schwarz Web Application Firewall, R&S WAF, DenyAll Web Application Security
 

Overview

 

Sample Customers

eVitamins, 9Splay, Senao International
Information Not Available
Find out what your peers are saying about Imperva, Radware, F5 and others in Web Application Firewall (WAF). Updated: October 2026.
919,809 professionals have used our research since 2012.