No more typing reviews! Try our Samantha, our new voice AI agent.

AWS WAF vs SiteLock comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 3, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

AWS WAF
Ranking in Web Application Firewall (WAF)
8th
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
62
Ranking in other categories
No ranking in other categories
SiteLock
Ranking in Web Application Firewall (WAF)
37th
Average Rating
6.6
Reviews Sentiment
8.1
Number of Reviews
3
Ranking in other categories
Static Application Security Testing (SAST) (47th), CDN (16th), Distributed Denial-of-Service (DDoS) Protection (27th)
 

Mindshare comparison

As of October 2026, in the Web Application Firewall (WAF) category, the mindshare of AWS WAF is 3.9%, down from 6.6% compared to the previous year. The mindshare of SiteLock is 1.8%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Web Application Firewall (WAF) Mindshare Distribution
ProductMindshare (%)
AWS WAF3.9%
SiteLock1.8%
Other94.3%
Web Application Firewall (WAF)
 

Featured Reviews

Azam S M - PeerSpot reviewer
Infrastructure Lead at Danat Fz LLC
Has successfully filtered malicious traffic and allowed country-specific access controls
For improvement in AWS WAF, we can have better monitoring. One of the things that should be improved in AWS WAF is the monitoring; we need to identify the requests and where they are coming from. If it's a bot, we should differentiate the requests, whether they are automated or not. The way we see it now is just mentioned as a percentage from bots and actual users, which should include proper graphs and detailed information. We also need a feature where we can filter specific requests. If there are scripts in the requests, we should be able to filter those requests to see if there are any scripts running from them.
it_user723534 - PeerSpot reviewer
Guitarist at a media company with self employed
It's not easy to get out once you're in
Sitelock may perform a useful service, but be wary of giving them your credit card information. When you sign on for the paid service, Sitelock: * Hides (makes it difficult to find) that they default the auto-renew (you can't sign up without agreeing to have them automatically bill your credit card every year). * Hides (makes it difficult to find) how to stop auto-renew: * You can't just stop auto-renew from your billing panel, the way you can with reputable businesses. * You have to hunt their website for a link (in extremely small font) to the page which contains instructions for cancelling. * When you get to that page, turns out it's the 5000+ word "Terms of Service" document, which you have to scour to find a phone number. Then, you have to call and get put on hold (or if you like, they will call you back three days later). Once you finally get through, you have to jump through a lot of security hoops. All of the above, just to cancel the service. Their product may or may not be OK, but be forewarned that with Sitelock, it's not easy to get out once you're in.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The price of the product is fair enough and one of the product's advantages."
"It has improved our organization a lot because before we were having problems with access management, things have gotten better using this product, it is protecting the files, it has been the best step for us, we are no longer having problems with unauthorized access, where somebody breaches the system or compromises documents, and nothing like that has happened over the past year that we have been using this product."
"I like the scalability, as it provides platform, infrastructure and software as a service."
"The most valuable feature is the way it blocks threats to external applications."
"The most valuable feature of AWS WAF is the extra layer of security that I have when connecting to my web applications."
"AWS WAF helps us a lot to make sure that the right customer gets the right access to the system."
"I hope that the solution continues to improve, but for me, it's perfect right now."
"We have received good support from the customer service and support team."
"It seems to provide a bit of useful information on website health."
"Not only did SiteLock's website scanner find the issue with my website, but with SiteLock I was able to implement a security system to prevent future breaches."
 

Cons

"It would be better if AWS WAF were more flexible. For example, if you take a third-party WAF like Imperva, they maintain the rule set, and these rule sets are constantly updated. They push security insights or new rules into the firewall. However, when it comes to AWS, it has a standard set of rules, and only those sets of rules in the application firewalls trigger alerts, block, and manage traffic. Alternative WAFs have something like bot mitigation or bot control within the WAF, but you don't have such things in AWS WAF. I will say there could have been better bot mitigation plans, there could have been better dealer mitigation plans, and there could be better-updated rule sets for every security issue which arises in web applications. In the next release, I would like to see if AWS WAF could take on DDoS protection within itself rather than being in a stand-alone solution like AWS Shield. I would also like a solution like a bot mitigation."
"The product should improve the DDoS-related features."
"Alternative WAFs have something like bot mitigation or bot control within the WAF, but you don't have such things in AWS WAF."
"One area that could be improved is the DDoS protection."
"They have to do more to improve, to innovate more features. They need to increase the security. It has to be more active in detecting threats."
"In a future release of this solution, I would like to see additional management features to make things simpler."
"The solution could improve by having better rules, they are very basic at the moment. There are more attacks coming and we have to use third-party solutions, such as FIA. The features are not sufficient to prevent all the attacks, such as DDoS. Overall the solution should be more secure."
"The main difference with other similar products is the security efficiency against the type of attacks because normally Amazon works with certain types of attacks and is unable to deal with most of the more sophisticated new attacks that are now the market."
"Sitelock may perform a useful service, but be wary of giving them your credit card information."
 

Pricing and Cost Advice

"The price of AWS WAF is expensive if you do not know how to manage your software up or down. I price of the solution is average amongst the other competitors but it would be better if it was less expensive."
"It's cheap."
"AWS WAF has reasonable pricing."
"AWS WAF has reasonable pricing."
"For our infrastructure, we probably pay around $16,000 per month for AWS WAF. Because alternative WAF solutions provide even more features, I think the AWS WAF is a bit pricey"
"The product’s pricing is reasonable."
"You need an additional AWS subscription for this product if you are buying a managed tool."
"It has a variable pricing scheme."
"You can't just stop auto-renew from your billing panel, the way you can with reputable businesses."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
917,403 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Manufacturing Company
10%
Comms Service Provider
8%
Healthcare Company
7%
Construction Company
16%
Manufacturing Company
14%
Comms Service Provider
13%
Transportation Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business22
Midsize Enterprise12
Large Enterprise28
No data available
 

Questions from the Community

What are the limitations of AWS WAF vs alternative WAFs?
Hi Varun, I have had experienced with several WAF deployments and deep technical assessments of the following: 1. Imperva WAF 2. F5 WAF 3. Polarisec Cloud WAF Typical limitations on cloud WAF is t...
How does AWS WAF compare to Microsoft Azure Application Gateway?
Our organization ran comparison tests to determine whether Amazon’s Web Service Web Application Firewall or Microsoft Azure Application Gateway web application firewall software was the better fit ...
What is your experience regarding pricing and costs for AWS WAF?
AWS WAF is affordable; it depends on the number of rules you apply. The licensing cost for AWS WAF is just pay-as-you-go; it is a service-based model.
Ask a question
Earn 20 points
 

Also Known As

AWS Web Application Firewall
No data available
 

Overview

 

Sample Customers

eVitamins, 9Splay, Senao International
galaxyguitar.com, robertasinc.com, indiarunning.com, comprarenpr.com, idbasolutions.com, newgrip.com
Find out what your peers are saying about AWS WAF vs. SiteLock and other solutions. Updated: September 2026.
917,403 professionals have used our research since 2012.