No more typing reviews! Try our Samantha, our new voice AI agent.

AWS WAF vs SiteLock comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 3, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

AWS WAF
Ranking in Web Application Firewall (WAF)
7th
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
62
Ranking in other categories
No ranking in other categories
SiteLock
Ranking in Web Application Firewall (WAF)
37th
Average Rating
6.6
Reviews Sentiment
8.1
Number of Reviews
3
Ranking in other categories
Static Application Security Testing (SAST) (46th), CDN (16th), Distributed Denial-of-Service (DDoS) Protection (27th)
 

Mindshare comparison

As of November 2026, in the Web Application Firewall (WAF) category, the mindshare of AWS WAF is 4.0%, down from 6.2% compared to the previous year. The mindshare of SiteLock is 1.8%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Web Application Firewall (WAF) Mindshare Distribution
ProductMindshare (%)
AWS WAF4.0%
SiteLock1.8%
Other94.2%
Web Application Firewall (WAF)
 

Featured Reviews

reviewer2849304 - PeerSpot reviewer
Senior Cloud Security at a healthcare company with 5,001-10,000 employees
Centralized web firewalling has reduced our attack surface and protects multi‑cloud applications
AWS WAF can be improved by not being too sensitive for some data because with some XML, it is sometimes very sensitive. When we upload videos or photos, it is flagged as a malicious pattern, and sometimes it is not sensitive enough because some query patterns that have the capability to perform malicious actions still result in false positives from AWS. It would be better for AWS WAF if it not only had logs but also specific payloads or something that directly included the specific logs so we can have more detail in our analysis. I think it should be better if they improve their capabilities in reducing the attack surface and also have better visibility for OWASP top 10 web applications and the API. Regarding AWS WAF's AI capabilities, its governance and security are very good because our attack surface is mostly reduced. The new dashboard is a bit complicated; it is easier for non-technical users, but for technical professionals, it is sometimes confusing. While the security itself is good and the governance is good, I think it needs to improve the UI or the flow itself. The accuracy and reliability of AWS WAF's output is better than others. With the free version, it has a good filter with the attack surface and the reliability is good, but sometimes we need to adjust. With the free version, we also have to pay some amount of money if the number exceeds the default provided by AWS.
it_user723534 - PeerSpot reviewer
Guitarist at a media company with self employed
It's not easy to get out once you're in
Sitelock may perform a useful service, but be wary of giving them your credit card information. When you sign on for the paid service, Sitelock: * Hides (makes it difficult to find) that they default the auto-renew (you can't sign up without agreeing to have them automatically bill your credit card every year). * Hides (makes it difficult to find) how to stop auto-renew: * You can't just stop auto-renew from your billing panel, the way you can with reputable businesses. * You have to hunt their website for a link (in extremely small font) to the page which contains instructions for cancelling. * When you get to that page, turns out it's the 5000+ word "Terms of Service" document, which you have to scour to find a phone number. Then, you have to call and get put on hold (or if you like, they will call you back three days later). Once you finally get through, you have to jump through a lot of security hoops. All of the above, just to cancel the service. Their product may or may not be OK, but be forewarned that with Sitelock, it's not easy to get out once you're in.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution's initial setup process is easy."
"The interface is good."
"The cloud-native nature of AWS is crucial since most of our workload is in AWS, making AWS WAF native to Amazon Web Services."
"AWS WAF has positively impacted our organization by improving our defense from our WAF firewalling the web application, including production and non-production environments."
"It's simple, easy to use."
"I think AWS WAF is a great solution."
"The customized billing is the most valuable feature."
"I like the scalability, as it provides platform, infrastructure and software as a service."
"Not only did SiteLock's website scanner find the issue with my website, but with SiteLock I was able to implement a security system to prevent future breaches."
"It seems to provide a bit of useful information on website health."
 

Cons

"Technical support for AWS WAF could still be improved, e.g. support could be faster, more knowledgeable, and friendlier."
"On the UI side, I would like it if they could bring back the conditions view which had geo match, IP sets and etc."
"We don't have much control over blocking, because the WAF is managed by AWS."
"I believe there is a need to move towards real-time analysis with the help of AI and intelligent systems in the future. This would reduce the reliance on manual work and enhance the functionality of detection protection. By incorporating AI-driven data analysis and data science techniques, we can improve the solution's user-friendliness, security compatibility, and accuracy."
"I am not satisfied with AWS technical support."
"Rule exclusion could be a bit more transparent."
"Whenever there is an issue, it is just not that simple to resolve, especially if you don't have premium support."
"Support wise, I don't think they are that good compared to individual vendors."
"Sitelock may perform a useful service, but be wary of giving them your credit card information."
 

Pricing and Cost Advice

"AWS WAF has reasonable pricing."
"AWS WAF is pay-as-you-go, I only pay for what I'm using. There is no subscription or any payment upfront, I can terminate use at any time. Which is an advantage."
"The pricing should be more affordable, especially as it pertains to small clients."
"The solution is affordable."
"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a seven or eight out of ten."
"There are different scale options available for WAF."
"It's an annual subscription."
"The pricing is good and manageable."
"You can't just stop auto-renew from your billing panel, the way you can with reputable businesses."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
920,574 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Manufacturing Company
9%
Comms Service Provider
8%
Healthcare Company
7%
Construction Company
16%
Comms Service Provider
14%
Manufacturing Company
14%
Transportation Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business22
Midsize Enterprise12
Large Enterprise28
No data available
 

Questions from the Community

What are the limitations of AWS WAF vs alternative WAFs?
Hi Varun, I have had experienced with several WAF deployments and deep technical assessments of the following: 1. Imperva WAF 2. F5 WAF 3. Polarisec Cloud WAF Typical limitations on cloud WAF is t...
How does AWS WAF compare to Microsoft Azure Application Gateway?
Our organization ran comparison tests to determine whether Amazon’s Web Service Web Application Firewall or Microsoft Azure Application Gateway web application firewall software was the better fit ...
What is your experience regarding pricing and costs for AWS WAF?
AWS WAF is affordable; it depends on the number of rules you apply. The licensing cost for AWS WAF is just pay-as-you-go; it is a service-based model.
Ask a question
Earn 20 points
 

Also Known As

AWS Web Application Firewall
No data available
 

Overview

 

Sample Customers

eVitamins, 9Splay, Senao International
galaxyguitar.com, robertasinc.com, indiarunning.com, comprarenpr.com, idbasolutions.com, newgrip.com
Find out what your peers are saying about AWS WAF vs. SiteLock and other solutions. Updated: September 2026.
920,574 professionals have used our research since 2012.