No more typing reviews! Try our Samantha, our new voice AI agent.

AWS WAF vs SiteLock comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 3, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

AWS WAF
Ranking in Web Application Firewall (WAF)
7th
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
62
Ranking in other categories
No ranking in other categories
SiteLock
Ranking in Web Application Firewall (WAF)
37th
Average Rating
6.6
Reviews Sentiment
8.1
Number of Reviews
3
Ranking in other categories
Static Application Security Testing (SAST) (46th), CDN (16th), Distributed Denial-of-Service (DDoS) Protection (27th)
 

Mindshare comparison

As of November 2026, in the Web Application Firewall (WAF) category, the mindshare of AWS WAF is 4.0%, down from 6.2% compared to the previous year. The mindshare of SiteLock is 1.8%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Web Application Firewall (WAF) Mindshare Distribution
ProductMindshare (%)
AWS WAF4.0%
SiteLock1.8%
Other94.2%
Web Application Firewall (WAF)
 

Featured Reviews

reviewer2849304 - PeerSpot reviewer
Senior Cloud Security at a healthcare company with 5,001-10,000 employees
Centralized web firewalling has reduced our attack surface and protects multi‑cloud applications
AWS WAF can be improved by not being too sensitive for some data because with some XML, it is sometimes very sensitive. When we upload videos or photos, it is flagged as a malicious pattern, and sometimes it is not sensitive enough because some query patterns that have the capability to perform malicious actions still result in false positives from AWS. It would be better for AWS WAF if it not only had logs but also specific payloads or something that directly included the specific logs so we can have more detail in our analysis. I think it should be better if they improve their capabilities in reducing the attack surface and also have better visibility for OWASP top 10 web applications and the API. Regarding AWS WAF's AI capabilities, its governance and security are very good because our attack surface is mostly reduced. The new dashboard is a bit complicated; it is easier for non-technical users, but for technical professionals, it is sometimes confusing. While the security itself is good and the governance is good, I think it needs to improve the UI or the flow itself. The accuracy and reliability of AWS WAF's output is better than others. With the free version, it has a good filter with the attack surface and the reliability is good, but sometimes we need to adjust. With the free version, we also have to pay some amount of money if the number exceeds the default provided by AWS.
it_user723534 - PeerSpot reviewer
Guitarist at a media company with self employed
It's not easy to get out once you're in
Sitelock may perform a useful service, but be wary of giving them your credit card information. When you sign on for the paid service, Sitelock: * Hides (makes it difficult to find) that they default the auto-renew (you can't sign up without agreeing to have them automatically bill your credit card every year). * Hides (makes it difficult to find) how to stop auto-renew: * You can't just stop auto-renew from your billing panel, the way you can with reputable businesses. * You have to hunt their website for a link (in extremely small font) to the page which contains instructions for cancelling. * When you get to that page, turns out it's the 5000+ word "Terms of Service" document, which you have to scour to find a phone number. Then, you have to call and get put on hold (or if you like, they will call you back three days later). Once you finally get through, you have to jump through a lot of security hoops. All of the above, just to cancel the service. Their product may or may not be OK, but be forewarned that with Sitelock, it's not easy to get out once you're in.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most important aspect for us is that AWS WAF is easy to deploy."
"The agility is great for us in terms of cloud services in general."
"If hackers try to insert bugs, the tool blocks it."
"The interface is good."
"We have received good support from the customer service and support team."
"We do have a lot of external applications which are exposed to the internet and WAF provides protection for them."
"AWS is very user-friendly and largely inexpensive, however, if an organization has the budget, there are lots of great products out there that do largely the same thing."
"Some valuable features of AWS WAF include its seamless integration and ease of orchestration within the AWS platform."
"Not only did SiteLock's website scanner find the issue with my website, but with SiteLock I was able to implement a security system to prevent future breaches."
"It seems to provide a bit of useful information on website health."
 

Cons

"The solution could be more reliable."
"On the UI side, I would like it if they could bring back the conditions view which had geo match, IP sets and etc."
"The solution's pricing could be improved."
"I would like to be able to view a graphical deployment map in the user interface that will give me an overview of the configuration and help to determine whether I have missed any steps."
"I find the documentation somewhat complex to implement during the initial stages."
"The solution should identify why it blocks particular websites."
"AWS WAF's signature sets have room for improvement due to false positives."
"The dashboarding could be improved, and the default metrics provided by AWS WAF could be upgraded."
"Sitelock may perform a useful service, but be wary of giving them your credit card information."
 

Pricing and Cost Advice

"I would rate AWS WAF's pricing a seven out of ten."
"It's quite affordable. It's in the middle."
"AWS WAF has reasonable pricing."
"AWS WAF has reasonable pricing."
"For our infrastructure, we probably pay around $16,000 per month for AWS WAF. Because alternative WAF solutions provide even more features, I think the AWS WAF is a bit pricey"
"There are no separate licensing costs we pay for since it is included in the plan we purchase."
"AWS is not that costly by comparison. They are maybe close to $40 per month. I think it was between $29 or $39."
"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a seven or eight out of ten."
"You can't just stop auto-renew from your billing panel, the way you can with reputable businesses."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
921,338 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Manufacturing Company
9%
Comms Service Provider
8%
Outsourcing Company
7%
Construction Company
16%
Comms Service Provider
14%
Manufacturing Company
14%
Transportation Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business22
Midsize Enterprise12
Large Enterprise28
No data available
 

Questions from the Community

What are the limitations of AWS WAF vs alternative WAFs?
Hi Varun, I have had experienced with several WAF deployments and deep technical assessments of the following: 1. Imperva WAF 2. F5 WAF 3. Polarisec Cloud WAF Typical limitations on cloud WAF is t...
How does AWS WAF compare to Microsoft Azure Application Gateway?
Our organization ran comparison tests to determine whether Amazon’s Web Service Web Application Firewall or Microsoft Azure Application Gateway web application firewall software was the better fit ...
What is your experience regarding pricing and costs for AWS WAF?
AWS WAF is affordable; it depends on the number of rules you apply. The licensing cost for AWS WAF is just pay-as-you-go; it is a service-based model.
Ask a question
Earn 20 points
 

Also Known As

AWS Web Application Firewall
No data available
 

Overview

 

Sample Customers

eVitamins, 9Splay, Senao International
galaxyguitar.com, robertasinc.com, indiarunning.com, comprarenpr.com, idbasolutions.com, newgrip.com
Find out what your peers are saying about AWS WAF vs. SiteLock and other solutions. Updated: November 2026.
921,338 professionals have used our research since 2012.