No more typing reviews! Try our Samantha, our new voice AI agent.

Barracuda Application Protection vs Fortinet FortiAppSec Cloud comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Barracuda Application Prote...
Ranking in API Security
9th
Average Rating
8.2
Reviews Sentiment
6.8
Number of Reviews
10
Ranking in other categories
No ranking in other categories
Fortinet FortiAppSec Cloud
Ranking in API Security
16th
Average Rating
9.0
Reviews Sentiment
6.6
Number of Reviews
2
Ranking in other categories
CDN (11th), Web Application Firewall (WAF) (26th), Distributed Denial-of-Service (DDoS) Protection (19th), Dynamic Application Security Testing (DAST) (9th)
 

Featured Reviews

Salbu Kumar - PeerSpot reviewer
Manager at Cyvogenix
Application protection has strengthened web security and reduces manual effort for critical services
One area where Barracuda Application Protection could be improved is reporting customization. The dashboards are useful, but more flexible executive-level and technical reporting options would help different teams. Another area is policy tuning for complex applications. While the platform is strong overall, some advanced environments need extra fine-tuning to reduce false positives or adapt custom rules. Deeper integrations with third-party CM and DevSecOps workflows would streamline operations further. Overall, it is a solid platform, but more customization and smoother advanced tuning would make it even better. A simpler onboarding experience for new administrators would be beneficial. The platform has many strong features, but teams without deep WAF experience may need time to become fully comfortable with advanced settings. More AI-driven recommendations for rule tuning, anomaly prioritization, and false positive reduction would help smaller teams operate more efficiently. Another area is pricing flexibility for growing organizations or mid-sized businesses. Overall, the product is strong, but easier management and smarter automation would make it even more attractive.
reviewer2812593 - PeerSpot reviewer
CIO at a financial services firm with 51-200 employees
Advanced threat protection has reduced financial risk and improves application security visibility
The issue I have with Fortinet FortiAppSec Cloud is that the real-time analysis is not robust; I am unable to see all the logs of everything that happened, including what is passive. It only logs when there are suspicious activities, which means if something is not considered suspicious by Fortinet, I will not see the full picture. That is a disadvantage because it will not log unless it identifies an IOC or attacks, meaning I cannot see traffic information in a way that helps build more intelligence. The biggest issue I have with Fortinet FortiAppSec Cloud is that the logging is not as extensive as I would prefer. For instance, if there was an issue two days ago and Fortinet FortiAppSec Cloud did not mark it as a concern, I will not see any information about that, making it challenging to explain to customers if their request did not reach us. It hampers visibility from an API perspective. They need to enhance monitoring and logging to be more extensive and capture even passive activities. The AI integration in Fortinet FortiAppSec Cloud is still new. The generative models are good, but there is much work left to improve. It is not as intelligent as it could be; thus, enhancements around the AI co-assistant would be beneficial. Additionally, logging and monitoring need improvement as I can capture traffic and investigate offline on my Fortinet firewall, including full traffic view, but Fortinet FortiAppSec Cloud currently focuses only on security concerns, which does not give the complete picture.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Barracuda Application Protection has positively impacted my organization by reducing the noise, saving our websites and applications because it sits in front of them, which has been very beneficial, as I measured that impact by noticing fewer incidents, fewer downtimes, and better SLAs."
"Barracuda Application Protection had a positive impact mainly in terms of improved visibility and better handling of automated attack traffic."
"Barracuda Application Protection has positively impacted my organization significantly, as it has improved our security by reducing the risk of attacks such as SQL injections and cross-site scripting while enhancing visibility into security events through monitoring and reporting."
"Barracuda Application Protection has positively impacted my organization by managing traffic well, enhancing access security, operational efficiency, and user experience, leading to customer satisfaction."
"Barracuda Application Protection has been a solid and dependable solution for protecting public-facing applications."
"I find the most valuable features of Barracuda Application Protection to be primarily the embedded AI, which makes our work significantly easier."
"Within the first six months of deployment, we have seen a 60% reduction in security incidents affecting the web application, which directly translated into fewer service interruptions and less time spent on incident response."
"Barracuda Application Protection has significantly improved security posture, reducing the attack surface using WAF plus API protection, automating threats with machine learning-based bot protections, providing zero-trust access to applications, and helping detect and mitigate threats in real-time, resulting in a 50 to 60% reduction in security incidents after deployment."
"We have seen a reduction in incidents and a good return on investment from Fortinet FortiAppSec Cloud, with our return on investment around 60%."
"My favorite Fortinet device is the FortiGate next-gen firewall itself; it is a complete suite with intrusion prevention, intrusion detection, anti-malware, anti-DDoS, and SD-WAN functionalities."
 

Cons

"The reporting functionality is quite poor in its current state."
"Additionally, I can say that deeper API security features such as automation, API discovery, scheme validations, and improved protections for modern environments are needed."
"Barracuda Application Protection can be improved as it still has a lot of false positives in learning mode and complex tuning is needed sometimes."
"The interface of Barracuda Application Protection is generally intuitive but can become complex for advanced configurations."
"Barracuda Application Protection could be improved with a more user-friendly interface to enable all types of people to be able to use it, especially the less technical users."
"One area where Barracuda Application Protection can improve is in policy tuning and ease of configuration, especially for complex application and API-heavy environments."
"Improving the operating system structure, firmware, and overall performance would enhance loading times for devices."
"I think Barracuda Application Protection is already a good product overall, but the user interface could be more intuitive for new administrators during policy configuration or troubleshooting with a more interactive interface."
"Real-time traffic analysis has posed an issue for us because we did not see logs for legitimate traffic."
"The issue I have with Fortinet FortiAppSec Cloud is that the real-time analysis is not robust; I am unable to see all the logs of everything that happened, including what is passive."
report
Use our free recommendation engine to learn which API Security solutions are best for your needs.
902,988 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
25%
Manufacturing Company
14%
Transportation Company
14%
Computer Software Company
11%
Construction Company
26%
Healthcare Company
10%
Manufacturing Company
9%
Financial Services Firm
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise2
Large Enterprise26
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Barracuda Application Protection?
The experience with the pricing, setup cost, and licensing of Barracuda Application Protection is positive, though there is room for improvement.
What needs improvement with Barracuda Application Protection?
When it comes to reporting and analytics by Barracuda Application Protection, I find it adequate, but the reporting is very data-based and requires you to import it into Power BI to generate your o...
What is your primary use case for Barracuda Application Protection?
Barracuda Application Protection is used to protect applications from SQL injection, API abuse, and bot attacks. It solves problems related to DDoS attacks, data leakage, and zero-day threats on a ...
What needs improvement with Fortinet FortiAppSec Cloud?
Real-time traffic analysis has posed an issue for us because we did not see logs for legitimate traffic. A separate license is needed for Fortinet FortiAppSec Cloud to send logs to other cloud serv...
What is your primary use case for Fortinet FortiAppSec Cloud?
Fortinet FortiAppSec Cloud is used as a WAF solution.
What advice do you have for others considering Fortinet FortiAppSec Cloud?
We are a customer running Fortinet FortiAppSec Cloud for both our organization and one for our customer. Three users use Fortinet FortiAppSec Cloud. As administrators, it is easy to maintain. Using...
 

Overview

Find out what your peers are saying about Barracuda Application Protection vs. Fortinet FortiAppSec Cloud and other solutions. Updated: June 2026.
902,988 professionals have used our research since 2012.