Try our new research platform with insights from 80,000+ expert users

Barracuda WAF-as-a-Service vs Imperva Web Application Firewall comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
76
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (13th)
Barracuda WAF-as-a-Service
Average Rating
7.2
Reviews Sentiment
7.4
Number of Reviews
5
Ranking in other categories
Web Application Firewall (WAF) (33rd)
Imperva Web Application Fir...
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
52
Ranking in other categories
Web Application Firewall (WAF) (7th)
 

Featured Reviews

Carlos Alam Hernandez Baruch - PeerSpot reviewer
Fast and secure deployments simplify operations for government and fintech clients
It is a fast and secure DNS. It is very easy to deploy, and my customers are happy with this tool. Additionally, the CDN performance in Mexico is excellent, providing fast service and tools. It offers reliability during high-traffic periods, ensuring no impact on the environment. It helps my clients avoid using on-premise boxes, simplifying operations as they only use the prices on Cloudflare.
Hadar Eshel - PeerSpot reviewer
Easy to install platform with valuable policy management features
We use the product for securing email systems, protecting websites, and safeguarding web-based applications and portals One significant area for improvement in Barracuda WAF-as-a-Service lies in its market positioning and pricing strategy. Additionally, it could operate in a local data center.…
Mitesh D Patel - PeerSpot reviewer
Effectively defends against threats like cross-site scripting (XSS), SQL injection, and others
It does bring value. For example, consider a BFSI customer. Their application is critical and represents their brand. Without a WAF, an attack could take their application down, harming their reputation. It leads to hampering the customer's workflow. With an Imperva WAF, they protect against attacks like DDoS or SQL injection, ensuring their application remains available and customers are happy. That's the main benefit for both the customer and the organization. The impact depends on the customer's use case. If their business primarily operates online, a CDN is beneficial for traffic optimization. Moreover, the integration options depend on the specific use case of our customers. Generally, integration capabilities are good with SIEM (Security Information and Event Management) parts.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Cloudflare allows us to self-host services such as Rocket.Chat and Node-RED, in high-availability mode, thanks to round robin DNS which allows us to share one hostname between our two locations."
"New and innovative way to protect the client's data."
"The most valuable feature is its usability."
"The most valuable features of the solution are performance and security."
"The solution is stable, and the DNS servers are simple to use."
"It's a great product because it's scalable, has great coverage, and is mature with good defenses against DDoS attacks."
"The tool is user-friendly."
"Its most significant benefit to date is the speed with which it refreshes DNS records on the internet once you change it. If you are changing a website or registering a new record, it is very quick."
"It provides an ease of policy management."
"I like its ability to identify known attacks, including DDOS attacks. It's valuable because software must be able to stop known attacks. Application attacks are evolving all the time. When it comes to software-as-a-service, we need to have software that knows about all the latest attacks. It should also protect against major unknown attacks."
"The most valuable features of the solution are it is plug and play, has automated policies, a simple configuration, and is easy to create rules."
"The solution can be used for threat prevention or as a cloud-to-cloud backup system"
"The product's bot protection feature is valuable for our company."
"The solution is very scalable. It is one of the most important features. You can also expand resources and features as well."
"One good thing about Imperva Web Application Firewall is it can be on the cloud and also it can be on-premise."
"It works right out of the box once you integrate the application."
"There is a quick switch between any of the the nodes if something goes wrong, where there's a there's an attack against a specific area. The security setup is reasonably easy. It's not a problem to do setups and rules and integrations. And, yeah, just the the back end team is also very willing to insist if there's questions that that we cannot answer or with these questions that we do have"
"Imperva is a Gartner leader, so its scalability, performance, and features are excellent."
"The valuable features of Imperva WAF include its effective security breach prevention through automatically updating rules."
"The solution integrates seamlessly with other tools and has a good alert mechanism."
"Imperva monitors all traffic, even customer access, to the web application. Then, Imperva uses features like signatures to identify attacks like cross-site scripting or SQL injection."
 

Cons

"The pricing could be improved."
"There should be a specific price list for enterprise-level customers."
"Cloudflare should add more documentation and pricing to the cloud version."
"The solution could work at being less expensive. It costs a lot to use it."
"Eventually, things go sideways and require fixes when it would have been easier to prevent the issue initially."
"It would be good if Cloudflare could have more servers for better traffic routing or an increase in the traffic routed. This is what I'd like to improve in Cloudflare."
"We are a product integrator and reseller, and we would like to have a better partner relationship, similar to a channel sales relationship. Sometimes we are on our own or get diverted by Cloudflare because they have direct sales, which competes with us and makes it difficult to build a relationship with this company since we want to be an MSP or a managed service provider for the solution."
"Cloudflare does not have an on-premise solution. If they had different approaches they could be better suited to accommodate more customers, such as on-premise and hybrid deployments. For example, hybrid deployments would be useful where you could move the traffic from the enterprise to the cloud."
"It's a very specific solution that is only requested for a customer's web code or their global IT policy."
"The stability of the product is an area of concern where improvements are required."
"The solution can improve by bundling Security Operation Center (SOC) with the WAF-as-a-Service, it would provide a lot more value to customers."
"We found it a bit slow when accessing it through the web browser. The URL also exposed the user name and the hashed password. When I log into my Barracuda WAF user portal, I could see the username and the hashed password on the URL itself. So, it is not very secure, and it is important to take that off."
"One significant area for improvement in Barracuda WAF-as-a-Service lies in its market positioning and pricing strategy."
"One potential improvement for Imperva is enhancing its alert system."
"I'd like the option to pick your bot protection."
"Sometimes, support tickets don't get addressed quickly."
"Some of the features should be included in the next release is a file integrating monitoring tool. This feature should be improved."
"The support for the on-premises version needs improvement."
"Their portal is very limited and needs improvement."
"I would like to improve the tool's turnaround time in terms of support."
"There could be some limitations that from the converged infrastructure perspective: when you want to converge with everything and you want Imperva to get there easily because it's not a cloud component. For example, when you want to build servers and you're using OneView to manage your software-defined networks, implementing Imperva right away is not that simple. But if you're doing just a simple cloud infrastructure with servers in there, you're good to go. Also, we are not able, with Imperva, to block by signatures. Imperva by itself needs to be complemented with another service to do URL filtering."
 

Pricing and Cost Advice

"The cost primarily depends on the size of the organization."
"I think the pricing is competitive. I think as far as licensing is concerned it's pretty straightforward because it's based on domain. It's just that sometimes domains could be tricky with some customers."
"A free version of the solution is available."
"The price of the solution is expensive."
"In terms of licensing costs, we don't pay for licensing for Cloudflare. We only establish communication, then for peering, Cloudflare takes care of the cross-connection in different data centers."
"I give the price a five out of ten."
"It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
"The price is reasonable."
"The product is expensive but it offers flexible pricing. It could be affordable."
"It's very difficult for me to give an estimate of the cost. All I know is that we sell the box itself as a service."
"I rate the product's price a five on a scale of one to ten, where one is low, and ten is high. There are no additional costs to be paid apart from the standard licensing fees attached to the solution."
"It is a very affordable solution."
"The price is high compared to other solutions like FortiWeb."
"The cost of this solution depends on the platform."
"The solution's pricing is an issue."
"There are some licenses that you have to buy to use some features. Its price could be better. Price is always important because, at the end of the day, customers have a budget. If you can meet the budget, you can sell, and if you don't, you cannot sell."
"Imperva’s pricing is a bit higher in the market since it offers a full-blown WAF."
"We sell three-year licenses for Imperva Web Application Firewall to our customers. The price is a little expensive."
"Imperva Web Application Firewall's pricing is expensive."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
865,484 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Comms Service Provider
11%
Financial Services Firm
9%
Manufacturing Company
7%
Government
15%
Computer Software Company
14%
Media Company
7%
Comms Service Provider
7%
Financial Services Firm
15%
Computer Software Company
12%
Insurance Company
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What needs improvement with Barracuda WAF-as-a-Service?
One significant area for improvement in Barracuda WAF-as-a-Service lies in its market positioning and pricing strateg...
What is your primary use case for Barracuda WAF-as-a-Service?
We use the product for securing email systems, protecting websites, and safeguarding web-based applications and portals.
Is Citrix ADC (formerly Netscaler) the best ADC to use and if not why?
For ADC, any ADC can do a good job. But in case if you want to add WAF functionality to the same ADC hardware you hav...
DDoS solutions: Any other solutions to consider aside from Radware DDoS Protection Service and F5 Silverline DDoS Protection?
You can have a look to Imperva Cloud WAF, the anti-DDoS mitigation is under 1s and works very well. I observed a lot ...
 

Also Known As

Cloudflare DNS
Barracuda WAF as a Service
No data available
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Salvation Army
BlueCross BlueShield, eHarmony, EMF Broadcasting, GE Healthcare, Metro Bank, The Motley Fool, Siemens
Find out what your peers are saying about Barracuda WAF-as-a-Service vs. Imperva Web Application Firewall and other solutions. Updated: July 2025.
865,484 professionals have used our research since 2012.