Try our new research platform with insights from 80,000+ expert users

Barracuda Web Application Firewall vs Cloudflare Web Application Firewall comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
77
Ranking in other categories
CDN (1st), WAN Optimization (4th), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Domain Name System (DNS) Security (5th), Cloud Security Posture Management (CSPM) (12th)
Barracuda Web Application F...
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
45
Ranking in other categories
Web Application Firewall (WAF) (17th)
Cloudflare Web Application ...
Average Rating
8.4
Reviews Sentiment
7.4
Number of Reviews
25
Ranking in other categories
Web Application Firewall (WAF) (6th)
 

Featured Reviews

HA
Owner at Hga consulting
Has helped manage client domains with streamlined access control and threat visibility
I don't know what areas could be improved with Cloudflare WAF; Cloudflare is constantly improving and adding features to their feature set. They're doing a good job, and as far as DNS and support for any domains that I create or my clients create, it's mandatory for me to make sure that they have Cloudflare as their DNS provider. The Cloudflare load balancing capability hasn't really helped in enhancing my website's uptime and resiliency because we don't really get that much traffic; it's mostly remote users, and web hosting is done by a web hosting service. It doesn't pay to try to host your own website.
Shahzad Abid - PeerSpot reviewer
Director Information Technology at College of Physicians & Surgeons Pakistan
Has protected our legacy applications effectively but has required constant manual filtering due to false positives
I assess the effectiveness of the machine learning-driven threat detection in Barracuda Web Application Firewall as sometimes behaving abnormally, often showing me false positive attacks, so I have to fix these attacks from time to time. From a stability point of view, I would definitely rate Barracuda Web Application Firewall a seven out of ten. There is definitely some room for improvement; nothing is perfect in the world. I am not satisfied with the technical support from Barracuda. I am somewhat disappointed with the technical support that I have received so far. Whenever I generate a ticket for my problem, it goes to the Indian support team, and they all the time start with the most junior team member, consuming all my precious time. At the end, I have to close that ticket without any satisfactory solution. I have complained that they should shift my support to any other region because I don't need Indian support; they are simply pathetic and not up to mark. To improve Barracuda Web Application Firewall, customers should be given ongoing training opportunities regarding the product and its features. I am not familiar with many features that are available, only using those which are necessary for my applications. I believe Barracuda must provide clearer product information or training sessions to make it more user-friendly, as sometimes its interface can be rigid and lacking in helpful resources or user tutorials about its features. For it to get closer to a ten, I think advanced reporting is missing because, as I mentioned earlier, there are many false positive events being recorded. Often, when I analyze these attacks, they turn out to be genuine customers or users interacting with my product, but Barracuda tags them as attackers. Reducing false positives must be a priority.
AU
IT Manager at Amla Commerce
Effectively protects clients from automated threats and ensures global security
I cannot say much about areas of improvement for Cloudflare Web Application Firewall because I haven't gone through deep understanding of it, as I am still learning. However, they need to improve their support because getting a response for basic requests took around 48 hours, which is too long. If I took 48 hours to answer a request at my company, it would be a tough time to see or address the issue, and it would be frustrating.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Even when there is a high load on our servers, Cloudflare is able to cache the data and serve it to users, ensuring they can still access the website."
"We're using dynamic components to build flexible pages to create and manage Git merge requests for code and reviews."
"Cloudflare consolidates various capabilities into one product, streamlining processes."
"The most valuable feature of the solution is external DNS. It is also very secure. They have their own main server and once you configure it, the product takes care of everything. There are no issues in resolving IPs and low latency is also present."
"Many websites require an SSL certificate because they sell stuff and want SSL. Cloudflare comes with an SSL certificate built in. It's automatic. You sign yourself up for Cloudflare, and an SSL certificate automatically protects your website. You don't necessarily need a certificate if you have a connection between your website and your host, the server, Cloudflare, and the host."
"Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications."
"The most valuable feature is its usability."
"Centralized, full-featured DNS."
"The most valuable feature of this solution is the simplicity of configuration."
"The customer service and support are exceptional, and I would give them a ten out of ten."
"The most valuable feature is the ease of use and the signature base."
"Some of the most valuable features are the ease of deployment, the Barracuda support, the easy-to-use console, and the granularity of the reports."
"Data leak prevention is very important and ensures protection against attacks."
"Has a good dashboard."
"The solution's most valuable feature is that it actually protects our website, and it provides all the required security functions."
"The initial setup is pretty straightforward, especially if you enlist assistance."
"Caching is the most valuable feature of Cloudflare Web Application Firewall."
"Cloudflare is cheaper compared to Azure WAF, which I have considered before."
"The Cloudflare Web Application Firewall's most valuable feature is its ease of configuration."
"Does a good job preventing web application attacks."
"We like that there's load balancing, firewall capabilities, DDoS protection, et cetera, all covered by Cloudflare."
"The initial setup process is simple."
"I'm highly satisfied. It's remarkably user-friendly, enabling me to quickly identify issues, and deploy solutions, and it offers the necessary features."
"The stability of Cloudflare Web Application Firewall deserves a perfect 10 out of 10."
 

Cons

"The documentation could improve for Cloudflare DNS."
"Even if I wanted to, I wouldn't be able to buy Cloudflare in my country."
"Areas like how assessment, discovery, and payload are dealt with and how it all comes into your organization can be considered when trying to make suggestions to Cloudflare for improvements."
"We have noticed multiple instances where Cloudflare falsely indicates that our servers are down, even when there is no actual load on them. This makes it challenging for us to identify the exact issue."
"There might be helpful if there was some web application firewall feature."
"One area of improvement is in the Access Rules. Hypothetically, if we wanted to block or challenge traffic outside of the United States, the only way to currently do that (as far as I know) is to enter every single country outside of the United States. That could be a labor intensive job. A solution could be to enable users to create a rule where traffic is only allowed within a certain country."
"Latencies are always a problem."
"Technical support is not well developed. While there are good engineers, Cloudflare does not offer hands-on technical support to fix customer problems but rather a self-service model."
"I think the main area for improvement in this product is learning it, as can be seen when comparing it to the F5 web application firewall. F5 has a very powerful learning phase when you start using your web application firewall against your site. Barracuda has something like this, but not with the same functionality from my point of view."
"An area for improvement in Barracuda Web Application Firewall is attack identification. Other banks identified attacks and tracked logs that the solution wasn't able to identify because of its ready-made rules pre-deployed by the vendor. My organization raised this issue with the technical support team. Another area to improve in Barracuda Web Application Firewall is its service desk. The team resorted to stonewalling because they couldn't accept that a feature was missing in the solution, and it was only after a lot of drilling down that the service desk team accepted that, and would be adding that feature in the future. My organization had to submit a report to the Reserve Bank of India with information on the logs identified and the attacks that happened, and that there was a failure on the part of the Barracuda Web Application Firewall. The Reserve Bank of India conducts a tri-monthly cyber risk audit in all Indian banks. Even smaller banks identified and caught attacks that my organization wasn't able to do, so I was looking into other solutions that competitor banks could be using because Barracuda Web Application Firewall failed to identify some of the attacks."
"There are issues when upgrading firewalls and we experience different issues across customers."
"I faced an issue when Barracuda decided not to support Azure Stack Hub anymore, which was a significant issue as we had many customers using it on that platform."
"I would like to see better controlling of the traffic."
"I have found F5 more stable than Barracuda Web Application Firewall. They should improve the stability."
"In the Barracuda Web Application Firewall, there should be more affordable options for WAF as a service."
"I would like to see a native multi-cloud cover."
"It would be ideal if the solution offered better log integration and more integration with different platforms."
"The notification part could be improved. It's very much connected to Web Application Firewall, rate-limiting, and DDoS protection."
"The product can improve by having more multitenancy capability, which is currently not available."
"A key challenge arises when dealing with numerous integrations with HVAC systems. Depending on the specifics, there might be some configuration mismatches, which necessitate specific support."
"They have some limitations with third-party integrations."
"I have experienced some difficulties with Cloudflare's support as a customer based in India."
"Its stability could be better."
"The solution's learning curve can still be further reduced"
 

Pricing and Cost Advice

"The price of the solution is expensive."
"For Cloudflare, I recommend it heavily for small businesses with revenue under a couple of million dollars. Onboarding is easy, and they even have a free plan. This makes it simple for businesses in the $100,000-$500,000 range to try it out and see its value, allowing them to scale up their infrastructure as needed."
"The solution has many features but there are ones that you need to pay for. Sometimes you have to find out which is available for free and which you have to pay for."
"The price is reasonable."
"We don't have any issues with the price."
"A free version of the solution is available."
"We are using the free version."
"In terms of licensing costs, we don't pay for licensing for Cloudflare. We only establish communication, then for peering, Cloudflare takes care of the cross-connection in different data centers."
"The product is expensive."
"Cost is a bit on the higher side. Big companies can afford it."
"Barracuda costs us $8,000 per year. Barracuda costs $20,000 for a full subscription, when you try to protect multi-site infrastructure, in different geographical zones and for different data centers. If you have only one site, Barracuda will be cheaper."
"The solution is based on a licensing model and might be $360 for the hybrid version."
"The pricing is reasonable."
"Our licensing fees are paid annually and the cost is between €600 and €800 (approximately $665.00 to $885.00 USD)."
"The price of this solution is okay."
"They have competitive pricing."
"Cloudflare offers different types of subscriptions for businesses, enterprises, and personal users, and the pricing is negotiable."
"It starts at $20 and can easily go up to $200 monthly"
"What's my experience with pricing, setup cost, and licensing? I believe the pricing is not the best, but it's reasonable and acceptable. We also use the McAfee system in parallel. In terms of pricing, its okay - not great, but not bad either. It falls in the middle, which is acceptable. In terms of support licensing, last time, we were searching for a solution, and we considered products from resellers rather than directly from the cloud provider. However, the pricing we encountered was exceptionally high. As a result, we are inclined to select support from the reseller."
"Cloudflare Web Application Firewall is more affordable than other solutions."
"The annual licensing fee is $10,000 USD."
"The solution is expensive."
"It is not too pricey."
"We pay $210 per month for CloudFlare WAF."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
879,768 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Financial Services Firm
10%
Comms Service Provider
10%
Manufacturing Company
8%
Computer Software Company
13%
Financial Services Firm
9%
Manufacturing Company
8%
University
7%
Computer Software Company
15%
Manufacturing Company
9%
Financial Services Firm
8%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise8
Large Enterprise25
By reviewers
Company SizeCount
Small Business25
Midsize Enterprise7
Large Enterprise11
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise6
Large Enterprise6
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about Barracuda Web Application Firewall?
It significantly improved our overall web security posture, addressing intrusions and enhancing control over web URLs...
What is your primary use case for Barracuda Web Application Firewall?
I am not using the API protection feature right now because I don't host any APIs through Barracuda Web Application F...
What is your experience regarding pricing and costs for Barracuda Web Application Firewall?
At the time I was acquiring Barracuda Web Application Firewall, I found it costly compared to other products. To over...
What do you like most about Cloudflare Web Application Firewall?
The product has a valuable security control functionality.
What needs improvement with Cloudflare Web Application Firewall?
I don't really use the rule-based logic feature or utilize the WAF's ability to scale as a cloud-based service. I don...
 

Also Known As

Cloudflare DNS
No data available
Cloudflare WAF
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Oracle, CBS, Pioneer, Hyundai, Publix, Barnes Noble, Calzedonia, Nordstrom, Samsung, Nascar
crunchbase, udacity, marketo, okcupid, zendesk
Find out what your peers are saying about Barracuda Web Application Firewall vs. Cloudflare Web Application Firewall and other solutions. Updated: December 2025.
879,768 professionals have used our research since 2012.