Try our new research platform with insights from 80,000+ expert users

Check Point CloudGuard WAF vs Fortinet FortiWeb Cloud WAF-as-a-Service comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
77
Ranking in other categories
CDN (1st), WAN Optimization (4th), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Domain Name System (DNS) Security (5th), Cloud Security Posture Management (CSPM) (12th)
Check Point CloudGuard WAF
Average Rating
8.8
Reviews Sentiment
7.2
Number of Reviews
51
Ranking in other categories
Application Security Tools (5th), Web Application Firewall (WAF) (9th)
Fortinet FortiWeb Cloud WAF...
Average Rating
8.8
Reviews Sentiment
6.7
Number of Reviews
7
Ranking in other categories
Web Application Firewall (WAF) (23rd)
 

Featured Reviews

HA
Owner at Hga consulting
Has helped manage client domains with streamlined access control and threat visibility
I don't know what areas could be improved with Cloudflare WAF; Cloudflare is constantly improving and adding features to their feature set. They're doing a good job, and as far as DNS and support for any domains that I create or my clients create, it's mandatory for me to make sure that they have Cloudflare as their DNS provider. The Cloudflare load balancing capability hasn't really helped in enhancing my website's uptime and resiliency because we don't really get that much traffic; it's mostly remote users, and web hosting is done by a web hosting service. It doesn't pay to try to host your own website.
reviewer2751468 - PeerSpot reviewer
Assistant Manager at a computer software company with 201-500 employees
Robust threat protection improves security and operational efficiency
Areas where Check Point CloudGuard WAF can improve include simple policy tuning, as the protection seems strong, though initial rule tuning can be complex. More guided workflows or templates would help speed up deployment, along with deeper integration with the DevOps pipeline, and while it handles API well, more dedicated API security would add value. In addition, it could be improved with better integration with the DevOps pipeline, more granular reporting, as the dashboards provide good high-level visibility, but sometimes digging into specific attack patterns or trends requires manual effort, and simple tuning of the ML models would be beneficial.
RA
Global Head - DevOps and AIOps Startegist at a manufacturing company with 10,001+ employees
Cloud security has reduced web attack incidents and protects our public applications and APIs
The best features Fortinet FortiWeb Cloud WAF-as-a-Service offers include managed WAF rules, OWASP protection, bot mitigation, and Fortinet threat intelligence. In day-to-day work, I use all of the features: managed WAF rules, OWASP protection, bot mitigation, and Fortinet threat intelligence. This provides a strong baseline security without requiring deep WAF expertise internally. The integration with the broader Fortinet security system is a plus regarding the features. In terms of its impact on our organization, Fortinet FortiWeb Cloud WAF-as-a-Service has been positively protecting us from security threats and automated attacks. With this layered protection against common web and API attacks, we have noticed that the incidents and risks have been reduced to a greater extent.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The technical support is good."
"The most valuable features of the solution are performance and security."
"When using services like Heroku, Cloudflare is very useful for CNAME flattening. I also use it for their end-to-end SSL with TLS authentication on nginx for securing servers."
"Its most significant benefit to date is the speed with which it refreshes DNS records on the internet once you change it. If you are changing a website or registering a new record, it is very quick."
"The features of Cloudflare were found to be more beneficial and led to the decision to utilize it over other options."
"The solution automatically detects and responds to certain types of traffic based on geolocation."
"I get a lot of value from Cloudflare's API because it enables you to build a separate environment inside the solution. You can create a domain for performing test requests before you move to the production environment and connect various domains."
"The web application firewall brought us good security and a view of the accesses/blocks of the entire domain and subdomain that were accessed both by region (country) and IPs."
"Overall, it's a good solution, and it fulfills all our core purposes, providing complete visibility and security."
"The integration with other Microsoft products, especially Visual Studio, is seamless."
"One of the best features of CloudGuard WAF is its user-friendly GUI dashboard."
"It provides security for our customers and our products."
"Check Point CloudGuard Network Security helped reduce the cost of ownership for our web application firewall by 50%."
"The tool helps us to block IPs and applications."
"Machine learning is a valuable tool for this assessment because it allows for a two-phase approach: secure and non-secure."
"With CloudGuard WAF, I have peace of mind, because most of the features are AI-based, and there is not much configuration that needs to be done on my side."
"It is user-friendly and easy to work with."
"The company provides technical support, and they are mostly available 24/7."
"The stability of the solution is excellent."
"I rate the overall solution ten out of ten."
"Fortinet has created a holistic product that integrates features including AI and API protection, with straightforward automation and articulate reporting that even less experienced engineers can use easily."
"With this layered protection against common web and API attacks, we have noticed that the incidents and risks have been reduced to a greater extent."
"It is a secure tool."
"Fortinet FortiWeb offers a variety of protections, including machine learning that helps protect web applications."
 

Cons

"For large enterprises, the pricing is okay. However, the enterprise price for small projects is a bit high. A mid-tier pricing option would be beneficial."
"Latencies are always a problem."
"The Cloudflare load balancing capability hasn't really helped in enhancing my website's uptime and resiliency because we don't really get that much traffic; it's mostly remote users, and web hosting is done by a web hosting service."
"The reporting can definitely be improved to offer a lot more explanation on something that may have happened or has actually happened."
"Technical support is lacking."
"Cloudflare doesn't have a reverse lookup. We can only do a DNS lookup to get the IP address from the hostname. It doesn't work if you want to look up the hostname from an IPA address."
"It would be beneficial for us if Cloudflare could offer a scrubbing solution. This would involve taking a snapshot of my website and keeping it live during a DDoS attack, ensuring uninterrupted service for our users. DDoS attacks are typically short in duration, and having Cloudflare maintain the site's availability from its secure network would enhance the overall user experience. I would appreciate it if Cloudflare could consider implementing this feature. Many organizations already utilize similar capabilities in their CDN platforms, where a static snapshot of the web page is displayed during DDoS attacks. In terms of features, Cloudflare needs to enhance its resilience and stay more focused on adopting new technologies. For instance, solutions like F5 XC Box, Access Solution, and Distributed Cloud Solution have impressive features, and Cloudflare should strive to match and exceed those capabilities. There's a need for improvement in areas like AI-based DDoS attacks and Layer 7 WAF features. Cloudflare should prioritize enhancements in areas such as behavioral DDoS and protection against SQL injection attacks, considering the prevalent trend of public exposure to the internet for business reasons. Overall, Cloudflare needs to invest more in advancing its feature set."
"We're facing challenges due to an upgrade in the machine learning model. The problem arises from some users abusing the APIs, resulting in an influx of suspicious traffic. Cloudflare's learning model mistakenly identifies this traffic as human. Consequently, it assigns it a higher trust score, akin to legitimate human traffic, causing complications in our architecture. Previously, such traffic would have been categorized as suspicious, enabling us to apply appropriate blocking rules. However, we encounter difficulties distinguishing between genuine and suspicious traffic with the new categorization. Despite these challenges, overall, Cloudflare remains the preferred solution compared to Azure, AWS CloudFront, and Google Cloud Armor."
"Check Point CloudGuard Application Security needs to improve updates on integrations. It also needs to incorporate real-time monitoring features."
"When I migrate the traffic from our mobile application to CloudGuard, we are not getting what we expected."
"For now, the product is doing all that I need, however, I need the support of IPv6."
"One of the big problems we found in Check Point, in general, is the support."
"A feature we'd like to see in the future is something that could protect against other attack vectors, with a focus on application protection."
"The user interface can be improved, especially for 1st time user."
"Pricing is high, although possibly justified by the service received."
"Check Point CloudGuard WAF's support is only available in English."
"The only thing I encountered was related to integration, mostly concerning translation."
"The utilization of AI in Fortinet FortiWeb Cloud WAF-as-a-Service still needs to be upgraded and improved."
"I do not have any notes on improvement."
"The usability of the interface could be improved as it is not user-friendly."
"The usability of the interface could be improved as it is not user-friendly."
"Fortinet FortiWeb Cloud WAF-as-a-Service could be improved with better logging capabilities, as many come with less spacing, necessitating a FortiSIM for enhanced functionality."
"Better visibility and more intuitive reporting would be helpful for Fortinet FortiWeb Cloud WAF-as-a-Service."
 

Pricing and Cost Advice

"I believe their performance has improved, but I'd like to refrain from discussing the pricing aspect related to the cloud. The pricing, in my opinion, could be simplified, and I think they should consider reevaluating the pricing for support, as it can be quite high. At times, this cost can make it challenging to choose CARFAGuard or opt for the support."
"The price is reasonable."
"The product's pricing is cheap."
"The solution is expensive when compared to other products but offers unlimited bandwidth."
"That is one of the great features. I was able to access the majority of the features and services for free."
"The pricing depends on the usage, but the cheapest would be around 5,000 USD a month."
"I think the pricing is competitive. I think as far as licensing is concerned it's pretty straightforward because it's based on domain. It's just that sometimes domains could be tricky with some customers."
"We are using the free version."
"Considering all the benefits we've observed, we find the price to be satisfactory."
"Check Point CloudGuard WAF is expensive compared to Azure WAF."
"The pricing is competitive compared to other solutions on the market. So, the licensing cost is average."
"The base solution costs approximately 30,000 euros, with an additional 2,000 euros per year for licenses and support."
"Check Point CloudGuard Application Security's pricing is not friendly."
"I find the pricing to be reasonable."
"The tool's licensing costs are yearly and competitive."
"As Infiniti customers, the pricing is manageable, as we have allowances dedicated to each Check Point product. The price is not as high compared to other options I have dealt with in the past."
Information not available
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
879,768 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Financial Services Firm
10%
Comms Service Provider
10%
Manufacturing Company
8%
Computer Software Company
19%
Manufacturing Company
15%
Financial Services Firm
8%
Security Firm
6%
Energy/Utilities Company
12%
Hospitality Company
9%
Financial Services Firm
9%
Comms Service Provider
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise8
Large Enterprise25
By reviewers
Company SizeCount
Small Business32
Midsize Enterprise19
Large Enterprise16
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise2
Large Enterprise3
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about CloudGuard for Application Security?
We have not had any incidents. We could realize its benefits immediately. We watched and monitored the traffic, and i...
What is your experience regarding pricing and costs for CloudGuard for Application Security?
The setup cost was taken with the head of the department, who handled the pricing and everything.
What needs improvement with CloudGuard for Application Security?
Currently, there is nothing in the areas of Check Point CloudGuard WAF that I would like to see improved or enhanced ...
What is your experience regarding pricing and costs for Fortinet FortiWeb Cloud WAF-as-a-Service?
My experience with the pricing, setup cost, and licensing for Fortinet FortiWeb Cloud WAF-as-a-Service is good, and i...
What needs improvement with Fortinet FortiWeb Cloud WAF-as-a-Service?
Fortinet FortiWeb Cloud WAF-as-a-Service could be improved with better logging capabilities, as many come with less s...
What is your primary use case for Fortinet FortiWeb Cloud WAF-as-a-Service?
Fortinet FortiWeb Cloud WAF-as-a-Service protects our customers' websites, including e-commerce sites, normal website...
 

Also Known As

Cloudflare DNS
Check Point CloudGuard Application Security, CloudGuard Application Security, CloudGuard AppSec
No data available
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Orange España, Paschoalotto
Information Not Available
Find out what your peers are saying about Check Point CloudGuard WAF vs. Fortinet FortiWeb Cloud WAF-as-a-Service and other solutions. Updated: December 2025.
879,768 professionals have used our research since 2012.