Try our new research platform with insights from 80,000+ expert users

Check Point CloudGuard WAF vs Imperva Application Security Platform comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 17, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
6.5
Cloudflare users experienced increased performance, security, and cost-effectiveness, leading to improved loyalty and revenue despite difficult ROI calculations.
Sentiment score
6.8
Check Point CloudGuard WAF offers up to 90% ROI through cost savings, enhanced security, and increased operational efficiency.
Sentiment score
6.3
Users report Imperva's significant ROI, citing cost recovery, DDoS protection, reduced cloud bills, and improved efficiency and compliance.
WordPress security can be tricky, and that's where Cloudflare can be absolutely helpful for small businesses.
For the small project I was working on, using the basic tier provided a huge improvement at zero cost.
In terms of return on investment with Cloudflare, it costs my time to set them up, but basically once they're set up, it's done.
When we are attacked, we can understand how important the solution is.
When you migrate to the cloud, it feels like saving 90% of your time.
Most of the operations happen in the background, so I do not spend much time on it.
They know how much money they are losing while the system is down, so by increasing the possibility of not having a down website or web application, return on investment can be calculated easily.
 

Customer Service

Sentiment score
7.0
Cloudflare's customer service is quick, but technical support feedback is mixed, with improvement needed in responsiveness and detailed assistance.
Sentiment score
6.3
Check Point CloudGuard WAF's customer service is praised for technical expertise, though some note delays and 24/7 availability issues.
Sentiment score
7.2
Imperva's customer service is praised for expertise but criticized for inconsistency, with recent improvements noted by some users.
This would help us address issues promptly, especially during unforeseen events like DDoS attacks.
Cloudflare does not offer hands-on technical support to fix customer problems but rather a self-service model.
I would rate the technical support with Cloudflare as excellent every time I've had to call them.
They need to increase the number of people for 24/7 support.
They were responsive even before we committed to buying their solution.
I also received full technical support, especially during the implementation.
I would rate the technical support of Imperva DDoS as ten.
 

Scalability Issues

Sentiment score
8.1
Users praise Cloudflare for seamless scalability, effective traffic management, easy upgrades, and robust global infrastructure without disruptions.
Sentiment score
7.4
Check Point CloudGuard WAF excels in scalability, flexibility, and multi-cloud adaptability, effectively handling various environments with ease.
Sentiment score
7.9
Imperva Application Security Platform offers strong scalability and reliability, though costs and on-premises flexibility may present challenges.
It is a SaaS tool, but the fact that they have workloads deployed across the world proves that it is a highly scalable tool.
The tool offers very good performance, even during high-traffic periods.
I rate the solution’s scalability an eight out of ten.
If I need to scale, I open a Whatsapp group with the director and the team, and we quickly proceed to do so.
They have sufficient resources, and there are no challenges from a scalability perspective.
99% of customers are using the cloud version of Imperva DDoS protection, so they just purchase the new license and scale as needed.
 

Stability Issues

Sentiment score
7.6
Cloudflare is highly rated for stability and uptime, with few past issues, especially on higher-tier plans.
Sentiment score
7.9
Users find Check Point CloudGuard WAF stable, reliable, and high-performing, with minimal downtime and quickly resolved minor issues.
Sentiment score
7.8
Users find Imperva Application Security Platform reliable and stable, rating its stability highly despite occasional minor issues.
For DDoS protection, I would not recommend Cloudflare.
I rate the solution’s stability an eight out of ten.
The service is very stable with no impacts during high-traffic periods.
It is very stable.
It is very stable, never crashing or giving me an error that I can see.
I did not have any issues in the last three years during which I had more than ten critical services running on CloudGuard.
The stability of Imperva DDoS is very good, as it seems they have a lot of servers around the world.
 

Room For Improvement

Enhancements needed in Cloudflare: analytics, CDN latency, API integration, user support, DNS, pricing, documentation, server coverage, WAF, and cache.
Check Point CloudGuard WAF needs better customization, cost-effectiveness, integration, support, and security features to meet evolving business needs.
Imperva needs UI improvements, competitive pricing, better integration, real-time analytics, and enhanced support for efficiency and transparency.
There's a need for improvement in areas like AI-based DDoS attacks and Layer 7 WAF features.
Despite these challenges, overall, Cloudflare remains the preferred solution compared to Azure, AWS CloudFront, and Google Cloud Armor.
Areas like how assessment, discovery, and payload are dealt with and how it all comes into your organization can be considered when trying to make suggestions to Cloudflare for improvements.
The provider could improve by providing better guidance and support during the configuration process.
Future releases should include better bot mitigation, behavioral anomaly detection, compliance templates, advanced threat intel integration, and streamlined multi-cloud support to boost protection and usability.
A machine learning-based adaptive mode could help the WAF learn over time and auto-tune policies.
Maybe Imperva DDoS could use endpoints to get information about the attacks before they commence from the endpoint level or establish cooperation with endpoint vendors to share this information.
 

Setup Cost

Cloudflare offers scalable pricing, from free to enterprise plans, providing significant value especially for mid-sized companies.
Check Point CloudGuard WAF is valued for robust features, despite complex pricing, offering good value for advanced security.
The Imperva platform's pricing is competitive with advanced features, ranging from $5,000 to $10,000 annually and no setup costs.
That's where Cloudflare shines for smaller businesses – it's ten times cheaper than Akamai.
I find it to be cheap.
The pricing for the service is reasonable, neither excessively cheap nor prohibitively expensive.
It is more expensive than f5, where we purchased everything as bundles, and Check Point costs more, but it is worth the money.
It is less costly than Cloudflare, Fortinet, and other vendors.
I know that its price is relatively expensive compared to other products but it gives benefits that are worth it.
I would rate the pricing of Imperva DDoS as five, where one is very cheap and ten is very expensive.
 

Valuable Features

Cloudflare enhances performance and security with CDN caching, DDoS protection, and an easy-to-use dashboard, benefiting many users.
Check Point CloudGuard WAF provides AI-driven security, ease of deployment, and effective threat prevention for web applications and APIs.
Imperva's platform offers robust security features, user-friendly integration, real-time analytics, and scalability for diverse enterprise protection needs.
The most valuable features of the solution are performance and security.
Techniques like minification and image compression reduce the size of assets, leading to better performance and faster user load times.
The solution has been able to compare it to the market, and I think the product has taken great strides in automating quite a bit of things, and they use a lot of AI.
Upon implementation and evaluation with third-party penetration testing, it meets rigorous security standards required for dealing with financial institutions.
It can protect against zero-day attacks and hidden anomalies.
The solution preemptively blocks zero-day attacks and detects hidden anomalies effectively.
I have utilized Imperva's Intelligent Traffic Filtering feature. This feature helps me understand how the attack is progressing and what is happening inside the requests to our website.
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
77
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (12th)
Check Point CloudGuard WAF
Average Rating
8.8
Reviews Sentiment
7.2
Number of Reviews
49
Ranking in other categories
Application Security Tools (6th), Web Application Firewall (WAF) (9th)
Imperva Application Securit...
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
133
Ranking in other categories
CDN (4th), Web Application Firewall (WAF) (4th), Distributed Denial-of-Service (DDoS) Protection (4th), Bot Management (1st), API Security (2nd)
 

Featured Reviews

HA
Has helped manage client domains with streamlined access control and threat visibility
I don't know what areas could be improved with Cloudflare WAF; Cloudflare is constantly improving and adding features to their feature set. They're doing a good job, and as far as DNS and support for any domains that I create or my clients create, it's mandatory for me to make sure that they have Cloudflare as their DNS provider. The Cloudflare load balancing capability hasn't really helped in enhancing my website's uptime and resiliency because we don't really get that much traffic; it's mostly remote users, and web hosting is done by a web hosting service. It doesn't pay to try to host your own website.
reviewer2751468 - PeerSpot reviewer
Robust threat protection improves security and operational efficiency
Areas where Check Point CloudGuard WAF can improve include simple policy tuning, as the protection seems strong, though initial rule tuning can be complex. More guided workflows or templates would help speed up deployment, along with deeper integration with the DevOps pipeline, and while it handles API well, more dedicated API security would add value. In addition, it could be improved with better integration with the DevOps pipeline, more granular reporting, as the dashboards provide good high-level visibility, but sometimes digging into specific attack patterns or trends requires manual effort, and simple tuning of the ML models would be beneficial.
reviewer1247523 - PeerSpot reviewer
Solution ensures website availability and proactive threat mitigation
Over the seven years, the most valuable features of Imperva DDoS that I have found are related to DDoS attacks, which are a group of attacks, and not all of them can be resolved on the endpoint level before the website. Using the web firewall before the website is a common use case to protect against malicious requests to the website. I have utilized Imperva's Intelligent Traffic Filtering feature. This feature helps me understand how the attack is progressing and what is happening inside the requests to our website. It allows me to granularly grant or deny access to certain parts of our website. This helps when we know our customers and the types of requests that can be sent from them, enabling us to block some malicious requests. Imperva DDoS has User Behavior Analytics and Threat Intelligence on its board, and this helps us to be protected proactively. Imperva DDoS connects to its database of threats, storing whole information about attacks all over the world in one simple engine. Everyone can use this feature, which can connect to this engine and get information about what is going on at the world level. That is the way to be protected at the company's level. The integration capabilities of Imperva DDoS are very easy and simple. We can run it in 2 hours.
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
873,808 professionals have used our research since 2012.
 

Comparison Review

it_user68487 - PeerSpot reviewer
Nov 6, 2013
CloudFlare vs Incapsula: Web Application Firewall
CloudFlare vs Incapsula: Round 2 Web Application Firewall Comparative Penetration Testing Analysis Report v1.0 Summary This document contains the results of a second comparative penetration test conducted by a team of security specialists at Zero Science Lab against two cloud-based Web…
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Comms Service Provider
10%
Financial Services Firm
10%
Manufacturing Company
7%
Computer Software Company
19%
Manufacturing Company
15%
Financial Services Firm
8%
Security Firm
7%
Financial Services Firm
13%
Computer Software Company
12%
Manufacturing Company
9%
Insurance Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise8
Large Enterprise25
By reviewers
Company SizeCount
Small Business30
Midsize Enterprise18
Large Enterprise17
By reviewers
Company SizeCount
Small Business83
Midsize Enterprise25
Large Enterprise61
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about CloudGuard for Application Security?
We have not had any incidents. We could realize its benefits immediately. We watched and monitored the traffic, and i...
What is your experience regarding pricing and costs for CloudGuard for Application Security?
Our experience with pricing, setup costs, and licensing was positive. We did not have any issues.
What needs improvement with CloudGuard for Application Security?
CloudGuard WAF could improve UI simplicity, reduce false positives, and enhance policy management. Future releases sh...
Which Web Application Firewall (WAF) would you recommend? R&S or Imperva?
Imperva is a strong choice, given their security focus and ongoing R&D into the product in areas such as bot mana...
What do you like most about Imperva Incapsula?
We use Imperva DDoS to stop DDoS attacks and reduce the amount of unwanted queries against web services or web scraping.
What is your experience regarding pricing and costs for Imperva DDoS?
The pricing, setup costs, and licensing of Imperva DDoS are reasonable for the amount of technical capabilities provi...
 

Also Known As

Cloudflare DNS
Check Point CloudGuard Application Security, CloudGuard Application Security, CloudGuard AppSec
Imperva Bot Management, Imperva Web Application Firewall, Imperva API Security
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Orange España, Paschoalotto
Hitachi, BNZ, Bitstamp, Moz, InnoGames, BTCChina, Wix, LivePerson, Zillow and more.
Find out what your peers are saying about Check Point CloudGuard WAF vs. Imperva Application Security Platform and other solutions. Updated: November 2025.
873,808 professionals have used our research since 2012.