Try our new research platform with insights from 80,000+ expert users

Check Point CloudGuard WAF vs Imperva Web Application Firewall comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
76
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (13th)
Check Point CloudGuard WAF
Average Rating
8.8
Reviews Sentiment
7.6
Number of Reviews
48
Ranking in other categories
Application Security Tools (7th), Web Application Firewall (WAF) (10th)
Imperva Web Application Fir...
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
52
Ranking in other categories
Web Application Firewall (WAF) (7th)
 

Featured Reviews

Carlos Alam Hernandez Baruch - PeerSpot reviewer
Fast and secure deployments simplify operations for government and fintech clients
It is a fast and secure DNS. It is very easy to deploy, and my customers are happy with this tool. Additionally, the CDN performance in Mexico is excellent, providing fast service and tools. It offers reliability during high-traffic periods, ensuring no impact on the environment. It helps my clients avoid using on-premise boxes, simplifying operations as they only use the prices on Cloudflare.
Dialungana Malungo - PeerSpot reviewer
Protects our web applications and APIs and has a very low false positive rate
CloudGuard WAF is a very straightforward solution. I do not have to worry about signatures. Most of the solutions that are out there are mainly based on signatures, and I have to do a lot of maintenance to get the signature updates, and sometimes, due to a lack of resources, I am not able to do so. With CloudGuard WAF, I have peace of mind, because most of the features are AI-based, and there is not much configuration that needs to be done on my side. Once set, I only go to CloudGuard WAF to check. I do not have to worry about signatures or updates. Everything is done perfectly, and I have a sense of peace because I know our applications are safe. It is very important for us that CloudGuard WAF protects our applications against threats without relying on signatures. That is definitely one of the key features I need.
Mitesh D Patel - PeerSpot reviewer
Effectively defends against threats like cross-site scripting (XSS), SQL injection, and others
It does bring value. For example, consider a BFSI customer. Their application is critical and represents their brand. Without a WAF, an attack could take their application down, harming their reputation. It leads to hampering the customer's workflow. With an Imperva WAF, they protect against attacks like DDoS or SQL injection, ensuring their application remains available and customers are happy. That's the main benefit for both the customer and the organization. The impact depends on the customer's use case. If their business primarily operates online, a CDN is beneficial for traffic optimization. Moreover, the integration options depend on the specific use case of our customers. Generally, integration capabilities are good with SIEM (Security Information and Event Management) parts.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature of Cloudflare is the GUI. You are able to control the solution very well through the interface. There is a lot of functionality that is embedded in the service."
"The technical support is good."
"The solution is very good at mitigating threats."
"Cloudflare DNS is widely used, and it's good for websites. If we use Cloudflare DNS and update one record, it updates in their office instantly."
"The solution provides good load balancing and protection against DDoS attacks."
"Many websites require an SSL certificate because they sell stuff and want SSL. Cloudflare comes with an SSL certificate built in. It's automatic. You sign yourself up for Cloudflare, and an SSL certificate automatically protects your website. You don't necessarily need a certificate if you have a connection between your website and your host, the server, Cloudflare, and the host."
"Easier http to https redirect using page rules"
"Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications."
"It offers high performance and improved productivity for users."
"They offer free trials, which is quite appreciative and grabs more attention from new users and businesses."
"I find the configuration and real-time monitoring features valuable."
"It seamlessly protects through machine learning, giving us visibility into potential attacks and where they come from."
"Overall, the product is excellent."
"By using a cloud application security solution, our company can save costs by reducing the need for additional security hardware and software and improving operational efficiency."
"Whenever there was a new CVE, Check Point CloudGuard WAF used to block them."
"Machine learning is a valuable tool for this assessment because it allows for a two-phase approach: secure and non-secure."
"The solution integrates seamlessly with other tools and has a good alert mechanism."
"Protection is the best solution since it has profile functionality."
"It is easy to use and has good security."
"Compared to other web application firewalls in the market, Imperva does things in the most accurate way."
"It has threat intelligence and we are using Incapsula. With threat intelligence, we can separate HTTP and HTTPS traffic. We can use Incapsula to send all the threat intelligence to the WAF."
"Imperva has a complete picture of how the applications are utilizing it. It is handy. DDoS is good. It has an internally managed database. It is very easy to integrate. We have integrated it with SIEM services."
"There are many features. There is ease of deployment. You can deploy the Imperva Web Application Firewall in two to three minutes. After that, you have to set the policies. For setting policies, you have toggle buttons. You can turn something on or off."
"There are a number of features that are valuable such as the account takeover and various antivirus features."
 

Cons

"The integration of LLMs on the dashboard is something that is needed in the tool."
"Sometimes their more advanced caching tools can cause higher first-byte times and problems with JavaScript."
"Latencies are always a problem."
"Cloudflare could offer a better view or maybe dashboards of the main resources used in the client."
"The documentation could improve for Cloudflare DNS."
"The timing aspect can lead to it being considered overpriced. This is a particular concern we have with Cloudflare, as they may struggle with accurately detecting the client."
"I think the APIs are a little bit hard for us to work with. The APIs could be more open so that we could integrate better with our SolarWinds or our monitoring solution."
"There are some issues with the CDN services."
"Support could be improved, particularly in terms of availability."
"We would like to have a solution of this type for the administration of applications from mobile devices."
"There are occasions when it interfaces with other systems, leading to a loss of visibility."
"It doesn't detect user activity like some of its competitors. It's not a vulnerability, but it's a legitimate activity that it doesn't detect. It only detects vulnerabilities or misconfigurations."
"We would like the solution to be more economical since it is not accessible to all clients."
"A feature we'd like to see in the future is something that could protect against other attack vectors, with a focus on application protection."
"I have encountered issues with Check Point CloudGuard Application Security's technical support. It also has missing configuration features."
"For now, the product is doing all that I need, however, I need the support of IPv6."
"I would like the solution to improve its support response time."
"I think that better bot protection is needed in this solution."
"The tool needs to improve CPU and storage memory."
"Imperva Web Application Firewall is a good system, but we found that the visibility of the diverse-path server, e.g. where the traffic is coming from, the different IPs, etc., needs improvement."
"The Imperva Web Application Firewall automations are good, but there is still room for improvement with them."
"The reporting is missing some features, such as: only two export formats, and the time period does not include the last day, week, year."
"If they can bring in generative AI features, that would be useful."
"The signature updates could be faster. Sometimes we have to upload signatures to the Imperva portal for checking and analysis before we can use them."
 

Pricing and Cost Advice

"The solution is expensive when compared to other products but offers unlimited bandwidth."
"When you compare Cloudflare DNS to other solutions, such as Akamai, the price is reasonable."
"The product's pricing is cheap."
"I believe their performance has improved, but I'd like to refrain from discussing the pricing aspect related to the cloud. The pricing, in my opinion, could be simplified, and I think they should consider reevaluating the pricing for support, as it can be quite high. At times, this cost can make it challenging to choose CARFAGuard or opt for the support."
"For Cloudflare, I recommend it heavily for small businesses with revenue under a couple of million dollars. Onboarding is easy, and they even have a free plan. This makes it simple for businesses in the $100,000-$500,000 range to try it out and see its value, allowing them to scale up their infrastructure as needed."
"The solution has many features but there are ones that you need to pay for. Sometimes you have to find out which is available for free and which you have to pay for."
"We don't have any issues with the price."
"The product's pricing is minimal compared to other products."
"Check Point CloudGuard Application Security's pricing is comparable to other products in the market."
"I work for an Indian banking client. In India, companies are on a budget. The company liked Check Point very much, but it was a little bit costly compared to FortiWeb. However, it had more features compared to FortiWeb."
"As Infiniti customers, the pricing is manageable, as we have allowances dedicated to each Check Point product. The price is not as high compared to other options I have dealt with in the past."
"The sales team or account managers from Check Point are top-notch. As I am using other products as well, my pricing was competitive compared to others."
"The pricing is competitive compared to other solutions on the market. So, the licensing cost is average."
"Check Point CloudGuard Application Security's pricing is not friendly."
"It is not cheap, but it is worth it."
"The tool's licensing costs are yearly and competitive."
"The pricing is somewhat expensive. It is actually a huge investment when compared to other countries."
"The tool is expensive."
"The price is high compared to other solutions like FortiWeb."
"Imperva Web Application Firewall's pricing is expensive."
"Imperva Web Application Firewall price is higher compared to other solutions. However, everything is included in the price."
"It is a very affordable solution."
"It's an excellent product, but it can be very costly."
"Everybody complains about the price of this solution."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
867,370 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Comms Service Provider
11%
Financial Services Firm
10%
Manufacturing Company
7%
Computer Software Company
20%
Manufacturing Company
15%
Financial Services Firm
10%
Government
6%
Financial Services Firm
16%
Computer Software Company
11%
Insurance Company
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business45
Midsize Enterprise8
Large Enterprise25
By reviewers
Company SizeCount
Small Business25
Midsize Enterprise18
Large Enterprise16
By reviewers
Company SizeCount
Small Business27
Midsize Enterprise10
Large Enterprise19
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about CloudGuard for Application Security?
We have not had any incidents. We could realize its benefits immediately. We watched and monitored the traffic, and i...
What is your experience regarding pricing and costs for CloudGuard for Application Security?
I don't know about the pricing, setup cost, or licensing for Check Point CloudGuard WAF, as I don't manage costs.
What needs improvement with CloudGuard for Application Security?
Check Point CloudGuard WAF can be improved; initially, the setup is very complicated, and there's not a lot of docume...
Is Citrix ADC (formerly Netscaler) the best ADC to use and if not why?
For ADC, any ADC can do a good job. But in case if you want to add WAF functionality to the same ADC hardware you hav...
DDoS solutions: Any other solutions to consider aside from Radware DDoS Protection Service and F5 Silverline DDoS Protection?
You can have a look to Imperva Cloud WAF, the anti-DDoS mitigation is under 1s and works very well. I observed a lot ...
 

Also Known As

Cloudflare DNS
Check Point CloudGuard Application Security, CloudGuard Application Security, CloudGuard AppSec
No data available
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Orange España, Paschoalotto
BlueCross BlueShield, eHarmony, EMF Broadcasting, GE Healthcare, Metro Bank, The Motley Fool, Siemens
Find out what your peers are saying about Check Point CloudGuard WAF vs. Imperva Web Application Firewall and other solutions. Updated: September 2025.
867,370 professionals have used our research since 2012.