Cloudflare Web Application Firewall vs Fortinet FortiWeb comparison

Cancel
You must select at least 2 products to compare!
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Cloudflare Web Application Firewall and Fortinet FortiWeb based on real PeerSpot user reviews.

Find out in this report how the two Web Application Firewall (WAF) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Cloudflare Web Application Firewall vs. Fortinet FortiWeb Report (Updated: March 2024).
765,234 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"It is configurable via API.""It is a SaaS solution unlike much of the competition.""It protects web applications efficiently.""The initial setup process is simple.""We extensively use the solution every day. The solution is very stable; we haven’t seen any glitches.""The security features are valuable. The particular feature we use is called OWASP.""Someone with a basic understanding of networking and security will be able to implement the firewall's basic features within 15 minutes.""Caching is the most valuable feature of Cloudflare Web Application Firewall."

More Cloudflare Web Application Firewall Pros →

"The GUI is user-friendly and it's easy to understand how to manage it.""The support services, performance, and pricing are all valuable features. The performance is excellent.""L-7 protection makes possible to protect legacy/not up-to-date servers/applications without changing the application code.""It can scale well.""SSL Offloading simplifies the public certificate handling and brings additional protection features.""It offers some feedback and suggestions that guide our system development while helping our vendors to update their applications and fix any issues or bugs.""The most important feature of this solution is protection from attack.""It's the extra security that is the most valuable feature. You have insight into your traffic. There are some great insights into what utilities hackers are trying to exploit. It blocks a lot of stuff from the internet."

More Fortinet FortiWeb Pros →

Cons
"Its stability could be better.""Their documentation could be better. They don't have documentation that explains everything well. They have documentation for everything you're looking for, but they lack a single piece of documentation to tie everything together. As a new user or beginner, it took us a little bit of time to figure out how to put all these things in place.""They have some limitations with third-party integrations.""I have experienced some difficulties with Cloudflare's support as a customer based in India.""It would be ideal if the solution offered better log integration and more integration with different platforms.""The platform's control features related to real-time authentication and response time need improvement.""Cloudflare Web Application Firewall should improve visibility for a customer.""A key challenge arises when dealing with numerous integrations with HVAC systems. Depending on the specifics, there might be some configuration mismatches, which necessitate specific support."

More Cloudflare Web Application Firewall Cons →

"I had some small problems when I was upgrading firmware. After the upgrade, some of my certificates were deleted.​""The support side of things can be improved.""The Layer 7 DDoS attacks need improvement, it could be better.""If the price was lower, it would be a bit more attractive, as an option, to the customers.""In terms of performance, it needs to be more robust.""No solution is 100% secure and the security could always be worked on.""It may be better if it were easier to create roles.""Fortinet WAF came out recently, and there is not much feedback about customer experience. For each project, customers ask about the scenarios and references of the customers who have implemented this solution, which we don't have. They need to simplify the customer experience and provide more information so that we can propose Fortinet Fortiweb as a WAF solution to customers and convince them. They need to improve their service and training. We need good training to implement and use it properly and know more about it. We still don't know much about Fortinet WAF. We didn't get any proper training sessions. Other vendors like Cisco, Palo Alto, Check Point, and Barracuda provide such sessions. Whenever we receive a request from a customer for this solution, we just give the price. We don't propose this solution because we don't know much about it. We propose whatever we are familiar with and what is supported."

More Fortinet FortiWeb Cons →

Pricing and Cost Advice
  • "The pricing model is very straightforward compared to the competition. You just pay per month for the product and usage."
  • "We pay $210 per month for CloudFlare WAF."
  • "The annual licensing fee is $10,000 USD."
  • "Cloudflare offers different types of subscriptions for businesses, enterprises, and personal users, and the pricing is negotiable."
  • "The solution is expensive."
  • "What's my experience with pricing, setup cost, and licensing? I believe the pricing is not the best, but it's reasonable and acceptable. We also use the McAfee system in parallel. In terms of pricing, its okay - not great, but not bad either. It falls in the middle, which is acceptable. In terms of support licensing, last time, we were searching for a solution, and we considered products from resellers rather than directly from the cloud provider. However, the pricing we encountered was exceptionally high. As a result, we are inclined to select support from the reseller."
  • "The solution's pricing option needs to be more transparent for enterprise clients."
  • "Cloudflare Web Application Firewall is more affordable than other solutions."
  • More Cloudflare Web Application Firewall Pricing and Cost Advice →

  • "Cheaper than others."
  • "FortiWeb can be purchased in VM mode for a lower price and the same features."
  • "Keep a loose margin between your actual bandwidth and the product sizing when using hardware appliances. Only virtual machines are upgradable to larger sizes."
  • "​It really pays off to buy licences for multiple years​."
  • "​The pricing is reasonable."
  • "The license cost depends on the size of the box or the size of the solution. It can go from €200 Euros to a few hundred thousand Euros a year depending on your size."
  • "The solution gives us the best price to performance ratio."
  • "The costs are standard. We pay around $1,600 yearly."
  • More Fortinet FortiWeb Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
    765,234 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:The product has a valuable security control functionality.
    Top Answer:Cloudflare Web Application Firewall is more affordable than other solutions.
    Top Answer:The platform's control features related to real-time authentication and response time need improvement.
    Top Answer:The product has a very user-friendly dashboard.
    Top Answer:The product is expensive. I rate the pricing a ten out of ten.
    Top Answer:The software's support services could be better compared to Sophos.
    Ranking
    Views
    8,743
    Comparisons
    6,350
    Reviews
    10
    Average Words per Review
    376
    Rating
    8.2
    Views
    9,816
    Comparisons
    7,110
    Reviews
    21
    Average Words per Review
    637
    Rating
    7.8
    Comparisons
    Also Known As
    Cloudflare WAF
    Learn More
    Overview

    Cloudflare Web Application Firewall's intuitive dashboard enables users to build powerful rules through easy clicks and also provides Terraform integration. Every request to the WAF is inspected against the rule engine and the threat intelligence curated from protecting over 27 Million websites. Suspicious requests can be blocked, challenged or logged as per the needs of the user while legitimate requests are routed to the destination, agnostic of whether it lives on-premise or in the cloud. Analytics and Cloudflare Logs enable visibility into actionable metrics for the user.

    Fortinet FortiWeb is a Web Application Firewall (WAF) that protects your web applications and APIs from attacks targeting known as well as unknown vulnerabilities. As the surface of your web applications evolves with each change of existing features and deployment of new features, your APIs are left exposed. Fortinet FortiWeb provides the board protection capabilities required to protect web applications without sacrificing performance or manageability.

    Fortinet FortiWeb is an automatic, advanced multi-layer solution that provides secure protection by discerning irregular behavior and distinguishing between malicious and benign anomalies. In addition, the approach delivers powerful bot mitigation capacities which authorize harmless bots to connect while blocking malicious bot activity securely. Regardless of where an application is hosted, Fortinet FortiWeb will safeguard business applications by providing deployment options, such as virtual machines, hardware appliances, and containers that can be deployed in the data center, cloud environments, or in the cloud-native SaaS solution.

    Fortinet FortiWeb Features and Benefits

    APIs and web applications have become integral to the rising demand for business-critical applications. Now more than ever, businesses are in need of an automatic firewall that will provide them with security, without sacrificing performance or reliability. Fortinet FortiWeb offers a variety of features and benefits, including:

    • Security fabric integration: FortiWeb integrates with other Fortinet solutions to provide advanced protection from persistent threats.

    • Proven web application and API protection: FortiWeb safeguards applications from all DDOS attacks, malicious bot attacks, and OWASP Top-10 threats.

    • Advanced visual analytics: FortiWeb offers a unique visual reporting tool that other WAF solutions don’t by providing a detailed analysis of attack elements and sources.

    • Hardware-based acceleration: With fast and secure traffic encryption and decryption, FortiWeb provides best-in-class WAF protection.

    • ML-based threat detection: FortiWeb delivers multi-layer machine learning defense protection to defend against zero-day attacks and reduce false positives.

    • False positive mitigation tools: Reduce daily management of policies through advanced tools to guarantee only unwanted traffic is blocked.

    Reviews from Real Users

    Fortinet FortiWeb offers an industry-leading Web Application Firewall, and users are satisfied with it for a number of reasons, including the ability to control everything from the dashboard and the PCI-compliant reports it offers.

    Carlos P., director of business and digital transformation at SERNIVEL3, notes, "You have the ability to control everything from one single dashboard."

    A director at a tech service company, says, "Banks have to be compliant with PCI and other things, and FortiWeb is absolutely amazing in terms of providing these reports. Otherwise, they will have to spend a lot of time on them."

    Sample Customers
    crunchbase, udacity, marketo, okcupid, zendesk
    Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG
    Top Industries
    REVIEWERS
    Computer Software Company22%
    Financial Services Firm22%
    Manufacturing Company11%
    Insurance Company11%
    VISITORS READING REVIEWS
    Educational Organization24%
    Computer Software Company14%
    Financial Services Firm7%
    Comms Service Provider6%
    REVIEWERS
    Financial Services Firm26%
    Comms Service Provider21%
    Computer Software Company18%
    Government8%
    VISITORS READING REVIEWS
    Educational Organization37%
    Computer Software Company12%
    Comms Service Provider6%
    Financial Services Firm6%
    Company Size
    REVIEWERS
    Small Business65%
    Midsize Enterprise12%
    Large Enterprise24%
    VISITORS READING REVIEWS
    Small Business23%
    Midsize Enterprise35%
    Large Enterprise42%
    REVIEWERS
    Small Business51%
    Midsize Enterprise23%
    Large Enterprise27%
    VISITORS READING REVIEWS
    Small Business18%
    Midsize Enterprise46%
    Large Enterprise35%
    Buyer's Guide
    Cloudflare Web Application Firewall vs. Fortinet FortiWeb
    March 2024
    Find out what your peers are saying about Cloudflare Web Application Firewall vs. Fortinet FortiWeb and other solutions. Updated: March 2024.
    765,234 professionals have used our research since 2012.

    Cloudflare Web Application Firewall is ranked 7th in Web Application Firewall (WAF) with 16 reviews while Fortinet FortiWeb is ranked 4th in Web Application Firewall (WAF) with 82 reviews. Cloudflare Web Application Firewall is rated 8.2, while Fortinet FortiWeb is rated 8.0. The top reviewer of Cloudflare Web Application Firewall writes "A cloud solution for web application firewall protection with rate-limiting, managed, and custom firewall rules". On the other hand, the top reviewer of Fortinet FortiWeb writes "Cost-effective, easy to configure, and works very well as a single solution for multiple environments". Cloudflare Web Application Firewall is most compared with Microsoft Azure Application Gateway, Akamai App and API Protector, AWS WAF, Azure Front Door and NGINX App Protect, whereas Fortinet FortiWeb is most compared with F5 Advanced WAF, Fortinet FortiADC, AWS WAF, Azure Web Application Firewall and Barracuda Web Application Firewall. See our Cloudflare Web Application Firewall vs. Fortinet FortiWeb report.

    See our list of best Web Application Firewall (WAF) vendors.

    We monitor all Web Application Firewall (WAF) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.