Imperva DDoS and Cloudflare Web Application Firewall compete in the domain of web threat protection offering features like DDoS protection and WAFs. Cloudflare seems to have the upper hand with its ease of use and affordable pricing.
Features: Imperva focuses on advanced analytics, bot management, and real-time monitoring, appealing for compliance and security management. It provides a robust back office and extensive security options. In comparison, Cloudflare excels with intuitive integration capabilities, a user-friendly configuration, packaged OWASP rulesets, and efficient CDN services. It is favored for straightforward setup and an extensive suite of security measures.
Room for Improvement: Imperva can work on improving reporting and transparency during outages, enhancing caching rules, and reducing false positives in threat detection. Furthermore, users suggest better integration with third-party tools and more comprehensive analytics. Cloudflare could improve the update frequency of the ModSecurity core rule set, enhance documentation for new users, and improve log integration and real-time reporting, alongside offering more customizable administrative privileges.
Ease of Deployment and Customer Service: Both Imperva and Cloudflare support deployment in Public, Private, and Hybrid Clouds. Imperva's customer service receives mixed feedback, particularly regarding response times and first-level support. Cloudflare generally satisfies users with its support, despite some delays, and its intuitive platform simplifies deployment.
Pricing and ROI: Imperva is positioned as a costlier solution, justified by its extensive feature set, particularly for enterprise-level deployments, where ROI depends on the configuration and usage. Cloudflare offers more predictable and affordable pricing, especially at the entry-level, with flexible subscription options, making it appealing for organizations seeking scalable solutions at reasonable costs.
They know how much money they are losing while the system is down, so by increasing the possibility of not having a down website or web application, return on investment can be calculated easily.
The technical support of Cloudflare Web Application Firewall rates between five and seven at maximum.
I would rate the technical support of Imperva DDoS as ten.
The scalability of Cloudflare Web Application Firewall rates between 8 to 9, as it depends upon the use cases and what exactly the client needs.
99% of customers are using the cloud version of Imperva DDoS protection, so they just purchase the new license and scale as needed.
The stability of Cloudflare Web Application Firewall deserves a perfect 10 out of 10.
The stability of Imperva DDoS is very good, as it seems they have a lot of servers around the world.
The product can improve by having more multitenancy capability, which is currently not available.
They need to improve their support because getting a response for basic requests took around 48 hours, which is too long.
Maybe Imperva DDoS could use endpoints to get information about the attacks before they commence from the endpoint level or establish cooperation with endpoint vendors to share this information.
I would rate the pricing of Imperva DDoS as five, where one is very cheap and ten is very expensive.
The custom rules and the geo-redundant geographical rule feature, which allows me to implement geographical rules for customers, add significant value.
The best features of Cloudflare Web Application Firewall are multiple, including the WAF, rate limiter, and bot attack protection.
I have utilized Imperva's Intelligent Traffic Filtering feature. This feature helps me understand how the attack is progressing and what is happening inside the requests to our website.
Cloudflare Web Application Firewall's intuitive dashboard enables users to build powerful rules through easy clicks and also provides Terraform integration. Every request to the WAF is inspected against the rule engine and the threat intelligence curated from protecting over 27 Million websites. Suspicious requests can be blocked, challenged or logged as per the needs of the user while legitimate requests are routed to the destination, agnostic of whether it lives on-premise or in the cloud. Analytics and Cloudflare Logs enable visibility into actionable metrics for the user.
Imperva DDoS is a solution that offers protection for web applications and websites and all their associated business-critical data from cyberattacks. The cloud-based application delivery service helps improve user experiences by improving their performance. Through its security platform, Imperva DDoS also provides DDoS mitigation, a web application firewall, and a global load balancer, and includes a content delivery network — all designed to maximize performance.
Imperva DDoS Features
Imperva DDoS has many valuable key features. Some of the most useful ones include:
Imperva DDoS Benefits
There are several benefits to implementing Imperva DDoS. Some of the biggest advantages the solution offers include:
Reviews from Real Users
Below are some reviews and helpful feedback written by Imperva DDoS users.
PeerSpot user, Etienne W., CDN & Cybersecurity Engineer - Web performance & security at CDN Tech / Ecritel, says, “It is a good solution that allows us to protect websites. It is stable, scalable, quick and easy to use.” He goes on to explain, “WAF protection works almost out-of-the-box. The Anti-DDoS mitigation in less than 1s, I saw it many times in production, I can say it works. CDN has high performances, and the Smart Caching mode is really "smart" (you can do some efficient caching even if you're not a specialist). Its unique interface for managing security performance and ease of use are the most valuable features of this solution."
An IT Senior Manager at an outsourcing company mentions, “The most valuable features are DDoS protection. The Incapsula [Imperva DDoS] environment helps us monitor all the web activity. All the web activity is passed through their WAF cloud services, then that can help us to monitor those activities. That can help protect against DDoS hacking.”
Another PeerSpot reviewer, Ben D., Sales Executive at EVVO LABS, comments, "Imperva Incapsula [DDoS] has many valuable features. One, it protects the top 10 OWASP vulnerability, the open web application software platform, this is standard. Secondly, it protects against broken authentication. As well, it has remote execution of code."
A Solutions Architect at a financial services firm states, “The solution's most valuable aspect is that it is easy to configure. The solution keeps itself up to date itself and there's no customization that we need to do. It makes it extremely easy and cuts back on the amount of work required, and saves us on man-hours.”
We monitor all Web Application Firewall (WAF) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.