Try our new research platform with insights from 80,000+ expert users

Cloudflare Web Application Firewall vs Imperva Web Application Firewall comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare Web Application ...
Ranking in Web Application Firewall (WAF)
6th
Average Rating
8.4
Reviews Sentiment
7.5
Number of Reviews
24
Ranking in other categories
No ranking in other categories
Imperva Web Application Fir...
Ranking in Web Application Firewall (WAF)
7th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
52
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of June 2025, in the Web Application Firewall (WAF) category, the mindshare of Cloudflare Web Application Firewall is 7.5%, up from 6.4% compared to the previous year. The mindshare of Imperva Web Application Firewall is 5.8%, down from 6.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Web Application Firewall (WAF)
 

Featured Reviews

SachidDoshi - PeerSpot reviewer
Offers a huge signature repository and is superiorly effective in mitigating DDoS attacks
The solution's learning curve can still be further reduced, which presently stands at two or three months. The product has a custom rule set that users can modify and manifest as needed. The vendor can probably shorten the learning curve using cutting-edge technologies like AI. The solution provider can also work around the web applications and identify the toolset that needs to be implemented to deploy the solution in less time. The vendor has launched a SASE product that can function with Cloudflare Web Application Firewall, but many improvements are needed in terms of features, such as the web filtering feature, and CASB has not yet been added.
Mitesh D Patel - PeerSpot reviewer
Effectively defends against threats like cross-site scripting (XSS), SQL injection, and others
It does bring value. For example, consider a BFSI customer. Their application is critical and represents their brand. Without a WAF, an attack could take their application down, harming their reputation. It leads to hampering the customer's workflow. With an Imperva WAF, they protect against attacks like DDoS or SQL injection, ensuring their application remains available and customers are happy. That's the main benefit for both the customer and the organization. The impact depends on the customer's use case. If their business primarily operates online, a CDN is beneficial for traffic optimization. Moreover, the integration options depend on the specific use case of our customers. Generally, integration capabilities are good with SIEM (Security Information and Event Management) parts.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The integration of Cloudflare with Cloud Suite is its most valuable feature."
"The stability of Cloudflare Web Application Firewall deserves a perfect 10 out of 10."
"The setup process is very simple for me."
"There is a huge signature repository"
"It protects web applications efficiently."
"Cloudflare is cheaper compared to Azure WAF, which I have considered before."
"It's pretty convenient and pretty easy to set up and run. And then kind of for static content, it also offers caching."
"Some of the most valuable features of Cloudflare Web Application Firewall include its DNS zone setup and the zero trust policy."
"Imperva WAF's strongest features are the detection of web application threats and vulnerabilities in the source code."
"It is easy to use and has good security."
"It has fewer false positives"
"The most important feature I have found to be the ease in how to do the backup and restores."
"Imperva monitors all traffic, even customer access, to the web application. Then, Imperva uses features like signatures to identify attacks like cross-site scripting or SQL injection."
"The solution is cloud-based and offers us good uptime. It has combined web and API security. Therefore, with one license, you access both application security and also API security."
"The compliance is the most valuable aspect."
"I am impressed with the product's scalability, availability, easy management, and security. We were able to integrate the product with Azure and Sentinel."
 

Cons

"They need to improve their support because getting a response for basic requests took around 48 hours, which is too long."
"The product can improve by having more multitenancy capability, which is currently not available."
"The notification part could be improved. It's very much connected to Web Application Firewall, rate-limiting, and DDoS protection."
"Cloudflare Web Application Firewall should include port forwarding features."
"The solution's learning curve can still be further reduced"
"We have noticed some latency when the call goes through the firewall. That could be improved."
"I have experienced some difficulties with Cloudflare's support as a customer based in India."
"It would be ideal if the solution offered better log integration and more integration with different platforms."
"The only disadvantage of Imperva is that it is a pretty costly solution."
"The tool needs to improve CPU and storage memory."
"I'd like the option to pick your bot protection."
"The product's customization capabilities are a bit problematic, requiring support cases for backend modifications."
"Imperva Web Application Firewall is very expensive."
"I would like to improve the tool's turnaround time in terms of support."
"One potential improvement for Imperva is enhancing its alert system."
"It would be useful if the solution used more intelligence in attack protection. For example, firewalls are to be dependent on the configuration, but if they could have some data science around it the solution would be even better. The profiling of the traffic, and making decisions surrounding that should be intelligence-based, instead of being based on the configuration of the firewall itself."
 

Pricing and Cost Advice

"The solution's pricing option needs to be more transparent for enterprise clients."
"The annual licensing fee is $10,000 USD."
"Cloudflare offers different types of subscriptions for businesses, enterprises, and personal users, and the pricing is negotiable."
"The pricing model is very straightforward compared to the competition. You just pay per month for the product and usage."
"Cloudflare Web Application Firewall is more affordable than other solutions."
"It starts at $20 and can easily go up to $200 monthly"
"The solution is expensive."
"What's my experience with pricing, setup cost, and licensing? I believe the pricing is not the best, but it's reasonable and acceptable. We also use the McAfee system in parallel. In terms of pricing, its okay - not great, but not bad either. It falls in the middle, which is acceptable. In terms of support licensing, last time, we were searching for a solution, and we considered products from resellers rather than directly from the cloud provider. However, the pricing we encountered was exceptionally high. As a result, we are inclined to select support from the reseller."
"The tool is expensive."
"The solution's pricing is an issue."
"Licensing can range from one to twenty thousand dollars annually. Additionally, some features, including software support, require an annual subscription as well."
"The price of this solution is a little bit high compared to competitors."
"Imperva Web Application Firewall price is higher compared to other solutions. However, everything is included in the price."
"It is very costly, but the return on investment is very high. Its cost was around $70,000, and we got it back in just six months."
"Imperva Web Application Firewall's pricing is expensive."
"The cost of this solution depends on the platform."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
856,873 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Educational Organization
14%
Financial Services Firm
8%
Comms Service Provider
6%
Financial Services Firm
16%
Computer Software Company
12%
Insurance Company
8%
Manufacturing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Cloudflare Web Application Firewall?
The product has a valuable security control functionality.
What is your experience regarding pricing and costs for Cloudflare Web Application Firewall?
Cloudflare is cheaper compared to Azure WAF, which I have considered before.
What needs improvement with Cloudflare Web Application Firewall?
The product can improve by having more multitenancy capability, which is currently not available. This improvement would enable managed service providers to implement it more effectively.
Is Citrix ADC (formerly Netscaler) the best ADC to use and if not why?
For ADC, any ADC can do a good job. But in case if you want to add WAF functionality to the same ADC hardware you have to look for other ADC's like F5, Imperva, Radware, Fortinet, etc.
DDoS solutions: Any other solutions to consider aside from Radware DDoS Protection Service and F5 Silverline DDoS Protection?
You can have a look to Imperva Cloud WAF, the anti-DDoS mitigation is under 1s and works very well. I observed a lot of DDoS attacks that were well managed (even not seen by the customer) by Imperv...
 

Also Known As

Cloudflare WAF
No data available
 

Overview

 

Sample Customers

crunchbase, udacity, marketo, okcupid, zendesk
BlueCross BlueShield, eHarmony, EMF Broadcasting, GE Healthcare, Metro Bank, The Motley Fool, Siemens
Find out what your peers are saying about Cloudflare Web Application Firewall vs. Imperva Web Application Firewall and other solutions. Updated: June 2025.
856,873 professionals have used our research since 2012.