Try our new research platform with insights from 80,000+ expert users

Cloudflare Web Application Firewall vs The Fastly Next-Gen WAF (powered by Signal Sciences) comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
76
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (13th)
Cloudflare Web Application ...
Average Rating
8.4
Reviews Sentiment
7.5
Number of Reviews
24
Ranking in other categories
Web Application Firewall (WAF) (5th)
The Fastly Next-Gen WAF (po...
Average Rating
7.6
Reviews Sentiment
4.8
Number of Reviews
4
Ranking in other categories
Web Application Firewall (WAF) (30th)
 

Featured Reviews

Carlos Alam Hernandez Baruch - PeerSpot reviewer
Fast and secure deployments simplify operations for government and fintech clients
It is a fast and secure DNS. It is very easy to deploy, and my customers are happy with this tool. Additionally, the CDN performance in Mexico is excellent, providing fast service and tools. It offers reliability during high-traffic periods, ensuring no impact on the environment. It helps my clients avoid using on-premise boxes, simplifying operations as they only use the prices on Cloudflare.
SachidDoshi - PeerSpot reviewer
Offers a huge signature repository and is superiorly effective in mitigating DDoS attacks
The solution's learning curve can still be further reduced, which presently stands at two or three months. The product has a custom rule set that users can modify and manifest as needed. The vendor can probably shorten the learning curve using cutting-edge technologies like AI. The solution provider can also work around the web applications and identify the toolset that needs to be implemented to deploy the solution in less time. The vendor has launched a SASE product that can function with Cloudflare Web Application Firewall, but many improvements are needed in terms of features, such as the web filtering feature, and CASB has not yet been added.
Shashank N - PeerSpot reviewer
Provides good stability, but the agent-based approach could be more convenient
The areas that could be improved in Signal Sciences include the effectiveness of rules, as many didn't function optimally and required custom rule-writing to address bypasses for WAF. Additionally, the agent-based approach presents challenges with managing agents across versions and dependencies on specific application platforms like Apache or NGINX, leading to compatibility issues and complexity in integration. This agent-based system proved particularly difficult to manage.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution automatically detects and responds to certain types of traffic based on geolocation."
"The most valuable feature of Cloudflare DNS is security."
"I get a lot of value from Cloudflare's API because it enables you to build a separate environment inside the solution. You can create a domain for performing test requests before you move to the production environment and connect various domains."
"The most valuable feature of Cloudflare is that it has a free version. They give us the free version with the anti-DDoS features and also the load balancing solution."
"The solution is very good at mitigating threats."
"Its ease of integration with Office 365 and the fact that it's a good product compared to what I had before"
"It's very user-friendly."
"When using services like Heroku, Cloudflare is very useful for CNAME flattening. I also use it for their end-to-end SSL with TLS authentication on nginx for securing servers."
"We extensively use the solution every day. The solution is very stable; we haven’t seen any glitches."
"Cloudflare WAF provides protection through rules and functionalities like Cloudflare's SDRAP."
"The product has improved our security posture by blocking bad actors."
"Technical support has a very fast response time and they are helpful."
"The stability of Cloudflare Web Application Firewall deserves a perfect 10 out of 10."
"Caching is the most valuable feature of Cloudflare Web Application Firewall."
"It protects web applications efficiently."
"The integration of Cloudflare with Cloud Suite is its most valuable feature."
"The product's most valuable feature is its ability to set up the rules easily."
"Fastly (Signal Sciences) integrates and tags the intermittent traffic based on patterns. It generates signals and provides them in a dashboard where we can view them and decide whether to allow or deny traffic. It's a more advanced and easy-to-navigate dashboard."
"When configuring a web application firewall using Signal Sciences, we configure a rule whereby no one except a few people can access the application."
"Because The Fastly Next-Gen WAF (powered by Signal Sciences) is API-driven, we have integrations with the CI/CD pipeline through GitHub Actions, making it easy to integrate."
 

Cons

"The timing aspect can lead to it being considered overpriced. This is a particular concern we have with Cloudflare, as they may struggle with accurately detecting the client."
"Even if I wanted to, I wouldn't be able to buy Cloudflare in my country."
"There might be helpful if there was some web application firewall feature."
"The product needs to improve its automation."
"The solution could use more analytics on the backend to give us more insights into everything. More reports would be helpful."
"It would be beneficial for us if Cloudflare could offer a scrubbing solution. This would involve taking a snapshot of my website and keeping it live during a DDoS attack, ensuring uninterrupted service for our users. DDoS attacks are typically short in duration, and having Cloudflare maintain the site's availability from its secure network would enhance the overall user experience. I would appreciate it if Cloudflare could consider implementing this feature. Many organizations already utilize similar capabilities in their CDN platforms, where a static snapshot of the web page is displayed during DDoS attacks. In terms of features, Cloudflare needs to enhance its resilience and stay more focused on adopting new technologies. For instance, solutions like F5 XC Box, Access Solution, and Distributed Cloud Solution have impressive features, and Cloudflare should strive to match and exceed those capabilities. There's a need for improvement in areas like AI-based DDoS attacks and Layer 7 WAF features. Cloudflare should prioritize enhancements in areas such as behavioral DDoS and protection against SQL injection attacks, considering the prevalent trend of public exposure to the internet for business reasons. Overall, Cloudflare needs to invest more in advancing its feature set."
"They lack a good way to manage DNS as a company, since everything is relegated to single account logins until you get to the higher levels. They have come out with a paid feature to remedy this, but I have not had a chance to fully review it yet to know if it fixes the access problem."
"For large enterprises, the pricing is okay. However, the enterprise price for small projects is a bit high. A mid-tier pricing option would be beneficial."
"A key challenge arises when dealing with numerous integrations with HVAC systems. Depending on the specifics, there might be some configuration mismatches, which necessitate specific support."
"The product can improve by having more multitenancy capability, which is currently not available."
"If they add logs history within the Cloudflare offering, that would be a great benefit."
"The blocked logs are difficult to read at times."
"There could be an option to duplicate the cluster to maintain the consistency of rules."
"I have experienced some difficulties with Cloudflare's support as a customer based in India."
"The product can improve by having more multitenancy capability, which is currently not available."
"Support can be challenging at times."
"Fastly don't support caching for China users. That's the only feature lacking compared to Akamai."
"The UI is not very intuitive and could be better."
"The areas that could be improved in Signal Sciences include the effectiveness of rules, as many didn't function optimally and required custom rule-writing to address bypasses for WAF."
"Even if we create some custom rules, Signal Sciences cannot capture some of the malicious traffic."
 

Pricing and Cost Advice

"That is one of the great features. I was able to access the majority of the features and services for free."
"For Cloudflare, I recommend it heavily for small businesses with revenue under a couple of million dollars. Onboarding is easy, and they even have a free plan. This makes it simple for businesses in the $100,000-$500,000 range to try it out and see its value, allowing them to scale up their infrastructure as needed."
"The price is reasonable."
"The pricing depends on the usage, but the cheapest would be around 5,000 USD a month."
"I give the price a five out of ten."
"There are no additional costs beyond the standard licensing fees."
"We are using the free tier of the solution."
"The solution has many features but there are ones that you need to pay for. Sometimes you have to find out which is available for free and which you have to pay for."
"Cloudflare offers different types of subscriptions for businesses, enterprises, and personal users, and the pricing is negotiable."
"The pricing model is very straightforward compared to the competition. You just pay per month for the product and usage."
"We pay $210 per month for CloudFlare WAF."
"The annual licensing fee is $10,000 USD."
"It starts at $20 and can easily go up to $200 monthly"
"Cloudflare Web Application Firewall is more affordable than other solutions."
"The solution is expensive."
"The solution's pricing option needs to be more transparent for enterprise clients."
"Signal Sciences is pretty cheap compared to other solutions."
"The product has an affordable cost."
"The pricing is 50% less than Akamai."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
867,370 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Comms Service Provider
11%
Financial Services Firm
10%
Manufacturing Company
7%
Computer Software Company
15%
Financial Services Firm
9%
Comms Service Provider
8%
Manufacturing Company
8%
Computer Software Company
11%
Retailer
11%
Manufacturing Company
11%
Financial Services Firm
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business45
Midsize Enterprise8
Large Enterprise25
By reviewers
Company SizeCount
Small Business14
Midsize Enterprise6
Large Enterprise6
No data available
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about Cloudflare Web Application Firewall?
The product has a valuable security control functionality.
What needs improvement with Cloudflare Web Application Firewall?
I cannot say much about areas of improvement for Cloudflare Web Application Firewall because I haven't gone through d...
What do you like most about Signal Sciences?
The product's most valuable feature is its ability to set up the rules easily.
What is your experience regarding pricing and costs for Signal Sciences?
The pricing is very competitive compared to other providers. The pricing is definitely a factor in our decision-makin...
What needs improvement with Signal Sciences?
We do use it, but the UI can be improved as we mostly work through the CI/CD. It provides support, but sometimes it i...
 

Also Known As

Cloudflare DNS
Cloudflare WAF
Signal Sciences Next-Gen WAF, Signal Sciences RASP
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
crunchbase, udacity, marketo, okcupid, zendesk
Chef, Adobe, Datadog, Etsy, GrubHub, Vimeo, SendGrid, Under Armour, Duo, AppNexus
Find out what your peers are saying about Cloudflare Web Application Firewall vs. The Fastly Next-Gen WAF (powered by Signal Sciences) and other solutions. Updated: September 2025.
867,370 professionals have used our research since 2012.