Try our new research platform with insights from 80,000+ expert users

Cloudflare vs F5 Advanced WAF comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
6.1
Cloudflare improves performance, security, and financial outcomes with affordable plans, enhancing user satisfaction and operational efficiency significantly.
Sentiment score
7.5
F5 Advanced WAF delivers high ROI through cost savings, enhanced security, efficient compliance, and reduced management time, earning user praise.
For the small project I was working on, using the basic tier provided a huge improvement at zero cost.
Security Specialist at a tech services company with 1,001-5,000 employees
In terms of return on investment with Cloudflare, it costs my time to set them up, but basically once they're set up, it's done.
Owner at Hga consulting
Time savings in daily operations come from the automatic learning and signature update reducing the need for constant manual rule management, allowing the security and network teams to spend significantly less time handling false positive application-related escalations.
Cyber Security Consultant at ProTechmanize
Subscription models offer clearer ROI due to a more competitive pricing scheme.
Global Channel Alliances Lead at a tech vendor with 10,001+ employees
F5 Advanced WAF protects our organization and provides security, achieving a return on investment.
Cybersecurity Team Leader at EMAK For Integrated Solutions
 

Customer Service

Sentiment score
6.9
Cloudflare's customer service is praised for promptness, but technical support feedback varies, especially favoring Enterprise tier users.
Sentiment score
6.9
Customers praise F5 Advanced WAF support's expertise but highlight response time issues and the need for improved regional consistency.
Cloudflare does not offer hands-on technical support to fix customer problems but rather a self-service model.
Senior Consultant CDN at a comms service provider with 10,001+ employees
I would rate the technical support with Cloudflare as excellent every time I've had to call them.
Owner at Hga consulting
We use other solutions where support is available through Slack channels and is more interactive, with someone responding within a couple of minutes or seconds.
General Manager at bKash Limited
Both response time and availability need to be improved.
Project Manager at IBM
F5 Advanced WAF provides the insights and notifications I need in terms of reporting and alerting.
Cybersecurity Team Leader at EMAK For Integrated Solutions
If there is a bug, the support is usually understanding and resolves issues.
CEO at CyberApp
 

Scalability Issues

Sentiment score
7.9
Users praise Cloudflare's scalability, flexibility, and seamless tier transitions for maintaining high performance under increasing traffic and demands.
Sentiment score
7.4
F5 Advanced WAF offers scalable protection and seamless adaptability for enterprises, supporting dynamic growth and easy upgrades.
It is a SaaS tool, but the fact that they have workloads deployed across the world proves that it is a highly scalable tool.
Principal Cyber Prevent and Defense Engineer at a comms service provider with 1,001-5,000 employees
The tool offers very good performance, even during high-traffic periods.
Engineer at SITMEXICO
I rate the solution’s scalability an eight out of ten.
Independent Consultant at Unaikui
 

Stability Issues

Sentiment score
7.5
Cloudflare is generally stable and reliable, with some initial setup challenges but excellent performance and positive user feedback.
Sentiment score
8.4
F5 Advanced WAF is highly stable, consistently rated 9-10 for stability, with smooth integration and performance across deployments.
I rate the solution’s stability an eight out of ten.
Independent Consultant at Unaikui
The service is very stable with no impacts during high-traffic periods.
Engineer at SITMEXICO
F5 Advanced WAF has been very reliable and consistent for us; in our on-premise enterprise setup, it has been stable and predictable in day-to-day operations without any unexpected crashes or WAF-related downtime in production.
Cyber Security Consultant at ProTechmanize
 

Room For Improvement

Cloudflare needs enhancements in speed, support, reliability, pricing, and documentation, while expanding integration, security, and analytics capabilities.
F5 Advanced WAF needs UI simplification, better integration and API protection, lower costs, and improved scalability, efficiency, and support.
Despite these challenges, overall, Cloudflare remains the preferred solution compared to Azure, AWS CloudFront, and Google Cloud Armor.
Managed Services Manager at Adapture Technology Group
Customers do not have options to modify any configuration parameters in Cloudflare, whereas other competitor solutions, such as F5 Distributed Cloud, allow customers to tune configurations according to their requirements.
General Manager at bKash Limited
Areas like how assessment, discovery, and payload are dealt with and how it all comes into your organization can be considered when trying to make suggestions to Cloudflare for improvements.
Senior Cloud Solution Architect at Integrated Technology Solution Group (ITSG)
Deployment training for F5 Advanced WAF is lacking and restricts growth by being inaccessible and costly for partners.
Global Channel Alliances Lead at a tech vendor with 10,001+ employees
Overall, these are not blockers, merely enhancement opportunities, and once tuned, F5 Advanced WAF is very stable and reliable; improving usability, reporting, and onboarding would make it even more effective for larger environments.
Cyber Security Consultant at ProTechmanize
There is excellent clarity in the LTM and the WAF.
Project Manager at IBM
 

Setup Cost

Enterprise users find Cloudflare cost-effective, with valuable upgrades and competitive pricing, despite unclear enterprise price lists.
F5 Advanced WAF is costly for small businesses, but offers significant enterprise value with negotiable discounts and comprehensive features.
I find it to be cheap.
Engineer at SITMEXICO
I rate the product’s pricing a five out of ten, where one is cheap, and ten is expensive.
Senior Solutions Architect at Think Power Solutions
The tool is a premium product, so it is very expensive.
Principal Cyber Prevent and Defense Engineer at a comms service provider with 1,001-5,000 employees
Licensing is capacity-driven, so you need careful planning based on traffic volume and use cases, and adding features such as Bot Protection impacts costs; once licensing is clear and sized correctly, there are no surprises.
Cyber Security Consultant at ProTechmanize
Subscription models have competitive pricing, while perpetual licenses involve an upfront higher cost.
Global Channel Alliances Lead at a tech vendor with 10,001+ employees
The price is affordable and satisfactory.
CEO at CyberApp
 

Valuable Features

Cloudflare provides caching, DDoS protection, and CDN services with enhanced security features, making it vital for optimized web performance.
F5 Advanced WAF provides top-tier security with intelligent threat detection, adaptive learning, and seamless integration for diverse environments.
The most valuable features of the solution are performance and security.
Senior Cloud Solution Architect at Integrated Technology Solution Group (ITSG)
Techniques like minification and image compression reduce the size of assets, leading to better performance and faster user load times.
Senior Solutions Architect at Think Power Solutions
The solution has been able to compare it to the market, and I think the product has taken great strides in automating quite a bit of things, and they use a lot of AI.
Principal Cyber Prevent and Defense Engineer at a comms service provider with 1,001-5,000 employees
The Advanced Attack Signature database is very strong and regularly updated, effectively blocking SQL injections, cross-site scripting, command injections, and file inclusion attacks while allowing selective enabling or disabling of signatures to avoid blocking genuine traffic.
Cyber Security Consultant at ProTechmanize
F5 Advanced WAF offers the best features that are capable of stopping any type of attack, and it is a really reliable and stable product that you can rely on to stop any type of attack.
Cybersecurity Team Leader at EMAK For Integrated Solutions
The perpetual license, despite an initial higher cost, lacks transparency regarding support expiration.
Global Channel Alliances Lead at a tech vendor with 10,001+ employees
 

Categories and Ranking

Cloudflare
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
78
Ranking in other categories
CDN (1st), WAN Optimization (4th), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Domain Name System (DNS) Security (5th), Cloud Security Posture Management (CSPM) (12th)
F5 Advanced WAF
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
72
Ranking in other categories
Web Application Firewall (WAF) (2nd)
 

Mindshare comparison

While both are Security Services solutions, they serve different purposes. Cloudflare is designed for Distributed Denial-of-Service (DDoS) Protection and holds a mindshare of 16.7%, down 18.0% compared to last year.
F5 Advanced WAF, on the other hand, focuses on Web Application Firewall (WAF), holds 7.8% mindshare, down 10.3% since last year.
Distributed Denial-of-Service (DDoS) Protection Market Share Distribution
ProductMarket Share (%)
Cloudflare16.7%
Arbor DDoS9.8%
Radware DDoS8.2%
Other65.3%
Distributed Denial-of-Service (DDoS) Protection
Web Application Firewall (WAF) Market Share Distribution
ProductMarket Share (%)
F5 Advanced WAF7.8%
Fortinet FortiWeb8.1%
Imperva Application Security Platform7.6%
Other76.5%
Web Application Firewall (WAF)
 

Featured Reviews

M.A. Faisal - PeerSpot reviewer
General Manager at bKash Limited
Advanced protection has secured critical web workloads and provides clear traffic visibility
From a security perspective, there remains a security loophole, as some browsers in the market can bypass the Turnstile solution, which requires approximately 40 seconds to do so. From a performance perspective, this is acceptable. We also tried Google reCAPTCHA, and that can also be bypassed. From a security perspective, I would say neither solution is completely secured. Regarding uptime, we have faced a couple of incidents due to Cloudflare in recent years, so I cannot say we receive 100% uptime for our region. We sometimes face challenges, including downtime and other issues. As a result, we are not receiving 100% uptime from Cloudflare's solution. Since most of our customers are in this region, we need alternatives. We need something more competitive than Cloudflare. Unfortunately, in Bangladesh, Cloudflare has three points of presence already, and we cannot find any other solution provider in Bangladesh as an alternative, which presents another challenge. Competitor solutions have more attack signatures, which ensure better security compared to Cloudflare's predefined configurations. Customers do not have options to modify any configuration parameters in Cloudflare, whereas other competitor solutions, such as F5 Distributed Cloud, allow customers to tune configurations according to their requirements. Cloudflare could improve in this area. Additionally, regarding visibility, Cloudflare has static visibility, but they could adopt dynamic graph features for their customers.
Kallamuddin Ansari - PeerSpot reviewer
Cyber Security Consultant at ProTechmanize
Application security has protected critical banking services while policy learning minimizes false blocks
F5 Advanced WAF performs well overall, but I have noticed some points that could enhance the solution. Initially, policy tuning could be simpler, as while the learning engine is powerful, initial tuning still requires experienced engineers, which can be challenging for new teams due to the complexity of options and parameters. A more guided and simple tuning workflow would help reduce the learning curve. Additionally, tighter native integration with SIEM or SOAR tools would simplify correlation and investigations for security teams, although log exports are available. Overall, these are not blockers, merely enhancement opportunities, and once tuned, F5 Advanced WAF is very stable and reliable; improving usability, reporting, and onboarding would make it even more effective for larger environments.
report
Use our free recommendation engine to learn which Distributed Denial-of-Service (DDoS) Protection solutions are best for your needs.
880,901 professionals have used our research since 2012.
 

Comparison Review

it_user68487 - PeerSpot reviewer
Security Expert with 51-200 employees
Nov 6, 2013
CloudFlare vs Incapsula: Web Application Firewall
CloudFlare vs Incapsula: Round 2 Web Application Firewall Comparative Penetration Testing Analysis Report v1.0 Summary This document contains the results of a second comparative penetration test conducted by a team of security specialists at Zero Science Lab against two cloud-based Web…
 

Top Industries

By visitors reading reviews
Financial Services Firm
10%
Comms Service Provider
10%
Computer Software Company
9%
Manufacturing Company
8%
Financial Services Firm
14%
Computer Software Company
12%
Government
8%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise8
Large Enterprise26
By reviewers
Company SizeCount
Small Business25
Midsize Enterprise15
Large Enterprise31
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GRE tunnels. We have decreased site load times on Mobile 3G from 8 to 1,6 seconds ...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service that offers great redundancy and advanced security with built-in unmetered and ...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about F5 Advanced WAF?
It's a fairly easy-to-use and user-friendly tool. My administrators and team also like its ability to customize the rules per the requirements.
What is your experience regarding pricing and costs for F5 Advanced WAF?
Regarding the price, I think the cost is a bit higher compared to others. Earlier we were using Radware, and compared to Radware, it is very high. However, it is providing more features than Radwar...
What needs improvement with F5 Advanced WAF?
In terms of additional features I would like to see from them in the future, I think the GTM is a bit complicated to configure, which I observed. Otherwise, LTM and WAF are straightforward. I faced...
 

Also Known As

Cloudflare DNS
No data available
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
MAXIMUS, Vivo, American Systems, Bangladesh Post Office, City Bank
Find out what your peers are saying about Cloudflare vs. F5 Advanced WAF and other solutions. Updated: January 2023.
880,901 professionals have used our research since 2012.