No more typing reviews! Try our Samantha, our new voice AI agent.

Cloudflare vs Fastly vs Imperva Application Security Platform comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

As of April 2026, in the Distributed Denial-of-Service (DDoS) Protection category, the mindshare of Cloudflare is 16.2%, down from 18.2% compared to the previous year. The mindshare of Fastly is 3.2%, up from 2.3% compared to the previous year. The mindshare of Imperva Application Security Platform is 8.5%, up from 7.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Distributed Denial-of-Service (DDoS) Protection Mindshare Distribution
ProductMindshare (%)
Cloudflare16.2%
Imperva Application Security Platform8.5%
Fastly3.2%
Other72.1%
Distributed Denial-of-Service (DDoS) Protection
 

Featured Reviews

M.A. Faisal - PeerSpot reviewer
General Manager at bKash Limited
Advanced protection has secured critical web workloads and provides clear traffic visibility
From a security perspective, there remains a security loophole, as some browsers in the market can bypass the Turnstile solution, which requires approximately 40 seconds to do so. From a performance perspective, this is acceptable. We also tried Google reCAPTCHA, and that can also be bypassed. From a security perspective, I would say neither solution is completely secured. Regarding uptime, we have faced a couple of incidents due to Cloudflare in recent years, so I cannot say we receive 100% uptime for our region. We sometimes face challenges, including downtime and other issues. As a result, we are not receiving 100% uptime from Cloudflare's solution. Since most of our customers are in this region, we need alternatives. We need something more competitive than Cloudflare. Unfortunately, in Bangladesh, Cloudflare has three points of presence already, and we cannot find any other solution provider in Bangladesh as an alternative, which presents another challenge. Competitor solutions have more attack signatures, which ensure better security compared to Cloudflare's predefined configurations. Customers do not have options to modify any configuration parameters in Cloudflare, whereas other competitor solutions, such as F5 Distributed Cloud, allow customers to tune configurations according to their requirements. Cloudflare could improve in this area. Additionally, regarding visibility, Cloudflare has static visibility, but they could adopt dynamic graph features for their customers.
PP
Technical support engineer at Adobe
Optimized ecommerce performance and improved access control through image handling and IP filtering
I believe that Fastly should provide guidelines for their WAF blocking rules. It should be public what the rules are that are blocking their contents. I believe Fastly should provide regional IP addresses instead of POP IPs. Fastly should provide features similar to Cloudflare regarding a block list. Additionally, a POP address should be there with a wide range of IP addresses provided, public static IP addresses, so customers can integrate egress IPs. Fastly should provide WebP image processing on the backend instead of on the fly. It would be a very useful feature to avoid unnecessary time for browser to browser and local cookies. I believe that Fastly service has a few gaps. We are not getting quick responses from Fastly technical support engineers. Sometimes they depend on their D3 developers. There should be transparency.
reviewer1247523 - PeerSpot reviewer
Head of Sales Services Department at a comms service provider with 51-200 employees
Solution ensures website availability and proactive threat mitigation
Over the seven years, the most valuable features of Imperva DDoS that I have found are related to DDoS attacks, which are a group of attacks, and not all of them can be resolved on the endpoint level before the website. Using the web firewall before the website is a common use case to protect against malicious requests to the website. I have utilized Imperva's Intelligent Traffic Filtering feature. This feature helps me understand how the attack is progressing and what is happening inside the requests to our website. It allows me to granularly grant or deny access to certain parts of our website. This helps when we know our customers and the types of requests that can be sent from them, enabling us to block some malicious requests. Imperva DDoS has User Behavior Analytics and Threat Intelligence on its board, and this helps us to be protected proactively. Imperva DDoS connects to its database of threats, storing whole information about attacks all over the world in one simple engine. Everyone can use this feature, which can connect to this engine and get information about what is going on at the world level. That is the way to be protected at the company's level. The integration capabilities of Imperva DDoS are very easy and simple. We can run it in 2 hours.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Cloudflare allows us to self-host services such as Rocket.Chat and Node-RED, in high-availability mode, thanks to round robin DNS which allows us to share one hostname between our two locations."
"It is a fast and secure DNS."
"There is no service as mature as Cloudflare that is also as easy to use, reliable, and hosted from excellent infrastructure."
"We're partners with Cloudflare; this solution is the best product and it does not charge you for any kind of attack on your traffic, only for good traffic, and it can mitigate up to 30 TBPS of DDoS attacks."
"The tool is user-friendly."
"The solution offers the flexibility to control configuration rules."
"So far I use free tier and happy with it."
"Many websites require an SSL certificate because they sell stuff and want SSL. Cloudflare comes with an SSL certificate built in. It's automatic. You sign yourself up for Cloudflare, and an SSL certificate automatically protects your website. You don't necessarily need a certificate if you have a connection between your website and your host, the server, Cloudflare, and the host."
"Fastly provides CDN, WAF, image optimization, and IP restriction."
"Compute@Edge features are valuable to me."
"In summary, this solution is easy to manage, quick to deploy, and all of my customers are happy."
"Fastly combines both the CDN side and the Signal Sciences next-generation WAF, which is closely integrated with the CDN, allowing us to use both products seamlessly."
"The product's initial setup phase is straightforward."
"Support is good; the product works as advertised. We have a Slack connection with them. So we can basically ask for help, live, engage, and ring when they respond. Very quickly."
"Fastly uses configuration versioning, where you can deploy a new version in less than one minute."
"Rate limiting is a good feature that protects from volumetric attacks."
"One good thing about Imperva Web Application Firewall is it can be on the cloud and also it can be on-premise."
"Imperva is easy to use and deploy. The UI is excellent."
"Its unique interface for managing security performance and ease of use are the most valuable features of this solution."
"The compliance is the most valuable aspect."
"Imperva Cloud WAF would be the most powerful option."
"Imperva Web Application Firewall is a highly stable solution and is very mature."
"The setup of Imperva DDoS was easy."
"An improvement has been to our website: It increases the speed of our response, the capacity of the site, and optimizes the bandwidth."
 

Cons

"I think the APIs are a little bit hard for us to work with. The APIs could be more open so that we could integrate better with our SolarWinds or our monitoring solution."
"The installation was complex until I learned what I had to learn."
"It should confirm audit findings of the assigned area with auditees to ensure that the audit conclusions are based on an accurate understanding of the issues."
"If they improve on the placement of their data centers, it would be better."
"The product needs to improve its automation."
"There could be more courses with engineers. I like e-learning, however, having a specialist in a classroom is more comfortable for me."
"The one feature that is paid is the custom nameservers instead of using the default ones, I want to use a custom one."
"With CDN loads, sometimes we get an error that the host server is unavailable when the connection between CloudFlare and the server timed out."
"Fastly's customer service area needs improvement."
"Support is not that great."
"The product should provide improved bot detection and management."
"Stronger analytics would be helpful, like showing configurations that haven't served a certain amount of traffic in a while. With many properties, things can get lost track of - duplicates or unused configurations not properly decommissioned."
"It is missing a "staging" platform to deploy a test configuration with all of the real settings, which would allow us to properly test before putting it into production."
"What I don't like about Fastly is that they charge a heavy price."
"We are not getting quick responses from Fastly technical support engineers. Sometimes they depend on their D3 developers."
"It's not easy to start with Fastly if you don't have VCL knowledge, so it appears very complex at the beginning."
"The price of Imperva Web Application Firewalls is expensive compared to others."
"The weakest point of Imperva is their first level of support, which should be improved."
"The UI interface needs improvement."
"We had an issue when securing the web applications for DDoS protection."
"Licensing should be improved. Most of the clients aren't happy. It's expensive."
"We need an improvement in the support. We need a lot of turnarounds."
"The only disadvantage of Imperva is that it is a pretty costly solution."
"The solution works for particular zones but isn't always the best solution for all zones."
 

Pricing and Cost Advice

"We are using the free version."
"A free version of the solution is available."
"The pricing depends on the usage, but the cheapest would be around 5,000 USD a month."
"The price is reasonable."
"There are no additional costs beyond the standard licensing fees."
"The tool is a premium product, so it is very expensive."
"When you compare Cloudflare DNS to other solutions, such as Akamai, the price is reasonable."
"In terms of licensing costs, we don't pay for licensing for Cloudflare. We only establish communication, then for peering, Cloudflare takes care of the cross-connection in different data centers."
"The solution is cheaper than other products in the market."
"It is an expensive solution."
"In my opinion, Fastly is priced competitively."
"You need to pay a premium price for the tool."
"Fastly is less expensive than one of its competitors."
"The pricing has been very competitive."
"I've generally found Fastly to be very competitive in pricing, especially around Compute@Edge."
"Make sure you understand the way that Imperva charges. It's very affordable. However, I would like to see a package with the Virtual Patching included. You get to do patching separately."
"The data packages are higher than our needs so we end up paying for data that we don't use."
"The solution's pricing is an issue."
"It is very costly, but the return on investment is very high. Its cost was around $70,000, and we got it back in just six months."
"Imperva charges us based on bandwidth, which is better than other vendors that charge us according to data transfer."
"It is a very affordable solution."
"Pricing could be more competitive."
"The tool is expensive."
report
Use our free recommendation engine to learn which Distributed Denial-of-Service (DDoS) Protection solutions are best for your needs.
885,667 professionals have used our research since 2012.
 

Comparison Review

it_user68487 - PeerSpot reviewer
Security Expert with 51-200 employees
Nov 6, 2013
CloudFlare vs Incapsula: Web Application Firewall
CloudFlare vs Incapsula: Round 2 Web Application Firewall Comparative Penetration Testing Analysis Report v1.0 Summary This document contains the results of a second comparative penetration test conducted by a team of security specialists at Zero Science Lab against two cloud-based Web…
 

Top Industries

By visitors reading reviews
Financial Services Firm
10%
Comms Service Provider
10%
Computer Software Company
9%
Manufacturing Company
8%
Comms Service Provider
11%
Financial Services Firm
11%
Computer Software Company
8%
Manufacturing Company
8%
Financial Services Firm
11%
Manufacturing Company
8%
Computer Software Company
8%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise8
Large Enterprise26
By reviewers
Company SizeCount
Small Business5
Large Enterprise5
By reviewers
Company SizeCount
Small Business84
Midsize Enterprise25
Large Enterprise62
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What needs improvement with Fastly?
I believe that Fastly should provide guidelines for their WAF blocking rules. It should be public what the rules are ...
What is your primary use case for Fastly?
I am using Fastly in the Adobe Commerce Cloud project. In this project, it is working as a reverse proxy for CDN and ...
Which Web Application Firewall (WAF) would you recommend? R&S or Imperva?
Imperva is a strong choice, given their security focus and ongoing R&D into the product in areas such as bot mana...
What is your experience regarding pricing and costs for Imperva DDoS?
The pricing, setup costs, and licensing of Imperva DDoS are reasonable for the amount of technical capabilities provi...
What needs improvement with Imperva DDoS?
I would like to see improvements in the pooling of threats and attacks, possibly to enlarge the scale of indicators o...
 

Also Known As

Cloudflare DNS
No data available
Imperva Bot Management, Imperva Web Application Firewall, Imperva API Security
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Twitter, Airbnb, Alaska Airlines, Pinterest, Vimeo, The Guardian, The New York Times, Ticketmaster, The Drupal Association, Opera, about.com, imgur, Etsy, Foursquare, GitHub, New Relic, shopify, Shazam, Firebase
Hitachi, BNZ, Bitstamp, Moz, InnoGames, BTCChina, Wix, LivePerson, Zillow and more.
Find out what your peers are saying about Radware, Cloudflare, NETSCOUT and others in Distributed Denial-of-Service (DDoS) Protection. Updated: March 2026.
885,667 professionals have used our research since 2012.