F5 Advanced WAF vs Fortinet FortiAppSec Cloud comparison

F5 and Fortinet are both solutions in the Web Application Firewall (WAF) category. F5 is ranked #2 with an average rating of 8.4, while Fortinet is ranked #41. Additionally, 98% of F5 users are willing to recommend the solution, compared to 100% of Fortinet users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between F5 Advanced WAF and Fortinet FortiAppSec Cloud based on real PeerSpot user reviews.

Find out what your peers are saying about Fortinet, F5, Imperva and others in Web Application Firewall (WAF).

To learn more, read our detailed Web Application Firewall (WAF) Report (Updated: March 2026).

Buyer's Guide

Web Application Firewall (WAF)

March 2026

Download the complete report

Helped 884,933 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cloudflare Web Application ...

Featured Reviews

Dean Barisic

CTO at PlayNirvana

Advanced security reporting has protected high-traffic betting platforms from constant attacks

I don't see room for improvement to Cloudflare Web Application Firewall. One thing I don't know much about because we have a dedicated IT team for that, and I'm not involved with Cloudflare much anymore. But if I were to compare them to F5, I would like to see more features that F5 offers. F5 has an option to bring the whole infrastructure, the whole WAF and all their packages, Bot Management, and everything else on your infrastructure. You need to install certain services from their side, and then you can choose if you would like requests to hit your servers immediately or if requests need to be proxied through F5 backbone. That would be a nice addition because we have 90% of the traffic as legit traffic coming from whitelisted servers. If it comes from whitelisted servers, I don't need to go every request through the backbone; I could easily just IP whitelist everything. Then I could maybe have Bot Management on my infrastructure that drastically reduces the price of Cloudflare. I would like to see Push CDN more improved in the next release of Cloudflare Web Application Firewall. And maybe something similar to Pushpin that Fastly has, which is an option where you can push messages that then can be scaled globally over the network. From our perspective, if we have a listener that listens for stock updates, I would just need to have one processor that pushes those updates to the Cloudflare API, and then Cloudflare would broadcast that message to all listeners. Cloudflare will check the order of the message, and if you, as a customer, are not connected or have some kind of network issue, when you reconnect, you will receive the latest state and missing updates.

Read full review

Kallamuddin Ansari

Cyber Security Consultant at ProTechmanize

Application security has protected critical banking services while policy learning minimizes false blocks

F5 Advanced WAF performs well overall, but I have noticed some points that could enhance the solution. Initially, policy tuning could be simpler, as while the learning engine is powerful, initial tuning still requires experienced engineers, which can be challenging for new teams due to the complexity of options and parameters. A more guided and simple tuning workflow would help reduce the learning curve. Additionally, tighter native integration with SIEM or SOAR tools would simplify correlation and investigations for security teams, although log exports are available. Overall, these are not blockers, merely enhancement opportunities, and once tuned, F5 Advanced WAF is very stable and reliable; improving usability, reporting, and onboarding would make it even more effective for larger environments.

Read full review

Mohamed Fouad

Cybersecurity Team Leader at EMAK For Computer Manufacturing (ECM)

Web protection has improved security posture and prevents advanced bot and zero-day attacks

In my opinion, the best features of Fortinet FortiAppSec Cloud are usability and price, which are the two strongest features from Fortinet security products. We use the advanced bot mitigation, which supports credential stuffing, account takeover prevention, and stopping layer 7 DDoS and OWASP Top 10 attacks. With the bot mitigation in Fortinet FortiAppSec Cloud, we control end users whenever they connect to our website, checking that they are not bots and allowing access only after verification. We run AI detection in a testing phase, using both basic and advanced security measures, including API security and XML protection. AI helps by providing machine learning that suggests which policies need tuning and which signatures need to be added to our policy. Fortinet FortiAppSec Cloud's adaptability to traffic patterns helps mitigate zero-day vulnerabilities through machine learning. Fortinet FortiAppSec Cloud helps our organization by relying on Fortinet threat intelligence, which provides information on newly emerging zero-day attacks, allowing us to run signatures to stop these attacks. We utilize the dynamic learning capabilities for threat updates.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It protects web applications efficiently."

"Cloudflare WAF provides protection through rules and functionalities like Cloudflare's SDRAP."

"The solution protects our application, which runs on the HTTP protocol, from DDoS attacks."

"There is a huge signature repository"

"The stability of Cloudflare Web Application Firewall deserves a perfect 10 out of 10."

"We extensively use the solution every day. The solution is very stable; we haven’t seen any glitches."

"It is a SaaS solution unlike much of the competition."

"The rate limiting features and customizations in terms of URL match and applying policies are valuable to me."

More Cloudflare Web Application Firewall pros

"It's flexible and powerful, and the users can input their own rules to the system."

"It can scale."

"The solution uses AI to protect against botnet attacks."

"The initial setup was was easy to install."

"WAF functionality is valuable for protecting applications from attacks."

"What a WAF is happens to be exactly what we are using F5 WAF for: a firewall for our web applications."

"It is easy to obtain dashboard compliance because security policy views are included."

"F5 Advanced WAF is a comprehensive community platform with a strong commitment, making it valuable for businesses."

More F5 Advanced WAF pros

"We have seen a reduction in incidents and a good return on investment from Fortinet FortiAppSec Cloud, with our return on investment around 60%."

Cons

"Its stability could be better."

"There could be an option to duplicate the cluster to maintain the consistency of rules."

"A key challenge arises when dealing with numerous integrations with HVAC systems. Depending on the specifics, there might be some configuration mismatches, which necessitate specific support."

"Cloudflare Web Application Firewall should improve visibility for a customer."

"We don't even use Cloudflare Bot Management because it's too expensive; you need to pay per request, and it's much cheaper to get one or two additional machines."

"They have some limitations with third-party integrations."

"The user interface is very simple and straightforward, but users need knowledge about DNS to accomplish tasks."

"The reporting could be more granular."

More Cloudflare Web Application Firewall cons

"The BNS module needs improvement."

"The product could be more user-friendly for administrators."

"For me, an area for improvement in F5 Advanced WAF is the reporting as it isn't so clear."

"One thing that can be improved, is to increase the quantity over predefine policy."

"There should be more ability to rate limit certain scenarios. The majority of the time, it is either on or off. For certain types of use cases, there should be the ability to rate limit, not just enable or disable."

"You have to buy another module with an extra license to have the authentication feature."

"On the features I wish existed, Big-IP Advanced WAF is primarily an on-premises solution and in that solution, there are not enough features that need to be there to protect API-based applications."

"Compatibility with multiple cloud environments needs improvement. Both stability and scalability need to be improved."

More F5 Advanced WAF cons

"Real-time traffic analysis has posed an issue for us because we did not see logs for legitimate traffic."

Pricing and Cost Advice

"It is not too pricey."

"The annual licensing fee is $10,000 USD."

"We pay $210 per month for CloudFlare WAF."

"Cloudflare offers different types of subscriptions for businesses, enterprises, and personal users, and the pricing is negotiable."

"The solution is expensive."

"It starts at $20 and can easily go up to $200 monthly"

"Cloudflare Web Application Firewall is more affordable than other solutions."

"What's my experience with pricing, setup cost, and licensing? I believe the pricing is not the best, but it's reasonable and acceptable. We also use the McAfee system in parallel. In terms of pricing, its okay - not great, but not bad either. It falls in the middle, which is acceptable. In terms of support licensing, last time, we were searching for a solution, and we considered products from resellers rather than directly from the cloud provider. However, the pricing we encountered was exceptionally high. As a result, we are inclined to select support from the reseller."

More Cloudflare Web Application Firewall pricing and cost advice

"Its price is fair. We have done a couple of deals where they were able to give some kind of discount to the customers. The price was initially high for the customers, but after a couple of negotiations, it came within their budget. They were happy with that."

"I don't have any issue with the pricing of this solution."

"Pricing for this solution is higher than average."

"The price of F5 Advanced WAF could improve it is expensive."

"The solution is very expensive so should only be used in the right environment."

"A yearly license for F5 Advanced WAF is expensive."

"As far as the pricing of F5 Advanced WAF I would rate it a four out of five depending on what features I am looking for. Imperva is more expensive."

"There is an annual subscription for this solution."

More F5 Advanced WAF pricing and cost advice

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.

See recommendations

884,933 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

11%

Manufacturing Company

Financial Services Firm

Comms Service Provider

Financial Services Firm

14%

Computer Software Company

11%

Government

Manufacturing Company

No data available

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	16
Midsize Enterprise	6
Large Enterprise	6

By reviewers
Company Size	Count
Small Business	26
Midsize Enterprise	15
Large Enterprise	31

No data available

Questions from the Community

What is your experience regarding pricing and costs for Cloudflare Web Application Firewall?

The price of Cloudflare Web Application Firewall is reasonable.

See all answers

What needs improvement with Cloudflare Web Application Firewall?

I don't see room for improvement to Cloudflare Web Application Firewall. One thing I don't know much about because we...

See all answers

What is your primary use case for Cloudflare Web Application Firewall?

We are using Cloudflare Web Application Firewall's advanced reporting and analytics tools with their Zero Trust, so e...

See all answers

What do you like most about F5 Advanced WAF?

It's a fairly easy-to-use and user-friendly tool. My administrators and team also like its ability to customize the r...

See all answers

What is your experience regarding pricing and costs for F5 Advanced WAF?

The pricing for F5 Advanced WAF is a bit higher, but not that high. I would say for a good amount of revenue-generati...

See all answers

What needs improvement with F5 Advanced WAF?

On the features I wish existed, Big-IP Advanced WAF is primarily an on-premises solution and in that solution, there ...

See all answers

Ask a question

Earn 20 points

Comparisons

Fortinet FortiWeb vs Cloudflare Web Application Firewall

Compared 8% of the time

Check Point CloudGuard WAF vs Cloudflare Web Application Firewall

Compared 7% of the time

Imperva Application Security Platform vs Cloudflare Web Application Firewall

Compared 6% of the time

Azure Web Application Firewall vs Cloudflare Web Application Firewall

Compared 5% of the time

More Cloudflare Web Application Firewall Competitors

Fortinet FortiWeb vs F5 Advanced WAF

Compared 23% of the time

Imperva Application Security Platform vs F5 Advanced WAF

Compared 8% of the time

Microsoft Azure Application Gateway vs F5 Advanced WAF

Compared 6% of the time

AWS WAF vs F5 Advanced WAF

Compared 5% of the time

NetScaler vs F5 Advanced WAF

Compared 3% of the time

More F5 Advanced WAF Competitors

Fortinet FortiWeb vs Fortinet FortiAppSec Cloud

Compared 20% of the time

Cloudflare vs Fortinet FortiAppSec Cloud

Compared 14% of the time

OpenText Dynamic Application Security Testing vs Fortinet FortiAppSec Cloud

Compared 10% of the time

Aryaka Unified SASE Platform vs Fortinet FortiAppSec Cloud

Compared 10% of the time

open-appsec vs Fortinet FortiAppSec Cloud

Compared 4% of the time

More Fortinet FortiAppSec Cloud Competitors

Product Reports

Buyer's Guide

Cloudflare Web Application Firewall

March 2026

Cloudflare Web Application Firewall report

Download Cloudflare Web Application Firewall product report

Buyer's Guide

F5 Advanced WAF

March 2026

Download F5 Advanced WAF product report

Buyer's Guide

Web Application Firewall (WAF)

March 2026

Download Fortinet FortiAppSec Cloud product report

Also Known As

Cloudflare WAF

No data available

Overview

Cloudflare Web Application Firewall's intuitive dashboard enables users to build powerful rules through easy clicks and also provides Terraform integration. Every request to the WAF is inspected against the rule engine and the threat intelligence curated from protecting over 27 Million websites. Suspicious requests can be blocked, challenged or logged as per the needs of the user while legitimate requests are routed to the destination, agnostic of whether it lives on-premise or in the cloud. Analytics and Cloudflare Logs enable visibility into actionable metrics for the user.

Cloudflare

F5 Advanced WAF is a web application security solution for financial and government sectors, e-commerce, and public-facing websites. It offers protection against various attacks, including botnets, web scraping, and foreign entities. The solution can be deployed on-premises or in the cloud and is often used with other security tools. Its most valuable features include DDoS and DNS attack protection, SSL uploading, anomaly detection, and the ability to input custom rules.

F5 Advanced WAF has helped organizations to expose more services to the public while providing an extra layer of protection, preventing revenue loss, and securing connectivity.

Fortinet FortiAppSec Cloud is a comprehensive security offering, designed to protect applications across cloud environments. It focuses on providing advanced security measures that cater to the needs of enterprises looking for robust application protection.

Fortinet FortiAppSec Cloud leverages an array of sophisticated technologies to offer top-tier security for cloud applications. It safeguards against threats by implementing features such as cutting-edge machine learning models and real-time threat intelligence. This ensures data integrity and application availability, crucial for maintaining normal business operations. By integrating seamlessly into cloud environments, Fortinet FortiAppSec Cloud offers a user-friendly experience that does not compromise on security.

What are the key features of Fortinet FortiAppSec Cloud?

Machine Learning Models: Employs AI for threat detection and prevention, enhancing security efficiency.
Real-Time Threat Intelligence: Offers timely updates to combat emerging threats.
Seamless Cloud Integration: Ensures easy deployment and operation within cloud infrastructures.
Scalability: Adapts to growing business needs, providing consistent security coverage.

What benefits should users expect when evaluating Fortinet FortiAppSec Cloud?

Cost Efficiency: Reduces expenses by preventing security breaches and minimizing downtime.
Enhanced Security Posture: Provides improved protection, reducing vulnerability exposure.
Operational Efficiency: Streamlines management, allowing IT teams to focus on strategic tasks.
Future-Proof Investment: Offers scalable security to meet evolving business demands.

Fortinet FortiAppSec Cloud is widely implemented across industries such as finance, healthcare, and e-commerce. Organizations in these fields benefit from its ability to secure sensitive data and maintain compliance with rigorous industry standards. Its adaptive design ensures that businesses can provide secure and reliable services to their customers at all times.

Fortinet

Sample Customers

crunchbase, udacity, marketo, okcupid, zendesk

MAXIMUS, Vivo, American Systems, Bangladesh Post Office, City Bank

Information Not Available

Buyer's Guide

Web Application Firewall (WAF)

March 2026

Download Free Report

Find out what your peers are saying about Fortinet, F5, Imperva and others in Web Application Firewall (WAF). Updated: March 2026.

DOWNLOAD NOW

884,933 professionals have used our research since 2012.

See our list of best Web Application Firewall (WAF) vendors.

We monitor all Web Application Firewall (WAF) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.