Try our new research platform with insights from 80,000+ expert users

F5 Advanced WAF vs Fortinet FortiWeb comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 8, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.6
Cloudflare WAF offers essential protection with cost-effective features, supporting various platforms and enhancing website visibility and uptime.
Sentiment score
7.6
F5 Advanced WAF boosts ROI by enhancing security, reducing overhead, and protecting assets in sectors like finance and banking.
Sentiment score
6.5
Fortinet FortiWeb offers cost-effective security, reducing expenses by up to 80%, enhancing reliability, and mitigating cyber threats.
My experience with the pricing or licensing of Cloudflare Web Application Firewall is that many features can be accessed for free, so the pricing is definitely reasonable.
Owner at Hga consulting
Time savings in daily operations come from the automatic learning and signature update reducing the need for constant manual rule management, allowing the security and network teams to spend significantly less time handling false positive application-related escalations.
Cyber Security Consultant at ProTechmanize
Subscription models offer clearer ROI due to a more competitive pricing scheme.
Global Channel Alliances Lead at a tech vendor with 10,001+ employees
The amount of attacks it protects against is immense, more than F5 Advanced WAF itself costs.
Security Solutions Architect at a consultancy with 1-10 employees
 

Customer Service

Sentiment score
6.3
Cloudflare Web Application Firewall's support is praised for responsiveness and helpfulness, despite challenges with contact and Indian support.
Sentiment score
6.9
F5 Advanced WAF's support is professional and helpful, though response times vary based on service level and issue priority.
Sentiment score
6.6
Fortinet FortiWeb's support is responsive and competent, though users note room for improvement in expertise and response times.
I would rate the technical support with Cloudflare as excellent every time I've had to contact them.
Owner at Hga consulting
The technical support of Cloudflare Web Application Firewall rates between five and seven at maximum.
IT Manager at Amla Commerce
Both response time and availability need to be improved.
Project Manager at IBM
F5 Advanced WAF provides the insights and notifications I need in terms of reporting and alerting.
Cybersecurity Team Leader at EMAK For Computer Manufacturing (ECM)
If there is a bug, the support is usually understanding and resolves issues.
CEO at CyberApp
Their support is truly exceptional when I compare it with similar large-sized companies.
Global Channel Alliances Lead at a tech vendor with 10,001+ employees
The expertise of engineers varies across different time zones, affecting the effectiveness of the support provided, especially during our daytime.
Chief Technology Officer at Future Point Technologies
The back-end development team is available, and if any issue arises, they will help us immediately by providing solutions when contacted.
Technical Support Engineer at Intimesolutions
 

Scalability Issues

Sentiment score
7.7
Cloudflare Web Application Firewall excels in scalability and ease of use, supporting large user bases efficiently with minimal management.
Sentiment score
7.5
F5 Advanced WAF is adaptable, scalable, and supports diverse business needs with robust load balancing and cloud capabilities.
Sentiment score
7.1
Fortinet FortiWeb is scalable but limited in hardware upgrades; virtual machines offer more adaptability for various needs.
The scalability of Cloudflare Web Application Firewall rates between 8 to 9, as it depends upon the use cases and what exactly the client needs.
IT Manager at Amla Commerce
I can run it in HA mode or even divide the traffic volume to the number of instances that I have based on their resource sizing.
Security Solutions Architect at a consultancy with 1-10 employees
You can add additional boxes that combine together to achieve a bigger throughput for investigation and research.
Security Team Lead at a outsourcing company with 1,001-5,000 employees
 

Stability Issues

Sentiment score
8.2
Cloudflare Web Application Firewall is praised for its reliable performance, minimal downtime, and effective security features across industries.
Sentiment score
8.4
F5 Advanced WAF is praised for its stability and reliability, handling substantial workloads effectively with minimal bugs.
Sentiment score
7.9
Fortinet FortiWeb is generally reliable, with minimal stability issues, although some users face occasional configuration or version challenges.
The stability of Cloudflare Web Application Firewall deserves a perfect 10 out of 10.
IT Manager at Amla Commerce
F5 Advanced WAF has been very reliable and consistent for us; in our on-premise enterprise setup, it has been stable and predictable in day-to-day operations without any unexpected crashes or WAF-related downtime in production.
Cyber Security Consultant at ProTechmanize
F5 Advanced WAF is pretty stable.
Security Solutions Architect at a consultancy with 1-10 employees
We have not faced any significant issues during deployments.
Chief Technology Officer at Future Point Technologies
 

Room For Improvement

Cloudflare's Web Application Firewall requires ModSecurity upgrades, improved logging, integration, accuracy, more controls, and better documentation.
F5 Advanced WAF needs a user-friendly interface, better integration, competitive pricing, and improved automation, scalability, and documentation.
Fortinet FortiWeb needs improvements in upgrades, support, threat intelligence, user interface, cloud integration, reporting, stability, and load balancing.
The product can improve by having more multitenancy capability, which is currently not available.
Network Architect at a computer software company with 11-50 employees
I think they're doing a good job with DNS and as support for any domains that I create or that my clients create, it's mandatory for me to ensure they have Cloudflare as their DNS provider.
Owner at Hga consulting
And maybe something similar to Pushpin that Fastly has, which is an option where you can push messages that then can be scaled globally over the network.
CTO at PlayNirvana
Deployment training for F5 Advanced WAF is lacking and restricts growth by being inaccessible and costly for partners.
Global Channel Alliances Lead at a tech vendor with 10,001+ employees
Overall, these are not blockers, merely enhancement opportunities, and once tuned, F5 Advanced WAF is very stable and reliable; improving usability, reporting, and onboarding would make it even more effective for larger environments.
Cyber Security Consultant at ProTechmanize
There is excellent clarity in the LTM and the WAF.
Project Manager at IBM
If the GUI includes notifications and improved logging capabilities that allow us to see traffic and store logs for six months, that would be very helpful.
Technical Support Engineer at Intimesolutions
Fine-tuning is a room for improvement in Fortinet FortiWeb.
Joint Director at PAA
After the customer submits a specific question and requests troubleshooting help from Fortinet support, it takes at least three to five days to provide a proper answer.
Security Team Lead at a outsourcing company with 1,001-5,000 employees
 

Setup Cost

Cloudflare's WAF offers competitive pricing from $20 to $10,000, seen as cost-effective but could improve transparency.
F5 Advanced WAF's high cost is justified by its robust features, appealing to enterprises needing comprehensive protection.
Fortinet FortiWeb provides flexible pricing and licensing, appealing to enterprises for cost-effectiveness despite some users noting variable costs.
Licensing is capacity-driven, so you need careful planning based on traffic volume and use cases, and adding features such as Bot Protection impacts costs; once licensing is clear and sized correctly, there are no surprises.
Cyber Security Consultant at ProTechmanize
Subscription models have competitive pricing, while perpetual licenses involve an upfront higher cost.
Global Channel Alliances Lead at a tech vendor with 10,001+ employees
The price is affordable and satisfactory.
CEO at CyberApp
For VM machines, the price increases based on CPU configurations of 2, 4, or 8 CPUs.
Presales Engineer at SAUDI PARAMOUNT COMPUTER SYSTEMS
Most security products charge less at the time of purchase because of competition, but when we go to renewals, the prices become very high.
Joint Director at PAA
Fortinet FortiWeb is cost-effective compared to solutions like F5.
Chief Technology Officer at Future Point Technologies
 

Valuable Features

Cloudflare Web Application Firewall provides scalable DDoS protection, configurable rules, advanced features, and comprehensive support with minimal false positives.
F5 Advanced WAF excels in detection, customization, and reporting, providing comprehensive web application security and user-friendly operation.
Fortinet FortiWeb provides advanced security features and seamless integration, offering cost-effective, robust protection and easy deployment for enterprises.
The custom rules and the geo-redundant geographical rule feature, which allows me to implement geographical rules for customers, add significant value.
Network Architect at a computer software company with 11-50 employees
The best features of Cloudflare Web Application Firewall are multiple, including the WAF, rate limiter, and bot attack protection.
IT Manager at Amla Commerce
Cloudflare Web Application Firewall's advanced reporting and analytics tools add a layer that we're able to visualize and see before it actually hits the local firewall.
Owner at Hga consulting
The Advanced Attack Signature database is very strong and regularly updated, effectively blocking SQL injections, cross-site scripting, command injections, and file inclusion attacks while allowing selective enabling or disabling of signatures to avoid blocking genuine traffic.
Cyber Security Consultant at ProTechmanize
F5 Advanced WAF offers the best features that are capable of stopping any type of attack, and it is a really reliable and stable product that you can rely on to stop any type of attack.
Cybersecurity Team Leader at EMAK For Computer Manufacturing (ECM)
The perpetual license, despite an initial higher cost, lacks transparency regarding support expiration.
Global Channel Alliances Lead at a tech vendor with 10,001+ employees
Fortinet FortiWeb has positively impacted my organization because most of our servers and applications are secure from hackers and other security threats.
Joint Director at PAA
Fortinet's pricing is way more competitive than Cisco or Palo Alto.
Global Channel Alliances Lead at a tech vendor with 10,001+ employees
The machine learning-based threat detection is significant, as it uses a learning method that eases the configuration burden, making it very useful.
Chief Technology Officer at Future Point Technologies
 

Categories and Ranking

Cloudflare Web Application ...
Sponsored
Ranking in Web Application Firewall (WAF)
7th
Average Rating
8.6
Reviews Sentiment
7.4
Number of Reviews
26
Ranking in other categories
No ranking in other categories
F5 Advanced WAF
Ranking in Web Application Firewall (WAF)
2nd
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
73
Ranking in other categories
No ranking in other categories
Fortinet FortiWeb
Ranking in Web Application Firewall (WAF)
1st
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
122
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of February 2026, in the Web Application Firewall (WAF) category, the mindshare of Cloudflare Web Application Firewall is 5.6%, down from 6.6% compared to the previous year. The mindshare of F5 Advanced WAF is 7.5%, down from 10.3% compared to the previous year. The mindshare of Fortinet FortiWeb is 7.8%, down from 8.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Web Application Firewall (WAF) Market Share Distribution
ProductMarket Share (%)
Fortinet FortiWeb7.8%
F5 Advanced WAF7.5%
Cloudflare Web Application Firewall5.6%
Other79.1%
Web Application Firewall (WAF)
 

Featured Reviews

DB
CTO at PlayNirvana
Advanced security reporting has protected high-traffic betting platforms from constant attacks
I don't see room for improvement to Cloudflare Web Application Firewall. One thing I don't know much about because we have a dedicated IT team for that, and I'm not involved with Cloudflare much anymore. But if I were to compare them to F5, I would like to see more features that F5 offers. F5 has an option to bring the whole infrastructure, the whole WAF and all their packages, Bot Management, and everything else on your infrastructure. You need to install certain services from their side, and then you can choose if you would like requests to hit your servers immediately or if requests need to be proxied through F5 backbone. That would be a nice addition because we have 90% of the traffic as legit traffic coming from whitelisted servers. If it comes from whitelisted servers, I don't need to go every request through the backbone; I could easily just IP whitelist everything. Then I could maybe have Bot Management on my infrastructure that drastically reduces the price of Cloudflare. I would like to see Push CDN more improved in the next release of Cloudflare Web Application Firewall. And maybe something similar to Pushpin that Fastly has, which is an option where you can push messages that then can be scaled globally over the network. From our perspective, if we have a listener that listens for stock updates, I would just need to have one processor that pushes those updates to the Cloudflare API, and then Cloudflare would broadcast that message to all listeners. Cloudflare will check the order of the message, and if you, as a customer, are not connected or have some kind of network issue, when you reconnect, you will receive the latest state and missing updates.
Kallamuddin Ansari - PeerSpot reviewer
Cyber Security Consultant at ProTechmanize
Application security has protected critical banking services while policy learning minimizes false blocks
F5 Advanced WAF performs well overall, but I have noticed some points that could enhance the solution. Initially, policy tuning could be simpler, as while the learning engine is powerful, initial tuning still requires experienced engineers, which can be challenging for new teams due to the complexity of options and parameters. A more guided and simple tuning workflow would help reduce the learning curve. Additionally, tighter native integration with SIEM or SOAR tools would simplify correlation and investigations for security teams, although log exports are available. Overall, these are not blockers, merely enhancement opportunities, and once tuned, F5 Advanced WAF is very stable and reliable; improving usability, reporting, and onboarding would make it even more effective for larger environments.
HameedAhmed - PeerSpot reviewer
Joint Director at PAA
Security threats have been reduced through seamless deployment and strong integration with other tools
I have used Fortinet FortiWeb's integration features. We have easily integrated all of the applications with the product. Most of the applications we are using are in-house built. My technical team is looking after the best features. I have not used it extensively for maybe two and a half years. I have been involved in the installation, but I am not actually using the product. I work with it from time to time but not extensively. I would assess Fortinet FortiWeb's adaptive machine learning and artificial intelligence as having new patches installed regarding artificial intelligence, but when we bought it, I think the learning feature was there. Now they have installed artificial intelligence features through patches. We have a complete portfolio of Fortinet in our organization, including FortiMail, Fortinet FortiWeb, and FortiGate, along with multi-factor authentication. All of the products are from Fortinet. Fortinet tools integrate with each other and work in conjunction. I think Fortinet FortiWeb has helped us meet regulatory compliance because we are not a regulatory organization, but our sister organization is regulatory. We have regulatory compliance with the International Civil Aviation Authority, whose audit teams have checked our data center and these security products, and they are satisfied with us. The question about leveraging Fortinet FortiWeb's automated policy management does not pertain to my domain because I am not so technical, but I am in a management role now. My engineer is more technical than me. I would rate this product an eight point five out of ten.
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
882,479 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Manufacturing Company
9%
Financial Services Firm
8%
Comms Service Provider
7%
Financial Services Firm
13%
Computer Software Company
12%
Government
9%
Manufacturing Company
7%
Computer Software Company
9%
Manufacturing Company
8%
Financial Services Firm
8%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise6
Large Enterprise6
By reviewers
Company SizeCount
Small Business26
Midsize Enterprise15
Large Enterprise31
By reviewers
Company SizeCount
Small Business60
Midsize Enterprise27
Large Enterprise36
 

Questions from the Community

What needs improvement with Cloudflare Web Application Firewall?
I don't really use the rule-based logic feature or utilize the WAF's ability to scale as a cloud-based service. I don...
What is your primary use case for Cloudflare Web Application Firewall?
I'm using Cloudflare Web Application Firewall on all my domains and any client domains I have; I set them up with a C...
What do you like most about F5 Advanced WAF?
It's a fairly easy-to-use and user-friendly tool. My administrators and team also like its ability to customize the r...
What is your experience regarding pricing and costs for F5 Advanced WAF?
Regarding the price, I think the cost is a bit higher compared to others. Earlier we were using Radware, and compared...
What needs improvement with F5 Advanced WAF?
In terms of additional features I would like to see from them in the future, I think the GTM is a bit complicated to ...
What do you like most about Fortinet FortiWeb?
The WAF profiles has been effective at mitigating web-based threats.
What is your experience regarding pricing and costs for Fortinet FortiWeb?
The pricing for Fortinet FortiWeb varies with different models having different prices. It depends on the requirement...
What needs improvement with Fortinet FortiWeb?
There is room for improvement in Fortinet FortiWeb. The team was only from FortiGate itself. They are making new firm...
 

Also Known As

Cloudflare WAF
No data available
FortiWeb Web Application Firewall (WAF)
 

Overview

 

Sample Customers

crunchbase, udacity, marketo, okcupid, zendesk
MAXIMUS, Vivo, American Systems, Bangladesh Post Office, City Bank
Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG
Find out what your peers are saying about F5 Advanced WAF vs. Fortinet FortiWeb and other solutions. Updated: February 2026.
882,479 professionals have used our research since 2012.