Try our new research platform with insights from 80,000+ expert users

F5 Advanced WAF vs Sucuri comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

F5 Advanced WAF
Ranking in Web Application Firewall (WAF)
2nd
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
69
Ranking in other categories
No ranking in other categories
Sucuri
Ranking in Web Application Firewall (WAF)
24th
Average Rating
8.4
Reviews Sentiment
7.5
Number of Reviews
6
Ranking in other categories
Distributed Denial-of-Service (DDoS) Protection (15th), Domain Name System (DNS) Security (13th)
 

Mindshare comparison

As of June 2025, in the Web Application Firewall (WAF) category, the mindshare of F5 Advanced WAF is 11.1%, up from 10.8% compared to the previous year. The mindshare of Sucuri is 0.7%, down from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Web Application Firewall (WAF)
 

Featured Reviews

Ahmed Moamen - PeerSpot reviewer
Protects applications with versatile authentication features
F5 offers a versatile solution that can be integrated with APM in cases where integration with an external IDB is needed. It is useful for authentication backup if the on-prem directory service is unavailable. Additionally, its WAF functionality is valuable for protecting applications from attacks. It is a versatile and strong solution that's easy to understand and deploy.
Akshit Malik - PeerSpot reviewer
Provides website security, safeguarding against various threats and effective protection against DDoS attacks
The initial setup is moderate because it's neither too easy nor too hard. Sucuri provides us with many ways to set up our site, handle the routing, and perform the necessary configurations. It's deployed on the cloud. We used the managed service of Sucuri and then routed all the requests from Sucuri to our AWS platform.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I definitely recommend this solution because of the time you save on analysis."
"Feature-wise, they are always cutting edge and up-to-date. Many features aren't available via competitors. There's always a lot of enhanced critical features that just aren't available through anyone else, or, if they are, are too lightweight."
"The bot defense capability, as well as protection from brute force attacks and OWASP Top Ten, are notable features."
"Despite a few issues, F5 Advanced WAF is performing well for me."
"The most valuable feature of F5 Advanced WAF is its grand unity of the implementation, where you have the freedom to configure based on how it affects your use case or your organization. With the default setting of implicit deny, you can gradually start defining and deploying the tool to align with your environment, whether it is outdated, recent, or futuristic. This allows you to customize the solution to protect you from threat actors. You have the ability to define what the advanced threat act should do - whether it should alert, deny, or both - and it will deliver based on your configuration. Unlike other online solutions, F5 Advanced WAF provides flexibility to deliver to your unique environment the way you want."
"The solution's most valuable features include application DDoS protection, bot blocking, and HTTP header verifications."
"Very easy to implement and works well."
"F5's user-friendly interface and seamless integration stand out as the most valuable features for us."
"The initial setup was very easy."
"It significantly eases the workload and streamlines the initial setup required to protect a website."
"I use it as a WAF, which is basically a web firewall to monitor and block traffic to our web server."
"The most valuable part is the analytics and visualization."
"Domain name scanning since it allows us to scan all our domain names and determine whether it has malware or if is reported as phishing."
"The initial setup was straightforward. Straight forward because the plugin can simply be installed and then it does its job. It's not complex, there is no learning curve. The online scan is simple, you put in the website address and the scan gives us a report on the browser itself. It's simple to use."
 

Cons

"The accuracy of the automatic learning feature needs improvement."
"I would like to see the API Protection improved."
"The DDoS capabilities should be enhanced."
"F5 Advanced WAF needs better integration within the application, like remote dashboards."
"F5 Advanced WAF could improve resource usage, it is CPU intensive. Additionally, adding automated remediation would be a benefit. For example, an easy button alerts us of the events that are occurring, and what we want to do at the time. An automated approach where somebody could be alerted very quickly. Instead of going and reconfiguring everything, an automated approach is what I'm looking at."
"While F5 Advanced WAF does limit the number of partners in certain regions to ensure successful business transactions, they could also benefit from expanding their partnerships and making it easier for more people to learn about and become experts in F5 Advanced WAF. By doing so, they could increase the reach and exposure of their solution, similar to how Cisco has become widely recognized in the security industry."
"F5 needs to improve API protection with a single F5 solution, without requiring additional modules."
"The BIG-IQ is supposed to centralize the management for all of the boxes but it's not very effective."
"Sucuri could provide help for specific security alerts in-line instead of requiring users to search for it in the help section."
"I would rate this solution an eight out of ten. The reason is that we have found sometimes customers or Google saying that there is something wrong with the website but Sucuri says that the site is clean so we do have to look at the site manually which means that the Sucuri scan does not pick up anything and everything."
"Confident score: Currently it does not have one and there are cases that most websites flagged are false-positives."
"It would greatly benefit customers if they implemented an online chat or messaging system for quicker assistance."
"The main improvement I would like to see is support for .NET applications. If they could include this feature, I would include more sites in the protection."
"In terms of improvement, the cost factor is always there."
 

Pricing and Cost Advice

"F5 Advanced WAF's pricing is high."
"Its price is fair. We have done a couple of deals where they were able to give some kind of discount to the customers. The price was initially high for the customers, but after a couple of negotiations, it came within their budget. They were happy with that."
"I don't have any issue with the pricing of this solution."
"I would rate the pricing as seven out of ten"
"I rate F5 Advanced WAF's pricing a three out of ten."
"There is an annual subscription for this solution."
"As far as the pricing of F5 Advanced WAF I would rate it a four out of five depending on what features I am looking for. Imperva is more expensive."
"I am not sure about pricing but licenses are available on Google."
"Sucuri offers different plans, both the standard plan and an advanced plan. So there are different plans to choose from."
"I’d simply say it’s really worth it."
"The ROI has been very good. Because of the solution, I have a tax break. The site developers were not always experienced people. We used to pay more for cleaning up the site when it was infected. Now, we have peace of mind knowing that the solution will clean up the site and that we won't have to go through the unnecessary process of restoring it from a backup. The protection on the WAF and the measures for backups have also prevented our site from going down."
"It stands out as a more cost-effective option compared to other cloud-based security services like Cloudflare or JetPass."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
857,028 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Computer Software Company
14%
Government
8%
Comms Service Provider
6%
Educational Organization
27%
Computer Software Company
11%
Manufacturing Company
9%
Real Estate/Law Firm
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about F5 Advanced WAF?
It's a fairly easy-to-use and user-friendly tool. My administrators and team also like its ability to customize the rules per the requirements.
What needs improvement with F5 Advanced WAF?
I do not have anything in mind right now that needs improvement. Generally, it works well. If we need any specific feature, we approach F5 directly.
What do you like most about Sucuri?
The initial setup was very easy.
What is your experience regarding pricing and costs for Sucuri?
The pricing is very reasonable. Sucuri offer other features as an add-on, such as backup, but these have an additional cost. We host the sites ourselves, so I don't take it because it was redundant.
What needs improvement with Sucuri?
The main improvement I would like to see is support for .NET applications. If they could include this feature, I would include more sites in the protection. In future releases, perhaps Sucuri could...
 

Overview

 

Sample Customers

MAXIMUS, Vivo, American Systems, Bangladesh Post Office, City Bank
The Loft Salon, Tom McFarlin, WPBeginner, Taylor Town, Everything Everywhere, Financial Ducks in a Row, Chubstr, Real Advice Gal, Sujan Patel, Wallao, List25, School the World
Find out what your peers are saying about F5 Advanced WAF vs. Sucuri and other solutions. Updated: June 2025.
857,028 professionals have used our research since 2012.