Try our new research platform with insights from 80,000+ expert users

Fastly vs Imperva Application Security Platform comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 17, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Ranking in CDN
1st
Ranking in Distributed Denial-of-Service (DDoS) Protection
1st
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
77
Ranking in other categories
Managed DNS (1st), Cloud Security Posture Management (CSPM) (12th)
Fastly
Ranking in CDN
8th
Ranking in Distributed Denial-of-Service (DDoS) Protection
11th
Average Rating
8.8
Reviews Sentiment
6.3
Number of Reviews
9
Ranking in other categories
Web Application Firewall (WAF) (19th)
Imperva Application Securit...
Ranking in CDN
4th
Ranking in Distributed Denial-of-Service (DDoS) Protection
4th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
133
Ranking in other categories
Web Application Firewall (WAF) (3rd), Bot Management (1st), API Security (2nd)
 

Mindshare comparison

As of November 2025, in the Distributed Denial-of-Service (DDoS) Protection category, the mindshare of Cloudflare is 18.3%, up from 17.5% compared to the previous year. The mindshare of Fastly is 2.6%, up from 2.2% compared to the previous year. The mindshare of Imperva Application Security Platform is 7.3%, down from 8.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Distributed Denial-of-Service (DDoS) Protection Market Share Distribution
ProductMarket Share (%)
Cloudflare18.3%
Imperva Application Security Platform7.3%
Fastly2.6%
Other71.8%
Distributed Denial-of-Service (DDoS) Protection
 

Featured Reviews

Carlos Alam Hernandez Baruch - PeerSpot reviewer
Fast and secure deployments simplify operations for government and fintech clients
It is a fast and secure DNS. It is very easy to deploy, and my customers are happy with this tool. Additionally, the CDN performance in Mexico is excellent, providing fast service and tools. It offers reliability during high-traffic periods, ensuring no impact on the environment. It helps my clients avoid using on-premise boxes, simplifying operations as they only use the prices on Cloudflare.
Nick Wilsdon - PeerSpot reviewer
An easily scalable and stable product that provides exceptional support
The product should provide improved bot detection and management. The product should also provide support for code management. Everybody working in CDN is currently looking for ways to better manage code deployment with various authorization levels and synchronization with our lower environments. Matching up what's happening in CDN with what's happening on the origin regarding testing would always be useful.
Mitesh D Patel - PeerSpot reviewer
Effectively defends against threats like cross-site scripting (XSS), SQL injection, and others
It does bring value. For example, consider a BFSI customer. Their application is critical and represents their brand. Without a WAF, an attack could take their application down, harming their reputation. It leads to hampering the customer's workflow. With an Imperva WAF, they protect against attacks like DDoS or SQL injection, ensuring their application remains available and customers are happy. That's the main benefit for both the customer and the organization. The impact depends on the customer's use case. If their business primarily operates online, a CDN is beneficial for traffic optimization. Moreover, the integration options depend on the specific use case of our customers. Generally, integration capabilities are good with SIEM (Security Information and Event Management) parts.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"DDoS attacks target unprotected machines. Cloudflare detects and stops these attacks using internal systems. It identifies incoming DDoS attacks, issuing challenges or blocking them immediately."
"The technical support is good."
"It is a stable solution. I rate the stability a ten out of ten...I rate the scalability a ten out of ten."
"Centralized, full-featured DNS."
"The most valuable feature is its usability."
"It is a fast and secure DNS."
"The most valuable feature of Cloudflare is the GUI. You are able to control the solution very well through the interface. There is a lot of functionality that is embedded in the service."
"Generally, I am satisfied with this product."
"Its initial setup process is straightforward."
"The product's initial setup phase is straightforward."
"Fastly uses configuration versioning, where you can deploy a new version in less than one minute."
"Compute@Edge features are valuable to me."
"Rate limiting is a good feature that protects from volumetric attacks."
"The product helps our organization to access sites located in different regions quickly."
"Support is good; the product works as advertised. We have a Slack connection with them. So we can basically ask for help, live, engage, and ring when they respond. Very quickly."
"Fastly provides CDN, WAF, image optimization, and IP restriction."
"IncapRules is one of the most valuable features, as you can create your own security and access control rules on top of your security policy. Using IncapRules we were able to easily block Layer 7 DDoS attacks several times."
"The most valuable features of Imperva Web Application Firewall are the monitoring of databases and the dashboards are easy to understand."
"The configurability of the tools and the ease of operation to be the most valuable feature of Imperva."
"Imperva has a complete picture of how the applications are utilizing it. It is handy. DDoS is good. It has an internally managed database. It is very easy to integrate. We have integrated it with SIEM services."
"The most valuable features are DDoS protection."
"It works right out of the box once you integrate the application."
"The solution is cloud-based and offers us good uptime. It has combined web and API security. Therefore, with one license, you access both application security and also API security."
"The technical support is excellent."
 

Cons

"We are a product integrator and reseller, and we would like to have a better partner relationship, similar to a channel sales relationship. Sometimes we are on our own or get diverted by Cloudflare because they have direct sales, which competes with us and makes it difficult to build a relationship with this company since we want to be an MSP or a managed service provider for the solution."
"The product support needs to be accessible from more places, a wider area of coverage."
"Even if I wanted to, I wouldn't be able to buy Cloudflare in my country."
"I believe they currently have this feature, but there will most likely be integration with APIs so we can control some features through API."
"It would be beneficial for us if Cloudflare could offer a scrubbing solution. This would involve taking a snapshot of my website and keeping it live during a DDoS attack, ensuring uninterrupted service for our users. DDoS attacks are typically short in duration, and having Cloudflare maintain the site's availability from its secure network would enhance the overall user experience. I would appreciate it if Cloudflare could consider implementing this feature. Many organizations already utilize similar capabilities in their CDN platforms, where a static snapshot of the web page is displayed during DDoS attacks. In terms of features, Cloudflare needs to enhance its resilience and stay more focused on adopting new technologies. For instance, solutions like F5 XC Box, Access Solution, and Distributed Cloud Solution have impressive features, and Cloudflare should strive to match and exceed those capabilities. There's a need for improvement in areas like AI-based DDoS attacks and Layer 7 WAF features. Cloudflare should prioritize enhancements in areas such as behavioral DDoS and protection against SQL injection attacks, considering the prevalent trend of public exposure to the internet for business reasons. Overall, Cloudflare needs to invest more in advancing its feature set."
"Sometimes their more advanced caching tools can cause higher first-byte times and problems with JavaScript."
"Latencies are always a problem."
"Although I think it's quite good, it doesn't provide me with all the features I would expect to have if I were using Imperva."
"Support is not that great."
"It is missing a "staging" platform to deploy a test configuration with all of the real settings, which would allow us to properly test before putting it into production."
"The solution's pricing could be better."
"Stronger analytics would be helpful, like showing configurations that haven't served a certain amount of traffic in a while. With many properties, things can get lost track of - duplicates or unused configurations not properly decommissioned."
"Fastly's customer service area needs improvement."
"What I don't like about Fastly is that they charge a heavy price."
"The product should provide improved bot detection and management."
"We are not getting quick responses from Fastly technical support engineers. Sometimes they depend on their D3 developers."
"It would be helpful to have a "recommended deployment", or even a list of basic features that should either be used or turned on by default."
"It should be more user-friendly. Like other web solutions, it would be helpful to be able to easily do policy configuration and identification inside the application. Understanding the in-depth configuration of a policy is somewhat difficult for an engineer, and they can improve that."
"Imperva now offers add-ons to add functionality, but I would like to see these included in the product, even if it would cost more."
"We had an issue when securing the web applications for DDoS protection."
"There’s nothing that’s missing in terms of features."
"It would be useful if the solution used more intelligence in attack protection. For example, firewalls are to be dependent on the configuration, but if they could have some data science around it the solution would be even better. The profiling of the traffic, and making decisions surrounding that should be intelligence-based, instead of being based on the configuration of the firewall itself."
"The process to upgrade from one version to another can be a lot simpler than it is currently."
"It would be nice to have more security control over mobile applications so I would suggest adding more mobile security features. It would also be beneficial to see improvements in regards to interface bandwidth performance, CPU time, and RAM size. Learning capability of the device is quite weak."
 

Pricing and Cost Advice

"The pricing for the service is reasonable, neither excessively cheap nor prohibitively expensive. It aligns well with the value of their solution."
"So far I use free tier and happy with it. You can subscribe to business package if needed."
"The price is reasonable."
"That is one of the great features. I was able to access the majority of the features and services for free."
"I think the pricing is competitive. I think as far as licensing is concerned it's pretty straightforward because it's based on domain. It's just that sometimes domains could be tricky with some customers."
"The solution has many features but there are ones that you need to pay for. Sometimes you have to find out which is available for free and which you have to pay for."
"The tool is a premium product, so it is very expensive."
"The cost primarily depends on the size of the organization."
"Fastly is less expensive than one of its competitors."
"It is an expensive solution."
"I've generally found Fastly to be very competitive in pricing, especially around Compute@Edge."
"The solution is cheaper than other products in the market."
"In my opinion, Fastly is priced competitively."
"You need to pay a premium price for the tool."
"The pricing has been very competitive."
"​Although the pricing can be a little high, it is worth the protection and security that it offers.​"
"There are a couple of different licensing models."
"The cost is somewhere around $10,000 a site. For every site, you pay individually. For every DNS entry, you have you pay."
"I rate the product price a four on a scale of one to ten, where one is a low price, and ten is a high price."
"It is a very expensive solution. The price is very high. A lot of customers tell us that they would love to use Imperva more. I have some customers who have 50 websites, but they have only 10 websites on Imperva because of the price. They would love to have all their websites running through Imperva, but they can't. They have to choose the more critical websites to protect because the price is very high. It is a very good product, but it is too expensive. If you buy a plan for 20 megabytes and you don't consume all of your 20 megabytes, it is okay, but if you consume more, you are charged for the superior traffic."
"Licensing can range from one to twenty thousand dollars annually. Additionally, some features, including software support, require an annual subscription as well."
"Make sure you understand the way that Imperva charges. It's very affordable. However, I would like to see a package with the Virtual Patching included. You get to do patching separately."
"It is a very affordable solution."
report
Use our free recommendation engine to learn which Distributed Denial-of-Service (DDoS) Protection solutions are best for your needs.
873,252 professionals have used our research since 2012.
 

Comparison Review

it_user68487 - PeerSpot reviewer
Nov 6, 2013
CloudFlare vs Incapsula: Web Application Firewall
CloudFlare vs Incapsula: Round 2 Web Application Firewall Comparative Penetration Testing Analysis Report v1.0 Summary This document contains the results of a second comparative penetration test conducted by a team of security specialists at Zero Science Lab against two cloud-based Web…
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Comms Service Provider
10%
Financial Services Firm
10%
Manufacturing Company
7%
Computer Software Company
13%
Comms Service Provider
11%
Financial Services Firm
11%
Retailer
9%
Financial Services Firm
13%
Computer Software Company
12%
Manufacturing Company
9%
Insurance Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise8
Large Enterprise25
By reviewers
Company SizeCount
Small Business5
Large Enterprise5
By reviewers
Company SizeCount
Small Business83
Midsize Enterprise25
Large Enterprise61
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about Fastly?
Support is good; the product works as advertised. We have a Slack connection with them. So we can basically ask for h...
What needs improvement with Fastly?
I believe that Fastly should provide guidelines for their WAF blocking rules. It should be public what the rules are ...
Which Web Application Firewall (WAF) would you recommend? R&S or Imperva?
Imperva is a strong choice, given their security focus and ongoing R&D into the product in areas such as bot mana...
What do you like most about Imperva Incapsula?
We use Imperva DDoS to stop DDoS attacks and reduce the amount of unwanted queries against web services or web scraping.
What is your experience regarding pricing and costs for Imperva DDoS?
The pricing, setup costs, and licensing of Imperva DDoS are reasonable for the amount of technical capabilities provi...
 

Also Known As

Cloudflare DNS
No data available
Imperva Bot Management, Imperva Web Application Firewall, Imperva API Security
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Twitter, Airbnb, Alaska Airlines, Pinterest, Vimeo, The Guardian, The New York Times, Ticketmaster, The Drupal Association, Opera, about.com, imgur, Etsy, Foursquare, GitHub, New Relic, shopify, Shazam, Firebase
Hitachi, BNZ, Bitstamp, Moz, InnoGames, BTCChina, Wix, LivePerson, Zillow and more.
Find out what your peers are saying about Fastly vs. Imperva Application Security Platform and other solutions. Updated: November 2025.
873,252 professionals have used our research since 2012.