Try our new research platform with insights from 80,000+ expert users

Fastly vs Wallarm NG WAF comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
77
Ranking in other categories
CDN (1st), WAN Optimization (4th), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Domain Name System (DNS) Security (5th), Cloud Security Posture Management (CSPM) (13th)
Fastly
Average Rating
8.8
Reviews Sentiment
6.3
Number of Reviews
9
Ranking in other categories
CDN (8th), Web Application Firewall (WAF) (18th), Distributed Denial-of-Service (DDoS) Protection (10th)
Wallarm NG WAF
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
5
Ranking in other categories
Web Application Firewall (WAF) (40th), API Security (12th)
 

Featured Reviews

HA
Owner at Hga consulting
Has helped manage client domains with streamlined access control and threat visibility
I don't know what areas could be improved with Cloudflare WAF; Cloudflare is constantly improving and adding features to their feature set. They're doing a good job, and as far as DNS and support for any domains that I create or my clients create, it's mandatory for me to make sure that they have Cloudflare as their DNS provider. The Cloudflare load balancing capability hasn't really helped in enhancing my website's uptime and resiliency because we don't really get that much traffic; it's mostly remote users, and web hosting is done by a web hosting service. It doesn't pay to try to host your own website.
PP
Technical support engineer at Adobe
Optimized ecommerce performance and improved access control through image handling and IP filtering
I believe that Fastly should provide guidelines for their WAF blocking rules. It should be public what the rules are that are blocking their contents. I believe Fastly should provide regional IP addresses instead of POP IPs. Fastly should provide features similar to Cloudflare regarding a block list. Additionally, a POP address should be there with a wide range of IP addresses provided, public static IP addresses, so customers can integrate egress IPs. Fastly should provide WebP image processing on the backend instead of on the fly. It would be a very useful feature to avoid unnecessary time for browser to browser and local cookies. I believe that Fastly service has a few gaps. We are not getting quick responses from Fastly technical support engineers. Sometimes they depend on their D3 developers. There should be transparency.
it_user796242 - PeerSpot reviewer
Information Security Engineer at a tech vendor with 51-200 employees
Helps us to monitor attacks to our sites and prevents a lot of them
Set up Wallarm as a reverse proxy. Do not replace your web server. Use Wallarm first in monitoring mode, then learn from Wallarm which type of request is false positive and which type of request is not. This process takes a couple of weeks for very highly-loaded web applications (few millions of unique visitors in one month). Then you can turn Wallarm into blocking mode and everything will be fine. Do not forget to build a monitoring system, the wave, and API for it. Before we started using Wallarm, I already knew Ivan (CEO) and Stepan (COO) from a couple of years before. Ivan had his own security company and Stepan was working on a Russian security magazine called Xakep. They told us that they wanted to create a new WAF and already had a working version of it. They asked me to test it. We did tests, and it was really good. After few month after testing, we signed an agreement. Our choice was made not because we knew these guys for a long time, but because the product was really cool and we were glad to start using it as one of the first on the market!

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Smaller businesses have seen great ROI due to the low investment and strong performance."
"Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications."
"Cloudflare allows us to self-host services such as Rocket.Chat and Node-RED, in high-availability mode, thanks to round robin DNS which allows us to share one hostname between our two locations."
"The tool is user-friendly."
"It is a fast and secure DNS."
"Many websites require an SSL certificate because they sell stuff and want SSL. Cloudflare comes with an SSL certificate built in. It's automatic. You sign yourself up for Cloudflare, and an SSL certificate automatically protects your website. You don't necessarily need a certificate if you have a connection between your website and your host, the server, Cloudflare, and the host."
"The overall experience with Cloudflare is positive, with a rating of eight out of ten."
"The attacker won't have details since my public IP is anonymous. It offers us good privacy."
"Compute@Edge features are valuable to me."
"Fastly combines both the CDN side and the Signal Sciences next-generation WAF, which is closely integrated with the CDN, allowing us to use both products seamlessly."
"The product helps our organization to access sites located in different regions quickly."
"Fastly provides CDN, WAF, image optimization, and IP restriction."
"Rate limiting is a good feature that protects from volumetric attacks."
"Support is good; the product works as advertised. We have a Slack connection with them. So we can basically ask for help, live, engage, and ring when they respond. Very quickly."
"Fastly uses configuration versioning, where you can deploy a new version in less than one minute."
"The product's initial setup phase is straightforward."
"Helps us to monitor situation in regards to attacks to our sites and prevents a lot of them."
 

Cons

"Cloudflare does not have an on-premise solution. If they had different approaches they could be better suited to accommodate more customers, such as on-premise and hybrid deployments. For example, hybrid deployments would be useful where you could move the traffic from the enterprise to the cloud."
"There should be a specific price list for enterprise-level customers."
"It should have easier documentation for the configuration. It's very technical and people who aren't technical should also be able to do the configuration."
"For the free and Pro plans, Cloudflare could use a simple bot to provide information to users. This would improve support, especially for less advanced users who utilize the free components."
"The solution could work at being less expensive. It costs a lot to use it."
"The product support needs to be accessible from more places, a wider area of coverage."
"Cloudflare could be improved by introducing a mid-tier pricing option."
"Support response time could be improved."
"Fastly's customer service area needs improvement."
"What I don't like about Fastly is that they charge a heavy price."
"It is missing a "staging" platform to deploy a test configuration with all of the real settings, which would allow us to properly test before putting it into production."
"The solution's pricing could be better."
"Stronger analytics would be helpful, like showing configurations that haven't served a certain amount of traffic in a while. With many properties, things can get lost track of - duplicates or unused configurations not properly decommissioned."
"We are not getting quick responses from Fastly technical support engineers. Sometimes they depend on their D3 developers."
"The product should provide improved bot detection and management."
"Support is not that great."
"The biggest problem for us was the stability and speed using the first version of Wallarm. Now, it is fine."
 

Pricing and Cost Advice

"We don't have any issues with the price."
"We are using the free tier of the solution."
"The product's pricing is cheap."
"The price is reasonable."
"It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
"I give the price a five out of ten."
"The product's pricing is minimal compared to other products."
"The price of the solution is expensive."
"The solution is cheaper than other products in the market."
"The pricing has been very competitive."
"You need to pay a premium price for the tool."
"I've generally found Fastly to be very competitive in pricing, especially around Compute@Edge."
"In my opinion, Fastly is priced competitively."
"Fastly is less expensive than one of its competitors."
"It is an expensive solution."
"​Pricing must be cheaper than the competition and the licensing must be good.​"
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
879,259 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Financial Services Firm
10%
Comms Service Provider
10%
Manufacturing Company
8%
Computer Software Company
12%
Comms Service Provider
11%
Financial Services Firm
10%
Retailer
9%
Computer Software Company
13%
Manufacturing Company
12%
Government
12%
Financial Services Firm
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise8
Large Enterprise25
By reviewers
Company SizeCount
Small Business5
Large Enterprise5
No data available
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about Fastly?
Support is good; the product works as advertised. We have a Slack connection with them. So we can basically ask for h...
What needs improvement with Fastly?
I believe that Fastly should provide guidelines for their WAF blocking rules. It should be public what the rules are ...
Ask a question
Earn 20 points
 

Also Known As

Cloudflare DNS
No data available
Wallarm NG-WAF
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Twitter, Airbnb, Alaska Airlines, Pinterest, Vimeo, The Guardian, The New York Times, Ticketmaster, The Drupal Association, Opera, about.com, imgur, Etsy, Foursquare, GitHub, New Relic, shopify, Shazam, Firebase
Panasonic. Miro. Rappi. Wargaming. Gannett. Omio. Acronis. Workforce Software. Tipalti. SEMRush.
Find out what your peers are saying about Fastly vs. Wallarm NG WAF and other solutions. Updated: December 2025.
879,259 professionals have used our research since 2012.