Try our new research platform with insights from 80,000+ expert users

Fortinet FortiDDoS vs Imperva Application Security Platform comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 21, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Ranking in Distributed Denial-of-Service (DDoS) Protection
1st
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
77
Ranking in other categories
CDN (1st), WAN Optimization (4th), Managed DNS (1st), Domain Name System (DNS) Security (5th), Cloud Security Posture Management (CSPM) (13th)
Fortinet FortiDDoS
Ranking in Distributed Denial-of-Service (DDoS) Protection
13th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
15
Ranking in other categories
No ranking in other categories
Imperva Application Securit...
Ranking in Distributed Denial-of-Service (DDoS) Protection
4th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
133
Ranking in other categories
CDN (4th), Web Application Firewall (WAF) (4th), Bot Management (1st), API Security (2nd)
 

Mindshare comparison

As of December 2025, in the Distributed Denial-of-Service (DDoS) Protection category, the mindshare of Cloudflare is 17.8%, up from 17.9% compared to the previous year. The mindshare of Fortinet FortiDDoS is 2.5%, down from 2.9% compared to the previous year. The mindshare of Imperva Application Security Platform is 7.7%, down from 8.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Distributed Denial-of-Service (DDoS) Protection Market Share Distribution
ProductMarket Share (%)
Cloudflare17.8%
Imperva Application Security Platform7.7%
Fortinet FortiDDoS2.5%
Other72.0%
Distributed Denial-of-Service (DDoS) Protection
 

Featured Reviews

HA
Owner at Hga consulting
Has helped manage client domains with streamlined access control and threat visibility
I don't know what areas could be improved with Cloudflare WAF; Cloudflare is constantly improving and adding features to their feature set. They're doing a good job, and as far as DNS and support for any domains that I create or my clients create, it's mandatory for me to make sure that they have Cloudflare as their DNS provider. The Cloudflare load balancing capability hasn't really helped in enhancing my website's uptime and resiliency because we don't really get that much traffic; it's mostly remote users, and web hosting is done by a web hosting service. It doesn't pay to try to host your own website.
MO
IT Analyst at Evapco, Inc.
Reliable protection and smooth setup enhance company security
Currently, I have two firewalls, with one located in Sorocaba, model 90D, and the other in São Paulo, model 30D. They are connected by VPN. I use the firewalls for VPN and final protection for my company, and my equipment is maintained by an internet company called Multiprox The equipment works…
reviewer1247523 - PeerSpot reviewer
Head of Sales Services Department at a comms service provider with 51-200 employees
Solution ensures website availability and proactive threat mitigation
Over the seven years, the most valuable features of Imperva DDoS that I have found are related to DDoS attacks, which are a group of attacks, and not all of them can be resolved on the endpoint level before the website. Using the web firewall before the website is a common use case to protect against malicious requests to the website. I have utilized Imperva's Intelligent Traffic Filtering feature. This feature helps me understand how the attack is progressing and what is happening inside the requests to our website. It allows me to granularly grant or deny access to certain parts of our website. This helps when we know our customers and the types of requests that can be sent from them, enabling us to block some malicious requests. Imperva DDoS has User Behavior Analytics and Threat Intelligence on its board, and this helps us to be protected proactively. Imperva DDoS connects to its database of threats, storing whole information about attacks all over the world in one simple engine. Everyone can use this feature, which can connect to this engine and get information about what is going on at the world level. That is the way to be protected at the company's level. The integration capabilities of Imperva DDoS are very easy and simple. We can run it in 2 hours.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature of Cloudflare DNS is its global reach and it is always evolving."
"Cloudflare is a security SaaS provider that provides security and protects us from any application layer attack."
"The attacker won't have details since my public IP is anonymous. It offers us good privacy."
"What I like best about Cloudflare is that my company can use it to trace and manage applications and monitor traffic. The solution tells you if there's a spike in traffic. Cloudflare also sends you a link to check your equipment and deployment and track it through peering, so it's a valuable tool."
"Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications."
"It is easier to configure and develop documentation to see how we have configured firewalls."
"The features of Cloudflare were found to be more beneficial and led to the decision to utilize it over other options."
"Its ease of integration with Office 365 and the fact that it's a good product compared to what I had before"
"The equipment works very well, and I have not encountered any issues with it. It is a good solution for my company."
"It is a user-friendly product in terms of monitoring and updating policies."
"The product allows the users to adjust the thresholds."
"Among its key features: Detects and mitigates DDoS attacks at L3 to L7; negligible to zero false-positives; Generates and sends reports without the need for an expensive third-party solution."
"The protection resources and the support are valuable features of the solution."
"Packet inspection has been effective for mitigating DDoS attacks."
"The product's initial setup phase was really easy."
"The most valuable feature is the cloud DDoS scrubbing capability."
"It has fewer false positives"
"It works right out of the box once you integrate the application."
"They're quite easy to install and quite easy to set up. Clients really like that. Especially when you're dealing with the cloud, it's really easy."
"The WAF itself has been very valuable to me because it has such a complete range of features. Another reason why I like it is because it also takes care of the total overview of the traffic over the network."
"The solution integrates seamlessly with other tools and has a good alert mechanism."
"It has threat intelligence and we are using Incapsula. With threat intelligence, we can separate HTTP and HTTPS traffic. We can use Incapsula to send all the threat intelligence to the WAF."
"The solution is cloud-based and offers us good uptime. It has combined web and API security. Therefore, with one license, you access both application security and also API security."
"The most valuable features are DDoS protection."
 

Cons

"The reporting can definitely be improved to offer a lot more explanation on something that may have happened or has actually happened."
"DNS Management."
"Cloudflare's free plan is limited to 5,000 records for their free plan. They should increase that. For example, if I create a domain called abc.com and a subdomain called a.abc.com, my record count will be two. I can make a maximum of 5,000 subdomains. However, if we use our own DNS hosted on another provider, there is no limit. Their free plan also lacks name server customization."
"I believe they currently have this feature, but there will most likely be integration with APIs so we can control some features through API."
"There should be a specific price list for enterprise-level customers."
"Cloudflare doesn't have a reverse lookup. We can only do a DNS lookup to get the IP address from the hostname. It doesn't work if you want to look up the hostname from an IPA address."
"The tool needs to improve caching of servers. The product needs to include PFX certificate as well."
"It should confirm audit findings of the assigned area with auditees to ensure that the audit conclusions are based on an accurate understanding of the issues."
"I would like to see analytics, big data."
"Alerts and reporting features must be improved."
"The tool needs to focus more on the area of application traffic management, where it currently has some shortcomings."
"I find that there have been issues in the past year with the solution hanging. It freezes often."
"The primary area for improvement is the on-premises capacity limit, currently fixed at 10 GB."
"The web interface could be much better."
"The product’s pricing needs improvement."
"All the thresholds that need to be configured should be included in the default so that user will not forget or misconfigure."
"Imperva Web Application Firewall is very expensive."
"It would be helpful to have a "recommended deployment", or even a list of basic features that should either be used or turned on by default."
"Imperva now offers add-ons to add functionality, but I would like to see these included in the product, even if it would cost more."
"Users would benefit from better documentation. There is official documentation, but sometimes we need more detail. We have some use cases that are not so run of the mill. It would be great if there was a knowledge base that we could go to for more answers."
"The product could use a broader scope in the area of policies."
"An improvement for Imperva WAF would be to reduce the number of false positives and create more strong use cases based on AI/ML or behavioral analytics."
"Some maintenance must be performed by our IT team."
"The initial setup could be simplified. Every time you have to install the solution you have to get in touch with support or somebody that can to do that for you."
 

Pricing and Cost Advice

"The cost primarily depends on the size of the organization."
"For Cloudflare, I recommend it heavily for small businesses with revenue under a couple of million dollars. Onboarding is easy, and they even have a free plan. This makes it simple for businesses in the $100,000-$500,000 range to try it out and see its value, allowing them to scale up their infrastructure as needed."
"In terms of licensing costs, we don't pay for licensing for Cloudflare. We only establish communication, then for peering, Cloudflare takes care of the cross-connection in different data centers."
"It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
"The price is reasonable."
"The pricing depends on the usage, but the cheapest would be around 5,000 USD a month."
"Cloudflare's pricing is not much higher and is good for middle-level organizations."
"We are using the free version."
"The solution is reasonably priced."
"It's quite pricey."
"The product’s pricing needs improvement."
"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a five out of ten."
"Pricing could be more competitive."
"Imperva Web Application Firewall price is higher compared to other solutions. However, everything is included in the price."
"Imperva charges us based on bandwidth, which is better than other vendors that charge us according to data transfer."
"The license is on a yearly basis."
"The cost is on par with other solutions such as Cloudflare and Akamai."
"Varies depending on the needs of the customer."
"There are a couple of different licensing models."
report
Use our free recommendation engine to learn which Distributed Denial-of-Service (DDoS) Protection solutions are best for your needs.
879,371 professionals have used our research since 2012.
 

Comparison Review

it_user68487 - PeerSpot reviewer
Security Expert with 51-200 employees
Nov 6, 2013
CloudFlare vs Incapsula: Web Application Firewall
CloudFlare vs Incapsula: Round 2 Web Application Firewall Comparative Penetration Testing Analysis Report v1.0 Summary This document contains the results of a second comparative penetration test conducted by a team of security specialists at Zero Science Lab against two cloud-based Web…
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Financial Services Firm
10%
Comms Service Provider
10%
Manufacturing Company
8%
Manufacturing Company
12%
Comms Service Provider
9%
Financial Services Firm
9%
Computer Software Company
8%
Financial Services Firm
12%
Computer Software Company
11%
Manufacturing Company
9%
Insurance Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise8
Large Enterprise25
By reviewers
Company SizeCount
Small Business10
Large Enterprise6
By reviewers
Company SizeCount
Small Business83
Midsize Enterprise25
Large Enterprise61
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Arbor would be the best bid, apart from Arbor, Palo Alto and Fortinet have good solutions. As this is an ISP, I would...
What do you like most about Fortinet FortiDDoS?
The product's initial setup phase was really easy.
What is your experience regarding pricing and costs for Fortinet FortiDDoS?
Fortinet FortiDDoS offers lower costs compared to other solutions. The licensing costs are annually renewed.
Which Web Application Firewall (WAF) would you recommend? R&S or Imperva?
Imperva is a strong choice, given their security focus and ongoing R&D into the product in areas such as bot mana...
What do you like most about Imperva Incapsula?
We use Imperva DDoS to stop DDoS attacks and reduce the amount of unwanted queries against web services or web scraping.
What is your experience regarding pricing and costs for Imperva DDoS?
The pricing, setup costs, and licensing of Imperva DDoS are reasonable for the amount of technical capabilities provi...
 

Also Known As

Cloudflare DNS
Fortinet DDoS, FortiDDos
Imperva Bot Management, Imperva Web Application Firewall, Imperva API Security
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Black Gold Regional Schools, Amadeus Hospitality, Jefferson County, Chunghwa Telecom, City of Boroondara, Dimension Data
Hitachi, BNZ, Bitstamp, Moz, InnoGames, BTCChina, Wix, LivePerson, Zillow and more.
Find out what your peers are saying about Fortinet FortiDDoS vs. Imperva Application Security Platform and other solutions. Updated: December 2025.
879,371 professionals have used our research since 2012.