Try our new research platform with insights from 80,000+ expert users

FortiWeb Web Application Firewall (WAF) vs Fortinet FortiWeb Cloud WAF-as-a-Service comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
77
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (12th)
Fortinet FortiWeb Cloud WAF...
Average Rating
9.0
Reviews Sentiment
8.7
Number of Reviews
4
Ranking in other categories
Web Application Firewall (WAF) (25th)
FortiWeb Web Application Fi...
Average Rating
8.2
Reviews Sentiment
7.3
Number of Reviews
24
Ranking in other categories
Web Application Firewall (WAF) (15th)
 

Featured Reviews

Carlos Alam Hernandez Baruch - PeerSpot reviewer
Fast and secure deployments simplify operations for government and fintech clients
It is a fast and secure DNS. It is very easy to deploy, and my customers are happy with this tool. Additionally, the CDN performance in Mexico is excellent, providing fast service and tools. It offers reliability during high-traffic periods, ensuring no impact on the environment. It helps my clients avoid using on-premise boxes, simplifying operations as they only use the prices on Cloudflare.
Lilian Blaitt - PeerSpot reviewer
Efficiently identifies and addresses vulnerabilities while providing robust protection
It is a secure tool. It is user-friendly and easy to work with. It is possible to easily find vulnerabilities with the WAF. I understand that the return is good since I haven't had any significant attacks. The vulnerabilities I found were easy to close. I think the return is good. It is a good tool.
Martin Janzsó - PeerSpot reviewer
Has good integration with load-balancing applications
Regarding areas for improvement, the documentation needs work. We had issues with a customer because the documentation didn't clearly show which devices can connect with FortiWeb WAF, leading to misconfiguration and difficult meetings. We also need deeper technical support - finding who's responsible for technical aspects is challenging. Hungary has a good Fortinet office with strong sales and pre-sales employees.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I like Cloudflare's application gateway and DDoS protection."
"The most valuable feature of Cloudflare is that it has a free version. They give us the free version with the anti-DDoS features and also the load balancing solution."
"It is a stable solution. I rate the stability a ten out of ten...I rate the scalability a ten out of ten."
"From what I've seen so far, there are no negatives to report as of yet"
"When using services like Heroku, Cloudflare is very useful for CNAME flattening. I also use it for their end-to-end SSL with TLS authentication on nginx for securing servers."
"I rate its stability a ten out of ten."
"The most valuable features of the solution are performance and security."
"It is a fast and secure DNS."
"It is user-friendly and easy to work with."
"I rate the overall solution ten out of ten."
"The technical support is really good."
"The company provides technical support, and they are mostly available 24/7."
"It is a secure tool."
"The stability of the solution is excellent."
"Fortinet FortiWeb offers a variety of protections, including machine learning that helps protect web applications."
"FortiWeb has a very extensive library of known attack signatures, which makes the product fit for any environment, regardless if the customer uses Windows-specific or non-Windows-specific applications."
"FortiWeb identified potential DDoS attacks and suspicious domain activity, showcasing the value of its machine-learning capabilities."
"The most valuable features of the solution are SD-WAN, filtration, web filter, application filter, and IPS."
"The most valuable feature is the tool's integration with load-balancing applications, similar to FortiADC. Its importance depends on customer requirements, such as whether they prioritize application load balancing or layer seven protection."
"The product is easy to configure."
"The good thing about Fortinet is that their enablement is very good in terms of training me and enabling resources on their technology."
"The tool secures our critical applications, especially the mobile money application, which is often targeted by attacks. The solution provides rapid protection and has proven reliable against various threats."
"The solution's technical support is good."
 

Cons

"Eventually, things go sideways and require fixes when it would have been easier to prevent the issue initially."
"Cloudflare does not have an on-premise solution. If they had different approaches they could be better suited to accommodate more customers, such as on-premise and hybrid deployments. For example, hybrid deployments would be useful where you could move the traffic from the enterprise to the cloud."
"For the free and Pro plans, Cloudflare could use a simple bot to provide information to users. This would improve support, especially for less advanced users who utilize the free components."
"It would be helpful if the solution could continue evolving to compete with the other solutions on the market."
"The timing aspect can lead to it being considered overpriced. This is a particular concern we have with Cloudflare, as they may struggle with accurately detecting the client."
"Cloudflare doesn't have a reverse lookup. We can only do a DNS lookup to get the IP address from the hostname. It doesn't work if you want to look up the hostname from an IPA address."
"The analytics, basically the dashboard, doesn't have much to it."
"The product needs to improve its automation."
"The only thing I encountered was related to integration, mostly concerning translation."
"The usability of the interface could be improved as it is not user-friendly."
"I do not have any notes on improvement."
"The usability of the interface could be improved as it is not user-friendly."
"If some of my customers want to migrate from F5 to Fortinet Firewall, or the Fortinet WAF solution, there are some migration issues since I cannot migrate all the elements quickly using Fortinet Firewall."
"We have encountered issues with webhooks and management of FortiWeb Web Application Firewall's on-premise version."
"The documentation is poor."
"The improvement needed is in their response time. Now it takes longer, and they talk about SLA and 48-hour response times."
"There could be ADC offering as well."
"The tool's price and performance are areas of concern where improvements are required."
"FortiWeb could have an inbound load balancing pack."
"I don't see any issues with the tool apart from the pricing aspect of the product. The price of the product is an area where improvements are required."
 

Pricing and Cost Advice

"We don't have any issues with the price."
"I believe their performance has improved, but I'd like to refrain from discussing the pricing aspect related to the cloud. The pricing, in my opinion, could be simplified, and I think they should consider reevaluating the pricing for support, as it can be quite high. At times, this cost can make it challenging to choose CARFAGuard or opt for the support."
"Cloudflare's pricing is not much higher and is good for middle-level organizations."
"The tool is a premium product, so it is very expensive."
"The solution has many features but there are ones that you need to pay for. Sometimes you have to find out which is available for free and which you have to pay for."
"The pricing for the service is reasonable, neither excessively cheap nor prohibitively expensive. It aligns well with the value of their solution."
"That is one of the great features. I was able to access the majority of the features and services for free."
"A free version of the solution is available."
Information not available
"FortiWeb has a good presence because of its price."
"I rate the tool's pricing an eight out of ten."
"The product provides very good prices to customers. The price is set well and offers great value for money."
"I rate the product price a four on a scale of one to ten, where one is a high price, and ten is a low price."
"The tool is really expensive."
"It is a cheap solution."
"I would rate the pricing a four out of ten."
"FortiWeb Web Application Firewall's pricing is suited for small or medium organizations."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
869,566 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Comms Service Provider
11%
Financial Services Firm
10%
Manufacturing Company
7%
No data available
Government
9%
Computer Software Company
9%
Manufacturing Company
9%
Comms Service Provider
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise8
Large Enterprise25
No data available
By reviewers
Company SizeCount
Small Business13
Midsize Enterprise7
Large Enterprise4
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What is your experience regarding pricing and costs for Fortinet FortiWeb Cloud WAF-as-a-Service?
The price is not the cheapest, but it offers great value for money. I would rate it as an eight out of ten for pricing.
What needs improvement with Fortinet FortiWeb Cloud WAF-as-a-Service?
While we find the solution to be really good overall, some improvements could be made to the alerting system, specifi...
What is your primary use case for Fortinet FortiWeb Cloud WAF-as-a-Service?
We use Fortinet FortiWeb Cloud WAF-as-a-Service situated in front of our web-facing APIs. This includes everything th...
What do you like most about FortiWeb Web Application Firewall (WAF)?
The most valuable features of the solution are SD-WAN, filtration, web filter, application filter, and IPS.
What is your experience regarding pricing and costs for FortiWeb Web Application Firewall (WAF)?
The pricing for FortiWeb Web Application Firewall (WAF) is reasonable. That said, it depends on how many websites we ...
What needs improvement with FortiWeb Web Application Firewall (WAF)?
Their AI technology is good. Overall, Fortinet is only good. The improvement needed is in their response time. In the...
 

Also Known As

Cloudflare DNS
No data available
No data available
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Information Not Available
Information Not Available
Find out what your peers are saying about FortiWeb Web Application Firewall (WAF) vs. Fortinet FortiWeb Cloud WAF-as-a-Service and other solutions. Updated: September 2025.
869,566 professionals have used our research since 2012.