Try our new research platform with insights from 80,000+ expert users

Fortinet FortiWeb Cloud WAF-as-a-Service vs Imperva's Application Security Platform comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
76
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (13th)
Fortinet FortiWeb Cloud WAF...
Average Rating
9.0
Reviews Sentiment
8.7
Number of Reviews
4
Ranking in other categories
Web Application Firewall (WAF) (27th)
Imperva's Application Secur...
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
78
Ranking in other categories
CDN (7th), Web Application Firewall (WAF) (20th), Distributed Denial-of-Service (DDoS) Protection (6th)
 

Featured Reviews

Carlos Alam Hernandez Baruch - PeerSpot reviewer
Fast and secure deployments simplify operations for government and fintech clients
It is a fast and secure DNS. It is very easy to deploy, and my customers are happy with this tool. Additionally, the CDN performance in Mexico is excellent, providing fast service and tools. It offers reliability during high-traffic periods, ensuring no impact on the environment. It helps my clients avoid using on-premise boxes, simplifying operations as they only use the prices on Cloudflare.
Lilian Blaitt - PeerSpot reviewer
Efficiently identifies and addresses vulnerabilities while providing robust protection
It is a secure tool. It is user-friendly and easy to work with. It is possible to easily find vulnerabilities with the WAF. I understand that the return is good since I haven't had any significant attacks. The vulnerabilities I found were easy to close. I think the return is good. It is a good tool.
DerrickAkankwasa - PeerSpot reviewer
Provide DDoS protection and better security at effective rate
It is expanding its number of data centers for scrubbing traffic. Currently, there is only one POP for cleaning in South Africa. They might add another POP in North Africa, possibly in Nigeria or Egypt. Latency concerns customers, especially in regions like East and West Africa, where traffic has to travel to South Africa before returning. Increasing the number of POPs across the continent would help address these latency issues and improve overall service. While the platform is already quite strong, there’s always room for improvement, especially in keeping up with emerging trends and new types of attacks. Enhancing security capabilities could be beneficial. Integrating more advanced AI features could significantly improve its effectiveness and help customers leverage these tools more effectively. It would be great to see more focus on AI integration to handle and analyze data more efficiently.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It's a great product because it's scalable, has great coverage, and is mature with good defenses against DDoS attacks."
"The attacker won't have details since my public IP is anonymous. It offers us good privacy."
"Cloudflare consolidates various capabilities into one product, streamlining processes."
"DDoS attacks target unprotected machines. Cloudflare detects and stops these attacks using internal systems. It identifies incoming DDoS attacks, issuing challenges or blocking them immediately."
"The solution is stable, and the DNS servers are simple to use."
"Generally, I am satisfied with this product."
"The most valuable feature of Cloudflare is the GUI. You are able to control the solution very well through the interface. There is a lot of functionality that is embedded in the service."
"The web application firewall brought us good security and a view of the accesses/blocks of the entire domain and subdomain that were accessed both by region (country) and IPs."
"The stability of the solution is excellent."
"The technical support is really good."
"It is a secure tool."
"The company provides technical support, and they are mostly available 24/7."
"Fortinet FortiWeb offers a variety of protections, including machine learning that helps protect web applications."
"It is user-friendly and easy to work with."
"I rate the overall solution ten out of ten."
"Incapsula takes care of the CDN infrastructure and bandwidth volume, providing several enterprise "load balancing" features."
"The most valuable features for us are the DDoS and Bot."
"An improvement has been to our website: It increases the speed of our response, the capacity of the site, and optimizes the bandwidth.​"
"DDoS protection and WAF are the most valuable features. It is easy to deploy a service. It is easy and quick to deploy to a new website."
"Real-time monitoring is also a great tool, as you may watch several parameters in real time."
"IncapRules is one of the most valuable features, as you can create your own security and access control rules on top of your security policy. Using IncapRules we were able to easily block Layer 7 DDoS attacks several times."
"The solution's most valuable aspect is that it is easy to configure."
"​Technical support provides good, quick responses."
 

Cons

"The integration of LLMs on the dashboard is something that is needed in the tool."
"Cloudflare could offer a better view or maybe dashboards of the main resources used in the client."
"Technical support is not well developed. While there are good engineers, Cloudflare does not offer hands-on technical support to fix customer problems but rather a self-service model."
"The pricing could be improved."
"Although I think it's quite good, it doesn't provide me with all the features I would expect to have if I were using Imperva."
"I think the APIs are a little bit hard for us to work with. The APIs could be more open so that we could integrate better with our SolarWinds or our monitoring solution."
"In the last two years, there has been a certain amount of downtime when using the VDM."
"Cloudflare should add more documentation and pricing to the cloud version."
"I do not have any notes on improvement."
"The only thing I encountered was related to integration, mostly concerning translation."
"The usability of the interface could be improved as it is not user-friendly."
"The usability of the interface could be improved as it is not user-friendly."
"We had an issue when securing the web applications for DDoS protection."
"We would like them to hire people in Sweden because it's quite hard when people are sitting in the UK or Belgium because some of the customers really want them to be local."
"I miss being able to integrate the dashboard with other BI tools we are using. We have to export and import data to be able to present it, and doing so is a lot of work."
"I would like to have support for SSL management and secure DNS."
"The solution should integrate with something that looks at continuous security management."
"Imperva always needs to adjust to new versions of cyber attacks, it needs to be faster, improve the resiliency of the software of the solution."
"I would like to see improvements in the pooling of threats and attacks, possibly to enlarge the scale of indicators of compromise."
"I would like to see automated reporting to improve visibility."
 

Pricing and Cost Advice

"The cost primarily depends on the size of the organization."
"The tool is a premium product, so it is very expensive."
"For Cloudflare, I recommend it heavily for small businesses with revenue under a couple of million dollars. Onboarding is easy, and they even have a free plan. This makes it simple for businesses in the $100,000-$500,000 range to try it out and see its value, allowing them to scale up their infrastructure as needed."
"Cloudflare's pricing is not much higher and is good for middle-level organizations."
"I think the pricing is competitive. I think as far as licensing is concerned it's pretty straightforward because it's based on domain. It's just that sometimes domains could be tricky with some customers."
"We are using the free version."
"The price of the solution is expensive."
"I believe their performance has improved, but I'd like to refrain from discussing the pricing aspect related to the cloud. The pricing, in my opinion, could be simplified, and I think they should consider reevaluating the pricing for support, as it can be quite high. At times, this cost can make it challenging to choose CARFAGuard or opt for the support."
Information not available
"We are satisfied with the pricing."
"Pricing could be more competitive."
"Varies depending on the needs of the customer."
"The cost is on par with other solutions such as Cloudflare and Akamai."
"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a five out of ten."
"The cost is somewhere around $10,000 a site. For every site, you pay individually. For every DNS entry, you have you pay."
"For enterprise contracts you will be in touch with a dedicated account manager who will guide you regarding licensing."
"Imperva charges us based on bandwidth, which is better than other vendors that charge us according to data transfer."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
867,445 professionals have used our research since 2012.
 

Comparison Review

it_user68487 - PeerSpot reviewer
Nov 6, 2013
CloudFlare vs Incapsula: Web Application Firewall
CloudFlare vs Incapsula: Round 2 Web Application Firewall Comparative Penetration Testing Analysis Report v1.0 Summary This document contains the results of a second comparative penetration test conducted by a team of security specialists at Zero Science Lab against two cloud-based Web…
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Comms Service Provider
11%
Financial Services Firm
10%
Manufacturing Company
7%
No data available
Financial Services Firm
14%
Computer Software Company
13%
Manufacturing Company
9%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business45
Midsize Enterprise8
Large Enterprise25
No data available
By reviewers
Company SizeCount
Small Business54
Midsize Enterprise15
Large Enterprise40
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What is your experience regarding pricing and costs for Fortinet FortiWeb Cloud WAF-as-a-Service?
The price is not the cheapest, but it offers great value for money. I would rate it as an eight out of ten for pricing.
What needs improvement with Fortinet FortiWeb Cloud WAF-as-a-Service?
While we find the solution to be really good overall, some improvements could be made to the alerting system, specifi...
What is your primary use case for Fortinet FortiWeb Cloud WAF-as-a-Service?
We use Fortinet FortiWeb Cloud WAF-as-a-Service situated in front of our web-facing APIs. This includes everything th...
What do you like most about Imperva Incapsula?
We use Imperva DDoS to stop DDoS attacks and reduce the amount of unwanted queries against web services or web scraping.
What is your experience regarding pricing and costs for Imperva DDoS?
The pricing, setup costs, and licensing of Imperva DDoS are reasonable for the amount of technical capabilities provi...
What needs improvement with Imperva DDoS?
I would like to see improvements in the pooling of threats and attacks, possibly to enlarge the scale of indicators o...
 

Also Known As

Cloudflare DNS
No data available
No data available
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Information Not Available
Hitachi, BNZ, Bitstamp, Moz, InnoGames, BTCChina, Wix, LivePerson, Zillow and more.
Find out what your peers are saying about Fortinet FortiWeb Cloud WAF-as-a-Service vs. Imperva's Application Security Platform and other solutions. Updated: September 2025.
867,445 professionals have used our research since 2012.