

Prisma Cloud by Palo Alto Networks and Fortinet FortiWeb Cloud WAF-as-a-Service are leading contenders in cloud security solutions. Prisma Cloud shines with its comprehensive cloud-native security and automated features, while Fortinet provides superior web application protection with effective OWASP vulnerability management.
Features: Prisma Cloud offers workload identity creation, compliance management, and dynamic integrations with cloud environments like AWS, making it valuable for comprehensive cloud security. Users benefit from automated forensics and cloud-native security. Fortinet FortiWeb Cloud excels in protecting against OWASP vulnerabilities, using machine learning for automated threat detection, and integrating robustly within Fortinet’s ecosystem.
Room for Improvement: Prisma Cloud could improve its user interface customization and integrate Compute functions more seamlessly, along with enhancing API security and IAM functions. Fortinet FortiWeb Cloud could enhance AI functionalities and logging capabilities, and improve its reporting interface for user-friendliness.
Ease of Deployment and Customer Service: Prisma Cloud provides extensive deployment options, fitting well into hybrid and multi-cloud architectures, though customer support receives mixed reviews. Fortinet FortiWeb Cloud offers flexible cloud and on-premises deployments, generally praised for responsive customer service.
Pricing and ROI: Prisma Cloud is considered high-priced but offers value through its extensive features and automation despite a complex pricing model. Fortinet FortiWeb Cloud is regarded as cost-effective with significant value for enterprises, offering good ROI in security improvements without high costs.
It eliminates the need for additional hardware, making it a financially and technically sound investment.
Reputation and data security are the two most important things to a financial institution.
We may have prevented a security breach with remediation of the findings.
The company provides technical support, and they are mostly available 24/7.
The proximity of Fortinet with customers ensures quick issue resolution.
Sometimes it could be faster, but generally, their support is reliable.
They can respond with technical documentation or pass on the case to the next level because it requires the development of a new feature or changing a feature due to a bug.
Anywhere we raise a tech case, they revert back within an hour.
I would give them 10 out of 10.
It auto checks everything, and you need to install the certificate.
In my experience, Fortinet FortiWeb Cloud WAF-as-a-Service's scalability is quite good, and I would rate it at eight point five out of ten.
We are purchasing Fortinet FortiWeb Cloud WAF-as-a-Service from the distributor side, who have provided support and a price discount.
There aren't any limits to Prisma Cloud's scalability.
Scalability within the credit limit is good. It is 100%.
I would rate it a ten out of ten for scalability.
The stability of the solution is excellent.
I would rate it a ten out of ten for stability.
The cloud environment is dynamic, so the tool must be dynamic.
We had to build the system twice because of environmental issues.
Fortinet FortiWeb Cloud WAF-as-a-Service could be improved with better logging capabilities, as many come with less spacing, necessitating a FortiSIM for enhanced functionality.
The utilization of AI in Fortinet FortiWeb Cloud WAF-as-a-Service still needs to be upgraded and improved.
I want them to provide SAML authentication.
Prisma Cloud is an excellent tool.
We could have deployed the runtime monitoring with Prisma Cloud by Palo Alto Networks, but within our organization at our company, it was very difficult to find who would be the owner for the alerts.
Even though documentation was available, it took a while for a new person to understand what integration meant, what will be achieved after the integration, or how the integration needed to be done on the Azure or AWS side.
It is twice cheaper.
I just recommend Fortinet FortiWeb Cloud WAF-as-a-Service because it is very expensive.
The price is not the cheapest, but it offers great value for money.
The cost was not on the higher side.
If you are using a single tool like Prisma Cloud, with a single license, you can monitor all environments, such as Google Cloud, Azure, AWS, and Oracle Cloud.
The pricing is on par with the competitors.
It is possible to easily find vulnerabilities with the WAF.
It effectively mitigates web attacks, provides virtual protections, and handles large traffic with minimal processing effort.
Its usability is a key aspect as it is very easy to use and deploy in front of new APIs.
From the compliance and governance perspective, we can create custom policies or custom compliance and governance rules as per various industries or compliance standards, such as HIPAA, PCI DSS, and NIST.
One solution can cover runtime for EC2 systems, containers, and Fargate.
We can see any IAM-related risks, any discovered vulnerabilities, any incidents, or any network-level issues.
| Product | Mindshare (%) |
|---|---|
| Prisma Cloud by Palo Alto Networks | 1.8% |
| Fortinet FortiWeb Cloud WAF-as-a-Service | 0.8% |
| Other | 97.4% |

| Company Size | Count |
|---|---|
| Small Business | 5 |
| Midsize Enterprise | 2 |
| Large Enterprise | 5 |
| Company Size | Count |
|---|---|
| Small Business | 37 |
| Midsize Enterprise | 21 |
| Large Enterprise | 58 |
Fortinet FortiWeb Cloud WAF-as-a-Service provides cloud-based web application protection, ensuring businesses secure their web apps against threats without hardware management, offering dynamic scalability and threat intelligence.
Fortinet FortiWeb Cloud WAF-as-a-Service offers an advanced security platform that effectively protects web applications from cyber threats by leveraging comprehensive threat intelligence and efficient traffic management. Its cloud-native architecture facilitates seamless integration, allowing for scalable security solutions that adapt to varying demand levels. Known for reducing complexity, it empowers organizations to focus on strategic initiatives without the need for dedicated on-premise resources. The service also provides robust analytics, enabling informed decision-making based on real-time threat landscapes.
What are the key features?In industries such as finance and e-commerce where sensitive data protection is paramount, Fortinet FortiWeb Cloud WAF-as-a-Service is extensively implemented to secure web applications against potential vulnerabilities. It ensures compliance with stringent regulatory standards and protects consumer information, thus maintaining trust and brand reputation. Healthcare providers leverage it to protect patient records, a sector that demands the utmost security and confidentiality.
Prisma Cloud by Palo Alto Networks provides comprehensive cloud-native security solutions. It covers dynamic workload identity, automated forensics, and multi-cloud protection, ensuring robust security across diverse cloud platforms.
Prisma Cloud delivers advanced capabilities for managing cloud security across AWS, Azure, and GCP platforms. It offers dynamic workload identity creation, real-time monitoring, and seamless integration into CI/CD pipelines. With automation, centralized dashboards, and enhanced visibility, users effectively manage security misconfigurations and vulnerabilities. While optimizing cloud environments through runtime protection and compliance, Prisma Cloud faces challenges with its navigation, pricing, and limited automation capabilities. Users seek improvements in API security, role-based access controls, and documentation quality, emphasizing the need for enhanced customization and reporting features.
What are the important features of Prisma Cloud?
What benefits or ROI should users consider in reviews?
Industries like finance and telecom rely on Prisma Cloud for managing cloud security posture and container security. Teams utilize its capabilities across hybrid and multi-cloud settings to ensure compliance and robust threat protection. Features like misconfiguration detection and runtime monitoring are critical in promoting security objectives in these sectors.
We monitor all Web Application Firewall (WAF) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.