No more typing reviews! Try our Samantha, our new voice AI agent.

Fortinet FortiWeb Cloud WAF-as-a-Service vs Sucuri comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiWeb Cloud WAF...
Ranking in Web Application Firewall (WAF)
21st
Average Rating
8.8
Reviews Sentiment
6.4
Number of Reviews
10
Ranking in other categories
No ranking in other categories
Sucuri
Ranking in Web Application Firewall (WAF)
36th
Average Rating
8.4
Reviews Sentiment
7.5
Number of Reviews
6
Ranking in other categories
Distributed Denial-of-Service (DDoS) Protection (25th), Domain Name System (DNS) Security (25th)
 

Mindshare comparison

As of August 2026, in the Web Application Firewall (WAF) category, the mindshare of Fortinet FortiWeb Cloud WAF-as-a-Service is 0.8%, up from 0.6% compared to the previous year. The mindshare of Sucuri is 1.6%, up from 0.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Web Application Firewall (WAF) Mindshare Distribution
ProductMindshare (%)
Fortinet FortiWeb Cloud WAF-as-a-Service0.8%
Sucuri1.6%
Other97.6%
Web Application Firewall (WAF)
 

Featured Reviews

NiteshSharma - PeerSpot reviewer
Pre Sales Architect at network techlab
Comprehensive web protection has secured public apps and supports advanced audit requirements
Fortinet FortiWeb Cloud WAF-as-a-Service has multiple valuable aspects. The WAF solution secures whatever public domains have been published by the public platform or internal servers exposed to public users. Firewalls have limitations, which is why I suggest using a WAF solution. The firewall provides the same features but in a limited edition. When discussing the SaaS platform or Layer 7 layer of security, you will receive multiple benefits. Firewalls have limitations with signatures, bot protection, and DOS protection. Fortinet FortiWeb Cloud WAF-as-a-Service is a dedicated WAF product that handles all DOS protection, bot protection, API security, endpoint connectivity, signature-based support, and top 10 OWASP support. Multiple features are available. AI and ML-based technology is available in almost every tool today. When discussing troubleshooting, there are AI models that will solve your problem and provide information. AI is helpful because it will give you proper information regarding errors and troubleshooting.
JS
Hardware Engineer at Ministry of Defense
A cost-effective choice for website security and informative support with issues related to CDN quality
One area where they could improve is in providing real-time support options because now you need to open a support ticket and wait for their response. It would greatly benefit customers if they implemented an online chat or messaging system for quicker assistance. I have found their Content Delivery Network service to be lacking in quality, and it could certainly be enhanced to provide better performance. I would also like to see improvements in the deployment process, as it currently takes more time than desirable. Another significant concern is that their service when your website is down, turns it into a static site. This means that if customers try to visit your site during downtime, they will see old content from the static site, which is not ideal. The CDN and tracking services are areas that need improvement, as well as addressing their bandwidth limitations.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The initial setup is pretty easy, and it is easier than for the on-premises solution."
"It is more efficient and very helpful to everyone regarding future updates of Fortinet FortiWeb Cloud WAF-as-a-Service, and I do not currently face any issues and have good experience with the product."
"Fortinet FortiWeb offers a variety of protections, including machine learning that helps protect web applications."
"Fortinet has created a holistic product that integrates features including AI and API protection, with straightforward automation and articulate reporting that even less experienced engineers can use easily."
"The stability of the solution is excellent."
"The company provides technical support, and they are mostly available 24/7."
"Regular updates are one of the aspects I appreciate about Fortinet FortiWeb Cloud WAF-as-a-Service, and it is provided by a leading brand in cybersecurity."
"It is user-friendly and easy to work with."
"I use it as a WAF, which is basically a web firewall to monitor and block traffic to our web server."
"It significantly eases the workload and streamlines the initial setup required to protect a website."
"The initial setup was very easy."
"The most valuable part is the analytics and visualization."
"Rather than locate some things manually, the Sucuri plugin scans and allows us to pinpoint whether there is malware or some problem in the site."
"The initial setup was straightforward. Straight forward because the plugin can simply be installed and then it does its job. It's not complex, there is no learning curve. The online scan is simple, you put in the website address and the scan gives us a report on the browser itself. It's simple to use."
"For people who own a personal website, this solution is worth trying out since their security solution is somewhat full-fledged."
"Domain name scanning since it allows us to scan all our domain names and determine whether it has malware or if is reported as phishing."
 

Cons

"To measure the success of Fortinet FortiWeb Cloud WAF-as-a-Service's services and reporting capability, there is one drawback."
"While we find the solution to be really good overall, some improvements could be made to the alerting system, specifically around the health checks of endpoints."
"I do not have any notes on improvement."
"Fortinet FortiWeb Cloud WAF-as-a-Service could be improved with better logging capabilities, as many come with less spacing, necessitating a FortiSIM for enhanced functionality."
"What I think could be improved in the future is the inclusion of runtime application self-protection, as RASP is currently not part of the program, but it would be beneficial if that could be added into the FortiAP-S Cloud product."
"The only thing I encountered was related to integration, mostly concerning translation."
"The usability of the interface could be improved as it is not user-friendly."
"The utilization of AI in Fortinet FortiWeb Cloud WAF-as-a-Service still needs to be upgraded and improved."
"I would rate this solution an eight out of ten. The reason is that we have found sometimes customers or Google saying that there is something wrong with the website but Sucuri says that the site is clean so we do have to look at the site manually which means that the Sucuri scan does not pick up anything and everything."
"The main improvement I would like to see is support for .NET applications. If they could include this feature, I would include more sites in the protection."
"In terms of improvement, the cost factor is always there."
"It would greatly benefit customers if they implemented an online chat or messaging system for quicker assistance."
"Sucuri could provide help for specific security alerts in-line instead of requiring users to search for it in the help section."
"Confident score: Currently it does not have one and there are cases that most websites flagged are false-positives."
 

Pricing and Cost Advice

Information not available
"I’d simply say it’s really worth it."
"The ROI has been very good. Because of the solution, I have a tax break. The site developers were not always experienced people. We used to pay more for cleaning up the site when it was infected. Now, we have peace of mind knowing that the solution will clean up the site and that we won't have to go through the unnecessary process of restoring it from a backup. The protection on the WAF and the measures for backups have also prevented our site from going down."
"It stands out as a more cost-effective option compared to other cloud-based security services like Cloudflare or JetPass."
"Sucuri offers different plans, both the standard plan and an advanced plan. So there are different plans to choose from."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
909,725 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
12%
Comms Service Provider
11%
Construction Company
10%
Manufacturing Company
7%
Comms Service Provider
14%
Construction Company
13%
Financial Services Firm
10%
Outsourcing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise2
Large Enterprise5
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Fortinet FortiWeb Cloud WAF-as-a-Service?
It is expensive. Actually, it is expensive. When discussing small organizations, I would not recommend it to them. I always choose the enterprise because it is expensive. I just recommend Fortinet ...
What needs improvement with Fortinet FortiWeb Cloud WAF-as-a-Service?
Currently, I want to add that Fortinet FortiWeb Cloud WAF-as-a-Service is offering only two-factor authentication. I want them to provide SAML authentication. If it gets SAML authentication or some...
What is your primary use case for Fortinet FortiWeb Cloud WAF-as-a-Service?
When discussing Fortinet FortiWeb Cloud WAF-as-a-Service, I always recommend it. Either I can recommend F5. Most users require security via SSL, so I recommend Fortinet FortiWeb Cloud WAF-as-a-Serv...
Ask a question
Earn 20 points
 

Overview

 

Sample Customers

Information Not Available
The Loft Salon, Tom McFarlin, WPBeginner, Taylor Town, Everything Everywhere, Financial Ducks in a Row, Chubstr, Real Advice Gal, Sujan Patel, Wallao, List25, School the World
Find out what your peers are saying about Fortinet FortiWeb Cloud WAF-as-a-Service vs. Sucuri and other solutions. Updated: August 2026.
909,725 professionals have used our research since 2012.