Try our new research platform with insights from 80,000+ expert users

Fortinet FortiWeb Cloud WAF-as-a-Service vs Wallarm NG WAF comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
77
Ranking in other categories
CDN (1st), WAN Optimization (4th), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Domain Name System (DNS) Security (5th), Cloud Security Posture Management (CSPM) (12th)
Fortinet FortiWeb Cloud WAF...
Average Rating
8.8
Reviews Sentiment
6.7
Number of Reviews
7
Ranking in other categories
Web Application Firewall (WAF) (23rd)
Wallarm NG WAF
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
5
Ranking in other categories
Web Application Firewall (WAF) (40th), API Security (13th)
 

Featured Reviews

HA
Owner at Hga consulting
Has helped manage client domains with streamlined access control and threat visibility
I don't know what areas could be improved with Cloudflare WAF; Cloudflare is constantly improving and adding features to their feature set. They're doing a good job, and as far as DNS and support for any domains that I create or my clients create, it's mandatory for me to make sure that they have Cloudflare as their DNS provider. The Cloudflare load balancing capability hasn't really helped in enhancing my website's uptime and resiliency because we don't really get that much traffic; it's mostly remote users, and web hosting is done by a web hosting service. It doesn't pay to try to host your own website.
RA
Global Head - DevOps and AIOps Startegist at a manufacturing company with 10,001+ employees
Cloud security has reduced web attack incidents and protects our public applications and APIs
The best features Fortinet FortiWeb Cloud WAF-as-a-Service offers include managed WAF rules, OWASP protection, bot mitigation, and Fortinet threat intelligence. In day-to-day work, I use all of the features: managed WAF rules, OWASP protection, bot mitigation, and Fortinet threat intelligence. This provides a strong baseline security without requiring deep WAF expertise internally. The integration with the broader Fortinet security system is a plus regarding the features. In terms of its impact on our organization, Fortinet FortiWeb Cloud WAF-as-a-Service has been positively protecting us from security threats and automated attacks. With this layered protection against common web and API attacks, we have noticed that the incidents and risks have been reduced to a greater extent.
it_user796242 - PeerSpot reviewer
Information Security Engineer at a tech vendor with 51-200 employees
Helps us to monitor attacks to our sites and prevents a lot of them
Set up Wallarm as a reverse proxy. Do not replace your web server. Use Wallarm first in monitoring mode, then learn from Wallarm which type of request is false positive and which type of request is not. This process takes a couple of weeks for very highly-loaded web applications (few millions of unique visitors in one month). Then you can turn Wallarm into blocking mode and everything will be fine. Do not forget to build a monitoring system, the wave, and API for it. Before we started using Wallarm, I already knew Ivan (CEO) and Stepan (COO) from a couple of years before. Ivan had his own security company and Stepan was working on a Russian security magazine called Xakep. They told us that they wanted to create a new WAF and already had a working version of it. They asked me to test it. We did tests, and it was really good. After few month after testing, we signed an agreement. Our choice was made not because we knew these guys for a long time, but because the product was really cool and we were glad to start using it as one of the first on the market!

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The technical support is good."
"The UI is good."
"Centralized, full-featured DNS."
"The web application firewall brought us good security and a view of the accesses/blocks of the entire domain and subdomain that were accessed both by region (country) and IPs."
"We're using dynamic components to build flexible pages to create and manage Git merge requests for code and reviews."
"I rate its stability a ten out of ten."
"Cloudflare is a security SaaS provider that provides security and protects us from any application layer attack."
"Cloudflare DNS is widely used, and it's good for websites. If we use Cloudflare DNS and update one record, it updates in their office instantly."
"Fortinet has created a holistic product that integrates features including AI and API protection, with straightforward automation and articulate reporting that even less experienced engineers can use easily."
"Fortinet FortiWeb offers a variety of protections, including machine learning that helps protect web applications."
"It is a secure tool."
"I rate the overall solution ten out of ten."
"The company provides technical support, and they are mostly available 24/7."
"Regular updates are one of the aspects I appreciate about Fortinet FortiWeb Cloud WAF-as-a-Service, and it is provided by a leading brand in cybersecurity."
"The technical support is really good."
"The stability of the solution is excellent."
"Helps us to monitor situation in regards to attacks to our sites and prevents a lot of them."
 

Cons

"It should have easier documentation for the configuration. It's very technical and people who aren't technical should also be able to do the configuration."
"The solution could work at being less expensive. It costs a lot to use it."
"The product support needs to be accessible from more places, a wider area of coverage."
"There should be a specific price list for enterprise-level customers."
"It should be easier to collect the logs with companies like Sumo. However, based on my discussions with the salespeople, I understand that's how they make their money. With the enterprise product, they want people doing those kinds of enterprise features to do the logging. They want them to pay a lot of money, and that's where I have an issue with them. That should be a default. You should be able to get the log no matter what. The logging should be universal."
"The timing aspect can lead to it being considered overpriced. This is a particular concern we have with Cloudflare, as they may struggle with accurately detecting the client."
"It would be good if Cloudflare could have more servers for better traffic routing or an increase in the traffic routed. This is what I'd like to improve in Cloudflare."
"Even if I wanted to, I wouldn't be able to buy Cloudflare in my country."
"The utilization of AI in Fortinet FortiWeb Cloud WAF-as-a-Service still needs to be upgraded and improved."
"Fortinet FortiWeb Cloud WAF-as-a-Service could be improved with better logging capabilities, as many come with less spacing, necessitating a FortiSIM for enhanced functionality."
"I do not have any notes on improvement."
"The usability of the interface could be improved as it is not user-friendly."
"The usability of the interface could be improved as it is not user-friendly."
"Better visibility and more intuitive reporting would be helpful for Fortinet FortiWeb Cloud WAF-as-a-Service."
"The only thing I encountered was related to integration, mostly concerning translation."
"The biggest problem for us was the stability and speed using the first version of Wallarm. Now, it is fine."
 

Pricing and Cost Advice

"There are no additional costs beyond the standard licensing fees."
"The product's pricing is cheap."
"A free version of the solution is available."
"The solution is expensive when compared to other products but offers unlimited bandwidth."
"The cost primarily depends on the size of the organization."
"The price is reasonable."
"I think the pricing is competitive. I think as far as licensing is concerned it's pretty straightforward because it's based on domain. It's just that sometimes domains could be tricky with some customers."
"The product's pricing is minimal compared to other products."
Information not available
"​Pricing must be cheaper than the competition and the licensing must be good.​"
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
879,853 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Financial Services Firm
10%
Comms Service Provider
10%
Manufacturing Company
8%
Energy/Utilities Company
12%
Hospitality Company
9%
Financial Services Firm
9%
Comms Service Provider
9%
Computer Software Company
14%
Manufacturing Company
13%
Government
13%
Financial Services Firm
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise8
Large Enterprise25
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise2
Large Enterprise3
No data available
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What is your experience regarding pricing and costs for Fortinet FortiWeb Cloud WAF-as-a-Service?
My experience with the pricing, setup cost, and licensing for Fortinet FortiWeb Cloud WAF-as-a-Service is good, and i...
What needs improvement with Fortinet FortiWeb Cloud WAF-as-a-Service?
Fortinet FortiWeb Cloud WAF-as-a-Service could be improved with better logging capabilities, as many come with less s...
What is your primary use case for Fortinet FortiWeb Cloud WAF-as-a-Service?
Fortinet FortiWeb Cloud WAF-as-a-Service protects our customers' websites, including e-commerce sites, normal website...
Ask a question
Earn 20 points
 

Also Known As

Cloudflare DNS
No data available
Wallarm NG-WAF
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Information Not Available
Panasonic. Miro. Rappi. Wargaming. Gannett. Omio. Acronis. Workforce Software. Tipalti. SEMRush.
Find out what your peers are saying about Fortinet FortiWeb Cloud WAF-as-a-Service vs. Wallarm NG WAF and other solutions. Updated: December 2025.
879,853 professionals have used our research since 2012.