Try our new research platform with insights from 80,000+ expert users

Fortinet FortiWeb vs Fortinet FortiWeb Cloud WAF-as-a-Service comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiWeb
Ranking in Web Application Firewall (WAF)
4th
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
95
Ranking in other categories
No ranking in other categories
Fortinet FortiWeb Cloud WAF...
Ranking in Web Application Firewall (WAF)
26th
Average Rating
9.0
Reviews Sentiment
8.7
Number of Reviews
4
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of June 2025, in the Web Application Firewall (WAF) category, the mindshare of Fortinet FortiWeb is 8.4%, up from 7.3% compared to the previous year. The mindshare of Fortinet FortiWeb Cloud WAF-as-a-Service is 0.6%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Web Application Firewall (WAF)
 

Featured Reviews

Kacem CHAMMALI - PeerSpot reviewer
Even if an attacker detects the IP address, they can't connect directly to the server due to FortiWeb
The xFF, or X-Forwarded-For feature, IP reputation, and protected hostname. We can block access using the IP address, so no one can connect to our web server or website using the real IP. They need to use the FQDN instead. Even if an attacker detects the IP address, they can't connect directly to the server due to FortiWeb and the option to protect the hostname. All traffic passes through FortiWeb. Machine learning capabilities in FortiWeb: I don't use machine learning all the time. In the initial phase of FortiWeb deployment, we use the learning process to detect the traffic passing through FortiGate to our website.
Lilian Blaitt - PeerSpot reviewer
Efficiently identifies and addresses vulnerabilities while providing robust protection
It is a secure tool. It is user-friendly and easy to work with. It is possible to easily find vulnerabilities with the WAF. I understand that the return is good since I haven't had any significant attacks. The vulnerabilities I found were easy to close. I think the return is good. It is a good tool.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable features in Fortinet FortiWeb are sandboxing and threat prevention."
"FortiWeb provides the level of security we need at an excellent price point. It's easy to deploy and operationally efficient."
"You have the ability to control everything from one single dashboard."
"The deployment was very easy."
"It is a good product. We have just blocked everything coming from some geographical locations or certain countries, and it has been working very efficiently when I look at logs, events, and incidents generated from the system. It is generating very good analytic reports about it. This is the most valuable thing about this solution. It has load balancing and almost everything that a web application firewall needs. It is very flexible and easy to learn and configure. It can be easily learned and configured by using the information available on different channels such as YouTube."
"Before a platform faces the internet, Fortinet FortiWeb inspects the traffic."
"Even though most products have the same functionality nowadays, FortiWeb is easy to integrate."
"The customers are very happy with this solution because of two things. First, the IPS integration with a web application is very tightly done on Fortinet. Second, the ease of use is there. The management interface or the GUI interface is very easy to use, configure, and manage. These are the two main valuable features. It supports integration with other Fortinet products. It also integrates very well with the firewall and sandboxing technology. They already have enough integration with different technologies. They have got a complete tech intelligence view of the whole product."
"The stability of the solution is excellent."
"It is user-friendly and easy to work with."
"It is a secure tool."
"The company provides technical support, and they are mostly available 24/7."
"The technical support is really good."
"Fortinet FortiWeb offers a variety of protections, including machine learning that helps protect web applications."
"I rate the overall solution ten out of ten."
 

Cons

"No solution is 100% secure and the security could always be worked on."
"Integration and learning about attacks. I would improve these areas by making FortiWeb integrate with other network technologies and feedback from multiple platforms."
"Sometimes, even if you follow the documentation, it doesn't work as expected."
"Its threat intelligence capabilities may not be as advanced as some competitors."
"The solution could improve by being able to handle different use cases."
"When we look at the incident reports in the dashboard, they are available for a maximum duration of 24 hours. They should provide more time for the analysis and increase the duration of the availability of these reports. Currently, it gives the options for 5 minutes, 1 hour, and 24 hours. It would be excellent if there are more options for a longer time period. It may be configurable, but I don't know how to do it."
"It costs too much."
"Fortinet FortiWeb needs to improve the way it's configured. Common services like publishing exchange should be done in one click only."
"The usability of the interface could be improved as it is not user-friendly."
"I do not have any notes on improvement."
"The usability of the interface could be improved as it is not user-friendly."
"The only thing I encountered was related to integration, mostly concerning translation."
 

Pricing and Cost Advice

"The price of Fortinet FortiWeb is expensive in our Ethiopian currency."
"It keeps changing, but it's based on the size of the VM you buy and also the traffic throughput you want from it, whereas what we have on Azure is just the traffic throughput. You can also pay on a monthly basis from Azure. During each part of the project, it's okay to get Azure-based licensing or AWS-based licensing for FortiWeb, but over time, you would want to go with the perpetual license. You should go to Fortinet and buy the license from them. So, there is a two-step process there."
"The price of Fortinet FortiWeb is reasonable. This is one of the key factors of why we use this solution."
"If one is cheap and ten is expensive, I rate the tool an eight."
"The costs are standard. We pay around $1,600 yearly."
"When I use any other firewall, I have to take a license. It could be a perpetual license or subscription-based. In both cases, we have to pay some amount in advance, whereas in the case of FortiWeb, when using it as a service, I am paying half a dollar only for the domain name, and then I am paying based on the traffic or the number of requests."
"The product is expensive. I rate the pricing a ten out of ten."
"The solution is very inexpensive when compared to F5 Advanced WAF and Avi Networks but offers the same benefits."
Information not available
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
856,873 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
33%
Computer Software Company
10%
Financial Services Firm
8%
Government
5%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about Fortinet FortiWeb?
The WAF profiles has been effective at mitigating web-based threats.
What is your experience regarding pricing and costs for Fortinet FortiWeb?
Fortinet FortiWeb is cost-effective compared to solutions like F5. It offers strong performance for the price, providing substantial value for our customers.
What needs improvement with Fortinet FortiWeb?
The cloud-based security service of Fortinet FortiWeb could be enhanced to match the level of providers like Cloudflare ( /products/cloudflare-reviews ). Right now, it is more focused on on-prem so...
What is your experience regarding pricing and costs for Fortinet FortiWeb Cloud WAF-as-a-Service?
The price is not the cheapest, but it offers great value for money. I would rate it as an eight out of ten for pricing.
What needs improvement with Fortinet FortiWeb Cloud WAF-as-a-Service?
While we find the solution to be really good overall, some improvements could be made to the alerting system, specifically around the health checks of endpoints. Enhancements to the X header forwar...
What is your primary use case for Fortinet FortiWeb Cloud WAF-as-a-Service?
We use Fortinet FortiWeb Cloud WAF-as-a-Service situated in front of our web-facing APIs. This includes everything that is customer-facing, business-to-business APIs, and things like that.
 

Overview

 

Sample Customers

Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG
Information Not Available
Find out what your peers are saying about Fortinet FortiWeb vs. Fortinet FortiWeb Cloud WAF-as-a-Service and other solutions. Updated: June 2025.
856,873 professionals have used our research since 2012.