Fortinet FortiWeb vs Imperva Application Security Platform comparison

Fortinet FortiWeb vs. Imperva Application Security Platform

August 2026

Download the complete report

Helped 912,788 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

ROI

Sentiment score

6.3

Fortinet FortiWeb offers cost-effective security, reducing expenses by up to 80%, enhancing reliability, and mitigating cyber threats.

Sentiment score

5.8

Imperva boosts security, reduces manual interventions, yielding quick ROI, especially in banking, though initial costs can be high.

No quotes available

For more quotes and insights, download the Fortinet FortiWeb report

They know how much money they are losing while the system is down, so by increasing the possibility of not having a down website or web application, return on investment can be calculated easily.

Head of Sales Services Department at a comms service provider with 51-200 employees

I was able to save over seven million dollars last year as return on investment in the company.

For more quotes and insights, download the Imperva Application Security Platform report

Senior Cybersecurity Consultant at Cyberoutcome Limited

I have seen a return on investment with Imperva Application Security Platform, as it is generally associated with time savings, because the review of alerts and the visibility it gives saves us significant operational time.

Diego Uchofen

Ingeniero Preventa at Imperia

Customer Service

Sentiment score

6.6

Fortinet FortiWeb's support is responsive and competent, though users note room for improvement in expertise and response times.

Sentiment score

7.0

The Imperva Application Security Platform's support is praised for responsiveness but criticized for inconsistencies, especially between cloud and on-premises environments.

Their support is truly exceptional when I compare it with similar large-sized companies.

reviewer2641242

Global Channel Alliances Lead at a tech vendor with 10,001+ employees

The expertise of engineers varies across different time zones, affecting the effectiveness of the support provided, especially during our daytime.

For more quotes and insights, download the Fortinet FortiWeb report

Chief Technology Officer at Future Point Technologies

The back-end development team is available, and if any issue arises, they will help us immediately by providing solutions when contacted.

ManjunathA

Technical Support Engineer at Intimesolutions

I would rate the technical support of Imperva DDoS as ten.

Head of Sales Services Department at a comms service provider with 51-200 employees

They need to work faster on the response time because of issues of urgent replies.

For more quotes and insights, download the Imperva Application Security Platform report

Senior Cybersecurity Consultant at Cyberoutcome Limited

Responsive support addressing urgent needs.

P Mayuranathan

Cybersecurity Consultant at Accenture Singapore Services Pte Ltd

Scalability Issues

Sentiment score

7.1

Fortinet FortiWeb is scalable but limited in hardware upgrades; virtual machines offer more adaptability for various needs.

Sentiment score

7.4

Imperva Application Security Platform offers scalable solutions for various organizations, with cloud deployment preferred despite some pricing and performance challenges.

You can add additional boxes that combine together to achieve a bigger throughput for investigation and research.

Jovan Jovanovic

Security Team Lead at a outsourcing company with 1,001-5,000 employees

For more quotes and insights, download the Fortinet FortiWeb report

99% of customers are using the cloud version of Imperva DDoS protection, so they just purchase the new license and scale as needed.

Head of Sales Services Department at a comms service provider with 51-200 employees

I have not even needed support after deployment, since it has remained stable.

Nigus Machin Amare

CTO at Malam Engineering PLC

It is easy to always scale to add more users.

For more quotes and insights, download the Imperva Application Security Platform report

Senior Cybersecurity Consultant at Cyberoutcome Limited

Stability Issues

Sentiment score

7.9

Fortinet FortiWeb is generally reliable, with minimal stability issues, although some users face occasional configuration or version challenges.

Sentiment score

7.9

Imperva Application Security Platform is praised for stability and reliability, with minor issues occurring mainly during high traffic.

We have not faced any significant issues during deployments.

For more quotes and insights, download the Fortinet FortiWeb report

Chief Technology Officer at Future Point Technologies

It is also a stable product without much glitch or downtime.

KS10

Senior Presales Consultant at Techlab security

One notable drawback is that, unlike Fortinet, which offers fast track labs and continuous enablement, Imperva Application Security Platform lacks lab access and fast track labs for enablement and product advertising.

Nigus Machin Amare

CTO at Malam Engineering PLC

We experienced downtime or crashes with Imperva Application Security Platform when traffic went really strong or fast because people tried to get tickets.

Alianamarie Lachica

Soc Analyst at Cineplex Inc

For more quotes and insights, download the Imperva Application Security Platform report

Room For Improvement

Fortinet FortiWeb needs improvements in upgrades, support, threat intelligence, user interface, cloud integration, reporting, stability, and load balancing.

Imperva Application Security Platform needs better integration, simpler dashboards, improved AI, and enhanced user interface for higher satisfaction.

If the GUI includes notifications and improved logging capabilities that allow us to see traffic and store logs for six months, that would be very helpful.

ManjunathA

Technical Support Engineer at Intimesolutions

Fine-tuning is a room for improvement in Fortinet FortiWeb.

For more quotes and insights, download the Fortinet FortiWeb report

Joint Director at PAA

After the customer submits a specific question and requests troubleshooting help from Fortinet support, it takes at least three to five days to provide a proper answer.

Jovan Jovanovic

Security Team Lead at a outsourcing company with 1,001-5,000 employees

To convince my clients, a purely on-prem solution would be ideal since they are financial institutions.

Nigus Machin Amare

CTO at Malam Engineering PLC

Maybe Imperva DDoS could use endpoints to get information about the attacks before they commence from the endpoint level or establish cooperation with endpoint vendors to share this information.

For more quotes and insights, download the Imperva Application Security Platform report

Head of Sales Services Department at a comms service provider with 51-200 employees

Regarding return on investment, ROI, I can say it is noticeable with Imperva Application Security Platform.

KS10

Senior Presales Consultant at Techlab security

Setup Cost

Fortinet FortiWeb provides flexible pricing and licensing, appealing to enterprises for cost-effectiveness despite some users noting variable costs.

Imperva's Application Security Platform has high, complex pricing, yet some find it competitive for its security benefits and enterprise flexibility.

For VM machines, the price increases based on CPU configurations of 2, 4, or 8 CPUs.

Nasir Akbar

Presales Engineer at SAUDI PARAMOUNT COMPUTER SYSTEMS

Most security products charge less at the time of purchase because of competition, but when we go to renewals, the prices become very high.

Joint Director at PAA

Fortinet FortiWeb is cost-effective compared to solutions like F5.

For more quotes and insights, download the Fortinet FortiWeb report

Chief Technology Officer at Future Point Technologies

I would rate the pricing of Imperva DDoS as five, where one is very cheap and ten is very expensive.

Head of Sales Services Department at a comms service provider with 51-200 employees

the setup cost was high, with the hardware installation in the data center being particularly expensive.

reviewer2835783

Cyber Security Product Owner at a energy/utilities company with 10,001+ employees

We have noticed faster response times and fewer security alerts because after doing some custom policy tuning, everything seemed to be aligned and we have fewer attacks to monitor and fewer alerts to monitor.

For more quotes and insights, download the Imperva Application Security Platform report

Senior Cybersecurity Consultant at Cyberoutcome Limited

Valuable Features

Fortinet FortiWeb provides advanced security features and seamless integration, offering cost-effective, robust protection and easy deployment for enterprises.

Imperva Application Security Platform offers robust threat protection, user-friendly interface, and comprehensive reporting for enhanced web security management.

Fortinet FortiWeb has positively impacted my organization because most of our servers and applications are secure from hackers and other security threats.

Joint Director at PAA

Fortinet's pricing is way more competitive than Cisco or Palo Alto.

reviewer2641242

Global Channel Alliances Lead at a tech vendor with 10,001+ employees

The machine learning-based threat detection is significant, as it uses a learning method that eases the configuration burden, making it very useful.

For more quotes and insights, download the Fortinet FortiWeb report

Chief Technology Officer at Future Point Technologies

The API security feature is particularly valuable because most attackers do not try to come in from where it is expected.

For more quotes and insights, download the Imperva Application Security Platform report

Senior Cybersecurity Consultant at Cyberoutcome Limited

If someone attempts to access the server, the WAF blocks that SSRF alert, or RCE, Remote Code Execution alert, blocking immediately based on the signature, not only by the payload or the IP address.

Sayan Gupta

SOC Analyst L1 at CMS-IT-SERVICES-PVT-LTD

It reduces the DDoS attacks and reduces the attacks from threat actors, including SQL Injection and zero-day attacks, by using dynamic application profiling from Imperva.

reviewer2818005

IT Security Analyst & Engineer (Project, Remote) Australia-Europe at a manufacturing company with 10,001+ employees

Categories and Ranking

Fortinet FortiWeb

Ranking in Web Application Firewall (WAF)

4th

Average Rating

8.0

Reviews Sentiment

6.6

Number of Reviews

122

Ranking in other categories

No ranking in other categories

Imperva Application Securit...

Ranking in Web Application Firewall (WAF)

1st

Average Rating

8.6

Reviews Sentiment

6.9

Number of Reviews

147

Ranking in other categories

CDN (2nd), Distributed Denial-of-Service (DDoS) Protection (4th), Bot Management (1st), API Security (1st)

Mindshare comparison

As of September 2026, in the Web Application Firewall (WAF) category, the mindshare of Fortinet FortiWeb is 4.1%, down from 7.5% compared to the previous year. The mindshare of Imperva Application Security Platform is 7.4%, down from 7.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Web Application Firewall (WAF) Mindshare Distribution
Product	Mindshare (%)
Imperva Application Security Platform	7.4%
Fortinet FortiWeb	4.1%
Other	88.5%

Web Application Firewall (WAF)

Featured Reviews

Security threats have been reduced through seamless deployment and strong integration with other tools

Joint Director at PAA

I have used Fortinet FortiWeb's integration features. We have easily integrated all of the applications with the product. Most of the applications we are using are in-house built. My technical team is looking after the best features. I have not used it extensively for maybe two and a half years. I have been involved in the installation, but I am not actually using the product. I work with it from time to time but not extensively. I would assess Fortinet FortiWeb's adaptive machine learning and artificial intelligence as having new patches installed regarding artificial intelligence, but when we bought it, I think the learning feature was there. Now they have installed artificial intelligence features through patches. We have a complete portfolio of Fortinet in our organization, including FortiMail, Fortinet FortiWeb, and FortiGate, along with multi-factor authentication. All of the products are from Fortinet. Fortinet tools integrate with each other and work in conjunction. I think Fortinet FortiWeb has helped us meet regulatory compliance because we are not a regulatory organization, but our sister organization is regulatory. We have regulatory compliance with the International Civil Aviation Authority, whose audit teams have checked our data center and these security products, and they are satisfied with us. The question about leveraging Fortinet FortiWeb's automated policy management does not pertain to my domain because I am not so technical, but I am in a management role now. My engineer is more technical than me. I would rate this product an eight point five out of ten.

Read full review

reviewer2818155

Senior Associate at a tech vendor with 10,001+ employees

Application protection has improved and reporting and dashboards still need refinement

I believe Imperva Application Security Platform should have a more interactive wizard. While the dashboard is good, it could be more eye-catching. Based on my perspective, I recommend modifying the dashboards, especially the main dashboard where I can see the traffic hit count, alerts, and other latest information. In terms of reporting, I find it challenging to create reports; in my earlier days, it was difficult. Over time, I have learned how to create reports, but it should be easier to do so. I have used other tools such as firewalls or SolarWinds, where creating a report is straightforward and does not take much time, unlike in Imperva, where I have to add many elements. Modifications in the integration aspects would also be beneficial.

Read full review

See which vendors are best for you

Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.

See recommendations

912,788 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Outsourcing Company

10%

Financial Services Firm

Comms Service Provider

Manufacturing Company

Outsourcing Company

12%

Financial Services Firm

11%

Construction Company

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	61
Midsize Enterprise	27
Large Enterprise	37

By reviewers
Company Size	Count
Small Business	88
Midsize Enterprise	25
Large Enterprise	70

Questions from the Community

What is your experience regarding pricing and costs for Fortinet FortiWeb?

The pricing for Fortinet FortiWeb varies with different models having different prices. It depends on the requirement. For VM machines, the price increases based on CPU configurations of 2, 4, or 8...

What needs improvement with Fortinet FortiWeb?

There is room for improvement in Fortinet FortiWeb. The team was only from FortiGate itself. They are making new firmware versions and releasing them before checking, which leads to many bugs in th...

What is your primary use case for Fortinet FortiWeb?

Fortinet FortiWeb is very good as a web application solution. I have been working with Fortinet FortiWeb since 2020.

Which Web Application Firewall (WAF) would you recommend? R&S or Imperva?

Imperva is a strong choice, given their security focus and ongoing R&D into the product in areas such as bot management.

What is your experience regarding pricing and costs for Imperva DDoS?

The pricing, setup costs, and licensing of Imperva DDoS are reasonable for the amount of technical capabilities provided. I would rate the pricing of Imperva DDoS as five, where one is very cheap a...

What needs improvement with Imperva DDoS?

I would like to see improvements in the pooling of threats and attacks, possibly to enlarge the scale of indicators of compromise. For example, the initiation of an attack on the endpoint level cou...

F5 Advanced WAF vs Fortinet FortiWeb

Comparisons

Compared 11% of the time

Fortinet FortiAppSec Cloud vs Fortinet FortiWeb

Compared 5% of the time

Fortinet FortiADC vs Fortinet FortiWeb

Compared 5% of the time

Cloudflare Web Application Firewall vs Fortinet FortiWeb

Compared 4% of the time

Fortinet FortiOS vs Fortinet FortiWeb

Compared 3% of the time

More Fortinet FortiWeb Competitors

Cloudflare vs Imperva Application Security Platform

Compared 8% of the time

Akamai vs Imperva Application Security Platform

Compared 5% of the time

Link11 vs Imperva Application Security Platform

Compared 3% of the time

Fastly vs Imperva Application Security Platform

Compared 3% of the time

AWS WAF vs Imperva Application Security Platform

Compared 2% of the time

More Imperva Application Security Platform Competitors

Product Reports

Download Fortinet FortiWeb product report

Fortinet FortiWeb

September 2026

Imperva Application Security Platform

September 2026

Imperva Application Security Platform report

Download Imperva Application Security Platform product report

Also Known As

FortiWeb Web Application Firewall (WAF)

Imperva Bot Management, Imperva Web Application Firewall, Imperva API Security

Overview

Fortinet FortiWeb provides advanced web application protection, using AI-driven threat detection and seamless integration with Fortinet products, ensuring robust security and easy management. It's favored for its scalability in protecting websites, mobile apps, and APIs from threats like SQL injection.

Fortinet FortiWeb offers robust web application security with features like machine learning-driven threat detection, load balancing, and OWASP protection. Its comprehensive security measures include web traffic filtering and DDoS protection, making it ideal for securing APIs and web servers. Cost-effectiveness and easy deployment further enhance its appeal as it serves banking, e-commerce, and industrial sectors. Areas needing enhancement include load balancing capabilities, comprehensive documentation, and improved support response times, addressing user-reported issues such as false positives and integration challenges. Documentation for cloud deployment is crucial for enhanced logging and performance stability.

What are Fortinet FortiWeb's Key Features?

Machine Learning: Detects threats using advanced algorithms.
AI-Driven Threat Detection: Provides automated responses to vulnerabilities.
Load Balancing: Distributes traffic across servers for efficiency.
Anti-Defacement: Protects websites from unauthorized alterations.
OWASP Protection: Guards against common web security vulnerabilities.

Why Consider Fortinet FortiWeb for Web Security?

Cost-Effectiveness: Provides affordable security solutions.
Reliability: Offers consistent performance in threat protection.
Easy Deployment: Simplifies the integration process into existing systems.
Robust Security: Delivers comprehensive protection against cyber threats.
Integration: Ensures compatibility with Fortinet's broader security ecosystem.

Companies across banking, e-commerce, and financial sectors implement Fortinet FortiWeb for its comprehensive security features in protecting web applications from SQL injection and cross-site scripting. Its use as a web application firewall provides essential protection and load-balancing capabilities, ensuring compliance with standards like PCI DSS in cloud environments and industrial settings.

Fortinet

Imperva Application Security Platform delivers comprehensive and continuous web threat protection. Renowned for its ease of use, it shields web applications and databases from various cyber threats while integrating seamlessly with cloud and on-premises environments.

Imperva Application Security Platform protects web environments by offering advanced security measures against threats like DDoS attacks, SQL injections, and cross-site scripting. As a robust web application firewall, it provides extensive monitoring and bot management capabilities. The platform integrates content delivery networks for enhanced performance and scalability, while real-time traffic analysis ensures consistent protection. Despite its strengths, improvements can be made in policy management and customization options. Users seek better integration with third-party tools and more competitive pricing models. The inclusion of AI for enhanced analytics is also anticipated.

What are the key features of Imperva Application Security Platform?

Correlated Attack Validation: Enhances threat assessment by linking related security events.
Threat Radar: Offers visibility into potential and ongoing threats.
Virtual Patching: Provides protection against vulnerabilities without immediate code changes.
IncapRules: Allows creation of custom security policies.
DDoS Protection: Defends against large-scale distributed denial-of-service attacks.
CDN Integration: Improves content delivery speed and reliability.

What benefits should users look for in reviews?

User-Friendly Administration: Simplifies setup and ongoing management tasks.
Seamless Integration: Ensures smooth operation with existing infrastructure.
Comprehensive Threat Protection: Shields digital assets from a wide range of threats.
Hands-On Support: Provides timely and effective customer service assistance.

Imperva Application Security Platform is implemented in industries needing strong database and application protection. Companies use it to enforce geolocation restrictions and manage bots, benefiting sectors like finance and e-commerce where data security and threat monitoring are critical. Its ability to protect and ensure data accessibility makes it integral to business operations prioritizing cyber resilience.

Imperva

Sample Customers

Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG

Hitachi, BNZ, Bitstamp, Moz, InnoGames, BTCChina, Wix, LivePerson, Zillow and more.