Try our new research platform with insights from 80,000+ expert users

Fortinet FortiWeb vs StackPath WAF comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
76
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (13th)
Fortinet FortiWeb
Average Rating
7.8
Reviews Sentiment
6.6
Number of Reviews
96
Ranking in other categories
Web Application Firewall (WAF) (4th)
StackPath WAF
Average Rating
9.0
Reviews Sentiment
8.5
Number of Reviews
1
Ranking in other categories
Web Application Firewall (WAF) (31st)
 

Featured Reviews

Carlos Alam Hernandez Baruch - PeerSpot reviewer
Fast and secure deployments simplify operations for government and fintech clients
It is a fast and secure DNS. It is very easy to deploy, and my customers are happy with this tool. Additionally, the CDN performance in Mexico is excellent, providing fast service and tools. It offers reliability during high-traffic periods, ensuring no impact on the environment. It helps my clients avoid using on-premise boxes, simplifying operations as they only use the prices on Cloudflare.
OcheEluma - PeerSpot reviewer
Enhanced security with comprehensive traffic inspection and some downtime automation needs
One area that needs improvement is the handling of SaaS downtime. When there is downtime at their data center, it becomes a transit point issue for us, causing downtime in our environment as well. Although measures like built-in redundancy and manual switching between data centers exist, there is room for improvement in making these transitions automatic without impacting the customer. Automating the migration without manual intervention would significantly enhance user experience during downtime. Additionally, being able to read non-flagged traffic for operational purposes could also be an area to improve.
FC
Stable product with an easy setup process
We use StackPath WAF to protect small websites for our customers The product’s most valuable is WAF. The authentication feature helps us protect WordPress sites. The product’s performance for caching feature needs improvement. It could provide high security to handle large traffic volumes for…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution automatically detects and responds to certain types of traffic based on geolocation."
"It's a great product because it's scalable, has great coverage, and is mature with good defenses against DDoS attacks."
"The features of Cloudflare were found to be more beneficial and led to the decision to utilize it over other options."
"It is a stable solution. I rate the stability a ten out of ten...I rate the scalability a ten out of ten."
"Cloudflare is a security SaaS provider that provides security and protects us from any application layer attack."
"I rate its stability a ten out of ten."
"The solution provides good load balancing and protection against DDoS attacks."
"The web application firewall brought us good security and a view of the accesses/blocks of the entire domain and subdomain that were accessed both by region (country) and IPs."
"The most valuable feature of Fortinet FortiWeb is the ease of integration and configuration."
"It's stable and works efficiently against OWASP Top 10 attacks."
"The initial setup is pretty straightforward."
"The ease of configuration is valuable. We have Azure WAF, we have OCI WAF, and we also have Cloud Armor for GCP, but their configuration isn't very easy. It's pretty simple in FortiWeb, and we can enable or configure whatever we want."
"We can block access using the IP address so no one can connect to our web server or website using the real IP."
"The GUI makes it easy to scale in terms of learning and utilization."
"It is a stable product."
"It allows specific IP whitelisting or even regional whitelisting, ensuring only whitelisted traffic from certain geographical regions can access the environment."
"The product’s most valuable is WAF. The authentication feature helps us protect WordPress sites."
 

Cons

"We have noticed multiple instances where Cloudflare falsely indicates that our servers are down, even when there is no actual load on them. This makes it challenging for us to identify the exact issue."
"The product support needs to be accessible from more places, a wider area of coverage."
"In the last two years, there has been a certain amount of downtime when using the VDM."
"It should have easier documentation for the configuration. It's very technical and people who aren't technical should also be able to do the configuration."
"Cloudflare's console should be made more user-friendly."
"Cloudflare could be improved by introducing a mid-tier pricing option."
"Eventually, things go sideways and require fixes when it would have been easier to prevent the issue initially."
"They lack a good way to manage DNS as a company, since everything is relegated to single account logins until you get to the higher levels. They have come out with a paid feature to remedy this, but I have not had a chance to fully review it yet to know if it fixes the access problem."
"They could improve their support a little bit for faster response time."
"Centralized management of multiple devices, and GUI improvement, could reduce the learning curve."
"The product’s stability could be improved."
"The integration with other products should be improved."
"FortiWeb does not exist in a cloud-based form. Its only available for deployment as a virtual appliance on AWS and Azure IaaS platforms. Because of the trend to WAF environments, it would be good to have it as a SaaS. Also, FortiWeb would be more competitive if it combined WAF and DDoS protection."
"I had some small problems when I was upgrading firmware. After the upgrade, some of my certificates were deleted.​"
"FortiGate could be improved on the security end because we've had some incidents with the customer. Otherwise, there is no problem."
"The automation piece can be improved. Although they say it can be automated very well, there is still manual work. Its usability should be improved in terms of automation because we want to build an infrastructure with code, but you can't do that easily with this solution. If they can give us APIs in the firewalls that we can tap into, it would be perfect."
"The product’s performance for caching feature needs improvement."
 

Pricing and Cost Advice

"The price of the solution is expensive."
"When you compare Cloudflare DNS to other solutions, such as Akamai, the price is reasonable."
"It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
"The product's pricing is minimal compared to other products."
"The product's pricing is cheap."
"We don't have any issues with the price."
"We are using the free tier of the solution."
"For Cloudflare, I recommend it heavily for small businesses with revenue under a couple of million dollars. Onboarding is easy, and they even have a free plan. This makes it simple for businesses in the $100,000-$500,000 range to try it out and see its value, allowing them to scale up their infrastructure as needed."
"So far, I have been pretty pleased with the way it's priced and licensed. The way it's done makes it easy, especially for an organization like us, so I've been pleased with the way it's priced and licensed right now."
"There are no costs in addition to the standard licensing fees."
"The cost isn't expensive."
"If one is very cheap and ten is very expensive, I rate the product price as three or four."
"Keep a loose margin between your actual bandwidth and the product sizing when using hardware appliances. Only virtual machines are upgradable to larger sizes."
"When I use any other firewall, I have to take a license. It could be a perpetual license or subscription-based. In both cases, we have to pay some amount in advance, whereas in the case of FortiWeb, when using it as a service, I am paying half a dollar only for the domain name, and then I am paying based on the traffic or the number of requests."
"Previously, for each project, the cost was $800 to $1,000 per application. Now, it's $100 to $120. For some of the applications, there is a 90% reduction, and for some of the applications, there is a 50% reduction. We're paying only $500 to $600."
"The solution is cheaper compared with other solutions. It has a yearly license."
"The product is affordable."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
862,543 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Comms Service Provider
11%
Financial Services Firm
10%
Manufacturing Company
7%
Computer Software Company
14%
Financial Services Firm
11%
Government
7%
Comms Service Provider
7%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about Fortinet FortiWeb?
The WAF profiles has been effective at mitigating web-based threats.
What is your experience regarding pricing and costs for Fortinet FortiWeb?
Fortinet FortiWeb is cost-effective compared to solutions like F5. It offers strong performance for the price, provid...
What needs improvement with Fortinet FortiWeb?
The cloud-based security service of Fortinet FortiWeb could be enhanced to match the level of providers like Cloudfla...
What do you like most about StackPath WAF?
The product’s most valuable is WAF. The authentication feature helps us protect WordPress sites.
What needs improvement with StackPath WAF?
The product’s performance for caching feature needs improvement. It could provide high security to handle large traff...
 

Also Known As

Cloudflare DNS
No data available
StackPath Web Application Firewall
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG
Robotics Cats, Jewlr
Find out what your peers are saying about Amazon Web Services (AWS), F5, Microsoft and others in Web Application Firewall (WAF). Updated: July 2025.
862,543 professionals have used our research since 2012.