Try our new research platform with insights from 80,000+ expert users

Fortinet FortiWeb vs Tenable.io Web Application Scanning comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
76
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (12th)
Fortinet FortiWeb
Average Rating
7.8
Reviews Sentiment
6.6
Number of Reviews
96
Ranking in other categories
Web Application Firewall (WAF) (5th)
Tenable.io Web Application ...
Average Rating
7.8
Reviews Sentiment
6.7
Number of Reviews
17
Ranking in other categories
Application Security Tools (18th)
 

Mindshare comparison

Web Application Firewall (WAF) Market Share Distribution
ProductMarket Share (%)
Fortinet FortiWeb7.3%
F5 Advanced WAF9.0%
Microsoft Azure Application Gateway7.5%
Other76.2%
Web Application Firewall (WAF)
Application Security Tools Market Share Distribution
ProductMarket Share (%)
Tenable.io Web Application Scanning1.3%
SonarQube Server (formerly SonarQube)20.5%
Checkmarx One10.4%
Other67.8%
Application Security Tools
 

Featured Reviews

Carlos Alam Hernandez Baruch - PeerSpot reviewer
Fast and secure deployments simplify operations for government and fintech clients
It is a fast and secure DNS. It is very easy to deploy, and my customers are happy with this tool. Additionally, the CDN performance in Mexico is excellent, providing fast service and tools. It offers reliability during high-traffic periods, ensuring no impact on the environment. It helps my clients avoid using on-premise boxes, simplifying operations as they only use the prices on Cloudflare.
OcheEluma - PeerSpot reviewer
Enhanced security with comprehensive traffic inspection and some downtime automation needs
One area that needs improvement is the handling of SaaS downtime. When there is downtime at their data center, it becomes a transit point issue for us, causing downtime in our environment as well. Although measures like built-in redundancy and manual switching between data centers exist, there is room for improvement in making these transitions automatic without impacting the customer. Automating the migration without manual intervention would significantly enhance user experience during downtime. Additionally, being able to read non-flagged traffic for operational purposes could also be an area to improve.
Jahanzeb Feroze Khan - PeerSpot reviewer
Highly Recommended Solution with Latest Scanning Methods
The setup of the solution is straightforward. It involves installing the package and gaining access. It took no time at all since we deployed it on the cloud. We assigned the necessary configurations, and everything was set up and ready to go within a few seconds. I would rate the setup as a perfect ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The tool is user-friendly."
"The attacker won't have details since my public IP is anonymous. It offers us good privacy."
"Many websites require an SSL certificate because they sell stuff and want SSL. Cloudflare comes with an SSL certificate built in. It's automatic. You sign yourself up for Cloudflare, and an SSL certificate automatically protects your website. You don't necessarily need a certificate if you have a connection between your website and your host, the server, Cloudflare, and the host."
"The most valuable feature is the web application firewall."
"It is a fast and secure DNS."
"I rate its stability a ten out of ten."
"The most valuable feature of the solution is external DNS. It is also very secure. They have their own main server and once you configure it, the product takes care of everything. There are no issues in resolving IPs and low latency is also present."
"The solution offers the flexibility to control configuration rules."
"The support services, performance, and pricing are all valuable features. The performance is excellent."
"FortiWeb offers a good price for the marketplace. In the Sri Lankan market, it's hard to find high-end products that can match FortiWeb's pricing. For high-end solutions, the price is always extremely high."
"When it comes to blocking unknown threats and attacks, I would give it the highest score possible. We first started using AWS and its Web Application Firewalls. That was okay, but it was quite a manual process to keep it up to date, whereas Fortinet is always up to date, and the default rules or the modules that you can turn on are very easy to use."
"One main feature we are very happy about is file security and upload functionality."
"We find that it is quite stable and reliable."
"The product's initial setup phase was straightforward, and since our company didn't have any problems with it, we didn't encounter many problems with the tool."
"The solution's most valuable feature is its security profile."
"The reporting and token system is good."
"Tenable.io Web Application Scanning is very easy to use."
"Now that the license is centralized, it's a significant feature to manipulate assets based on their functions."
"The solution's instant reports feature is the most effective for detecting threats."
"It collects the vulnerabilities on the hostnames and sends them to the Tenable.io cloud. Tenable has its own cloud where Tenable.io is running, but there are many connectors to other cloud solutions. Tenable can do vulnerability scanning for other cloud managers such as Azure, Amazon, and so on."
"The most effective feature of the product is the ability to scan the entire environment."
"Tenable provides the end analysis results covering all the published vulnerabilities and information on the market."
"We use the tool for our websites. We have a vulnerable subdomain. The tool helps to scan it for vulnerabilities."
"Tenable.io Web Application Scanning provides a detailed report, identifying functions that are complex and need to be more maintainable and readable."
 

Cons

"There might be helpful if there was some web application firewall feature."
"Integration involving API with other products could be more user-friendly."
"It would be beneficial for us if Cloudflare could offer a scrubbing solution. This would involve taking a snapshot of my website and keeping it live during a DDoS attack, ensuring uninterrupted service for our users. DDoS attacks are typically short in duration, and having Cloudflare maintain the site's availability from its secure network would enhance the overall user experience. I would appreciate it if Cloudflare could consider implementing this feature. Many organizations already utilize similar capabilities in their CDN platforms, where a static snapshot of the web page is displayed during DDoS attacks. In terms of features, Cloudflare needs to enhance its resilience and stay more focused on adopting new technologies. For instance, solutions like F5 XC Box, Access Solution, and Distributed Cloud Solution have impressive features, and Cloudflare should strive to match and exceed those capabilities. There's a need for improvement in areas like AI-based DDoS attacks and Layer 7 WAF features. Cloudflare should prioritize enhancements in areas such as behavioral DDoS and protection against SQL injection attacks, considering the prevalent trend of public exposure to the internet for business reasons. Overall, Cloudflare needs to invest more in advancing its feature set."
"Cloudflare's console should be made more user-friendly."
"Cloudflare should add more documentation and pricing to the cloud version."
"There are some issues with the CDN services."
"The integration of LLMs on the dashboard is something that is needed in the tool."
"The product needs to improve its automation."
"The tool's WAF or web application firewall area has certain aspects that can be improved."
"We want to see more detailed logging, such as audit logging, as this would significantly enhance the solution's reporting. We currently get some information from logs, but more would be better."
"In terms of performance, it needs to be more robust."
"No solution is 100% secure and the security could always be worked on."
"The integration with other products should be improved."
"The solution is rather complicated. If you know what to do, it's not bad, but it's complicated for a first time user to configure the solution. What I'd like to improve are the custom signatures."
"If the price was lower, it would be a bit more attractive, as an option, to the customers."
"Centralized configuration using FortiManager – like what exists for NGFW FortiGate appliances - would improve the configuration."
"Tenable.io Web Application Scanning could improve by offering faster fuzzing."
"The dashboard could be more user-friendly."
"The technical support needs improvement. Currently, it takes time, which might be due to the free version, but providing some level of support could encourage future purchase decisions."
"Sometimes it lags with different cloud environments."
"The solution's dashboards could be improved and made more user-friendly."
"They have a general dashboard for web application scanning, but the dashboards and reporting can be improved. They probably have some features in their roadmap."
"The cloud and the on-premises versions have their own controllers, and there is no way to centrally manage controllers."
"The reporting has a very limited customization capability."
 

Pricing and Cost Advice

"The price of the solution is expensive."
"When you compare Cloudflare DNS to other solutions, such as Akamai, the price is reasonable."
"That is one of the great features. I was able to access the majority of the features and services for free."
"There are no additional costs beyond the standard licensing fees."
"We are using the free version."
"It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
"The price is reasonable."
"The tool is a premium product, so it is very expensive."
"Cheaper than others."
"It's an expensive solution, although there are no additional costs."
"Due to the situation in Iran with the sanctions, the price of this solution is very expensive."
"The maintenance fee for this product could be improved."
"The costs are standard. We pay around $1,600 yearly."
"If one is cheap and ten is expensive, I rate the tool an eight."
"The price of Fortinet FortiWeb depends from customer to customer because some customers are considering using other solutions, such as Imperva. The price of Fortinet FortiWeb sits well for the middle-sized customers that we deal with."
"When I use any other firewall, I have to take a license. It could be a perpetual license or subscription-based. In both cases, we have to pay some amount in advance, whereas in the case of FortiWeb, when using it as a service, I am paying half a dollar only for the domain name, and then I am paying based on the traffic or the number of requests."
"For Tenable.io Web Application Scanning, it comes to around 6,50,000 Indian rupees, plus taxes."
"I rate the product's pricing a four out of ten."
"The pricing is okay."
"Tenable.io Web Application Scanning is expensive for small businesses."
"The price of the solution is reasonable compared to the competitors. The license cost is based on the number of users and the annual usage."
"The application is extremely affordable. There are no additional costs involved with licensing. We switched to Tenable.io Web Application Scanning from other solutions due to pricing."
"It follows the same licensing scheme as Tenable.io and Tenable. sc."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
868,787 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Comms Service Provider
11%
Financial Services Firm
10%
Manufacturing Company
7%
Computer Software Company
12%
Financial Services Firm
11%
Government
7%
Comms Service Provider
7%
Financial Services Firm
13%
Computer Software Company
13%
Government
10%
Retailer
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business45
Midsize Enterprise8
Large Enterprise25
By reviewers
Company SizeCount
Small Business47
Midsize Enterprise20
Large Enterprise30
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise4
Large Enterprise7
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about Fortinet FortiWeb?
The WAF profiles has been effective at mitigating web-based threats.
What is your experience regarding pricing and costs for Fortinet FortiWeb?
The pricing for Fortinet FortiWeb varies with different models having different prices. It depends on the requirement...
What needs improvement with Fortinet FortiWeb?
There is room for improvement in Fortinet FortiWeb. The team was only from FortiGate itself. They are making new firm...
What do you like most about Tenable.io Web Application Scanning?
The most effective feature of the product is the ability to scan the entire environment.
What needs improvement with Tenable.io Web Application Scanning?
Improvements could include providing coverage reports in the free version and features related to security reports. A...
What advice do you have for others considering Tenable.io Web Application Scanning?
I would recommend Tenable.io Web Application Scanning as it provides us with good reports, which help improve our cod...
 

Also Known As

Cloudflare DNS
No data available
No data available
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG
IMDEX
Find out what your peers are saying about F5, Amazon Web Services (AWS), Microsoft and others in Web Application Firewall (WAF). Updated: September 2025.
868,787 professionals have used our research since 2012.