Try our new research platform with insights from 80,000+ expert users

FortiWeb Web Application Firewall (WAF) vs Sucuri comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
76
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (13th)
FortiWeb Web Application Fi...
Average Rating
8.2
Reviews Sentiment
7.3
Number of Reviews
24
Ranking in other categories
Web Application Firewall (WAF) (15th)
Sucuri
Average Rating
8.4
Reviews Sentiment
7.5
Number of Reviews
6
Ranking in other categories
Web Application Firewall (WAF) (24th), Distributed Denial-of-Service (DDoS) Protection (17th), Domain Name System (DNS) Security (13th)
 

Featured Reviews

Carlos Alam Hernandez Baruch - PeerSpot reviewer
Fast and secure deployments simplify operations for government and fintech clients
It is a fast and secure DNS. It is very easy to deploy, and my customers are happy with this tool. Additionally, the CDN performance in Mexico is excellent, providing fast service and tools. It offers reliability during high-traffic periods, ensuring no impact on the environment. It helps my clients avoid using on-premise boxes, simplifying operations as they only use the prices on Cloudflare.
Martin Ellmann - PeerSpot reviewer
Provides users with ease of policy configuration and good integration capabilities
The solution helps protect our company's web applications against common threats up to 99 percent. We feel very safe with the tool. Speaking about how the tool has effectively mitigated web security threats for an application, I would say that it is an application behind the web portal, so there are about a hundred or thousand people who can access a website. If it is a sensitive application, and we have to watch every access to it to make it really safe, that is the reason why we need WAF on the application. My company doesn't use AI with the tool. I recommend the product to others. I would say that others need to have it if they have a shopping website or something similar. I know it is hard to sell because we find it quite hard whenever my company tries to do so. The solution offers 100 percent integration with other Fortinet security products. The ease of policy configuration in the tool is okay. I rate the tool a nine to ten out of ten.
David Shlingbaum - PeerSpot reviewer
Simple solution and good WAF
Sucuri could provide help for specific security alerts in-line instead of requiring users to search for it in the help section. Users get errors or EBAs, and if they want to read about it, they need to find it in the help section of the site. It would be more helpful to allow users to see more information and tips immediately from within the alert.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The features of Cloudflare were found to be more beneficial and led to the decision to utilize it over other options."
"Cloudflare DNS is widely used, and it's good for websites. If we use Cloudflare DNS and update one record, it updates in their office instantly."
"The most valuable features of the solution are performance and security."
"It is a fast and secure DNS."
"Centralized, full-featured DNS."
"I rate its stability a ten out of ten."
"I get a lot of value from Cloudflare's API because it enables you to build a separate environment inside the solution. You can create a domain for performing test requests before you move to the production environment and connect various domains."
"The most valuable feature is its usability."
"The most valuable feature is the tool's integration with load-balancing applications, similar to FortiADC. Its importance depends on customer requirements, such as whether they prioritize application load balancing or layer seven protection."
"Their support is truly exceptional when I compare it with similar large-sized companies."
"The solution's technical support is good."
"FortiWeb identified potential DDoS attacks and suspicious domain activity, showcasing the value of its machine-learning capabilities."
"The product is easy to configure."
"The product's initial setup phase was easy."
"The solution is transparent and smooth."
"The features of FortiWeb Web Application Firewall (WAF) that have proven most effective in protecting web applications include web filtering, DDoS protection, geo-location blocking, and blocking SQL injection attacks."
"The initial setup was very easy."
"The most valuable part is the analytics and visualization."
"I use it as a WAF, which is basically a web firewall to monitor and block traffic to our web server."
"Domain name scanning since it allows us to scan all our domain names and determine whether it has malware or if is reported as phishing."
"The initial setup was straightforward. Straight forward because the plugin can simply be installed and then it does its job. It's not complex, there is no learning curve. The online scan is simple, you put in the website address and the scan gives us a report on the browser itself. It's simple to use."
"It significantly eases the workload and streamlines the initial setup required to protect a website."
 

Cons

"Cloudflare's free plan is limited to 5,000 records for their free plan. They should increase that. For example, if I create a domain called abc.com and a subdomain called a.abc.com, my record count will be two. I can make a maximum of 5,000 subdomains. However, if we use our own DNS hosted on another provider, there is no limit. Their free plan also lacks name server customization."
"There might be helpful if there was some web application firewall feature."
"The reporting can definitely be improved to offer a lot more explanation on something that may have happened or has actually happened."
"It would be helpful if the solution could continue evolving to compete with the other solutions on the market."
"Technical support is lacking."
"The integration of LLMs on the dashboard is something that is needed in the tool."
"The solution could be more user-friendly."
"We have noticed multiple instances where Cloudflare falsely indicates that our servers are down, even when there is no actual load on them. This makes it challenging for us to identify the exact issue."
"We have encountered issues with webhooks and management of FortiWeb Web Application Firewall's on-premise version."
"FortiWeb Web Application Firewall's signature database updates could be improved."
"FortiWeb Web Application Firewall needs to improve its performance."
"FortiWeb Web Application Firewall (WAF) needs to update its attack prevention database."
"The price is a little higher than the competitors."
"FortiWeb could have an inbound load balancing pack."
"There is room for improvement in the support. The response time could be faster. Plus, they ask for a lot of information. It is not easy to get support."
"I don't see any issues with the tool apart from the pricing aspect of the product. The price of the product is an area where improvements are required."
"The main improvement I would like to see is support for .NET applications. If they could include this feature, I would include more sites in the protection."
"In terms of improvement, the cost factor is always there."
"Sucuri could provide help for specific security alerts in-line instead of requiring users to search for it in the help section."
"It would greatly benefit customers if they implemented an online chat or messaging system for quicker assistance."
"Confident score: Currently it does not have one and there are cases that most websites flagged are false-positives."
"I would rate this solution an eight out of ten. The reason is that we have found sometimes customers or Google saying that there is something wrong with the website but Sucuri says that the site is clean so we do have to look at the site manually which means that the Sucuri scan does not pick up anything and everything."
 

Pricing and Cost Advice

"The price of the solution is expensive."
"That is one of the great features. I was able to access the majority of the features and services for free."
"When you compare Cloudflare DNS to other solutions, such as Akamai, the price is reasonable."
"In terms of licensing costs, we don't pay for licensing for Cloudflare. We only establish communication, then for peering, Cloudflare takes care of the cross-connection in different data centers."
"We are using the free version."
"The price is reasonable."
"We are using the free tier of the solution."
"The tool is a premium product, so it is very expensive."
"The tool is really expensive."
"FortiWeb WAF is priced well for customers compared to other vendors' solutions."
"This product offers two pricing options: a standard package and an advanced package."
"FortiWeb has a good presence because of its price."
"I rate the tool's pricing an eight out of ten."
"FortiWeb Web Application Firewall's pricing is suited for small or medium organizations."
"It is a cheap solution."
"The licensing cost of the product is pretty high compared to other OEMs in the market."
"The ROI has been very good. Because of the solution, I have a tax break. The site developers were not always experienced people. We used to pay more for cleaning up the site when it was infected. Now, we have peace of mind knowing that the solution will clean up the site and that we won't have to go through the unnecessary process of restoring it from a backup. The protection on the WAF and the measures for backups have also prevented our site from going down."
"Sucuri offers different plans, both the standard plan and an advanced plan. So there are different plans to choose from."
"It stands out as a more cost-effective option compared to other cloud-based security services like Cloudflare or JetPass."
"I’d simply say it’s really worth it."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
865,484 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Comms Service Provider
11%
Financial Services Firm
9%
Manufacturing Company
7%
Computer Software Company
11%
Government
11%
Financial Services Firm
9%
Manufacturing Company
9%
Computer Software Company
10%
Financial Services Firm
9%
Manufacturing Company
7%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about FortiWeb Web Application Firewall (WAF)?
The most valuable features of the solution are SD-WAN, filtration, web filter, application filter, and IPS.
What is your experience regarding pricing and costs for FortiWeb Web Application Firewall (WAF)?
The pricing for FortiWeb Web Application Firewall (WAF) is reasonable. That said, it depends on how many websites we ...
What needs improvement with FortiWeb Web Application Firewall (WAF)?
Their AI technology is good. Overall, Fortinet is only good. The improvement needed is in their response time. In the...
What do you like most about Sucuri?
The initial setup was very easy.
What is your experience regarding pricing and costs for Sucuri?
The pricing is very reasonable. Sucuri offer other features as an add-on, such as backup, but these have an additiona...
What needs improvement with Sucuri?
The main improvement I would like to see is support for .NET applications. If they could include this feature, I woul...
 

Also Known As

Cloudflare DNS
No data available
No data available
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Information Not Available
The Loft Salon, Tom McFarlin, WPBeginner, Taylor Town, Everything Everywhere, Financial Ducks in a Row, Chubstr, Real Advice Gal, Sujan Patel, Wallao, List25, School the World
Find out what your peers are saying about FortiWeb Web Application Firewall (WAF) vs. Sucuri and other solutions. Updated: July 2025.
865,484 professionals have used our research since 2012.