Try our new research platform with insights from 80,000+ expert users

FortiWeb Web Application Firewall (WAF) vs The Fastly Next-Gen WAF (powered by Signal Sciences) comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
76
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (13th)
FortiWeb Web Application Fi...
Average Rating
8.2
Reviews Sentiment
7.3
Number of Reviews
24
Ranking in other categories
Web Application Firewall (WAF) (15th)
The Fastly Next-Gen WAF (po...
Average Rating
7.6
Reviews Sentiment
4.8
Number of Reviews
4
Ranking in other categories
Web Application Firewall (WAF) (28th)
 

Featured Reviews

Carlos Alam Hernandez Baruch - PeerSpot reviewer
Fast and secure deployments simplify operations for government and fintech clients
It is a fast and secure DNS. It is very easy to deploy, and my customers are happy with this tool. Additionally, the CDN performance in Mexico is excellent, providing fast service and tools. It offers reliability during high-traffic periods, ensuring no impact on the environment. It helps my clients avoid using on-premise boxes, simplifying operations as they only use the prices on Cloudflare.
Martin Ellmann - PeerSpot reviewer
Provides users with ease of policy configuration and good integration capabilities
The solution helps protect our company's web applications against common threats up to 99 percent. We feel very safe with the tool. Speaking about how the tool has effectively mitigated web security threats for an application, I would say that it is an application behind the web portal, so there are about a hundred or thousand people who can access a website. If it is a sensitive application, and we have to watch every access to it to make it really safe, that is the reason why we need WAF on the application. My company doesn't use AI with the tool. I recommend the product to others. I would say that others need to have it if they have a shopping website or something similar. I know it is hard to sell because we find it quite hard whenever my company tries to do so. The solution offers 100 percent integration with other Fortinet security products. The ease of policy configuration in the tool is okay. I rate the tool a nine to ten out of ten.
Shashank N - PeerSpot reviewer
Provides good stability, but the agent-based approach could be more convenient
The areas that could be improved in Signal Sciences include the effectiveness of rules, as many didn't function optimally and required custom rule-writing to address bypasses for WAF. Additionally, the agent-based approach presents challenges with managing agents across versions and dependencies on specific application platforms like Apache or NGINX, leading to compatibility issues and complexity in integration. This agent-based system proved particularly difficult to manage.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Many websites require an SSL certificate because they sell stuff and want SSL. Cloudflare comes with an SSL certificate built in. It's automatic. You sign yourself up for Cloudflare, and an SSL certificate automatically protects your website. You don't necessarily need a certificate if you have a connection between your website and your host, the server, Cloudflare, and the host."
"I like Cloudflare's application gateway and DDoS protection."
"The most valuable feature of the solution is external DNS. It is also very secure. They have their own main server and once you configure it, the product takes care of everything. There are no issues in resolving IPs and low latency is also present."
"It is a stable solution. I rate the stability a ten out of ten...I rate the scalability a ten out of ten."
"It's very user-friendly."
"Smaller businesses have seen great ROI due to the low investment and strong performance."
"The overall experience with Cloudflare is positive, with a rating of eight out of ten."
"The most valuable feature of Cloudflare DNS is security."
"It improves latency by optimizing traffic routing."
"It is good for web tracking applications."
"The product is easy to configure."
"The most valuable feature is the tool's integration with load-balancing applications, similar to FortiADC. Its importance depends on customer requirements, such as whether they prioritize application load balancing or layer seven protection."
"The machine learning on FortiWeb WAF is valuable."
"FortiWeb has a very extensive library of known attack signatures, which makes the product fit for any environment, regardless if the customer uses Windows-specific or non-Windows-specific applications."
"Their support is truly exceptional when I compare it with similar large-sized companies."
"FortiWeb identified potential DDoS attacks and suspicious domain activity, showcasing the value of its machine-learning capabilities."
"When configuring a web application firewall using Signal Sciences, we configure a rule whereby no one except a few people can access the application."
"Fastly (Signal Sciences) integrates and tags the intermittent traffic based on patterns. It generates signals and provides them in a dashboard where we can view them and decide whether to allow or deny traffic. It's a more advanced and easy-to-navigate dashboard."
"Because The Fastly Next-Gen WAF (powered by Signal Sciences) is API-driven, we have integrations with the CI/CD pipeline through GitHub Actions, making it easy to integrate."
"The product's most valuable feature is its ability to set up the rules easily."
 

Cons

"They lack a good way to manage DNS as a company, since everything is relegated to single account logins until you get to the higher levels. They have come out with a paid feature to remedy this, but I have not had a chance to fully review it yet to know if it fixes the access problem."
"Areas like how assessment, discovery, and payload are dealt with and how it all comes into your organization can be considered when trying to make suggestions to Cloudflare for improvements."
"If they improve on the placement of their data centers, it would be better. I'm living in a remote area. I would like to connect to them without any kind of lag."
"Latencies are always a problem."
"Cloudflare's console should be made more user-friendly."
"The solution could work at being less expensive. It costs a lot to use it."
"The timing aspect can lead to it being considered overpriced. This is a particular concern we have with Cloudflare, as they may struggle with accurately detecting the client."
"We're facing challenges due to an upgrade in the machine learning model. The problem arises from some users abusing the APIs, resulting in an influx of suspicious traffic. Cloudflare's learning model mistakenly identifies this traffic as human. Consequently, it assigns it a higher trust score, akin to legitimate human traffic, causing complications in our architecture. Previously, such traffic would have been categorized as suspicious, enabling us to apply appropriate blocking rules. However, we encounter difficulties distinguishing between genuine and suspicious traffic with the new categorization. Despite these challenges, overall, Cloudflare remains the preferred solution compared to Azure, AWS CloudFront, and Google Cloud Armor."
"FortiWeb Web Application Firewall's signature database updates could be improved."
"FortiWeb Web Application Firewall (WAF) needs to update its attack prevention database."
"The price is a little higher than the competitors."
"The improvement needed is in their response time. Now it takes longer, and they talk about SLA and 48-hour response times."
"If some of my customers want to migrate from F5 to Fortinet Firewall, or the Fortinet WAF solution, there are some migration issues since I cannot migrate all the elements quickly using Fortinet Firewall."
"FortiWeb Web Application Firewall needs to improve its performance."
"I don't see any issues with the tool apart from the pricing aspect of the product. The price of the product is an area where improvements are required."
"There is room for improvement in pricing, and actually, the price is a bit higher because on the same terms I purchased, the support subscription is so high."
"The UI is not very intuitive and could be better."
"The areas that could be improved in Signal Sciences include the effectiveness of rules, as many didn't function optimally and required custom rule-writing to address bypasses for WAF."
"Even if we create some custom rules, Signal Sciences cannot capture some of the malicious traffic."
"Fastly don't support caching for China users. That's the only feature lacking compared to Akamai."
 

Pricing and Cost Advice

"The cost primarily depends on the size of the organization."
"That is one of the great features. I was able to access the majority of the features and services for free."
"The product's pricing is cheap."
"The product's pricing is minimal compared to other products."
"We are using the free tier of the solution."
"Cloudflare's pricing is not much higher and is good for middle-level organizations."
"The tool is a premium product, so it is very expensive."
"The solution has many features but there are ones that you need to pay for. Sometimes you have to find out which is available for free and which you have to pay for."
"FortiWeb Web Application Firewall is not expensive."
"FortiWeb has a good presence because of its price."
"I would rate the pricing a four out of ten."
"I rate the tool's pricing an eight out of ten."
"This product offers two pricing options: a standard package and an advanced package."
"It is a cost-effective product. If you need an extra module in the product, there will be an extra cost in addition to the licensing fee."
"It is a cheap solution."
"FortiWeb WAF is priced well for customers compared to other vendors' solutions."
"Signal Sciences is pretty cheap compared to other solutions."
"The product has an affordable cost."
"The pricing is 50% less than Akamai."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
865,484 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Comms Service Provider
11%
Financial Services Firm
9%
Manufacturing Company
7%
Computer Software Company
11%
Government
11%
Financial Services Firm
9%
Manufacturing Company
9%
Computer Software Company
11%
Manufacturing Company
11%
Retailer
10%
Healthcare Company
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about FortiWeb Web Application Firewall (WAF)?
The most valuable features of the solution are SD-WAN, filtration, web filter, application filter, and IPS.
What is your experience regarding pricing and costs for FortiWeb Web Application Firewall (WAF)?
The pricing for FortiWeb Web Application Firewall (WAF) is reasonable. That said, it depends on how many websites we ...
What needs improvement with FortiWeb Web Application Firewall (WAF)?
Their AI technology is good. Overall, Fortinet is only good. The improvement needed is in their response time. In the...
What do you like most about Signal Sciences?
The product's most valuable feature is its ability to set up the rules easily.
What is your experience regarding pricing and costs for Signal Sciences?
The pricing is very competitive compared to other providers. The pricing is definitely a factor in our decision-makin...
What needs improvement with Signal Sciences?
We do use it, but the UI can be improved as we mostly work through the CI/CD. It provides support, but sometimes it i...
 

Also Known As

Cloudflare DNS
No data available
Signal Sciences Next-Gen WAF, Signal Sciences RASP
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Information Not Available
Chef, Adobe, Datadog, Etsy, GrubHub, Vimeo, SendGrid, Under Armour, Duo, AppNexus
Find out what your peers are saying about FortiWeb Web Application Firewall (WAF) vs. The Fastly Next-Gen WAF (powered by Signal Sciences) and other solutions. Updated: July 2025.
865,484 professionals have used our research since 2012.