No more typing reviews! Try our Samantha, our new voice AI agent.

Imperva Application Security Platform vs Rapid7 AppSpider comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
79
Ranking in other categories
CDN (1st), WAN Optimization (4th), Web Application Firewall (WAF) (9th), Distributed Denial-of-Service (DDoS) Protection (2nd), Managed DNS (1st), Domain Name System (DNS) Security (5th), Cloud Security Posture Management (CSPM) (14th)
Imperva Application Securit...
Average Rating
8.6
Reviews Sentiment
6.9
Number of Reviews
147
Ranking in other categories
CDN (2nd), Web Application Firewall (WAF) (1st), Distributed Denial-of-Service (DDoS) Protection (4th), Bot Management (1st), API Security (1st)
Rapid7 AppSpider
Average Rating
7.8
Reviews Sentiment
6.7
Number of Reviews
14
Ranking in other categories
Static Application Security Testing (SAST) (30th)
 

Mindshare comparison

Distributed Denial-of-Service (DDoS) Protection Mindshare Distribution
ProductMindshare (%)
Imperva Application Security Platform8.0%
Cloudflare12.4%
Radware DDoS6.4%
Other73.2%
Distributed Denial-of-Service (DDoS) Protection
Static Application Security Testing (SAST) Mindshare Distribution
ProductMindshare (%)
Rapid7 AppSpider0.7%
SonarQube13.3%
Checkmarx One8.8%
Other77.2%
Static Application Security Testing (SAST)
 

Featured Reviews

M.A. Faisal - PeerSpot reviewer
General Manager at bKash Limited
Advanced protection has secured critical web workloads and provides clear traffic visibility
From a security perspective, there remains a security loophole, as some browsers in the market can bypass the Turnstile solution, which requires approximately 40 seconds to do so. From a performance perspective, this is acceptable. We also tried Google reCAPTCHA, and that can also be bypassed. From a security perspective, I would say neither solution is completely secured. Regarding uptime, we have faced a couple of incidents due to Cloudflare in recent years, so I cannot say we receive 100% uptime for our region. We sometimes face challenges, including downtime and other issues. As a result, we are not receiving 100% uptime from Cloudflare's solution. Since most of our customers are in this region, we need alternatives. We need something more competitive than Cloudflare. Unfortunately, in Bangladesh, Cloudflare has three points of presence already, and we cannot find any other solution provider in Bangladesh as an alternative, which presents another challenge. Competitor solutions have more attack signatures, which ensure better security compared to Cloudflare's predefined configurations. Customers do not have options to modify any configuration parameters in Cloudflare, whereas other competitor solutions, such as F5 Distributed Cloud, allow customers to tune configurations according to their requirements. Cloudflare could improve in this area. Additionally, regarding visibility, Cloudflare has static visibility, but they could adopt dynamic graph features for their customers.
reviewer2818155 - PeerSpot reviewer
Senior Associate at a tech vendor with 10,001+ employees
Application protection has improved and reporting and dashboards still need refinement
I believe Imperva Application Security Platform should have a more interactive wizard. While the dashboard is good, it could be more eye-catching. Based on my perspective, I recommend modifying the dashboards, especially the main dashboard where I can see the traffic hit count, alerts, and other latest information. In terms of reporting, I find it challenging to create reports; in my earlier days, it was difficult. Over time, I have learned how to create reports, but it should be easier to do so. I have used other tools such as firewalls or SolarWinds, where creating a report is straightforward and does not take much time, unlike in Imperva, where I have to add many elements. Modifications in the integration aspects would also be beneficial.
HW
Marketing Expert at J's communication
Clients benefit from broad authentication and effective crawling but need localization improvements
Our clients use AppSpider to address security concerns for their websites. It is particularly used by customers who require security assessments One of the most valuable features of AppSpider is its broad range of authentication identification, which is a key reason for its utilization.…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The attacker won't have details since my public IP is anonymous. It offers us good privacy."
"The solution is very good at mitigating threats."
"For businesses that don't have a dedicated security team, I think it's a better product; it's more intuitive for people like us."
"The technical support on offer is excellent; they are very helpful and responsive, and we are quite happy with the level of service they provide to their customers."
"Cloudflare is easier to manage than the solutions provided by these vendors, and the user experience is much more straightforward and appeals to a lot of developers."
"The solution offers the flexibility to control configuration rules."
"The UI is good."
"The solution is stable, and the DNS servers are simple to use."
"The most valuable features of the Imperva Web Application Firewall are performance and flexibility, and we can extend or customize the box itself."
"The solution can scale."
"We have seen a return on investment with Imperva Application Security Platform, as we started with a few devices and gradually increased the number of on-premises devices for Imperva Application Security Platform."
"I find the configurability of the tools and the ease of operation to be the most valuable feature of Imperva."
"The technical support is excellent."
"Imperva is a Gartner leader, so its scalability, performance, and features are excellent."
"The solution is very scalable; it is one of the most important features, and you can also expand resources and features as well."
"It's very pretty easy to onboard the URL."
"I would say that it is stable, as I am not aware of any major issues."
"Customer service has been quite good."
"The most valuable feature of Rapid7 AppSpider is the vulnerability reporting data. Additionally, the data is reported in a convenient way rather than seeing them as a PDF. We are able to generate all the reports exactly what we want in a flexible way."
"It does a scan that performs about 100 checks on web applications and produces a clear report on all of the vulnerabilities that are found."
"I like the ability the product has to detect vulnerabilities quickly, when it has been released in our environment, then displaying them to us."
"AppSpider's most valuable feature is reporting - everything is stored in the local database so it can be sent to other machines."
"One of the most valuable features of AppSpider is its broad range of authentication identification, which is a key reason for its utilization."
"This solution is a leader in the industry."
 

Cons

"The integration of LLMs on the dashboard is something that is needed in the tool."
"There might be helpful if there was some web application firewall feature."
"Several features that I think is essential is not available in the free and business package."
"Cloudflare's free plan is limited to 5,000 records for their free plan. They should increase that. For example, if I create a domain called abc.com and a subdomain called a.abc.com, my record count will be two. I can make a maximum of 5,000 subdomains. However, if we use our own DNS hosted on another provider, there is no limit. Their free plan also lacks name server customization."
"The product support needs to be accessible from more places, a wider area of coverage."
"It should have easier documentation for the configuration. It's very technical and people who aren't technical should also be able to do the configuration."
"Cloudflare doesn't have a reverse lookup. We can only do a DNS lookup to get the IP address from the hostname. It doesn't work if you want to look up the hostname from an IPA address."
"The solution could use more analytics on the backend to give us more insights into everything. More reports would be helpful."
"Licensing should be improved. Most of the clients aren't happy. It's expensive."
"Some of the features should be included in the next release is a file integrating monitoring tool. This feature should be improved."
"We've had some issues with them in terms of response times, but overall they are okay."
"I would like the solution to improve its support response time."
"The signature updates could be faster."
"It would be helpful to have a "recommended deployment", or even a list of basic features that should either be used or turned on by default."
"The Imperva Web Application Firewall automations are good, but there is still room for improvement with them."
"It would be beneficial to include vulnerability management in the solution, similar to what they have for their on-premise solution."
"One of the challenges I have with AppSpider is that it gives you a lot of false positives, especially when compared to other solutions."
"The dashboard and interface are crucial and they need some improvement."
"The documentation about integration with AppSpider is bad news and some integrations are quite difficult to do right now."
"AppSpider could improve in the area of integration. They need to add more integration opportunities."
"Implementing Rapid7 AppSpider requires scanning and self-identification mechanisms. You can add different types of authentication to each scan."
"The tech support is responsive but issues remain unresolved."
"There are some glitches with stability, and it is an area for improvement."
"The enterprise interface is too simple. It should be more customizable."
 

Pricing and Cost Advice

"A free version of the solution is available."
"The product's pricing is cheap."
"The solution is expensive when compared to other products but offers unlimited bandwidth."
"The tool is a premium product, so it is very expensive."
"For Cloudflare, I recommend it heavily for small businesses with revenue under a couple of million dollars. Onboarding is easy, and they even have a free plan. This makes it simple for businesses in the $100,000-$500,000 range to try it out and see its value, allowing them to scale up their infrastructure as needed."
"We are using the free tier of the solution."
"The product's pricing is minimal compared to other products."
"It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
"We sell three-year licenses for Imperva Web Application Firewall to our customers. The price is a little expensive."
"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a five out of ten."
"The cost is on par with other solutions such as Cloudflare and Akamai."
"We are satisfied with the pricing."
"There is a license or subscription renewal that our customers pay."
"​Although the pricing can be a little high, it is worth the protection and security that it offers.​"
"Make sure you understand the way that Imperva charges. It's very affordable. However, I would like to see a package with the Virtual Patching included. You get to do patching separately."
"The price is high compared to other solutions like FortiWeb."
"The licensing cost depends on the number of users."
"It is expensive if you want to buy the Enterprise version that is able to scan multiple applications at once."
"AppSpider is closed-source software and you need to acquire a license in order to use it."
"The price of Rapid7 AppSpider cost 9,000 annually but there is limited usage. Large companies are able to negotiate a better price or a better deal for the usage with the vendor."
"The price is pretty fair."
report
Use our free recommendation engine to learn which Distributed Denial-of-Service (DDoS) Protection solutions are best for your needs.
908,834 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
10%
Comms Service Provider
10%
Manufacturing Company
8%
Computer Software Company
8%
Financial Services Firm
12%
Construction Company
8%
Outsourcing Company
8%
Manufacturing Company
8%
Manufacturing Company
11%
University
10%
Financial Services Firm
9%
Construction Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise11
Large Enterprise26
By reviewers
Company SizeCount
Small Business88
Midsize Enterprise25
Large Enterprise70
By reviewers
Company SizeCount
Small Business12
Midsize Enterprise2
Large Enterprise1
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What is your experience regarding pricing and costs for Cloudflare DNS?
The pricing, setup cost, and licensing for Cloudflare are a bit on the higher side overall.
Which Web Application Firewall (WAF) would you recommend? R&S or Imperva?
Imperva is a strong choice, given their security focus and ongoing R&D into the product in areas such as bot mana...
What is your experience regarding pricing and costs for Imperva DDoS?
The pricing, setup costs, and licensing of Imperva DDoS are reasonable for the amount of technical capabilities provi...
What needs improvement with Imperva DDoS?
I would like to see improvements in the pooling of threats and attacks, possibly to enlarge the scale of indicators o...
What is your experience regarding pricing and costs for Rapid7 AppSpider?
The price is not high, but for Japanese customers, localization may incur additional costs.
What needs improvement with Rapid7 AppSpider?
For Japanese customers, localization is needed. The product should offer a GUI in Japanese and provide Japanese repor...
What is your primary use case for Rapid7 AppSpider?
Our clients use AppSpider to address security concerns for their websites. It is particularly used by customers who r...
 

Also Known As

Cloudflare DNS
Imperva Bot Management, Imperva Web Application Firewall, Imperva API Security
AppSpider
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Hitachi, BNZ, Bitstamp, Moz, InnoGames, BTCChina, Wix, LivePerson, Zillow and more.
Microsoft
Find out what your peers are saying about Radware, Cloudflare, NETSCOUT and others in Distributed Denial-of-Service (DDoS) Protection. Updated: August 2026.
908,834 professionals have used our research since 2012.