No more typing reviews! Try our Samantha, our new voice AI agent.

Imperva Application Security Platform vs Upwind comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 29, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Imperva Application Securit...
Ranking in API Security
1st
Average Rating
8.6
Reviews Sentiment
6.9
Number of Reviews
147
Ranking in other categories
CDN (2nd), Web Application Firewall (WAF) (1st), Distributed Denial-of-Service (DDoS) Protection (3rd), Bot Management (1st)
Upwind
Ranking in API Security
11th
Average Rating
9.6
Reviews Sentiment
6.7
Number of Reviews
4
Ranking in other categories
Vulnerability Management (39th), Container Security (26th), Cloud Workload Protection Platforms (CWPP) (18th), Cloud Security Posture Management (CSPM) (25th), Cloud-Native Application Protection Platforms (CNAPP) (15th), Attack Surface Management (ASM) (30th), Dynamic Application Security Testing (DAST) (11th), Data Security Posture Management (DSPM) (18th), Cloud Infrastructure Entitlement Management (CIEM) (8th), Cloud Detection and Response (CDR) (7th), AI Security (11th)
 

Mindshare comparison

As of October 2026, in the API Security category, the mindshare of Imperva Application Security Platform is 9.3%, up from 7.3% compared to the previous year. The mindshare of Upwind is 3.9%, down from 4.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
API Security Mindshare Distribution
ProductMindshare (%)
Imperva Application Security Platform9.3%
Upwind3.9%
Other86.8%
API Security
 

Featured Reviews

reviewer2818155 - PeerSpot reviewer
Senior Associate at a tech vendor with 10,001+ employees
Application protection has improved and reporting and dashboards still need refinement
I believe Imperva Application Security Platform should have a more interactive wizard. While the dashboard is good, it could be more eye-catching. Based on my perspective, I recommend modifying the dashboards, especially the main dashboard where I can see the traffic hit count, alerts, and other latest information. In terms of reporting, I find it challenging to create reports; in my earlier days, it was difficult. Over time, I have learned how to create reports, but it should be easier to do so. I have used other tools such as firewalls or SolarWinds, where creating a report is straightforward and does not take much time, unlike in Imperva, where I have to add many elements. Modifications in the integration aspects would also be beneficial.
Mohammed Mudasser - PeerSpot reviewer
AI/ML Engineer at a educational organization with 501-1,000 employees
Runtime context has transformed how we prioritize exploitable cloud risks and protect workloads
I appreciate runtime context, which helps connect vulnerabilities and misconfigurations with actual workload behavior and network relationships, making it easier to prioritize remediation based on real exposure rather than simply working through a long list of security findings. The best features that stand out to me are contextual vulnerability prioritization, cloud workload visibility, and runtime security. I especially value how Upwind connects vulnerabilities with actual runtime behavior, which helps focus on exploitable risk rather than working through a long list of findings. It has helped us focus on actual exploitable risk instead of treating every vulnerability equally. By considering runtime activity, exposure, reachability, and sensitive data context, the team can prioritize remediation much faster and reduce unnecessary alert noise. I also value the runtime visibility and attack path context because it connects security findings with network behavior and actual workload. This makes investigations more actionable and helps the team move from simply detecting issues to understanding their real impact. The biggest positive impact has been the prioritization of cloud security risk and improved visibility. Instead of chasing every vulnerability, we can focus on issues that are actually exposed or active at runtime, which makes the security team more efficient and remediation more targeted.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The WAF itself has been very valuable to me because it has such a complete range of features. Another reason why I like it is because it also takes care of the total overview of the traffic over the network."
"Incapsula can help to hide the real origin and provide access control over different pages, and it can protect the website from being attacked."
"Deployment is simple and very fast."
"It is a stable solution."
"We can now quickly address the problems of our clients in an effective manner."
"The most valuable feature of Imperva DDoS is to make our website available for our customers' requests 24 hours a day."
"Basic setup is simple but, as with any caching/WAF setup, there are tricks you need to learn, but it works really nice out of the box!"
"Imperva Web Application Firewall is used for customers who are looking to secure their multiple applications and want to block threats such as DDoS and ransomware attacks, delivering data security, data availability, and access control."
"They are a great overall cloud security platform and they continue innovating and adding new features."
"Upwind has positively impacted my organization by reducing time to action and time to response by half."
"The combination of runtime visibility, security insights, and contextual risk prioritization makes it much easier to focus on the risks that actually matter."
"My advice for others looking into using Upwind is that if you are seeking a strong CNAPP with an advanced runtime and strong CDR capabilities, this is the product."
 

Cons

"Imperva always needs to adjust to new versions of cyber attacks, it needs to be faster, improve the resiliency of the software of the solution."
"Sometimes, support tickets don't get addressed quickly."
"One potential improvement for Imperva is enhancing its alert system."
"There is nothing specific where the application firewall is falling short."
"The firewall aspect of the solution needs improvement."
"Licensing should be improved. Most of the clients aren't happy. It's expensive."
"It would be useful if the solution used more intelligence in attack protection."
"Their customer service sometimes has different responses for similar requests. We sometimes need to explain the issue many times before they understand."
"Upwind can be improved because its UI is a bit difficult to navigate."
 

Pricing and Cost Advice

"The cost is somewhere around $10,000 a site. For every site, you pay individually. For every DNS entry, you have you pay."
"For enterprise contracts you will be in touch with a dedicated account manager who will guide you regarding licensing."
"It is a very affordable solution."
"The solution's pricing is an issue."
"The price of Imperva Web Application Firewalls is expensive compared to others."
"The cost of this solution depends on the platform."
"Imperva charges us based on bandwidth, which is better than other vendors that charge us according to data transfer."
"​Although the pricing can be a little high, it is worth the protection and security that it offers.​"
Information not available
report
Use our free recommendation engine to learn which API Security solutions are best for your needs.
915,341 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
12%
Financial Services Firm
11%
Manufacturing Company
8%
Construction Company
8%
Outsourcing Company
13%
Financial Services Firm
8%
Comms Service Provider
7%
Healthcare Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business88
Midsize Enterprise25
Large Enterprise70
No data available
 

Questions from the Community

Which Web Application Firewall (WAF) would you recommend? R&S or Imperva?
Imperva is a strong choice, given their security focus and ongoing R&D into the product in areas such as bot management.
What is your experience regarding pricing and costs for Imperva DDoS?
The pricing, setup costs, and licensing of Imperva DDoS are reasonable for the amount of technical capabilities provided. I would rate the pricing of Imperva DDoS as five, where one is very cheap a...
What needs improvement with Imperva DDoS?
I would like to see improvements in the pooling of threats and attacks, possibly to enlarge the scale of indicators of compromise. For example, the initiation of an attack on the endpoint level cou...
What is your experience regarding pricing and costs for Upwind?
The pricing, setup cost, and licensing process were pretty reasonable.
What needs improvement with Upwind?
I would appreciate more customizable dashboards and reporting for different teams, such as security operations, engineering, and leadership. The runtime context is excellent, but tailoring those vi...
What is your primary use case for Upwind?
My main use case for Upwind is cloud security and workload protection. I primarily use it to gain visibility into cloud assets, vulnerabilities, and runtime risks, and I mainly use it to prioritize...
 

Also Known As

Imperva Bot Management, Imperva Web Application Firewall, Imperva API Security
Upwind Security Upwind Platform for AWS Security Hub, Upwind Security Upwind for AWS Security Hub Extended
 

Overview

 

Sample Customers

Hitachi, BNZ, Bitstamp, Moz, InnoGames, BTCChina, Wix, LivePerson, Zillow and more.
StockX, Yotpo, bill, Digital Turbine, nanit, CallRail, boomi
Find out what your peers are saying about Imperva Application Security Platform vs. Upwind and other solutions. Updated: September 2026.
915,341 professionals have used our research since 2012.