No more typing reviews! Try our Samantha, our new voice AI agent.

Imperva Application Security Platform vs VAPT comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 22, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Imperva Application Securit...
Ranking in API Security
2nd
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
145
Ranking in other categories
CDN (2nd), Web Application Firewall (WAF) (1st), Distributed Denial-of-Service (DDoS) Protection (4th), Bot Management (1st)
VAPT
Ranking in API Security
13th
Average Rating
9.0
Reviews Sentiment
2.2
Number of Reviews
1
Ranking in other categories
Vulnerability Management (49th), Penetration Testing Services (6th)
 

Mindshare comparison

As of May 2026, in the API Security category, the mindshare of Imperva Application Security Platform is 9.6%, up from 5.5% compared to the previous year. The mindshare of VAPT is 1.9%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
API Security Mindshare Distribution
ProductMindshare (%)
Imperva Application Security Platform9.6%
VAPT1.9%
Other88.5%
API Security
 

Featured Reviews

reviewer2818155 - PeerSpot reviewer
Senior Associate at a tech vendor with 10,001+ employees
Application protection has improved and reporting and dashboards still need refinement
I believe Imperva Application Security Platform should have a more interactive wizard. While the dashboard is good, it could be more eye-catching. Based on my perspective, I recommend modifying the dashboards, especially the main dashboard where I can see the traffic hit count, alerts, and other latest information. In terms of reporting, I find it challenging to create reports; in my earlier days, it was difficult. Over time, I have learned how to create reports, but it should be easier to do so. I have used other tools such as firewalls or SolarWinds, where creating a report is straightforward and does not take much time, unlike in Imperva, where I have to add many elements. Modifications in the integration aspects would also be beneficial.
Suneel Singh Tomar - PeerSpot reviewer
Assistant Manager, Information Security at Birlasoft IndiaLtd.
Governed layered vulnerability management has improved continuous scanning and remediation
We are using a couple of tools in terms of scanning and remediation. We leverage some of our in-house tools and some cloud tools, so we have a layered security architecture. Some tools work on the transport layer, some on the network layer, and some on the application layer. The team scans across those tool layers. Based on identifying gaps, they fulfill them. Everything feels accurate to me. In today's landscape, we have so many threats and threat actors working around that may damage any available entities. The team scans and finds anything that appears immediately necessary to remediate. They follow the steps accordingly. The team is working around the clock and doing their due diligence on their jobs.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Integration with IBM AS/400 and Db2 is okay."
"Setup was straightforward, very simple. I only entered the domain and Incapsula returned the DNS data that I needed to change for the protection to be configured."
"For me, it is the best solution available."
"The compliance is the most valuable aspect."
"The website itself is our first priority and we have seen improvements in that area -- it's faster."
"Its unique interface for managing security performance and ease of use are the most valuable features of this solution."
"The features I have found most valuable with Imperva Web Application Firewall are account takeover protection, advanced bot protection, and API security."
"Imperva Application Security Platform has positively impacted my organization by providing strong protection for web applications, as many big companies in the UK use Imperva WAF as an essential protection layer, illustrating its effectiveness."
"Everything feels accurate to me."
 

Cons

"I am not sure if this application has a policy where you can create your custom policy and run it as our firewall. We should have some ability to also create some custom policy, then run it as a firewall."
"The log analytics interface within Incapsula isn't really good. For example, if you have to get all logs from there, it's a very cumbersome process."
"One improvement I would like to see in Imperva Application Security Platform is the ability to fail over to different sites for my same application."
"As such, I have not seen a return on investment."
"The only disadvantage of Imperva is that it is a pretty costly solution."
"There’s nothing that’s missing in terms of features."
"We would like them to hire people in Sweden because it's quite hard when people are sitting in the UK or Belgium because some of the customers really want them to be local."
"I think the pricing needs some tweaks."
"There are so many challenges while running this vulnerability program."
 

Pricing and Cost Advice

"The tool's pricing is good."
"Imperva Web Application Firewall is expensive."
"There are some licenses that you have to buy to use some features. Its price could be better. Price is always important because, at the end of the day, customers have a budget. If you can meet the budget, you can sell, and if you don't, you cannot sell."
"There are a couple of different licensing models."
"It is not expensive compared to the other similar solutions in this category."
"Imperva Web Application Firewall's pricing is expensive."
"Varies depending on the needs of the customer."
"​Although the pricing can be a little high, it is worth the protection and security that it offers.​"
Information not available
report
Use our free recommendation engine to learn which API Security solutions are best for your needs.
893,915 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
12%
Manufacturing Company
8%
Computer Software Company
7%
Comms Service Provider
7%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business88
Midsize Enterprise25
Large Enterprise69
No data available
 

Questions from the Community

Which Web Application Firewall (WAF) would you recommend? R&S or Imperva?
Imperva is a strong choice, given their security focus and ongoing R&D into the product in areas such as bot management.
What is your experience regarding pricing and costs for Imperva DDoS?
The pricing, setup costs, and licensing of Imperva DDoS are reasonable for the amount of technical capabilities provided. I would rate the pricing of Imperva DDoS as five, where one is very cheap a...
What needs improvement with Imperva DDoS?
I would like to see improvements in the pooling of threats and attacks, possibly to enlarge the scale of indicators of compromise. For example, the initiation of an attack on the endpoint level cou...
What needs improvement with VAPT?
There are so many challenges while running this vulnerability program. It is a very complex program where everyone has their own priorities related to running their business. When we pitch in and t...
What is your primary use case for VAPT?
I am in a position where we govern VAPT and vulnerability management programs. My associates initiate quick scans of devices and all environments to identify vulnerabilities, which are then pushed ...
What advice do you have for others considering VAPT?
I did not use Redscan at all. I have used formal VAPT services in my SOC role. In terms of focusing on prioritization, zero-day vulnerabilities and high vulnerabilities are part of that. We engage ...
 

Also Known As

Imperva Bot Management, Imperva Web Application Firewall, Imperva API Security
No data available
 

Overview

 

Sample Customers

Hitachi, BNZ, Bitstamp, Moz, InnoGames, BTCChina, Wix, LivePerson, Zillow and more.
Information Not Available
Find out what your peers are saying about Akamai, Imperva, Orca Security and others in API Security. Updated: April 2026.
893,915 professionals have used our research since 2012.