Try our new research platform with insights from 80,000+ expert users

Imperva Application Security Platform vs Wallarm NG WAF comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 17, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
76
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (13th)
Imperva Application Securit...
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
133
Ranking in other categories
CDN (7th), Web Application Firewall (WAF) (20th), Distributed Denial-of-Service (DDoS) Protection (6th)
Wallarm NG WAF
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
5
Ranking in other categories
Web Application Firewall (WAF) (41st), API Security (14th)
 

Featured Reviews

Carlos Alam Hernandez Baruch - PeerSpot reviewer
Fast and secure deployments simplify operations for government and fintech clients
It is a fast and secure DNS. It is very easy to deploy, and my customers are happy with this tool. Additionally, the CDN performance in Mexico is excellent, providing fast service and tools. It offers reliability during high-traffic periods, ensuring no impact on the environment. It helps my clients avoid using on-premise boxes, simplifying operations as they only use the prices on Cloudflare.
Bhupesh-Sharma - PeerSpot reviewer
Enhanced network security with effective threat filtering and good bot managing features
We use Imperva DDoS protection to safeguard our network from multiple attacks. It is especially useful to protect websites or applications by redirecting traffic to eliminate threats Imperva DDoS increases our uptime to 99.99% by filtering and managing traffic to ensure only genuine traffic…
it_user796242 - PeerSpot reviewer
Helps us to monitor attacks to our sites and prevents a lot of them
Set up Wallarm as a reverse proxy. Do not replace your web server. Use Wallarm first in monitoring mode, then learn from Wallarm which type of request is false positive and which type of request is not. This process takes a couple of weeks for very highly-loaded web applications (few millions of unique visitors in one month). Then you can turn Wallarm into blocking mode and everything will be fine. Do not forget to build a monitoring system, the wave, and API for it. Before we started using Wallarm, I already knew Ivan (CEO) and Stepan (COO) from a couple of years before. Ivan had his own security company and Stepan was working on a Russian security magazine called Xakep. They told us that they wanted to create a new WAF and already had a working version of it. They asked me to test it. We did tests, and it was really good. After few month after testing, we signed an agreement. Our choice was made not because we knew these guys for a long time, but because the product was really cool and we were glad to start using it as one of the first on the market!

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Its most significant benefit to date is the speed with which it refreshes DNS records on the internet once you change it. If you are changing a website or registering a new record, it is very quick."
"The overall experience with Cloudflare is positive, with a rating of eight out of ten."
"DDoS attacks target unprotected machines. Cloudflare detects and stops these attacks using internal systems. It identifies incoming DDoS attacks, issuing challenges or blocking them immediately."
"Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications."
"The most valuable feature of the solution is external DNS. It is also very secure. They have their own main server and once you configure it, the product takes care of everything. There are no issues in resolving IPs and low latency is also present."
"Its ease of integration with Office 365 and the fact that it's a good product compared to what I had before"
"New and innovative way to protect the client's data."
"Smaller businesses have seen great ROI due to the low investment and strong performance."
"Data masking is the most valuable feature of this solution."
"The complete solution is valuable for everything it delivers and the protection it offers."
"The most valuable features for us are the DDoS and Bot."
"Imperva DDoS helps us automate production. The client had specific requirements for a cloud project in the financial sector."
"Compared to other web application firewalls in the market, Imperva does things in the most accurate way."
"We have peace of mind that nobody will use malware on us or try to hack our website."
"I am impressed with the product's scalability, availability, easy management, and security. We were able to integrate the product with Azure and Sentinel."
"Imperva monitors all traffic, even customer access, to the web application. Then, Imperva uses features like signatures to identify attacks like cross-site scripting or SQL injection."
"Helps us to monitor situation in regards to attacks to our sites and prevents a lot of them."
 

Cons

"The solution could use more analytics on the backend to give us more insights into everything. More reports would be helpful."
"Cloudflare should add more documentation and pricing to the cloud version."
"For large enterprises, the pricing is okay. However, the enterprise price for small projects is a bit high. A mid-tier pricing option would be beneficial."
"There should be a specific price list for enterprise-level customers."
"Support response time could be improved."
"We're facing challenges due to an upgrade in the machine learning model. The problem arises from some users abusing the APIs, resulting in an influx of suspicious traffic. Cloudflare's learning model mistakenly identifies this traffic as human. Consequently, it assigns it a higher trust score, akin to legitimate human traffic, causing complications in our architecture. Previously, such traffic would have been categorized as suspicious, enabling us to apply appropriate blocking rules. However, we encounter difficulties distinguishing between genuine and suspicious traffic with the new categorization. Despite these challenges, overall, Cloudflare remains the preferred solution compared to Azure, AWS CloudFront, and Google Cloud Armor."
"I would like Cloudflare to offer a dedicated account manager for large enterprise clients like us."
"An integrated SSO feature would be useful for Cloudflare DNS."
"The product's customization capabilities are a bit problematic, requiring support cases for backend modifications."
"It is complicated to integrate the solution's on-cloud version with other platforms."
"Its price could be improved. It is quite expensive. It will be good if we could export the configuration. Currently, to control the configuration, we need to go to each website, which is not very convenient."
"We had an issue when securing the web applications for DDoS protection."
"The tool needs to include artificial intelligence and machine learning. It also needs to improve profiling."
"I loved the approach of the cloud. The cloud has a lot of new features, like advanced web protection and DDoS protection. If those could also be on-boarded onto the on-prem versions, that would be ideal. They need to pay attention to both deployment options and not just favor one."
"I am looking for more data enrichment. We should have the ability to add our own custom data to the system, to the live traffic."
"I would like to see automated reporting to improve visibility."
"The biggest problem for us was the stability and speed using the first version of Wallarm. Now, it is fine."
 

Pricing and Cost Advice

"The solution has many features but there are ones that you need to pay for. Sometimes you have to find out which is available for free and which you have to pay for."
"We are using the free tier of the solution."
"A free version of the solution is available."
"I believe their performance has improved, but I'd like to refrain from discussing the pricing aspect related to the cloud. The pricing, in my opinion, could be simplified, and I think they should consider reevaluating the pricing for support, as it can be quite high. At times, this cost can make it challenging to choose CARFAGuard or opt for the support."
"The pricing for the service is reasonable, neither excessively cheap nor prohibitively expensive. It aligns well with the value of their solution."
"The solution is expensive when compared to other products but offers unlimited bandwidth."
"That is one of the great features. I was able to access the majority of the features and services for free."
"It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
"We sell three-year licenses for Imperva Web Application Firewall to our customers. The price is a little expensive."
"The data packages are higher than our needs so we end up paying for data that we don't use."
"The pricing is somewhat expensive. It is actually a huge investment when compared to other countries."
"The price of Imperva Web Application Firewalls is expensive compared to others."
"Pricing could be more competitive."
"Licensing can range from one to twenty thousand dollars annually. Additionally, some features, including software support, require an annual subscription as well."
"We have an issue with Imperva Incapsula in the Iraqi market because of the high price."
"The cost is somewhere around $10,000 a site. For every site, you pay individually. For every DNS entry, you have you pay."
"​Pricing must be cheaper than the competition and the licensing must be good.​"
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
867,497 professionals have used our research since 2012.
 

Comparison Review

it_user68487 - PeerSpot reviewer
Nov 6, 2013
CloudFlare vs Incapsula: Web Application Firewall
CloudFlare vs Incapsula: Round 2 Web Application Firewall Comparative Penetration Testing Analysis Report v1.0 Summary This document contains the results of a second comparative penetration test conducted by a team of security specialists at Zero Science Lab against two cloud-based Web…
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Comms Service Provider
11%
Financial Services Firm
10%
Manufacturing Company
7%
Financial Services Firm
14%
Computer Software Company
13%
Manufacturing Company
9%
Comms Service Provider
6%
Computer Software Company
14%
Government
12%
Financial Services Firm
11%
Insurance Company
11%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business45
Midsize Enterprise8
Large Enterprise25
By reviewers
Company SizeCount
Small Business83
Midsize Enterprise25
Large Enterprise61
No data available
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
Which Web Application Firewall (WAF) would you recommend? R&S or Imperva?
Imperva is a strong choice, given their security focus and ongoing R&D into the product in areas such as bot mana...
What do you like most about Imperva Incapsula?
We use Imperva DDoS to stop DDoS attacks and reduce the amount of unwanted queries against web services or web scraping.
What is your experience regarding pricing and costs for Imperva DDoS?
The pricing, setup costs, and licensing of Imperva DDoS are reasonable for the amount of technical capabilities provi...
Ask a question
Earn 20 points
 

Also Known As

Cloudflare DNS
Imperva Bot Management, Imperva Web Application Firewall, Imperva API Security
Wallarm NG-WAF
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Hitachi, BNZ, Bitstamp, Moz, InnoGames, BTCChina, Wix, LivePerson, Zillow and more.
Panasonic. Miro. Rappi. Wargaming. Gannett. Omio. Acronis. Workforce Software. Tipalti. SEMRush.
Find out what your peers are saying about Imperva Application Security Platform vs. Wallarm NG WAF and other solutions. Updated: September 2025.
867,497 professionals have used our research since 2012.