Try our new research platform with insights from 80,000+ expert users

Imperva Web Application Firewall vs Radware Cloud WAF Service comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
75
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (13th)
Imperva Web Application Fir...
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
52
Ranking in other categories
Web Application Firewall (WAF) (5th)
Radware Cloud WAF Service
Average Rating
8.8
Reviews Sentiment
8.1
Number of Reviews
30
Ranking in other categories
Web Application Firewall (WAF) (10th)
 

Featured Reviews

Spencer Malmad - PeerSpot reviewer
It's easy to set up because you point the DNS to it, and it's working in under 15 minutes
Cloudflare is highly scalable. Cloudflare is a system with a web portal that the end users like me see. It's a console where we can adjust the DNS, caching, and security features all in that console. Cloudflare owns thousands of servers across the world that cache the data. It's a powerful solution. When clients sign up for Cloudflare, they're getting this monster content delivery network, security, and a web application firewall in one. It's all rolled into one, and it's massive. Unless you have your website hosted on a massive hosting provider, there's no way that you can deliver the amount of data that Cloudflare can provide to the end users. If you have static content, there's no way that you can ever match what Cloudflare can do. Obviously, there are competitors to Cloudflare that do the same, but I'm saying other types of solutions. Let's say you go with F5. Great, that's on-prem. That's in your colo. You can't deliver as much data to the internet as you can with a CDN. You don't have to spend $20,000 on a net scaler, F5, or whatever Cisco's selling now. You don't have to buy that. You pay them $50 a month or $150 a month. It's totally worth it because even in five years, you'll never get the performance value, not just the actual ROI. You have to consider how much throughput you can get with Cloudflare.
Abdullah Jin - PeerSpot reviewer
Offers bot protection and DDoS Protection and protects public-facing portals
Support is one thing I wish Imperva could improve. They follow the phone model and keep rotating you from one customer service person to another. The layer one support isn't very clear about the workings of the product. My feedback is primarily about Imperva Cloud, not on-premise. On-premise is a whole new story. Support is the issue for Imperva Cloud. It's also a bit pricey. It's a premium service and very expensive. The licensing model is not very straightforward. Every feature is priced separately, and to enjoy maximum protection, you'll have to spend a lot of money. The licensing model is a bit complex, and each feature is very pricey. For example, API security and web application protection are two separate license packages.
OMPRAKASH - PeerSpot reviewer
Consistently protect applications with advanced threat detection and active support
We have had a very good experience with Radware Cloud. It has significantly reduced attacks on our applications. All our critical applications are onboarded to Radware, which uses AI to automatically learn behavior patterns and refine security policies. It also provides comprehensive protection against the top ten web application security risks. Importantly, we have not experienced any zero-day attacks because Radware Cloud offers protection against emerging threats. The Emergency Response Team is very active, and I consistently receive excellent responses from them. It's a very comprehensive and user-friendly solution. It's easy to implement and integrate. We also have found it's easy to reach support if we need help. The solution has helped us enhance our cyber security posture. It's good for data protection. We've been able to protect our public-facing infrastructure. We haven't had any incidents or compromises in the entire three years we've used Radware. The Cloud WAF Service blocks unknown threats and attacks effectively. The analytics are very good. The API discovery feature is very helpful, and end-to-end API protection is useful. Everything is encrypted to ensure effective protection. We get Layer 7 protection from it. The API discovery is a very useful feature. It is easy to use. A few months before, I did a demo to learn more. We can see which APIs are being used or not. It helps us discover and remove unused APIs. In our case, we found 20 APIs that were not used by the team. We use the CDN features. It's pretty easy to use the combination of CDN and Cloud WAF. It helps your Radware Cloud connect with the nearest server or the Redware server. We have multiple servers worldwide, so this is useful for us. Integration is very easy. Sometimes, we have 10 to 15 applications hosted on the cloud. It's very easy to add applications. It's not complicated. From the Radware cloud, it's integrated with our SOC. All the logs are received by the SOC.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I get a lot of value from Cloudflare's API because it enables you to build a separate environment inside the solution. You can create a domain for performing test requests before you move to the production environment and connect various domains."
"The solution is stable, and the DNS servers are simple to use."
"The UI is good."
"Cloudflare DNS is widely used, and it's good for websites. If we use Cloudflare DNS and update one record, it updates in their office instantly."
"The technical support is good."
"From what I've seen so far, there are no negatives to report as of yet"
"Cloudflare is a security SaaS provider that provides security and protects us from any application layer attack."
"The most valuable feature of Cloudflare DNS is security."
"The most valuable features of the Imperva Web Application Firewall are performance and flexibility. We can extend or customize the box itself."
"The solution integrates seamlessly with other tools and has a good alert mechanism."
"Imperva Web Application Firewall is a highly stable solution and is very mature."
"The tool's profiling feature maps all the web application directories and related components on the profile directory. It has improved the security of my client's website applications."
"The configurability of the tools and the ease of operation to be the most valuable feature of Imperva."
"Compared to other web application firewalls in the market, Imperva does things in the most accurate way."
"If you are using the appliance as opposed to the virtual deployment, it can stand as the network layer-two and provide real transparency."
"The dynamic profiling of websites is the solution's most valuable feature. The security is also good."
"What makes this a comprehensive offering from Radware is that it combines WAF, ADA, bot management, and API protection, which is not currently available from any other provider in the market."
"I highly recommend Radware Cloud WAF for its reliability and fast support."
"The best feature is the SQL injection signatures, and another is the DDoS protection. Radware is more efficient than other solutions."
"It provides the first level of defense against external threats trying to come into the environment, but it's one of the many toolkits we use."
"The isolation feature is the most important one because everything is going directly to Radware first and then it goes into our system. What we get is the filtered version of everything that would otherwise come directly to us."
"Radware Cloud WAF Service ensures our systems are stable, running smoothly, and blocking all attacks effectively."
"The API Discovery is also very good because the application is outsourced, which means that we don't have the code. API Discovery allowed me to discover precisely how to orchestrate the API so that I could see the results."
"With the current visibility dashboard, we can now obtain insight into the nature of attacks, identify attackers, and detect top IP or threat regions."
 

Cons

"Cloudflare doesn't have a reverse lookup. We can only do a DNS lookup to get the IP address from the hostname. It doesn't work if you want to look up the hostname from an IPA address."
"Areas like how assessment, discovery, and payload are dealt with and how it all comes into your organization can be considered when trying to make suggestions to Cloudflare for improvements."
"It should confirm audit findings of the assigned area with auditees to ensure that the audit conclusions are based on an accurate understanding of the issues."
"The reporting can definitely be improved to offer a lot more explanation on something that may have happened or has actually happened."
"The product needs to improve its automation."
"They lack a good way to manage DNS as a company, since everything is relegated to single account logins until you get to the higher levels. They have come out with a paid feature to remedy this, but I have not had a chance to fully review it yet to know if it fixes the access problem."
"The tool needs to improve caching of servers. The product needs to include PFX certificate as well."
"The timing aspect can lead to it being considered overpriced. This is a particular concern we have with Cloudflare, as they may struggle with accurately detecting the client."
"They recently separated the WAF and the DAM management gateways in order for each of these to be managed from different areas, so I believe it now requires additional investments for what was previously a single complete solution."
"They can provide an option to create reports, automatically import the entire report, and create rules again. In a real-life crisis, it would be helpful to be able to import a report and generate security rules from that report. I should be able to create a simple query and import the reports automatically. It can maybe also tell us the format of the report."
"It would be useful if the solution used more intelligence in attack protection. For example, firewalls are to be dependent on the configuration, but if they could have some data science around it the solution would be even better. The profiling of the traffic, and making decisions surrounding that should be intelligence-based, instead of being based on the configuration of the firewall itself."
"It should be more user-friendly. Like other web solutions, it would be helpful to be able to easily do policy configuration and identification inside the application. Understanding the in-depth configuration of a policy is somewhat difficult for an engineer, and they can improve that."
"The UI interface needs improvement."
"I'd like the option to pick your bot protection."
"The user interface could be better."
"The only disadvantage of Imperva is that it is a pretty costly solution."
"I would like to see an improvement in the twenty-four-seven support service."
"Management often asks for detailed reporting on attacks such as botnet and zero-day attacks, including the number of attacks within a month, week, or day. Improving dashboard capabilities to provide this information clearly for management is crucial."
"The lower-level technical team at Radware could improve their approach to problem-solving as they sometimes are very slow."
"Some of the tools are a bit difficult to navigate, and the user interface could be more user-friendly."
"We receive many reports from our security team of IPs flagged by our security tools, such as Palo Alto. I cannot add the file containing the IPs to get them blocked; instead, I have to contact Radware support and open a ticket for them to do it. I need to be able to block flagged IPs myself, as it currently takes more time to open a ticket, contact the support team, and wait four to six hours for a response. I want to be able to upload a file with 2,000-3,000 IPs in the console and then apply and save the configuration."
"They have a portal for webinar training but because we are in a Spanish-speaking country, it is difficult for us to watch them. Not all of us are fluent in English, but most of the courses and webinars are in English. That part could be improved..."
"The connection between the front and back ends could be improved."
"Radware Cloud WAF Service has limited integrations, and I would like to see it integrate with our use of Azure DevOps."
 

Pricing and Cost Advice

"The price is reasonable."
"In terms of licensing costs, we don't pay for licensing for Cloudflare. We only establish communication, then for peering, Cloudflare takes care of the cross-connection in different data centers."
"The solution has many features but there are ones that you need to pay for. Sometimes you have to find out which is available for free and which you have to pay for."
"The product's pricing is minimal compared to other products."
"A free version of the solution is available."
"The solution is expensive when compared to other products but offers unlimited bandwidth."
"It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
"The tool is a premium product, so it is very expensive."
"It's an excellent product, but it can be very costly."
"Imperva’s pricing is a bit higher in the market since it offers a full-blown WAF."
"We sell three-year licenses for Imperva Web Application Firewall to our customers. The price is a little expensive."
"The solution's pricing is an issue."
"It is a very affordable solution."
"Imperva Web Application Firewall is expensive."
"There is a license for this solution and we purchase the license annually with no additional fees."
"There are a couple of different licensing models."
"The pricing is fair. We compared Radware to others using industry reviews and Radware is at the top right now."
"We evaluated other options and, if I remember correctly, one of them was Fortinet, but they didn't seem as effective as Radware. But the price was the biggest difference. Radware had the best price for our type of network and level of scaling."
"When compared to Akamai and F5, Radware's pricing and licensing are highly competitive."
"The pricing is fair."
"For the current market, the price for Radware Cloud WAF Service is exactly where we want it to be."
"We are paying $20,000 annually for six licenses that provide basic WAF functionality."
"If you plan to deploy Cloud WAF, keep in mind that the product is priced based on the megabits of traffic that pass through and the number of transactions. You should get your requirements correct up front. The active attackers feed and CDN services cost extra, so you need to negotiate these features upfront."
"I am not directly involved in pricing and setup cost discussions, but it seems that Radware offers a more cost-effective solution compared to F5. It is considered a good value for our budget."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
851,451 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
16%
Computer Software Company
14%
Comms Service Provider
9%
Financial Services Firm
8%
Financial Services Firm
17%
Computer Software Company
13%
Insurance Company
8%
Manufacturing Company
6%
Computer Software Company
24%
Retailer
12%
Manufacturing Company
11%
Financial Services Firm
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
Is Citrix ADC (formerly Netscaler) the best ADC to use and if not why?
For ADC, any ADC can do a good job. But in case if you want to add WAF functionality to the same ADC hardware you hav...
DDoS solutions: Any other solutions to consider aside from Radware DDoS Protection Service and F5 Silverline DDoS Protection?
You can have a look to Imperva Cloud WAF, the anti-DDoS mitigation is under 1s and works very well. I observed a lot ...
What do you like most about Radware Cloud WAF Service?
One of the most valuable features we have found in the solution is protection against attacks from botnet networks an...
What is your experience regarding pricing and costs for Radware Cloud WAF Service?
I would rate the cost around seven out of ten. Radware provides many different options, but it may not be affordable ...
What needs improvement with Radware Cloud WAF Service?
Some of the tools are a bit difficult to navigate, and the user interface could be more user-friendly. It is not the ...
 

Also Known As

Cloudflare DNS
No data available
No data available
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
BlueCross BlueShield, eHarmony, EMF Broadcasting, GE Healthcare, Metro Bank, The Motley Fool, Siemens
Information Not Available
Find out what your peers are saying about Imperva Web Application Firewall vs. Radware Cloud WAF Service and other solutions. Updated: April 2025.
851,451 professionals have used our research since 2012.