


Find out in this report how the two Web Application Firewall (WAF) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
My experience with the pricing or licensing of Cloudflare Web Application Firewall is that many features can be accessed for free, so the pricing is definitely reasonable.
I would rate the technical support with Cloudflare as excellent every time I've had to contact them.
The technical support of Cloudflare Web Application Firewall rates between five and seven at maximum.
We have not received technical support from Kemp LoadMaster without a license.
They were quick and efficient when we had issues.
I would rate the customer support a 9 on a scale of 1 to 10.
The scalability of Cloudflare Web Application Firewall rates between 8 to 9, as it depends upon the use cases and what exactly the client needs.
Kemp LoadMaster is a scalable solution.
The scalability of NGINX App Protect is good and open source at its best.
The stability of Cloudflare Web Application Firewall deserves a perfect 10 out of 10.
With the license purchase afterwards, if it expires, it begins dropping the HTTP traffic, also the DNS traffic.
It is a quality solution, and I would rate its stability as eight out of ten.
Cloudflare will check the order of the message, and if you, as a customer, are not connected or have some kind of network issue, when you reconnect, you will receive the latest state and missing updates.
I think they're doing a good job with DNS and as support for any domains that I create or that my clients create, it's mandatory for me to ensure they have Cloudflare as their DNS provider.
The product can improve by having more multitenancy capability, which is currently not available.
After that, they said if it was good, we could purchase the license, and while we found it very good, the license cost was too high.
For now, I think NGINX App Protect is good, but maybe I would like to see the logging feature added.
There was more information from F5 regarding hardware requirements and specifications to deploy the service.
The GUI and web GUI configuration could be improved to be easier to manage and use.
The custom rules and the geo-redundant geographical rule feature, which allows me to implement geographical rules for customers, add significant value.
All the DNS and everything is routed through Cloudflare, so anybody coming to any of the sites has to go through Cloudflare first, making them the first wall of defense.
The best features of Cloudflare Web Application Firewall are multiple, including the WAF, rate limiter, and bot attack protection.
We had some issues in patching management, so we deployed this product for virtual patching, the IPS rule, and it gives us very good results because we have very critical servers.
Some threats like injection and running scripts, SQL injections, these all get stopped and rejected by the server.
The most valuable feature is the ability to operate in a DevOps environment and to be configured through API and pipeline by the developers themselves.
The best features NGINX App Protect offers include a firewall, seven layers of DDoS protection, additional API securities, and threat intelligence services.
| Product | Mindshare (%) |
|---|---|
| Cloudflare Web Application Firewall | 4.7% |
| NGINX App Protect | 2.2% |
| Kemp LoadMaster | 1.6% |
| Other | 91.5% |


| Company Size | Count |
|---|---|
| Small Business | 16 |
| Midsize Enterprise | 6 |
| Large Enterprise | 6 |
| Company Size | Count |
|---|---|
| Small Business | 24 |
| Midsize Enterprise | 13 |
| Large Enterprise | 16 |
| Company Size | Count |
|---|---|
| Small Business | 9 |
| Midsize Enterprise | 7 |
| Large Enterprise | 13 |
Cloudflare Web Application Firewall integrates DDoS protection, load balancing, and firewall capabilities. Its ease of use, configurability, and robust security measures make it a versatile choice for protecting web applications.
Cloudflare Web Application Firewall provides a comprehensive defense against threats with advanced reporting and robust security measures. It includes DNS integration, rate limiting, and extensive rule sets, all within a SaaS model that allows API configurability. Users value its caching, scalability, and pricing, although enhancements are needed in rate-limiting and third-party integration. Improvements in customer support, especially in India, real-time controls, and user documentation are also desired. Users seek a more intuitive dashboard, better log management, and improved alert systems, along with multitenancy capabilities and enhanced reporting.
What are the key features of Cloudflare Web Application Firewall?Cloudflare Web Application Firewall finds application in industries like banking and retail by acting as a comprehensive security gateway, managing authentication and authorization while protecting web applications from malicious Layer 7 traffic. It also implements load balancing, CDN, and zero-trust policies, supported by advanced reporting, analytics tools, and threat scoring to meet specific industry needs.
Kemp LoadMaster enhances server performance by providing secure, intuitive load balancing solutions with easy deployment. It supports high availability, integrates seamlessly with IT infrastructure, and ensures optimal traffic distribution for critical applications.
Kemp LoadMaster is known for its ease of use and high-level security capabilities, making it ideal for managing multiple servers. Its intuitive interface simplifies configuration for load balancing and reverse proxy across multi-site Exchange, while the Edge Security Pack distinguishes between critical infrastructure and public internet. Supporting seamless service continuity and effective traffic distribution, it significantly boosts server performance through SSL offloading and intelligent monitoring. However, improvements are desired in stability and reporting, as well as in security features such as a robust Web Application Firewall and more intuitive logging and monitoring.
What are Kemp LoadMaster's Key Features?Kemp LoadMaster is implemented across industries that require robust IT infrastructure management. Organizations use it for load balancing in Exchange environments, securing web servers, and maintaining high availability for public sector services. It supports applications like RDP, SQL, DNS, SharePoint, Citrix, and VoIP, ensuring security and high performance.
NGINX App Protect offers comprehensive security features like auto-learning and bot protection. Its real-time threat detection and ease of integration make it suitable for web and mobile application security across on-premises, cloud, and container environments.
NGINX App Protect stands out with its adaptive machine learning, scalable deployment options, and robust API connectivity, offering Layer 7 DDoS protection and an OWASP-certified WAF. While it supports comprehensive traffic and security management, enhancements in platform integration, automation, and technical support could improve usability. The pricing model and policy management options could also see refinement. Commonly employed in securing web and mobile applications, it addresses threats including OWASP Top 10 vulnerabilities and DDoS attacks, while providing seamless integration with Kubernetes and CI/CD pipelines.
What are the key features of NGINX App Protect?NGINX App Protect finds broader use in sectors like banking and telecommunications, where it secures high-performance digital infrastructures. Its application spans perimeter security, load balancing, and acts as a reverse proxy in environments necessitating stringent security, high throughput, and robust management. The tool's adaptability facilitates its deployment alongside containers, ensuring compatibility with contemporary development practices.
We monitor all Web Application Firewall (WAF) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.