Prisma Cloud by Palo Alto Networks vs The Fastly Next-Gen WAF (powered by Signal Sciences) comparison

Prisma Cloud by Palo Alto Networks vs. The Fastly Next-Gen WAF (powered by Signal Sciences)

Download the complete report

Helped 885,286 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cloudflare Web Application ...

Mindshare comparison

As of March 2026, in the Web Application Firewall (WAF) category, the mindshare of Cloudflare Web Application Firewall is 5.4%, down from 6.9% compared to the previous year. The mindshare of Prisma Cloud by Palo Alto Networks is 2.1%, up from 2.0% compared to the previous year. The mindshare of The Fastly Next-Gen WAF (powered by Signal Sciences) is 1.3%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Web Application Firewall (WAF) Mindshare Distribution
Product	Mindshare (%)
Cloudflare Web Application Firewall	5.4%
Prisma Cloud by Palo Alto Networks	2.1%
The Fastly Next-Gen WAF (powered by Signal Sciences)	1.3%
Other	91.2%

Web Application Firewall (WAF)

Featured Reviews

Dean Barisic

CTO at PlayNirvana

Advanced security reporting has protected high-traffic betting platforms from constant attacks

I don't see room for improvement to Cloudflare Web Application Firewall. One thing I don't know much about because we have a dedicated IT team for that, and I'm not involved with Cloudflare much anymore. But if I were to compare them to F5, I would like to see more features that F5 offers. F5 has an option to bring the whole infrastructure, the whole WAF and all their packages, Bot Management, and everything else on your infrastructure. You need to install certain services from their side, and then you can choose if you would like requests to hit your servers immediately or if requests need to be proxied through F5 backbone. That would be a nice addition because we have 90% of the traffic as legit traffic coming from whitelisted servers. If it comes from whitelisted servers, I don't need to go every request through the backbone; I could easily just IP whitelist everything. Then I could maybe have Bot Management on my infrastructure that drastically reduces the price of Cloudflare. I would like to see Push CDN more improved in the next release of Cloudflare Web Application Firewall. And maybe something similar to Pushpin that Fastly has, which is an option where you can push messages that then can be scaled globally over the network. From our perspective, if we have a listener that listens for stock updates, I would just need to have one processor that pushes those updates to the Cloudflare API, and then Cloudflare would broadcast that message to all listeners. Cloudflare will check the order of the message, and if you, as a customer, are not connected or have some kind of network issue, when you reconnect, you will receive the latest state and missing updates.

Read full review

reviewer2776578

Cyber Security Architect at a comms service provider with 10,001+ employees

Image scanning has supported consistent security practices during cloud deployment

On a scale of ten, we would say people are happy with Prisma Cloud by Palo Alto Networks for the part we use. People are okay with it. We probably would give an eight. We don't give ten because if we don't use the other parts of Prisma Cloud by Palo Alto Networks, it's because it was difficult to implement from an operational point of view. We could have deployed the runtime monitoring with Prisma Cloud by Palo Alto Networks, but within our organization at our company, it was very difficult to find who would be the owner for the alerts. People have other tools and in the end, we don't use the full capabilities of a product that we pay for. It's partially related to the difficulty to integrate Prisma Cloud by Palo Alto Networks runtime in our company's support process. We don't use the real-time monitoring part of Prisma Cloud by Palo Alto Networks. We don't know about the automated remediation feature of Prisma Cloud by Palo Alto Networks.

Read full review

reviewer2161107

Staff Engineer at a retailer with 1,001-5,000 employees

Room for improvement with user interface while competitive pricing impresses

It is managed through Infrastructure as Code, so all configurations can be managed in the code itself, which is beneficial. Because it uses rules, it is easy to set up, and we have many different sites where the configurations are straightforward. Though the UI is not very interactive, which is a downside, we can manage many things. The UI is not very intuitive and could be better. However, we manage all the configurations through code, which is easy to maintain. It has extensive anomaly detection capabilities, so the traffic is classified into several categories where thresholds can be defined and customized based on false positives and false negatives. This is advantageous because you do not need to tweak it very often. Once you set it up, an audit once a quarter would suffice. Because The Fastly Next-Gen WAF (powered by Signal Sciences) is API-driven, we have integrations with the CI/CD pipeline through GitHub Actions, making it easy to integrate.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I have not had any issues with this solution, and I would recommend it to others who are interested in using it."

"This is a good product; it's reliable and scales well."

"Cloudflare WAF provides protection through rules and functionalities like Cloudflare's SDRAP."

"The setup process is very simple for me."

"The product has improved our security posture by blocking bad actors."

"Caching is the most valuable feature of Cloudflare Web Application Firewall."

"Cloudflare has positively impacted my organization by making it easier for me to handle and set up DNS for multiple clients; I can easily go in and access their accounts, make changes they need, and it's a one-stop shop."

"It is configurable via API."

More Cloudflare Web Application Firewall pros

"You can also integrate with Amazon Managed Services. You can also get a snapshot in time, whether that's over a 24-hour period, seven days, or a month, to determine what the estate might look like at a certain point in time and generate reports from that for vulnerability management forums."

"I've been really pleasantly surprised with how Prisma Cloud is, over time, covering more and more of the topics I care about, and listening to customer feedback and growing the product in the right directions."

"The CSPM and CWPP functionalities are pretty good."

"With the query language, we can analyze logs and find out which IPs are malicious. It also provides a graphical representation. It provides the overall visibility and how the traffic is flowing. We can see where the malicious IP is and whether it is an insider threat or an outsider threat."

"Prisma Cloud provides the visibility and control that we need, regardless of how complex or distributed our cloud environments become, which is very nice."

"We haven't had an issue with the product for over a year."

"The most valuable feature of Prisma Cloud by Palo Alto Networks is the CSPM, which we use the most. Additionally, the investigation and alerts are useful, and the creation of queries."

"I found the network queue sets useful. I also liked the Workload Protection Module, the vulnerability findings, and how the rule sets handle the vulnerabilities based on severity."

More Prisma Cloud by Palo Alto Networks pros

"Because The Fastly Next-Gen WAF (powered by Signal Sciences) is API-driven, we have integrations with the CI/CD pipeline through GitHub Actions, making it easy to integrate."

"The product's most valuable feature is its ability to set up the rules easily."

"Fastly (Signal Sciences) integrates and tags the intermittent traffic based on patterns. It generates signals and provides them in a dashboard where we can view them and decide whether to allow or deny traffic. It's a more advanced and easy-to-navigate dashboard."

"When configuring a web application firewall using Signal Sciences, we configure a rule whereby no one except a few people can access the application."

Cons

"Their documentation could be better. They don't have documentation that explains everything well."

"The dashboard could be more user-friendly."

"Support can be challenging at times."

"It would be ideal if the solution offered better log integration and more integration with different platforms."

"We don't even use Cloudflare Bot Management because it's too expensive; you need to pay per request, and it's much cheaper to get one or two additional machines."

"They have some limitations with third-party integrations."

"I have experienced some difficulties with Cloudflare's support as a customer based in India."

"The reporting could be improved if it were more granular."

More Cloudflare Web Application Firewall cons

"We would like to have the detections be more contemporaneous. For example, we've seen detections of an overprivileged user or whatever it might be in any of the hundreds of Prisma policies, where there are 50 minutes of latency between the event and the alert."

"Some of the usability within the Compute functionality needs improvement. I think when Palo Alto added on the Twistlock functionality, they added a Compute tab on the left side of the navigation. Some of the navigation is just a little dense. There is a lot of navigation where there is a tab and dropdowns. So, just improving some of the navigation where there is just a very dense amount of buttons and drop-down menus, that is probably the only thing, which comes from having a lot of features. Because there are a lot of buttons, just navigating around the platform can be a little challenging for new users."

"The visibility on the SIEM needs to be streamlined so we can get the data without any issues."

"Prisma Cloud supports generating CSV files, but I would also like it to generate PDF files for reporting."

"Prisma's notifications aren't up to industry standards."

"Palo Alto needs to add more support staff to improve their response time."

"Sometimes we do get false alerts. That should be improved."

"In terms of securing cloud-native development at build time, a lot of improvement is needed. Currently, it's more a runtime solution than a build-time solution. For runtime, I would rate it at seven out of 10, but for build-time there is a lot of work to be done."

More Prisma Cloud by Palo Alto Networks cons

"The UI is not very intuitive and could be better."

"Fastly don't support caching for China users. That's the only feature lacking compared to Akamai."

"The areas that could be improved in Signal Sciences include the effectiveness of rules, as many didn't function optimally and required custom rule-writing to address bypasses for WAF."

"Even if we create some custom rules, Signal Sciences cannot capture some of the malicious traffic."

Pricing and Cost Advice

"Cloudflare Web Application Firewall is more affordable than other solutions."

"The pricing model is very straightforward compared to the competition. You just pay per month for the product and usage."

"The solution is expensive."

"The annual licensing fee is $10,000 USD."

"The solution's pricing option needs to be more transparent for enterprise clients."

"It starts at $20 and can easily go up to $200 monthly"

"Cloudflare offers different types of subscriptions for businesses, enterprises, and personal users, and the pricing is negotiable."

"We pay $210 per month for CloudFlare WAF."

More Cloudflare Web Application Firewall pricing and cost advice

"I don't know a better way to do it, but their licensing is a little confusing. That's due to the breadth of different types of technologies they are trying to cover. The way you license depends on where you're securing. When they were Twistlock it was a simple licensing scheme and you could tell what you were doing. Now that they've changed that scheme with Palo Alto, it is quite confusing. It's very difficult to predict what your costs are going to be as you try to expand coverage."

"The price is high. In the future, when there are more competitors at the same level with different clouds, maybe the position will be different."

"One thing we're very pleased about is how the licensing model for Prisma is based on work resources. You buy a certain amount of work resources and then, as they enable new capabilities within Prisma, it just takes those work resource units and applies them to new features. This enables us to test and use the new features without having to go back and ask for and procure a whole new product, which could require going through weeks, and maybe months, of a procurement process."

"In general, Prisma Cloud is much cheaper than cloud-native services."

"The pricing is good. They gave us some good discounts right at the end of the year based on the value that it brings, visibility, and the ability to build in cloud, compliance, and security within one dashboard."

"Prisma Cloud is remarkably expensive."

"Prisma Cloud is quite scalable. In our current licensing model, we're able to heavily extend our cloud workload and onboard a lot of customers. It really helps, and it is on par with other solutions."

"The pricing structure is easy to understand. Depending on the use case the pricing of the solution can be different. There are not any additional costs to the standard living fees."

More Prisma Cloud by Palo Alto Networks pricing and cost advice

"The pricing is 50% less than Akamai."

"The product has an affordable cost."

"Signal Sciences is pretty cheap compared to other solutions."

See which vendors are best for you

Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.

See recommendations

885,286 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

10%

Computer Software Company

10%

Manufacturing Company

Comms Service Provider

Financial Services Firm

15%

Computer Software Company

10%

Manufacturing Company

Government

Manufacturing Company

13%

Retailer

10%

Financial Services Firm

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	16
Midsize Enterprise	6
Large Enterprise	6

By reviewers
Company Size	Count
Small Business	37
Midsize Enterprise	22
Large Enterprise	56

No data available

Questions from the Community

What is your experience regarding pricing and costs for Cloudflare Web Application Firewall?

The price of Cloudflare Web Application Firewall is reasonable.

What needs improvement with Cloudflare Web Application Firewall?

I don't see room for improvement to Cloudflare Web Application Firewall. One thing I don't know much about because we...

What is your primary use case for Cloudflare Web Application Firewall?

We are using Cloudflare Web Application Firewall's advanced reporting and analytics tools with their Zero Trust, so e...

What is your primary use case for Prisma Cloud by Palo Alto Networks?

Prisma Cloud helps support DevSecOps methodologies, making those responsibilities easier to manage.

What Cloud-Native Application Protection Platform do you recommend?

We like Prisma Cloud by Palo Alto Networks, since it offers us incredible visibility into our entire cloud system. We...

What do you think of Aqua Security vs Prisma Cloud?

Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valu...

What is your experience regarding pricing and costs for Signal Sciences?

The pricing is very competitive compared to other providers. The pricing is definitely a factor in our decision-makin...

What needs improvement with Signal Sciences?

We do use it, but the UI can be improved as we mostly work through the CI/CD. It provides support, but sometimes it i...

What is your primary use case for Signal Sciences?

The CDN is for caching and The Fastly Next-Gen WAF (powered by Signal Sciences) is for protecting the servers from ma...

Fortinet FortiWeb vs Cloudflare Web Application Firewall

Comparisons

Compared 8% of the time

Check Point CloudGuard WAF vs Cloudflare Web Application Firewall

Compared 7% of the time

Imperva Application Security Platform vs Cloudflare Web Application Firewall

Compared 6% of the time

F5 Advanced WAF vs Cloudflare Web Application Firewall

Compared 5% of the time

Azure Web Application Firewall vs Cloudflare Web Application Firewall

Compared 5% of the time

More Cloudflare Web Application Firewall Competitors

Wiz vs Prisma Cloud by Palo Alto Networks

Compared 9% of the time

Check Point CloudGuard CNAPP vs Prisma Cloud by Palo Alto Networks

Compared 7% of the time

Cyera vs Prisma Cloud by Palo Alto Networks

Compared 6% of the time

Microsoft Defender for Cloud vs Prisma Cloud by Palo Alto Networks

Compared 5% of the time

SentinelOne Singularity Cloud Security vs Prisma Cloud by Palo Alto Networks

Compared 5% of the time

More Prisma Cloud by Palo Alto Networks Competitors

Sqreen vs The Fastly Next-Gen WAF (powered by Signal Sciences)

Compared 15% of the time

Imperva Application Security Platform vs The Fastly Next-Gen WAF (powered by Signal Sciences)

Compared 12% of the time

AWS WAF vs The Fastly Next-Gen WAF (powered by Signal Sciences)

Compared 12% of the time

Azure Web Application Firewall vs The Fastly Next-Gen WAF (powered by Signal Sciences)

Compared 9% of the time

Akamai App and API Protector vs The Fastly Next-Gen WAF (powered by Signal Sciences)

Compared 5% of the time

More The Fastly Next-Gen WAF (powered by Signal Sciences) Competitors

Product Reports

Cloudflare Web Application Firewall

Download Cloudflare Web Application Firewall product report

Cloudflare Web Application Firewall report

Prisma Cloud by Palo Alto Networks

Download Prisma Cloud by Palo Alto Networks product report

Prisma Cloud by Palo Alto Networks report

The Fastly Next-Gen WAF (powered by Signal Sciences)

Download The Fastly Next-Gen WAF (powered by Signal Sciences) product report

The Fastly Next-Gen WAF (powered by Signal Sciences) report

Also Known As

Cloudflare WAF

Prisma Public Cloud, RedLock Cloud 360, RedLock, Twistlock, Aporeto

Signal Sciences Next-Gen WAF, Signal Sciences RASP

Overview

Cloudflare Web Application Firewall's intuitive dashboard enables users to build powerful rules through easy clicks and also provides Terraform integration. Every request to the WAF is inspected against the rule engine and the threat intelligence curated from protecting over 27 Million websites. Suspicious requests can be blocked, challenged or logged as per the needs of the user while legitimate requests are routed to the destination, agnostic of whether it lives on-premise or in the cloud. Analytics and Cloudflare Logs enable visibility into actionable metrics for the user.

Cloudflare

Prisma Cloud by Palo Alto Networks provides comprehensive cloud-native security solutions. It covers dynamic workload identity, automated forensics, and multi-cloud protection, ensuring robust security across diverse cloud platforms.

Prisma Cloud delivers advanced capabilities for managing cloud security across AWS, Azure, and GCP platforms. It offers dynamic workload identity creation, real-time monitoring, and seamless integration into CI/CD pipelines. With automation, centralized dashboards, and enhanced visibility, users effectively manage security misconfigurations and vulnerabilities. While optimizing cloud environments through runtime protection and compliance, Prisma Cloud faces challenges with its navigation, pricing, and limited automation capabilities. Users seek improvements in API security, role-based access controls, and documentation quality, emphasizing the need for enhanced customization and reporting features.

What are the important features of Prisma Cloud?

Dynamic Workload Identity: Enables unique workload identities for security purposes.
Automated Forensics: Offers detailed insights into threats and incidents automatically.
Runtime Protection: Provides ongoing detection and blocking of suspicious activities.
Multi-Cloud Security: Protects environments on AWS, Azure, and GCP simultaneously.
Compliance Management: Assists in meeting regulatory standards across cloud platforms.

What benefits or ROI should users consider in reviews?

Enhanced Security Posture: Strengthens cloud defense lines with proactive monitoring.
Centralized Dashboard: Offers unified oversight of multiple cloud environments.
Efficient Misconfiguration Handling: Quickly identifies and addresses security lapses.
Seamless CI/CD Integration: Integrates security within development workflows.
Improved Visibility: Provides transparent insights into security operations and alerts.

Industries like finance and telecom rely on Prisma Cloud for managing cloud security posture and container security. Teams utilize its capabilities across hybrid and multi-cloud settings to ensure compliance and robust threat protection. Features like misconfiguration detection and runtime monitoring are critical in promoting security objectives in these sectors.

Palo Alto Networks

The Fastly Next-Gen WAF (powered by Signal Sciences) provides web application and API protection, RASP, rate limiting, bot protection and DDoS purpose built to eliminate the challenges of legacy WAF.

Fastly

Sample Customers

crunchbase, udacity, marketo, okcupid, zendesk

Amgen, Genpact, Western Asset, Zipongo, Proofpoint, NerdWallet, Axfood, 21st Century Fox, Veeva Systems, Reinsurance Group of America

Chef, Adobe, Datadog, Etsy, GrubHub, Vimeo, SendGrid, Under Armour, Duo, AppNexus

Prisma Cloud by Palo Alto Networks vs. The Fastly Next-Gen WAF (powered by Signal Sciences)