We use Imperva DDoS for DDoS protection and security.
Manager- Secure Web Defense- Perimeter Security at a financial services firm with 10,001+ employees
A fairly stable solution that can be used for DDoS protection and security
Pros and Cons
- "Imperva DDoS is fairly stable, and its availability is quite high."
- "Imperva DDoS does not provide version control."
What is our primary use case?
What is most valuable?
Imperva DDoS is fairly stable, and its availability is quite high. I haven't faced any downtime or system instability issues with the solution.
What needs improvement?
Imperva DDoS does not provide version control. After I make any changes on any portal, I would want to roll back my changes and go back to a stable version if something goes wrong. That particular feature is not there on the UI portal.
They have this roundabout way wherein I can use different tools to integrate, do the versioning, and manage it on my own. It's not directly available, but I can use it indirectly.
For how long have I used the solution?
I have been using Imperva DDoS for two to three years.
Buyer's Guide
Imperva Application Security Platform
September 2025

Learn what your peers think about Imperva Application Security Platform. Get advice and tips from experienced pros sharing their opinions. Updated: September 2025.
867,497 professionals have used our research since 2012.
What do I think about the scalability of the solution?
Imperva DDoS is a scalable product.
How was the initial setup?
The solution's initial setup is a bit difficult and not very easy. It's not that time-consuming if you have expertise. Once you get your hands on it, it's pretty straightforward.
What other advice do I have?
Imperva DDoS is deployed on-cloud in our organization.
I would recommend Imperva DDoS to users because it's a fairly stable product.
Overall, I rate Imperva DDoS an eight out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.

Technology Operations Manager, Global IT at a tech services company with 11-50 employees
Deploys easily; good, responsive customer service
Pros and Cons
- "I have had a positive experience with Imperva Web Application Firewall's tech support so far. They are knowledgeable and respond on time."
- "The Imperva Web Application Firewall automations are good, but there is still room for improvement with them."
What is our primary use case?
Our primary use case for the solution is securing our applications and customer-facing website.
What is most valuable?
The Imperva Web Application Firewall feature I have found the most valuable is the ease of deployment. The solution's customer service is good as well.
What needs improvement?
The Imperva Web Application Firewall automations are good, but there is still room for improvement with them. Fast rule propagation could also be improved.
For how long have I used the solution?
My company has been using Imperva Web Application Firewall for four years. But, personally, I have been using it for three years. It was already operational in the organization when I joined.
What do I think about the stability of the solution?
We have not had any issues with stability.
What do I think about the scalability of the solution?
I think Imperva Web Application Firewall is scalable.
How are customer service and support?
I have had a positive experience with Imperva Web Application Firewall's tech support so far. They are knowledgeable and respond on time.
How would you rate customer service and support?
Positive
How was the initial setup?
I was not with the company when Imperva Web Application Firewall was initially deployed but I believe the process was straightforward.
Which other solutions did I evaluate?
F5 firewalls are clunky and that is why we do not use them. They are good and powerful, but it takes quite a bit to set them up. They are not as easy to set up as Imperva Web Application Firewall.
What other advice do I have?
I would say: take Imperva Web Application Firewall into consideration because of its simplicity.
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Imperva Application Security Platform
September 2025

Learn what your peers think about Imperva Application Security Platform. Get advice and tips from experienced pros sharing their opinions. Updated: September 2025.
867,497 professionals have used our research since 2012.
Security Consultant at FPG Technologies and Solutions LTD
Useful database monitoring, simple dashboards, and scalable
Pros and Cons
- "The most valuable features of Imperva Web Application Firewall are the monitoring of databases and the dashboards are easy to understand."
- "Imperva Web Application Firewall could improve the API integration. It was complex for us. Additionally, The onboarding could be better."
What is our primary use case?
We are using Imperva Web Application Firewall to monitor databases.
What is most valuable?
The most valuable features of Imperva Web Application Firewall are the monitoring of databases and the dashboards are easy to understand.
What needs improvement?
Imperva Web Application Firewall could improve the API integration. It was complex for us. Additionally, The onboarding could be better.
For how long have I used the solution?
I have been using Imperva Web Application Firewall for approximately three months.
What do I think about the stability of the solution?
Imperva Web Application Firewall is stable.
What do I think about the scalability of the solution?
The scalability of the Imperva Web Application Firewall is good.
How was the initial setup?
The initial setup of the Imperva Web Application Firewall is complex.
I rate the initial setup of Imperva Web Application Firewall a four out of five.
What other advice do I have?
I rate Imperva Web Application Firewall a nine out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Presales Engineer at SNSIN
Flexible, good performance, and helpful support
Pros and Cons
- "The most valuable features of the Imperva Web Application Firewall are performance and flexibility. We can extend or customize the box itself."
- "Imperva Web Application Firewall could improve the console by making it easier to use."
What is our primary use case?
Imperva Web Application Firewall is used for protecting web applications.
What is most valuable?
The most valuable features of the Imperva Web Application Firewall are performance and flexibility. We can extend or customize the box itself.
What needs improvement?
Imperva Web Application Firewall could improve the console by making it easier to use.
For how long have I used the solution?
I have been using Imperva Web Application Firewall for approximately six years.
What do I think about the stability of the solution?
Imperva Web Application Firewall is stable.
What do I think about the scalability of the solution?
The stability of the Imperva Web Application Firewall is good.
We have approximately three or four clients using this solution.
How are customer service and support?
The support from Imperva Web Application Firewall is very good. They are handling support well, giving suggestions, and solving the issues.
How was the initial setup?
The initial setup of the Imperva Web Application Firewall is straightforward. The process for us is simple, we have been doing it for years.
What about the implementation team?
We have one person that does the deployment of the Imperva Web Application Firewall.
What's my experience with pricing, setup cost, and licensing?
We sell three-year licenses for Imperva Web Application Firewall to our customers. The price is a little expensive.
What other advice do I have?
I recommend this solution to others.
I rate Imperva Web Application Firewall an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Sales Executive at EVVO LABS
Protects against broken authentication
Pros and Cons
- "Imperva Incapsula has many valuable features. One, it protects the top 10 OWAS vulnerability, the open web application software platform, this is standard. Secondly, it protects against broken authentication. As well, it has remote execution of code."
- "Imperva always needs to adjust to new versions of cyber attacks, it needs to be faster, improve the resiliency of the software of the solution."
What is our primary use case?
Previously I was in software development for more than 15 years. I had developed web applications for internet and cable TV companies. Now, I am a sales executive for Imperva Cloud WAF.
Imperva Cloud WAF, previously Imperva Incapsula, is a web application firewall that is implemented in the cloud. It protects a public facing web application. It will track if a hacker is doing brute force attack. The web application firewall will detect it and block the source. This could be an IP address or the main name specific for a country. You can then update the profile of your server to block those IP addresses where the attack is coming from .
We have placed Imperva Cloud in our client's employee self service system that they are logged into. The website is protected by Imperva so that employees and customers can log in all over the Philippines. The client is a power generation company, which is a critical service, and has branches all over the Philippines.
We partner with a couple of on-premise data centers in the Philippines, one is PIM. They also provide cloud solutions. We bundle our solutions into their cloud projects.
What is most valuable?
Imperva Incapsula has many valuable features. One, it protects the top 10 OWAS vulnerability, the open web application software platform, this is standard. Secondly, it protects against broken authentication. As well, it has remote execution of code.
What needs improvement?
Imperva always needs to adjust to new versions of cyber attacks, it needs to be faster, improve the resiliency of the software of the solution.
For how long have I used the solution?
I have been using Imperva Cloud WAF for three years.
What do I think about the stability of the solution?
Imperva is stable. Based on Gartner's survey we are top three, meaning we are reliable based on customer feedback.
What do I think about the scalability of the solution?
This is a scalable solution. We have data centers all over the world. The solution can be set up to be optimized wherever the clients are accessing.
How are customer service and support?
Technical support has good response time. I am also the liaison officer for the technical team in Singapore. Support responds quickly and they do attend to the issues that we raise to them.
How was the initial setup?
The implementation of Imperva Cloud WAF is easy. All you need to do is change the DNS settings, because it is a cloud solution there is no appliance that you need to install at the data center. It just changes the DNS settings, and then a couple of IP address and domain name settings to allow a couple of those IP addresses and domain names settings into the firewall of the client and the firewall of Imperva.
The actual installation will only take a few hours and then full implementation within 24 hours. The initial setup takes time because of the configuration on the client-side. We prepared a questionnaire for the client to assist with preparation.
What was our ROI?
We created a cross-comparison against hiring a team of cybersecurity staff versus getting a subscription. After using Imperva Cloud for the past three years the cost is already acceptable against hiring a team.
What's my experience with pricing, setup cost, and licensing?
The price depends on the client's needs, it will be impacted depending on whether they need diverse production, or account take over for example.
There is an initial four package bundle with the price changing monthly.
What other advice do I have?
I would rate this solution an 8 out of 10.
Which deployment model are you using for this solution?
Private Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
GA Consultant Cyber Security at a tech services company with 51-200 employees
Suits large enterprises, supports different application sources, and provides tight control
Pros and Cons
- "Configuration for different application sources is most valuable. We can segregate the traffic that an application is carrying and identify the sizing in Imperva."
- "It should be more user-friendly. Like other web solutions, it would be helpful to be able to easily do policy configuration and identification inside the application. Understanding the in-depth configuration of a policy is somewhat difficult for an engineer, and they can improve that."
What is our primary use case?
We have an Akamai cloud-based solution for it. We have an in-house customer, and they have their own Akamai cloud for WAF. As a solution provider, we are working with their private Akamai WAF.
What is most valuable?
Configuration for different application sources is most valuable. We can segregate the traffic that an application is carrying and identify the sizing in Imperva.
It is quite proficient in terms of logs reports, and it provides tight control for policy configuration. So, there can't be any unwanted applications on the internal LAN site. It is quite restrictive, which is a plus point. The sizing of an application is quite easy to understand while we are configuring and deploying Imperva.
What needs improvement?
It should be more user-friendly. Like other web solutions, it would be helpful to be able to easily do policy configuration and identification inside the application. Understanding the in-depth configuration of a policy is somewhat difficult for an engineer, and they can improve that.
For how long have I used the solution?
I have about two to three years of experience with Imperva. I'm working as a GA consultant for cybersecurity and information security. I'm working on different security solutions such as WAF, IAM, DDoS, Azure firewall proxy, and antivirus. I work with different customers, and I also do the architecture review or assessment.
What do I think about the stability of the solution?
Its stability is quite good. It is not at all an issue.
It is also quite good performance-wise. We are confident about its performance.
What do I think about the scalability of the solution?
It is for large-scale enterprises where the traffic is huge, and there are many internet-facing applications, which is a plus point of Imperva.
We don't have the HA mode for the respective solution in Imperva, which has to be there when we have the DC and DR locations. We can activate only one solution at DC, but while we are conducting the drills between DC and DR, it is quite difficult to import all the configurations at the DR location in Imperva. It takes time.
How are customer service and support?
Their support is good. It is not an issue. Whenever we have any questions or concerns, we're getting an appropriate solution for our queries.
Some of the clients have had direct support from Imperva, and some of the clients had a third-party vendor. We also get support from a local Imperva employee. When I was working for a bank, there was good support from this person who was working with Imperva.
How was the initial setup?
The support for the setup is very good from the provider, but it can be difficult for an engineer to have an in-depth understanding of the configuration of a policy for an application.
What other advice do I have?
I would rate it an eight out of 10.
Which deployment model are you using for this solution?
Private Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
IT Solutions Senior Manager at a media company with 501-1,000 employees
Helpful support, good licensing model, and fits within our budget
Pros and Cons
- "It fits our requirements, as well as our budget."
- "Some maintenance must be performed by our IT team."
What is our primary use case?
We use this product as our Web Application Firewall. It provides web-based protection for us. Our requirements are not very complex.
What needs improvement?
Some maintenance must be performed by our IT team.
For how long have I used the solution?
We have been working with Imperva Incapsula for two years.
What do I think about the stability of the solution?
The stability is okay. We use it extensively, on a daily basis. The firewall operates 24 hours per day.
What do I think about the scalability of the solution?
We have approximately 500 employees that are protected with this product.
How are customer service and support?
We have not had any problems with their technical support.
Which solution did I use previously and why did I switch?
We did not use another Web Application Firewall before Imperva.
How was the initial setup?
Incapsula is not a difficult product to deploy.
What about the implementation team?
The vendor assisted us with the deployment.
We have an IT support team that is responsible for maintenance.
What's my experience with pricing, setup cost, and licensing?
We have a yearly contract and I am happy with the pricing. Imperva charges us based on bandwidth, which is better than other vendors that charge us according to data transfer. In these cases, our costs are quite high.
Outside of our package, there are no additional fees.
What other advice do I have?
Overall, I am really happy with this solution. This includes the features and capabilities, as well as the cost. It fits our requirements, as well as our budget.
I would rate this solution a nine out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Solutions Architect at a security firm with 51-200 employees
Features that outperform it's competitors, easy to scale, reliable, and responsive support
Pros and Cons
- "It's very pretty easy to onboard the URL."
- "It would be beneficial to include vulnerability management in the solution, similar to what they have for their on-premise solution."
What is our primary use case?
We offer implementation services for our customers.
Most customers use Imperva Incapsula to protect themselves from WAF attacks. If they need an application load balancing, whether it is on a single data center or if they have a B2B extension. Also, if they need protection from the bots. Imperva has all of those functionalities.
What is most valuable?
It's very pretty easy to onboard the URL. One of the unique features included with Imperva is its advanced bot protection. In addition the base licensing modules with most of the features.
In terms of features, Imperva is quite good; it outperforms its competitors.
What needs improvement?
Pricing could be more competitive.
It would be beneficial to include vulnerability management in the solution, similar to what they have for their on-premise solution.
For how long have I used the solution?
I have been working with Imperva Incapsula for more than three years.
I have been using the latest update.
What do I think about the stability of the solution?
The stability is quite good. It has an uptime of 99%. None of our customers have complained about its uptime and its availability.
What do I think about the scalability of the solution?
The majority of our customers are enterprise businesses, with some SMB, but it depends on their budget, as well as their needs, and whether it is for security or compliance purposes.
Imperva is quite expensive for organizations that use it for compliance purposes. Other WAP solutions, such as Fortinet or Barracuda, which are slightly less expensive than Imperva, will be considered.
Imperva Incapsula is easy to scale.
How are customer service and support?
I believe that Technical support is 24/7. They are also very quick to respond via email.
Which solution did I use previously and why did I switch?
We work with all of the Imperva solutions from the database, monitoring tools, and the web applications firewall.
How was the initial setup?
The initial setup Is quite simple and straightforward. We only have seven steps to follow. It's a very simple and straightforward process.
If the customer agrees to a DNS sense, it will take no more than 10 to 15 minutes.
Imperva is responsible for maintenance.
What's my experience with pricing, setup cost, and licensing?
Incapsula is a SaaS (software-as-a-service) provider. Anyone can do the applications, but you must subscribe to the service.
Pricing is a challenge for most of our customers.
What other advice do I have?
I cannot provide a comparison because I have not worked with any other vendors.
I would recommend this solution to others because it is pretty simple to implement, and you don't need a dedicated WAP technician to maintain this solution.
Anyone in the organization can easily implement it, and it can be maintained with a little application knowledge. On the application side, you do not need to be a subject matter expert it is not necessary.
I would rate Imperva Incapsula a nine out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner

Buyer's Guide
Download our free Imperva Application Security Platform Report and get advice and tips from experienced pros
sharing their opinions.
Updated: September 2025
Product Categories
Distributed Denial-of-Service (DDoS) Protection CDN Web Application Firewall (WAF) Bot Management API SecurityPopular Comparisons
Prisma Cloud by Palo Alto Networks
Cloudflare One
Microsoft Azure Application Gateway
Azure Front Door
F5 Advanced WAF
Fortinet FortiWeb
Cloudflare Web Application Firewall
Akamai App and API Protector
Buyer's Guide
Download our free Imperva Application Security Platform Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- F5 vs. Imperva WAF?
- Imperva WAF vs. Barracuda: Which One is Better?
- Which Web Application Firewall (WAF) would you recommend? R&S or Imperva?
- Can Imperva Bot Management protect against advanced bot threats, such as credential stuffing and content scraping?
- Can Imperva Bot Management protect against API attacks? Are APIs more susceptible to bot attacks?
- What is a zero-trust cybersecurity model and what would some of its key aspects be?
- We are looking at managed DNS providers and want to know what others are using
- Prolexic vs. Arbor Networks: How do they compare?
- How does a WAF help to protect against DDoS attacks?
- Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?