The solution has the best volumetric DDoS attacks feature.
CTO at CyberApp
Scalable solution for good technical support services
Pros and Cons
- "It is a stable solution."
- "It needs to be improved every time there are new attacks."
What is most valuable?
What needs improvement?
The solution needs to be improved every time there are new attacks. They need to add new features and techniques to prevent the attacks.
For how long have I used the solution?
We have been using the solution for seven years.
What do I think about the stability of the solution?
I rate the solution's stability an eight out of ten.
Buyer's Guide
Imperva DDoS
April 2025

Learn what your peers think about Imperva DDoS. Get advice and tips from experienced pros sharing their opinions. Updated: April 2025.
857,028 professionals have used our research since 2012.
What do I think about the scalability of the solution?
It is a scalable solution. It is suitable for medium and enterprise businesses.
How are customer service and support?
The solution's technical support services are fine.
Which solution did I use previously and why did I switch?
Compared with the competitors, the solution provides better security features, including web protection firewall and DDoS protection.
How was the initial setup?
The solution's initial setup process is complicated. You need to include the right security policy and discover the attack trends. The time taken for implementation depends on the project requirements.
What's my experience with pricing, setup cost, and licensing?
The solution's price is reasonable. Although, it is a bit expensive for small companies. The cost of its licenses depends on the specific project requirement.
What other advice do I have?
I advise others to study their requirements while choosing DDoS protection thoroughly. They should know if the CDN is limited to their region or has a global reach. Also, DDoS attacks appear in different ways every single time. Thus, it is challenging to implement. It is crucial to know its surface, nature, and how to implement the security measures.
I rate the solution an eight out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner

Sales Executive at EVVO LABS
Protects against broken authentication
Pros and Cons
- "Imperva Incapsula has many valuable features. One, it protects the top 10 OWAS vulnerability, the open web application software platform, this is standard. Secondly, it protects against broken authentication. As well, it has remote execution of code."
- "Imperva always needs to adjust to new versions of cyber attacks, it needs to be faster, improve the resiliency of the software of the solution."
What is our primary use case?
Previously I was in software development for more than 15 years. I had developed web applications for internet and cable TV companies. Now, I am a sales executive for Imperva Cloud WAF.
Imperva Cloud WAF, previously Imperva Incapsula, is a web application firewall that is implemented in the cloud. It protects a public facing web application. It will track if a hacker is doing brute force attack. The web application firewall will detect it and block the source. This could be an IP address or the main name specific for a country. You can then update the profile of your server to block those IP addresses where the attack is coming from .
We have placed Imperva Cloud in our client's employee self service system that they are logged into. The website is protected by Imperva so that employees and customers can log in all over the Philippines. The client is a power generation company, which is a critical service, and has branches all over the Philippines.
We partner with a couple of on-premise data centers in the Philippines, one is PIM. They also provide cloud solutions. We bundle our solutions into their cloud projects.
What is most valuable?
Imperva Incapsula has many valuable features. One, it protects the top 10 OWAS vulnerability, the open web application software platform, this is standard. Secondly, it protects against broken authentication. As well, it has remote execution of code.
What needs improvement?
Imperva always needs to adjust to new versions of cyber attacks, it needs to be faster, improve the resiliency of the software of the solution.
For how long have I used the solution?
I have been using Imperva Cloud WAF for three years.
What do I think about the stability of the solution?
Imperva is stable. Based on Gartner's survey we are top three, meaning we are reliable based on customer feedback.
What do I think about the scalability of the solution?
This is a scalable solution. We have data centers all over the world. The solution can be set up to be optimized wherever the clients are accessing.
How are customer service and support?
Technical support has good response time. I am also the liaison officer for the technical team in Singapore. Support responds quickly and they do attend to the issues that we raise to them.
How was the initial setup?
The implementation of Imperva Cloud WAF is easy. All you need to do is change the DNS settings, because it is a cloud solution there is no appliance that you need to install at the data center. It just changes the DNS settings, and then a couple of IP address and domain name settings to allow a couple of those IP addresses and domain names settings into the firewall of the client and the firewall of Imperva.
The actual installation will only take a few hours and then full implementation within 24 hours. The initial setup takes time because of the configuration on the client-side. We prepared a questionnaire for the client to assist with preparation.
What was our ROI?
We created a cross-comparison against hiring a team of cybersecurity staff versus getting a subscription. After using Imperva Cloud for the past three years the cost is already acceptable against hiring a team.
What's my experience with pricing, setup cost, and licensing?
The price depends on the client's needs, it will be impacted depending on whether they need diverse production, or account take over for example.
There is an initial four package bundle with the price changing monthly.
What other advice do I have?
I would rate this solution an 8 out of 10.
Which deployment model are you using for this solution?
Private Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Imperva DDoS
April 2025

Learn what your peers think about Imperva DDoS. Get advice and tips from experienced pros sharing their opinions. Updated: April 2025.
857,028 professionals have used our research since 2012.
IT Solutions Senior Manager at a media company with 501-1,000 employees
Helpful support, good licensing model, and fits within our budget
Pros and Cons
- "It fits our requirements, as well as our budget."
- "Some maintenance must be performed by our IT team."
What is our primary use case?
We use this product as our Web Application Firewall. It provides web-based protection for us. Our requirements are not very complex.
What needs improvement?
Some maintenance must be performed by our IT team.
For how long have I used the solution?
We have been working with Imperva Incapsula for two years.
What do I think about the stability of the solution?
The stability is okay. We use it extensively, on a daily basis. The firewall operates 24 hours per day.
What do I think about the scalability of the solution?
We have approximately 500 employees that are protected with this product.
How are customer service and support?
We have not had any problems with their technical support.
Which solution did I use previously and why did I switch?
We did not use another Web Application Firewall before Imperva.
How was the initial setup?
Incapsula is not a difficult product to deploy.
What about the implementation team?
The vendor assisted us with the deployment.
We have an IT support team that is responsible for maintenance.
What's my experience with pricing, setup cost, and licensing?
We have a yearly contract and I am happy with the pricing. Imperva charges us based on bandwidth, which is better than other vendors that charge us according to data transfer. In these cases, our costs are quite high.
Outside of our package, there are no additional fees.
What other advice do I have?
Overall, I am really happy with this solution. This includes the features and capabilities, as well as the cost. It fits our requirements, as well as our budget.
I would rate this solution a nine out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Solutions Architect at a security firm with 51-200 employees
Features that outperform it's competitors, easy to scale, reliable, and responsive support
Pros and Cons
- "It's very pretty easy to onboard the URL."
- "It would be beneficial to include vulnerability management in the solution, similar to what they have for their on-premise solution."
What is our primary use case?
We offer implementation services for our customers.
Most customers use Imperva Incapsula to protect themselves from WAF attacks. If they need an application load balancing, whether it is on a single data center or if they have a B2B extension. Also, if they need protection from the bots. Imperva has all of those functionalities.
What is most valuable?
It's very pretty easy to onboard the URL. One of the unique features included with Imperva is its advanced bot protection. In addition the base licensing modules with most of the features.
In terms of features, Imperva is quite good; it outperforms its competitors.
What needs improvement?
Pricing could be more competitive.
It would be beneficial to include vulnerability management in the solution, similar to what they have for their on-premise solution.
For how long have I used the solution?
I have been working with Imperva Incapsula for more than three years.
I have been using the latest update.
What do I think about the stability of the solution?
The stability is quite good. It has an uptime of 99%. None of our customers have complained about its uptime and its availability.
What do I think about the scalability of the solution?
The majority of our customers are enterprise businesses, with some SMB, but it depends on their budget, as well as their needs, and whether it is for security or compliance purposes.
Imperva is quite expensive for organizations that use it for compliance purposes. Other WAP solutions, such as Fortinet or Barracuda, which are slightly less expensive than Imperva, will be considered.
Imperva Incapsula is easy to scale.
How are customer service and support?
I believe that Technical support is 24/7. They are also very quick to respond via email.
Which solution did I use previously and why did I switch?
We work with all of the Imperva solutions from the database, monitoring tools, and the web applications firewall.
How was the initial setup?
The initial setup Is quite simple and straightforward. We only have seven steps to follow. It's a very simple and straightforward process.
If the customer agrees to a DNS sense, it will take no more than 10 to 15 minutes.
Imperva is responsible for maintenance.
What's my experience with pricing, setup cost, and licensing?
Incapsula is a SaaS (software-as-a-service) provider. Anyone can do the applications, but you must subscribe to the service.
Pricing is a challenge for most of our customers.
What other advice do I have?
I cannot provide a comparison because I have not worked with any other vendors.
I would recommend this solution to others because it is pretty simple to implement, and you don't need a dedicated WAP technician to maintain this solution.
Anyone in the organization can easily implement it, and it can be maintained with a little application knowledge. On the application side, you do not need to be a subject matter expert it is not necessary.
I would rate Imperva Incapsula a nine out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Director at IT Big Bang
Easy to use and enables us to put everything in code
Pros and Cons
- "Simplifies putting everything in code."
- "A limited tool if you're looking to customize."
What is our primary use case?
The company uses this solution to protect us from any potential attacks. We are customers of Imperva and I'm the company director.
What is most valuable?
Imperva makes it easier for us to put everything in code; we use Terraform to deploy our infrastructure.
What needs improvement?
This is a very limited tool if you're looking to customize. It would be helpful if Imperva would provide additional resources for Terraform that can easily be deployed. There are some cases where we're currently unable to use Terraform.
For how long have I used the solution?
I've been using this solution for six months.
What do I think about the stability of the solution?
The solution is stable although sometimes content delivery seems to be affected because it's in the cloud.
What do I think about the scalability of the solution?
Scalability is fine and we haven't had any issues with resource consumption.
How are customer service and technical support?
Technical support is quite proactive in sharing information.
How was the initial setup?
The initial setup is relatively straightforward.
What other advice do I have?
I rate this solution eight out of 10.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Manager Technique at a computer software company with 11-50 employees
Good support, easy and quick deployment, and valuable DDoS protection and WAF features
Pros and Cons
- "DDoS protection and WAF are the most valuable features. It is easy to deploy a service. It is easy and quick to deploy to a new website."
- "Its price could be improved. It is quite expensive. It will be good if we could export the configuration. Currently, to control the configuration, we need to go to each website, which is not very convenient."
What is our primary use case?
Our primary use case is DDoS protection. We are using it to protect access to internet sites. It is a SaaS solution, so everybody has the latest version.
What is most valuable?
DDoS protection and WAF are the most valuable features. It is easy to deploy a service. It is easy and quick to deploy to a new website.
What needs improvement?
Its price could be improved. It is quite expensive.
It will be good if we could export the configuration. Currently, to control the configuration, we need to go to each website, which is not very convenient.
For how long have I used the solution?
I have been using this solution for six years.
What do I think about the scalability of the solution?
Its capacity is okay for us, and we don't need to scale it or expand its usage.
How are customer service and technical support?
Their technical support is good. We get a quick response from them.
How was the initial setup?
It was simple. It is very easy and quick to deploy.
What about the implementation team?
It was done in-house.
What's my experience with pricing, setup cost, and licensing?
It is expensive.
What other advice do I have?
I would recommend this solution to others. It has been working fine for us, and it has all the features that we need. I would advise others to know the exact bandwidth that is required for the project because the cost is based on the bandwidth. You must evaluate the required bandwidth beforehand.
I would rate Imperva Incapsula a nine out of ten. Technically, it is a very good solution.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Vice President, Global IT Security at a insurance company with 5,001-10,000 employees
Scalable, with good protection on offer and stable performance
Pros and Cons
- "The solution is very good at intercepting traffic before it gets to our data centers."
- "The salespeople tend to exaggerate its capabilities, which can cost you money if you don't verify the information."
What is our primary use case?
We primarily use the solution for all our corporate websites for port 80 and 443 redirect and protecting all the web pages that we have in our environment.
What is most valuable?
The solution is very good at intercepting traffic before it gets to our data centers. It saves us some security hits and top-level bad guy stuff. It's very good at protecting us. It keeps anything malicious off of our infrastructure.
What needs improvement?
We did have a major complaint, however, they fixed it after about a year and a half of complaining. It's not a problem anymore. I don't recall really having any issues with the solution beyond what they have fixed.
The salespeople tend to exaggerate its capabilities, which can cost you money if you don't verify the information.
For how long have I used the solution?
I've dealt with the solution for two years at this point.
What do I think about the stability of the solution?
The stability of the solution is very good. I've never heard of any outages that I'm aware of. It doesn't crash or freeze. There aren't bugs or glitches. It's reliable.
What do I think about the scalability of the solution?
The scalability is just based on the number of licenses and in our case, we've maxed out our licenses. They are extremely expensive, and therefore it would be costly to scale.
How are customer service and technical support?
I haven't had to call technical support, however, from what I've heard, they're okay. They are not great, not bad, just right down the middle.
How was the initial setup?
The infrastructure team did all the certificates on that side. My team took care of security. It's the security settings we set up. There was a lot of complexity in the initial configuration based on our proprietary apps and having to disable or change some settings to allow some stuff to work. That's kind of a normal thing. No matter what WAF you would have, you'd have the same issue.
What's my experience with pricing, setup cost, and licensing?
The licensing of the solution is quite high. Licenses are quite expensive. I'm not sure if they really offer the value that they ultimately charge.
The cost is somewhere around $10,000 a site. For every site, you pay individually. For every DNS entry, you have you pay.
What other advice do I have?
We are just customers and end users.
We're using the WAF. It's the web-based version. Whatever's the current and newest version is what we're using.
I'd advise potential new users to not believe salespeople. That's kind of a standard thing across the industry, however, we were told one thing at the sales side, and then, after we purchased, it was not true what they said. That's extremely disappointing as it actually costs us tens of thousands of dollars more due to the fact that what they said could happen, how their licensing model works, doesn't work the way the sales guy said. That's a giant disappointment.
Overall, the solution does what it says it will do. I'd rate it at an eight out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
CDN & Cybersecurity Engineer - Web performance & security at CDN Tech / Ecritel
A good solution that allows us to protect websites. It is stable, scalable, quick and easy to use
Pros and Cons
- "Its unique interface for managing security performance and ease of use are the most valuable features of this solution."
- "The weakest point of Imperva is their first level of support, which should be improved. They should also improve the access and security logs viewing directly on the portal. I would like to see better access and security logs through the portal and not only through a SIM solution. Currently, if you want to explore your access and security logs from Imperva, you need a SIM tool or a SIM infrastructure on your side to do it. You can't do it manually or directly through the portal, which is a big problem for us. I had a call yesterday with Imperva for the roadmap, and I just told them this. They agreed that this is an improvement point from their side."
What is our primary use case?
We use it to protect websites against application threats and DDoS attacks. Because it is a cloud solution, we always have the last version. I don't need to update or upgrade.
We are a partner of Imperva. Imperva doesn't sell directly to customers, so they have to pass through vendors and partners like us. All of my customers have different levels of services with Imperva.
How has it helped my organization?
We can protect our customers with Imperva solution very quickly, it's highly appreciated by our customers. We trust the solution because we saw a lot of blocked attacks, so once the customer website is protected, we don't worry about the security of his acces, it's all managed by the solution.
What is most valuable?
-WAF protection works almost out-of-the-box
-Anti-DDoS mitigation in less than 1s, I saw it many time in production, I can say it works
-CDN has high performances, and the Smart Caching mode is really "smart" (you can do some efficient caching even if you're not a specialist)
-It's a unique interface for managing security and performance aspects, we don't need to go through multiples providers to manages these aspects.
What needs improvement?
The weakest point of Imperva is their first level of support, which should be improved.
They should also improve the access and security logs viewing directly on the portal. I would like to see better access and security logs through the portal and not only through a SIEM solution. Currently, if you want to explore your access and security logs from Imperva, you need a SIEM tool or a SIEM infrastructure on your side to do it. You can't do it manually or directly through the portal, which is a big problem for us. They agreed that this is an improvement point from their side.
For how long have I used the solution?
I have been using this solution for four years.
What do I think about the stability of the solution?
It is very stable. I have used this solution for more than 20 customers, and each customer has a lot of websites. I have seen some network outages or things like that over the last four years, but I can say it is very stable.
What do I think about the scalability of the solution?
Scalability is not a problem because it is a cloud. The provider manages this aspect for me.
How are customer service and technical support?
This is the weakest point of Imperva. They have some very good technicians but not at the first level of support. I have already told them this several times. Each time I meet or talk to a chief or director, I say, "Your product is very good, but your support is not at the same level." I provide support to my customers for their solution. So, I know what the customers expect and how to address this kind of expectation. They need some improvement at this level.
How was the initial setup?
The initial setup is very easy and quick. You can put the protection live in less than 10 minutes if you need it.
What's my experience with pricing, setup cost, and licensing?
It is an expensive solution. The price is high as the level of service and security provided is high. A lot of customers tell us that they would love to use Imperva more. I have some customers who have 50 websites, but they protect only 10 websites on Imperva because of the price. They would love to have all their websites running through Imperva, but they can't. They have to choose the more critical websites to protect because the price is very high. It is a very good product, but it is expensive.
If you buy a plan for 20 megabytes and you don't consume all of your 20 megabytes, it is okay, but if you consume more, you are charged for the superior traffic.
What other advice do I have?
I would recommend this solution because I have also used different WAF and DDoS solutions. For me, it is the best solution available. It is quite simple to do the configuration. You can do whatever you want. If you know the product, you can do fine-tuning and have the configuration that you need. You need the knowledge to do this, but you can do this, and it works. Even though it is a high-cost solution, it is easy for me to sell it to customers because I know it will work. I get a little bit stressed about some of the other solutions because I don't trust those solutions like I trust Imperva.
I would rate Imperva Incapsula an nine out of ten. It is quite a good solution. They can do some improvements, but it is quite a good solution.
Which deployment model are you using for this solution?
Private Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner

Buyer's Guide
Download our free Imperva DDoS Report and get advice and tips from experienced pros
sharing their opinions.
Updated: April 2025
Product Categories
Distributed Denial-of-Service (DDoS) Protection CDN Web Application Firewall (WAF)Popular Comparisons
Cloudflare
Prisma Cloud by Palo Alto Networks
Microsoft Azure Application Gateway
Azure Front Door
AWS WAF
F5 Advanced WAF
Fortinet FortiWeb
NetScaler
Arbor DDoS
Akamai
Imperva Web Application Firewall
Akamai App and API Protector
Azure Web Application Firewall
Radware DDoS
Amazon CloudFront
Buyer's Guide
Download our free Imperva DDoS Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- F5 vs. Imperva WAF?
- We are looking at managed DNS providers and want to know what others are using
- Prolexic vs. Arbor Networks: How do they compare?
- Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
- How does a WAF help to protect against DDoS attacks?
- DDoS solutions: Any other solutions to consider aside from Radware DDoS Protection Service and F5 Silverline DDoS Protection?
- Which is the best DDoS solution and why?
- When evaluating DDoS Protection, what aspect do you think is the most important to look for?
- What is the difference between denial of service and distributed denial of service?
- How does BGP routing help to mitigate DDoS attacks?