Try our new research platform with insights from 80,000+ expert users
reviewer1358583 - PeerSpot reviewer
Application Security Engineer at a insurance company with 10,001+ employees
Real User
There is not too much to know but that it is one of the best products of this type that you can get
Pros and Cons
  • "There is no need to have an appliance in house for the services because it is on the cloud."
  • "Certificate management could be improved."
  • "The product could use a broader scope in the area of policies."

What is our primary use case?

We are using it as an application-delivery platform for our entire organization.  

What is most valuable?

The most valuable feature is that it is cloud-based and we do not need to have an appliance for it in house.  

What needs improvement?

I do not see any big problems with the product. Imperva has had a lot of experience developing this product platform and it seems appropriate for my use cases. There are a few places where it can be improved.  

An area of improvement that I was looking for in Incapsula at this moment is enhancing the policy levels. For my purposes, I think there are too few policies. The product and what is included may be good, but it has to be improved further in the area of policies.  

Another area that could do with improvement is certificate management. I do not like the way that incapsula handles certificates very much. It needs to be changed or drastically improved to be more fluid.  

We have to be conscious of the architecture updates. Updates for the application architecture may break the existing protection application if we have made any changes. It does not seem that this should be so big of a concern for the end-user and could be handled better.  

For how long have I used the solution?

We have been using Imperva Incapsula for six months.  

Buyer's Guide
Imperva DDoS
April 2025
Learn what your peers think about Imperva DDoS. Get advice and tips from experienced pros sharing their opinions. Updated: April 2025.
857,028 professionals have used our research since 2012.

What do I think about the stability of the solution?

The stability of the product is not usually the issue. Any stability issues would have to do more with extraneous factors.  

What do I think about the scalability of the solution?

We need to know more about the scalability ourselves. We are working on it now to see what we can do. The scalability is inherently good because it is on the cloud. There is nothing much to worry about with the scalability part. But the hands-on experience with it is something we are still exploring.  

There seems to be no limit to scaling the product from the perspective of adding applications. We just put our product on the market. Until and unless the users complain to us, then we will not know if there are growing pains. It is too early in our experience with the product to get the kind of feedback that we need from them.  

We have had only one serious issue after onboarding 50 applications. For one application, we have had some performance and stability issues. It was just one time over the last six months where the problem was affecting the stability. For that one application, we had severe performance issues, and we rolled it back. We are still investigating that issue. We do not know the reason yet that we had a problem with it. We do not know how many of the applications that we try to work will present problems like that. I saw problems with only two applications in total. One is application had an issue with image loading which was not as severe, and the other one was for performance issues. The performance issue was effecting web services.  

Scaling, as far as the number of users, is another type of scalability. Ultimately everybody who uses our services uses Incapsula in a sense by the end of the day. This is because every application has to go through Incapsula.  

We are also having to look at our own environment when considering scalability and trying to take Incapsula forward as far as we can with expansion. We have some issues with our infrastructure. All the infrastructure is not always optimally compatible with Incapsula. Because our infrastructure is not fit for Incapsula due to various reasons, we are working to resolve those issues. Those are not major things, but they are important to resolve and continue to scale, so we are working on it. It will take some time to identify everything and optimize the system. For example, if we implement something like having multiple authentications it comes with new challenges. In the end, it improves what we offer, but there are issues to consider along the way, and even before the implementation. 

How are customer service and support?

The tech support people are good. They are very good.  

Which solution did I use previously and why did I switch?

For web application firewalls we are actually currently using more than one solution. We are using both Imperva and AWS. Which solution that we use depends upon the environment and depends on the situation. So we are using both solutions but for different situations when there is an advantage to using the capabilities of one product over the other.  

How was the initial setup?

Installation is not complex. It is pretty straightforward.  

What about the implementation team?

We have two people who we use for the deployment of updates and also maintaining this solution. They are part of our team and not from the vendor or other consultancy.  

What's my experience with pricing, setup cost, and licensing?

In my opinion, Imperva Incapsula is not expensive compared to the other similar solutions in this category.  

What other advice do I have?

I have some advice for people who are considering using Imperva. When onboarding an application, they need to be careful with their other infrastructure and systems. The concern is in part to make sure they do not have conflicts. There has to be proper authentication for authorization and the RSA (Rivest, Shamir, and Adelman, data security). During the execution of the task of onboarding, they need to be a little careful to make sure that is not creating an outage.  

So what I would recommend to anyone onboarding an application is that they need to go through the architecture of the application thoroughly before implementing the solution. Do not rush to the end to get it done.  

The best way to implement anything is by taking steps to avoid problems beforehand to end up with a result that has fewer issues.  

On a scale from one to ten (where one is the worst and ten is the best), I would rate Imperva Incapsula as the number one solution. There is not too much to know about it but that it is one of the best products of this type that you can get. But on a scale of one to ten, I give it a nine-out-of-ten because it is not perfect, as good as it is.  

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Other
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
ClaudioColombo - PeerSpot reviewer
CTO at Sorint.Lab
Reseller
The Setup is easy, scalable, and great pricing
Pros and Cons
  • "The setup of Imperva DDoS was easy."
  • "I would like to see automated reporting to improve visibility."

What needs improvement?

I would like to see automated reporting to improve visibility.

For how long have I used the solution?

I have been working with Imperva DDoS for two years now.

What do I think about the scalability of the solution?

Imperva DDoS is scalable.

What's my experience with pricing, setup cost, and licensing?

The setup of Imperva DDoS was easy and we are satisfied with the pricing.

What other advice do I have?

I would rate Imperva DDoS a nine on a scale of one to ten.

Disclosure: My company has a business relationship with this vendor other than being a customer:
PeerSpot user
Buyer's Guide
Imperva DDoS
April 2025
Learn what your peers think about Imperva DDoS. Get advice and tips from experienced pros sharing their opinions. Updated: April 2025.
857,028 professionals have used our research since 2012.
reviewer1484703 - PeerSpot reviewer
CEO at a tech services company with 1-10 employees
Reseller
Integrates with IBM AS/400 and Db2, and is stable and scalable
Pros and Cons
  • "Integration with IBM AS/400 and Db2 is okay."
  • "The cost could be lower; our end clients need to have a high budget to purchase this solution."

What is our primary use case?

We use it for protection. For example, for one of our banking clients, we use it to protect their mobile and website applications.

What is most valuable?

Imperva is really amazing, feature wise and performance wise.

Integration with IBM AS/400 and Db2 is okay.

What needs improvement?

The cost could be lower; our end clients need to have a high budget to purchase this solution.

For how long have I used the solution?

We have been a partner for Imperva Incapsula for two years.

What do I think about the stability of the solution?

It's stable.

What do I think about the scalability of the solution?

It's a scalable solution.

How are customer service and support?

Technical support is provided by a distributor, and sometimes, there's a delay.

I would rate the technical support at four on a scale from one to ten.

How would you rate customer service and support?

Neutral

How was the initial setup?

The initial setup is easy because it's a plugin; it's an appliance. That means that there is a predefined setting.

Even with the professional service, it does not take a long time. It takes a few days, and everything is done.

For the professional service, usually one person from the distributor is required for deployment.

What's my experience with pricing, setup cost, and licensing?

We have an issue with Imperva Incapsula in the Iraqi market because of the high price.

What other advice do I have?

If you are looking for efficiency and the best technology, you should use Imperva. If you have a limited budget, however, then this is not a suitable solution for you.

I would rate Imperva Incapsula at eight on a scale from one to ten.

Disclosure: My company has a business relationship with this vendor other than being a customer:
PeerSpot user
Support Manager at Sefisa
MSP
Reports are easy to configure with good graphics; tech support is knowledgeable
Pros and Cons
  • "There are quite a few useful Imperva Incapsula features. For example, one of them is the reports. The graphics are very good and it's easy to configure. The whole process is very fast and reliable too. They have good tech support as well."
  • "Users would benefit from better documentation. There is official documentation, but sometimes we need more detail. We have some use cases that are not so run of the mill. It would be great if there was a knowledge base that we could go to for more answers."

What is our primary use case?

Our customers have a number of use cases for Imperva Incapsula. Some use it to protect their APIs and others for its DDoS features. 

What is most valuable?

There are quite a few useful Imperva Incapsula features. For example, one of them is the reports. The graphics are very good and it's easy to configure. The whole process is very fast and reliable too. They have good tech support as well.

What needs improvement?

Users would benefit from better documentation. There is official documentation, but sometimes we need more detail. We have some use cases that are not so run of the mill. It would be great if there was a knowledge base that we could go to for more answers.

The price could also be more reasonable. The price should at the very least be adjusted for different parts of the world. For example, here in Latin America, our budgets are very different than those for projects in the United States or Europe. It would be really positive if we could get the product at a more affordable price as we are customers with lower budgets without sacrificing features or capabilities of the solution.

For how long have I used the solution?

I have been using Imperva Incapsula for about three years. It's a solutions I recommend to my customers. 

What do I think about the stability of the solution?

This is a very stable solution. 

How are customer service and support?

I like their support. The times we have asked for their help, they have been very accurate at giving answers.

How was the initial setup?

The initial setup is easy. It can take maybe half an hour due to the propagation of the DNS name on the server. However, setting up one Imperva website is very easy. You just have to wait for the DNS to refresh on the other DNS server and that's it.

What other advice do I have?

I would encourage people to implement Imperva Incapsula. I think it is a very mature, easy to use, and reliable solution.

Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
PeerSpot user
reviewer1407915 - PeerSpot reviewer
Information System Security Manager at a pharma/biotech company with 10,001+ employees
Real User
A very secure platform for protecting our website and web applications
Pros and Cons
  • "It blocks all types of attacks."
  • "It's quite expensive."

What is our primary use case?

We are using this solution for web application firewall protection for the website and web application. I'm a user of this product and work as an information systems security manager. 

What is most valuable?

I'm very happy with the solution. The most valuable aspect of it is that it blocks all types of attacks.

What needs improvement?

I think the product could be improved by reducing the price. It would help if they came up with pricing options because as it is now if you're a big company and use the site often, it's more expensive. 

For how long have I used the solution?

I've been using this solution for almost four years. 

What do I think about the stability of the solution?

Stability and scalability are fine. 

How are customer service and technical support?

I don't use the technical support, but my colleagues do and they haven't mentioned any problems. 

What other advice do I have?

I would rate this solution a nine out of 10. 

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
reviewer1262313 - PeerSpot reviewer
Solutions Architect at a financial services firm with 201-500 employees
Real User
Easy to configure, simple to set up, and quite stable
Pros and Cons
  • "The solution's most valuable aspect is that it is easy to configure."
  • "The log analytics interface within Incapsula isn't really good. For example, if you have to get all logs from there, it's a very cumbersome process."

What is our primary use case?

We are using the solution as a WAF. Beyond that, I can't divulge too much information about the details surrounding how we use the solution as part of a confidentiality agreement we're under with clients.

What is most valuable?

The solution's most valuable aspect is that it is easy to configure. 

The solution keeps itself up to date itself and there's no customization that we need to do. It makes it extremely easy and cut back on the amount of work required, and saves us on man-hours.

The initial setup is fairly easy.

What needs improvement?

The log analytics interface within Incapsula isn't really good. For example, if you have to get all logs from there, it's a very cumbersome process.

The solution doesn't seem to come with any other additional features. There are other products in the market today that give you an overall network perimeter protection. Incapsula is good for what it is, but it can expand its horizon a lot if it decides to include more network perimeter protection features and capabilities. It needs items, for example, at endpoints and some sort of firewall that can work at multiple levels. Items of that nature will really bump up the security and make it a much better product.

For how long have I used the solution?

We've been using the solution for a while now. It's been about three or four years at least.

What do I think about the stability of the solution?

The solution is fairly stable. I don't think we've had to deal with crashes of the system. There aren't bugs and glitches. We find it to be reliable.

What do I think about the scalability of the solution?

We haven't had any issues with the scalability the solution provides. If a company needs to scale this product they can do so pretty easily.

How are customer service and technical support?

I've never contacted technical support, and I'm unsure if anyone on my team has, either. I wouldn't be able to speak to the quality of service they provide.

How was the initial setup?

The initial setup was not complex at all. It was pretty straightforward.

The deployment of the solution, which included the design phase of the process, took a few months to complete.

We have our own in-house team that handles any maintenance that needs to happen on an ongoing basis.

What other advice do I have?

We're simply a customer. We don't have a business relationship with the company at this time. We use the product ourselves. We aren't resellers or integrators.

I'd advise other companies, based on the scale of the organization and complexity, that if one has to choose a product, a company cannot choose a product from someone else's say so. It would depend on how complex their network design is. If it's fairly simple, then there's only one thing they need there. Multiple layers mean that this solution may not be the right product. A company has to do the research to find out if there are other products that are offering more of what they want, according to their unique requirements.

I'd rate the solution eight out of ten. If the solution was a bit more complete, and offered, for example, perimeter protection, I would give it higher marks.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
reviewer1322772 - PeerSpot reviewer
Information Security Manager at a transportation company with 1,001-5,000 employees
Real User
Good DDoS and bot features, but it needs support for SSL management
Pros and Cons
  • "The most valuable features for us are the DDoS and Bot."
  • "I would like to have support for SSL management and secure DNS."

What is most valuable?

The most valuable features for us are the DDoS and Bot.

What needs improvement?

I would like to have support for SSL management and secure DNS.

For how long have I used the solution?

We have been using Imperva for more than a year.

What do I think about the stability of the solution?

We have had no problems with stability.

What do I think about the scalability of the solution?

Imperva is a scalable solution. We have about 20 users but it's protecting our main website.

How are customer service and technical support?

I would say that technical support is average.

Which solution did I use previously and why did I switch?

We did not use another similar solution prior to Imperva.

How was the initial setup?

The initial setup was simple. It took about two hours to deploy.

What's my experience with pricing, setup cost, and licensing?

The cost is on par with other solutions such as Cloudflare and Akamai. There's not much difference in it.

What other advice do I have?

I would rate this solution a seven out of ten.

Which deployment model are you using for this solution?

Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Manager - IT Security at a tech services company with 11-50 employees
Reseller
Stops web attacks from denying services and endangering the security of sensitive data
Pros and Cons
  • "It is an effective threat mitigation tool."
  • "The technical support is excellent."
  • "Imperva should have more points of presence in Africa."

What is our primary use case?

Incapsula was acquired by Imperva. We had a need to provide a solution for our clients and the Incapsula solution and Cloud WAF (Web Application Firewall) allowed us to have people subscribe to Incapsula as a service. It was easy to work with because we would just put in the hostname and the IP address of the websites in Incapsula's DNS. When the DNS is resolved it first passes through Incapsula and makes a stops in the Cloud WAF before it sends the website itself.  

Customers can trust it because the traffic going to the customer passes through Incapsula's cloud service. So if there is an attack, the website and the visitors are protected because it will take care of such issues and it eliminates the bad traffic. Both ends are taken care of so the website is protected from hackers because it first goes through the Incapsula Cloud WAF. That is the basic high-level architecture of how the Incapsula works.  

We distributors of Imperva in Africa. I am responsible for our business presence in Eastern and Western Africa. I am fixed locally here in Nigeria. Being distributors, we have a pretty good idea of how the market is in general and how the products are used. All the partners who implement it and who resell sell it, buy it from us and deploy for customer accounts. We cover a high percentage of the financial service industry here in Nigeria.  

What is most valuable?

For this part of the world, several things are important. It is important that the clients have the features which they get to use to get against bad traffic, of course as this is the reason for the product. But especially for customers in this region, it is also the opportunity to use the service platform. They do not have to own it or maintain it and they may not otherwise have the capacity to deploy this type of solution. Instead, they can pay for it as a service. It works so well here that even some of the banks are using it.  

The most valuable feature is the ability to mitigate bad traffic. I think the highest traffic we would experience can be handled by the Incapsula Cloud WAF because it can scale. So if there is some attack on a website and there is high volume, instead of it disrupting the website and disrupting business operations, it is not a problem for the customer's website. That ability to mitigate problems with the traffic is why the clients use the product to protect their valuable data and customer interactions.  

What needs improvement?

If I had the opportunity to recommend an enhancement to Imperva it would be to have more POP (Point of Presence) in East and West Africa, and in Central Africa as well. There is only one POP in South Africa. There are other ones are in Europe, America, and Asia and sometimes the latency can be an issue because for your traffic to hit the website — say in East Africa. First, it has to first go to the nearest point of presence. Because of the distance, there can be some problems. So if they have a POP closer to manage customers around Africa this could be a better service to clients.  

For how long have I used the solution?

I have only recently begun to use Imperva Incapsula compared to the amount of time I have been in the industry. For more than a decade and I have tried my hands on various security solutions, mainly having to do with network infrastructure.  But now I am back to working with security solutions and, over this past year, I have engaged mostly with applications in data security. Before that, I was doing a lot more with the whole of network security. Incapsula is more of an application for data security and it is something which Imperva does pretty well.  

What do I think about the stability of the solution?

The stability is not an issue. The product is serviced and maintained for the client.  

What do I think about the scalability of the solution?

Virtually all the banks in Nigeria, Ghana, East, and West Africa, are using Imperva. Of course, they are using it for various things, but for the most part, they use it for data security and application security and then also a little bit on the Incapsula platform.  

The scalability depends on the customer but there are really no features that a client will want to request that Imperva does not handle in terms of scalability. Of course, you cannot compare the size of the banks and the input and output demands of banking in Western European countries or the Americas with the needs of banking in Africa.  

For us, it is a good solution.  

How are customer service and technical support?

Response from technical support has been very good. I would say that they are excellent because they are always willing to attend to customers' requests. They provide support based on time zones so there is good access.  

How was the initial setup?

Because it is a cloud product and the setup is minimal, it is straightforward and quickly implemented.  

Which other solutions did I evaluate?

I do have experience with Imperva SecureSphere. I am working with various solutions that have various features and how these solutions work for different customers. For one customer, I was trying to do some research to see if they should replace Trustwave WAF with a different solution because the customer asked me about other possibilities. This was my first customer who had asked me to look into Trustwave, so I also took the time to research that product. But different products fit different businesses and industries better.  

What other advice do I have?

I am not an expert in every solution of this type, but I have a pretty good idea of what makes them work as a good solution based on customer needs. I do not do the implementation because I am more in a position of doing pre-sales and consultancy.  

I would highly recommend Imperva Incapsula especially for customers who want extra security for their web presence.  

On a scale from one to ten where one is the worst and ten is the best, I would rate the Incapsula product overall as a nine-out-of-ten.  

Which deployment model are you using for this solution?

Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: Distributor
PeerSpot user
Buyer's Guide
Download our free Imperva DDoS Report and get advice and tips from experienced pros sharing their opinions.
Updated: April 2025
Buyer's Guide
Download our free Imperva DDoS Report and get advice and tips from experienced pros sharing their opinions.