We are using Imperva Web Application Firewall to monitor databases.
Security Consultant at FPG Technologies and Solutions LTD
Useful database monitoring, simple dashboards, and scalable
Pros and Cons
- "The most valuable features of Imperva Web Application Firewall are the monitoring of databases and the dashboards are easy to understand."
- "Imperva Web Application Firewall could improve the API integration. It was complex for us. Additionally, The onboarding could be better."
What is our primary use case?
What is most valuable?
The most valuable features of Imperva Web Application Firewall are the monitoring of databases and the dashboards are easy to understand.
What needs improvement?
Imperva Web Application Firewall could improve the API integration. It was complex for us. Additionally, The onboarding could be better.
For how long have I used the solution?
I have been using Imperva Web Application Firewall for approximately three months.
Buyer's Guide
Imperva Web Application Firewall
June 2025

Learn what your peers think about Imperva Web Application Firewall. Get advice and tips from experienced pros sharing their opinions. Updated: June 2025.
856,873 professionals have used our research since 2012.
What do I think about the stability of the solution?
Imperva Web Application Firewall is stable.
What do I think about the scalability of the solution?
The scalability of the Imperva Web Application Firewall is good.
How was the initial setup?
The initial setup of the Imperva Web Application Firewall is complex.
I rate the initial setup of Imperva Web Application Firewall a four out of five.
What other advice do I have?
I rate Imperva Web Application Firewall a nine out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.

Presales Engineer at SNSIN
Flexible, good performance, and helpful support
Pros and Cons
- "The most valuable features of the Imperva Web Application Firewall are performance and flexibility. We can extend or customize the box itself."
- "Imperva Web Application Firewall could improve the console by making it easier to use."
What is our primary use case?
Imperva Web Application Firewall is used for protecting web applications.
What is most valuable?
The most valuable features of the Imperva Web Application Firewall are performance and flexibility. We can extend or customize the box itself.
What needs improvement?
Imperva Web Application Firewall could improve the console by making it easier to use.
For how long have I used the solution?
I have been using Imperva Web Application Firewall for approximately six years.
What do I think about the stability of the solution?
Imperva Web Application Firewall is stable.
What do I think about the scalability of the solution?
The stability of the Imperva Web Application Firewall is good.
We have approximately three or four clients using this solution.
How are customer service and support?
The support from Imperva Web Application Firewall is very good. They are handling support well, giving suggestions, and solving the issues.
How was the initial setup?
The initial setup of the Imperva Web Application Firewall is straightforward. The process for us is simple, we have been doing it for years.
What about the implementation team?
We have one person that does the deployment of the Imperva Web Application Firewall.
What's my experience with pricing, setup cost, and licensing?
We sell three-year licenses for Imperva Web Application Firewall to our customers. The price is a little expensive.
What other advice do I have?
I recommend this solution to others.
I rate Imperva Web Application Firewall an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Imperva Web Application Firewall
June 2025

Learn what your peers think about Imperva Web Application Firewall. Get advice and tips from experienced pros sharing their opinions. Updated: June 2025.
856,873 professionals have used our research since 2012.
GA Consultant Cyber Security at a tech services company with 51-200 employees
Suits large enterprises, supports different application sources, and provides tight control
Pros and Cons
- "Configuration for different application sources is most valuable. We can segregate the traffic that an application is carrying and identify the sizing in Imperva."
- "It should be more user-friendly. Like other web solutions, it would be helpful to be able to easily do policy configuration and identification inside the application. Understanding the in-depth configuration of a policy is somewhat difficult for an engineer, and they can improve that."
What is our primary use case?
We have an Akamai cloud-based solution for it. We have an in-house customer, and they have their own Akamai cloud for WAF. As a solution provider, we are working with their private Akamai WAF.
What is most valuable?
Configuration for different application sources is most valuable. We can segregate the traffic that an application is carrying and identify the sizing in Imperva.
It is quite proficient in terms of logs reports, and it provides tight control for policy configuration. So, there can't be any unwanted applications on the internal LAN site. It is quite restrictive, which is a plus point. The sizing of an application is quite easy to understand while we are configuring and deploying Imperva.
What needs improvement?
It should be more user-friendly. Like other web solutions, it would be helpful to be able to easily do policy configuration and identification inside the application. Understanding the in-depth configuration of a policy is somewhat difficult for an engineer, and they can improve that.
For how long have I used the solution?
I have about two to three years of experience with Imperva. I'm working as a GA consultant for cybersecurity and information security. I'm working on different security solutions such as WAF, IAM, DDoS, Azure firewall proxy, and antivirus. I work with different customers, and I also do the architecture review or assessment.
What do I think about the stability of the solution?
Its stability is quite good. It is not at all an issue.
It is also quite good performance-wise. We are confident about its performance.
What do I think about the scalability of the solution?
It is for large-scale enterprises where the traffic is huge, and there are many internet-facing applications, which is a plus point of Imperva.
We don't have the HA mode for the respective solution in Imperva, which has to be there when we have the DC and DR locations. We can activate only one solution at DC, but while we are conducting the drills between DC and DR, it is quite difficult to import all the configurations at the DR location in Imperva. It takes time.
How are customer service and support?
Their support is good. It is not an issue. Whenever we have any questions or concerns, we're getting an appropriate solution for our queries.
Some of the clients have had direct support from Imperva, and some of the clients had a third-party vendor. We also get support from a local Imperva employee. When I was working for a bank, there was good support from this person who was working with Imperva.
How was the initial setup?
The support for the setup is very good from the provider, but it can be difficult for an engineer to have an in-depth understanding of the configuration of a policy for an application.
What other advice do I have?
I would rate it an eight out of 10.
Which deployment model are you using for this solution?
Private Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Technical Account Manager at a tech services company with 201-500 employees
Easy to deploy with good cost savings and great scaling potential
Pros and Cons
- "The solution is stable."
- "I loved the approach of the cloud. The cloud has a lot of new features, like advanced web protection and DDoS protection. If those could also be on-boarded onto the on-prem versions, that would be ideal. They need to pay attention to both deployment options and not just favor one."
What is most valuable?
The product is very good.
It's so easy to do the deployment. The installation is very straightforward. You can't even compare it to others on the market. It's that easy.
The features on offer are very nice.
The solution is stable.
The licensing setup makes the product easy to scale.
The pricing is very good.
What needs improvement?
I loved the approach of the cloud. The cloud has a lot of new features, like advanced web protection and DDoS protection. If those could also be on-boarded onto the on-prem versions, that would be ideal. They need to pay attention to both deployment options and not just favor one.
For how long have I used the solution?
I've been using the solution for the last five years. I've used it for quite a while now.
What do I think about the stability of the solution?
The stability of the product is good. There are no bugs or glitches. It doesn't crash or freeze. It's reliable.
What do I think about the scalability of the solution?
We typically deal with medium-sized organizations.
The licensing model makes the solution very simple to scale. If a company wants to expand, it's not a problem.
How are customer service and technical support?
We need an improvement in the support. We need a lot of turnarounds. Whenever is a ticket open, it's something that has become a concern.
Which solution did I use previously and why did I switch?
I'm not currently working with any other solution. I just use this product.
Previously, I did work with F5 and Fortinet. However, Imperva is superior to both of these products.
How was the initial setup?
The initial setup is easy and the solution is very simple to deploy.
What's my experience with pricing, setup cost, and licensing?
The solution is very affordable and the cloud is making it even easier in terms of cost savings.
What other advice do I have?
We are resellers and we are based in Kenya. We're actually doing the whole suite. I'm working with Database Security and I'm also doing the Web Application Firewall, both of which are on-prem and on the cloud. I'm also doing the DRA.
It's the best in breed in terms of a solution you can put in place.
I'd rate the solution at an nine out of ten. We're quite happy with its overall capabilities.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer:
Senior Software Developer at a computer software company with 1,001-5,000 employees
Stable, protects well against a variety of attacks, especially DDoS
Pros and Cons
- "The solution has been quite stable. I have not seen any bugs at all."
- "Sometimes our web application firewall will slow down."
What is our primary use case?
We primarily use the solution for database security.
Basically, the solution is a web application firewall that is used to protect against multiple types of attacks online. It is used for web attacks - mostly DDoS attacks, cross-site scripting attacks, or SQL injection attacks.
There is also multiple HTTP protocol compliance. If there is any violation it will be detected by this application. It is used for detecting an illegal file type, illegal URL, or bots.
The solution can prevent a geolocation attack also. If any application is not allowed from certain countries, it will not allow access. We can detect everything via the web application firewall.
What is most valuable?
The solution offers good security against a variety of web attacks.
The protection from DDoS attacks is very useful. The DDoS attack is a very powerful attack that can harm a company's services. If an application is deployed to any web server or database our service will slow and will go down. A user would not be able to access our service until we can fix the issue. It's a deal if a company can avoid getting hit with DDoS attacks and having something that can effectively protect a company is extremely useful.
The solution has been quite stable. I have not seen any bugs at all.
What needs improvement?
Until now, it is good. There are no issues. As an analyst, I simply monitor. I don't really get too far into the technical aspects of the solution.
Occasionally, I've noticed that the web application firewall was down. If we are not using proper storage, proper memory, proper CPU, and if multiple attacks happen at one time, they will be detected by our web application firewall. Sometimes our web application firewall will slow down. In that sense, it needs some improvement. We do have a precaution for if the solution goes down. We basically, need to increase the memory and the storage and the CPU utilization, so that we can prevent our company from malicious activity.
I cannot say which type of memory or storage should be improved. The requirements depend on the organization. What organizations need and which type of configurations would work best as per their requirements depend completely on that.
For how long have I used the solution?
I've been working with the solution for about three years or so. It's been a while. I've been mostly working with it over the last 12 months or so.
What do I think about the stability of the solution?
The solution is quite stable. There are no bugs or glitches - or at least, I haven't seen any problems on that front. It doesn't crash or freeze. It's reliable.
What do I think about the scalability of the solution?
Right now, it depends on the company and its needs. I can't speak to if there are plans to increase usage.
How are customer service and technical support?
I've never been in touch with technical support. I can't speak to how knowledgeable and responsive they are, having never communicated with them directly. As an analyst, it's not my responsibility to deal with technical issues directly.
Which solution did I use previously and why did I switch?
It's my understanding that this company has only used this solution. However, if I move somewhere else, it's possible that something else may be used.
How was the initial setup?
I wasn't part of the initial setup. I can't speak to how easy or difficult the process was.
What's my experience with pricing, setup cost, and licensing?
I am not sure of the exact licensing costs of the solution. The licensing is a management decision. The costs and payments are handled by them.
What other advice do I have?
We use the solution's latest version.
We have a partnership with Imperva within our company.
I'd rate the solution at a nine out of ten. We've been mostly quite happy with its capabilities.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Acquisitions Leader at a healthcare company with 10,001+ employees
Reliable, and has easy backup and restore functions
Pros and Cons
- "The most important feature I have found to be the ease in how to do the backup and restores."
- "The process to upgrade from one version to another can be a lot simpler than it is currently."
What is our primary use case?
We are using this solution for backing up all of our day-to-day use data and the ability to restore it when we want. For example, when there is a catastrophe or disaster.
What is most valuable?
The most important feature I have found to be the ease in how to do the backup and restores.
What needs improvement?
The process to upgrade from one version to another can be a lot simpler than it is currently.
For how long have I used the solution?
I have been using this solution for six years.
What do I think about the stability of the solution?
When it comes to stability the solution work well.
What do I think about the scalability of the solution?
The solution in my experience has been scalable. In my organization we have approximately 10,000 users using the solution, the whole company uses it.
How was the initial setup?
The initial setup was straightforward. We have a team that does the maintenance of the solution.
What's my experience with pricing, setup cost, and licensing?
There is a license for this solution and we purchase the license annually with no additional fees.
What other advice do I have?
My advice is to follow the three, two, one backup rule, this solution is very suitable for this. Make sure you are defining your mean time for recovery of the backup, and try to see that it makes the mean time.
I rate Imperva Web Application Firewall a nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Data analyst at Kyivstar
Enhanced security with profile functionality
Pros and Cons
- "Protection is the best solution since it has profile functionality."
What is our primary use case?
I use the service for protection due to the fact that it has profile functionality.
What is most valuable?
Protection is the best solution since it has profile functionality.
Which other solutions did I evaluate?
Interesting alternatives are Akamai and some cloud solutions do exist.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: Nov 9, 2024
Flag as inappropriateSecurity Architect at a individual & family service with 1,001-5,000 employees
Stable and easy-to-manage solution with good technical support service
Pros and Cons
- "The solution is scalable."
- "It is complicated to integrate the solution's on-cloud version with other platforms."
What needs improvement?
It is complicated to integrate the solution's on-cloud version with other platforms.
For how long have I used the solution?
I have been using the solution for six years.
What do I think about the stability of the solution?
It is a stable solution.
What do I think about the scalability of the solution?
The solution is scalable. We have 20 applications hosted on its on-premises version and around five applications on mobile infrastructure. A team of three administrators manages the operations.
How are customer service and support?
The solution's technical support is good.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I have used F5 and Barracuda before. Both solutions are easy to use.
How was the initial setup?
The solution's initial setup is easy and takes two or three days to complete.
What about the implementation team?
We implemented the solution with the help of its reseller.
What other advice do I have?
The solution is stable and easy to manage. I rate it a nine out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.

Buyer's Guide
Download our free Imperva Web Application Firewall Report and get advice and tips from experienced pros
sharing their opinions.
Updated: June 2025
Product Categories
Web Application Firewall (WAF)Popular Comparisons
Prisma Cloud by Palo Alto Networks
Microsoft Azure Application Gateway
Azure Front Door
F5 Advanced WAF
Fortinet FortiWeb
Cloudflare Web Application Firewall
Imperva DDoS
Akamai App and API Protector
Azure Web Application Firewall
Radware Alteon
NGINX App Protect
Barracuda Web Application Firewall
Buyer's Guide
Download our free Imperva Web Application Firewall Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Imperva WAF vs. Barracuda: Which One is Better?
- Which Web Application Firewall (WAF) would you recommend? R&S or Imperva?
- Which lesser known firewall product has the best chance at unseating the market leaders?
- Which WAF solution would you recommend to cater to 100 to 125 concurrent sessions?
- What do you recommend for a securing Web Application?
- Fortinet vs Sophos? Help choose a NGFW solution that can replace Microsoft TMG.
- Imperva WAF vs. Barracuda: Which One is Better?
- F5 vs. Imperva WAF?
- When should companies use SSL Inspection?
- NGFW with URL Filtering vs Web Proxy