I have an intermediate level of experience with Cloudflare Web Application Firewall. My relationship with Cloudflare Web Application Firewall is that I am an implementer. I would definitely recommend others to use Cloudflare Web Application Firewall. My clients vary in size, including small, medium, and enterprise-level businesses. Overall, I rate Cloudflare Web Application Firewall an 8 or 9 out of 10.
General Manager at Centralschweizerische Kraftwerke AG
Real User
Top 20
Oct 2, 2024
I highly recommend Cloudflare Web Application Firewall due to its extensive knowledge base and ease of integration with Terraform. I'd rate the solution ten out of ten.
Senior Enterprise Security Architect at HGS - Hinduja Global Solutions
Real User
Top 10
Apr 9, 2024
If the solution is configured well enough, it has proven effective for our organization's customers in helping secure web applications against common threats. Customers must pursue the learning curve, which usually spans two to four months before fine-tuning can be implemented. Cloudflare Web Application Firewall is one of the best industry solutions. Cloudflare Web Application Firewall has been very effective in mitigating numerous potential security breaches for our various customers. The learning curve is one of the core aspects of any WAF solution. For instance, if I have a website and there are specific patterns of user access, I need to whitelist certain aspects. The learning curve is short in reality because multiple learning resources are available along with the solution. There are primarily only two manual tasks with the solution, which are monitoring and exception implementation. The solution offers impressive security and performance features compared to other solutions. The core OWASP rules of the solution identify the cyberattack techniques or attacks used by hackers and block them. The solution also has machine learning capabilities that assist in attack prediction. Cloudflare Web Application Firewall is the market leader; it has unique features that are absent in other competitor solutions. I would definitely recommend Cloudflare Web Application Firewall to other users. I would advise others, as part of the initial deployment phase, to map applications, hash libraries, and user access patterns prior to the deployment. If the aforementioned step is followed, then the solution can be up and running in a very short span after deployment; otherwise, it's a two or three-month learning curve. If you have the web application, repositories and pattern working processes, then the rule sets can be configured effortlessly. I would rate the tool a nine out of ten overall.
Learn what your peers think about Cloudflare Web Application Firewall. Get advice and tips from experienced pros sharing their opinions. Updated: December 2025.
CTO at a tech services company with 51-200 employees
Real User
Dec 13, 2023
I am using the latest version of Cloudflare Web Application Firewall. Cloudflare Web Application Firewall is deployed on the cloud in our organization. Overall, I rate Cloudflare Web Application Firewall a nine out of ten.
Typically, a larger solution is preferable, not a small one. I believe it depends on the project's financial considerations. If the project can benefit from a larger solution and the revenue generated can cover the associated costs, then we opt for that. It's not solely based on the company's size; it's about the customer's business and its specific needs. When considering the use of a web app, it's crucial to perform a comprehensive self-analysis. This analysis should focus on understanding aspects like bandwidth, connections, and content sessions. By assessing these factors, you can make informed decisions about the most suitable solution. Pricing is a significant component, as it directly impacts your service and, by extension, your business. The challenge with bandwidth is that it's not always within your control, especially when dealing with increased demands. Therefore, before choosing a web app, it's important to conduct a thorough self-analysis. Once you've identified your needs and requirements, you can seek a solution tailored to your specific circumstances. Trying to cover every possible scenario can be a daunting and costly task, so a well-informed and targeted approach is key. I would rate the solution a nine out of ten.
Solutions Architect at Amazure Technologies Private Limited
Reseller
Feb 7, 2023
To effectively use Cloudflare Web Application Firewall, it is important for a person to have an internet connection, an understanding of the internet, how the DNS works, and how websites and their administration domains function. I rate this solution a nine out of ten.
Solutions Architect at Amazure Technologies Private Limited
Reseller
Sep 16, 2022
We are a system integrator for Cloudflare. We are not on the latest update. Our last update was two or three months back. This is a good product. It's reliable and scales well. For new users, you don't require too much expertise on Cloudflare. You just have to understand a WAF. Beyond that, it is very easy to deploy and very fast to implement. I'd rate the solution eight out of ten.
Senior Security Consultant at Reliance Industries Ltd
Real User
May 31, 2022
I have not had any issues with this solution, and I would recommend it to others who are interested in using it. I would rate Cloudflare Web Application Firewall a nine out of ten. We are partners with Cisco.
Director of Platform and Information Security at Brace Software
Real User
Apr 1, 2021
I would tell potential users that once you figured out that initial part, it's straightforward. I would suggest that they look at what they need and compare the costs and management costs. There are various WAFs out there, but it really comes down to comparing the cost and how much effort it takes to deploy it and manage them. On a scale from one to ten, I would give CloudFlare WAF a solid eight.
Superintendent of Cloud Platforms at a manufacturing company with 1,001-5,000 employees
Real User
Aug 11, 2020
My advice to people who are considering Cloudflare WAF is to check service limits of other providers. Cloudflare does not really have a lot of service limits and that makes a difference. Also, look at the pricing and the pricing models carefully as other products seem to me to become more complicated as your demand scales. It is more straightforward with Cloudflare — or at least it seems to be in comparison to other providers.
Cloudflare Web Application Firewall's intuitive dashboard enables users to build powerful rules through easy clicks and also provides Terraform integration. Every request to the WAF is inspected against the rule engine and the threat intelligence curated from protecting over 27 Million websites. Suspicious requests can be blocked, challenged or logged as per the needs of the user while legitimate requests are routed to the destination, agnostic of whether it lives on-premise or in the cloud....
I have an intermediate level of experience with Cloudflare Web Application Firewall. My relationship with Cloudflare Web Application Firewall is that I am an implementer. I would definitely recommend others to use Cloudflare Web Application Firewall. My clients vary in size, including small, medium, and enterprise-level businesses. Overall, I rate Cloudflare Web Application Firewall an 8 or 9 out of 10.
The overall product rating is nine out of ten. I would definitely recommend it to other users.
On a scale from one to ten, I would rate Cloudflare WAF as an eight. I would suggest making the rate limiter functionality better.
I highly recommend Cloudflare Web Application Firewall due to its extensive knowledge base and ease of integration with Terraform. I'd rate the solution ten out of ten.
It protects public-facing URLs. That is the biggest advantage. Overall, I would rate the solution a nine out of ten.
If the solution is configured well enough, it has proven effective for our organization's customers in helping secure web applications against common threats. Customers must pursue the learning curve, which usually spans two to four months before fine-tuning can be implemented. Cloudflare Web Application Firewall is one of the best industry solutions. Cloudflare Web Application Firewall has been very effective in mitigating numerous potential security breaches for our various customers. The learning curve is one of the core aspects of any WAF solution. For instance, if I have a website and there are specific patterns of user access, I need to whitelist certain aspects. The learning curve is short in reality because multiple learning resources are available along with the solution. There are primarily only two manual tasks with the solution, which are monitoring and exception implementation. The solution offers impressive security and performance features compared to other solutions. The core OWASP rules of the solution identify the cyberattack techniques or attacks used by hackers and block them. The solution also has machine learning capabilities that assist in attack prediction. Cloudflare Web Application Firewall is the market leader; it has unique features that are absent in other competitor solutions. I would definitely recommend Cloudflare Web Application Firewall to other users. I would advise others, as part of the initial deployment phase, to map applications, hash libraries, and user access patterns prior to the deployment. If the aforementioned step is followed, then the solution can be up and running in a very short span after deployment; otherwise, it's a two or three-month learning curve. If you have the web application, repositories and pattern working processes, then the rule sets can be configured effortlessly. I would rate the tool a nine out of ten overall.
I rate Cloudflare Web Application Firewall a seven out of ten.
I am using the latest version of Cloudflare Web Application Firewall. Cloudflare Web Application Firewall is deployed on the cloud in our organization. Overall, I rate Cloudflare Web Application Firewall a nine out of ten.
Typically, a larger solution is preferable, not a small one. I believe it depends on the project's financial considerations. If the project can benefit from a larger solution and the revenue generated can cover the associated costs, then we opt for that. It's not solely based on the company's size; it's about the customer's business and its specific needs. When considering the use of a web app, it's crucial to perform a comprehensive self-analysis. This analysis should focus on understanding aspects like bandwidth, connections, and content sessions. By assessing these factors, you can make informed decisions about the most suitable solution. Pricing is a significant component, as it directly impacts your service and, by extension, your business. The challenge with bandwidth is that it's not always within your control, especially when dealing with increased demands. Therefore, before choosing a web app, it's important to conduct a thorough self-analysis. Once you've identified your needs and requirements, you can seek a solution tailored to your specific circumstances. Trying to cover every possible scenario can be a daunting and costly task, so a well-informed and targeted approach is key. I would rate the solution a nine out of ten.
I would definitely recommend using the solution. Overall, I rate the solution a nine out of ten.
Cloudflare Web Application Firewall has certain limitations for rules. I rate it a seven out of ten.
I recommend the solution to others and rate it a six out of ten.
To effectively use Cloudflare Web Application Firewall, it is important for a person to have an internet connection, an understanding of the internet, how the DNS works, and how websites and their administration domains function. I rate this solution a nine out of ten.
We are a system integrator for Cloudflare. We are not on the latest update. Our last update was two or three months back. This is a good product. It's reliable and scales well. For new users, you don't require too much expertise on Cloudflare. You just have to understand a WAF. Beyond that, it is very easy to deploy and very fast to implement. I'd rate the solution eight out of ten.
I have not had any issues with this solution, and I would recommend it to others who are interested in using it. I would rate Cloudflare Web Application Firewall a nine out of ten. We are partners with Cisco.
I would tell potential users that once you figured out that initial part, it's straightforward. I would suggest that they look at what they need and compare the costs and management costs. There are various WAFs out there, but it really comes down to comparing the cost and how much effort it takes to deploy it and manage them. On a scale from one to ten, I would give CloudFlare WAF a solid eight.
My advice to people who are considering Cloudflare WAF is to check service limits of other providers. Cloudflare does not really have a lot of service limits and that makes a difference. Also, look at the pricing and the pricing models carefully as other products seem to me to become more complicated as your demand scales. It is more straightforward with Cloudflare — or at least it seems to be in comparison to other providers.