Try our new research platform with insights from 80,000+ expert users
Cloudflare Web Application Firewall Logo

Cloudflare Web Application Firewall Reviews

Vendor: Cloudflare
4.2 out of 5
Badge Leader
Leave a review

What is Cloudflare Web Application Firewall?

Cloudflare Web Application Firewall's intuitive dashboard enables users to build powerful rules through easy clicks and also provides Terraform integration. Every request to the WAF is inspected against the rule engine and the threat intelligence curated from protecting over 27 Million websites. Suspicious requests can be blocked, challenged or logged as per the needs of the user while legitimate requests are routed to the destination, agnostic of whether it lives on-premise or in the cloud. Analytics and Cloudflare Logs enable visibility into actionable metrics for the user.

Get the Cloudflare Web Application Firewall Buyer's Guide and find out what your peers are saying about Cloudflare Web Application Firewall, Prisma Cloud by Palo Alto Networks, Microsoft Azure Application Gateway and more!
Cloudflare Web Application Firewall is the #5 ranked solution in top Web Application Firewalls. PeerSpot users give Cloudflare Web Application Firewall an average rating of 8.4 out of 10. Cloudflare Web Application Firewall is most commonly compared to Prisma Cloud by Palo Alto Networks: Cloudflare Web Application Firewall vs Prisma Cloud by Palo Alto Networks. Cloudflare Web Application Firewall is popular among the large enterprise segment, accounting for 47% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 16% of all views.
Buyer's Guide
Cloudflare Web Application Firewall
August 2025
Get the report
Helped 866,218 peers since 2012

Featured Cloudflare Web Application Firewall reviews

Read more reviews

Cloudflare Web Application Firewall mindshare

As of August 2025, the mindshare of Cloudflare Web Application Firewall in the Web Application Firewall (WAF) category stands at 7.2%, up from 6.4% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Web Application Firewall (WAF) Market Share Distribution
ProductMarket Share (%)
Cloudflare Web Application Firewall7.2%
F5 Advanced WAF10.0%
AWS WAF8.7%
Other74.1%
Web Application Firewall (WAF)

PeerResearch reports based on Cloudflare Web Application Firewall reviews

TypeTitleDate
CategoryWeb Application Firewall (WAF)Aug 29, 2025Download
ProductReviews, tips, and advice from real usersAug 29, 2025Download
ComparisonCloudflare Web Application Firewall vs F5 Advanced WAFAug 29, 2025Download
ComparisonCloudflare Web Application Firewall vs AWS WAFAug 29, 2025Download
ComparisonCloudflare Web Application Firewall vs Microsoft Azure Application GatewayAug 29, 2025Download
Suggested products
TitleRatingMindshareRecommending
Prisma Cloud by Palo Alto Networks4.21.9%98%111 interviewsAdd to research
Microsoft Azure Application Gateway3.77.9%79%48 interviewsAdd to research
 
 
Key learnings from peers

Valuable Features

Cloudflare Web Application Firewall offers valuable features like its SaaS nature with API configurability, effective OWASP and managed rulesets, ease of configuration, user-friendly interface, scalability, affordability, and straightforward installation. It excels in preventing web application attacks, provides comprehensive services under one umbrella, and delivers stable performance with fast support. Key elements include DDoS protection, caching, rate limiting, DNS setup, zero trust policy, custom rules, managed rulesets, anomaly detection, IP access rules, and bot protection.
  • "The stability of Cloudflare Web Application Firewall deserves a perfect 10 out of 10."
  • "The setup process is very simple for me."
  • "The rate limiting features and customizations in terms of URL match and applying policies are valuable to me."

Room for Improvement

Cloudflare Web Application Firewall's documentation is complex for new users, integration with AWS and Azure is challenging, and ModSecurity's version is outdated. Users find it difficult to track modified rules due to excessive rules, and reporting lacks granularity. Better integration with platforms is needed, alongside improvements in log management, latency, rate limiting, and real-time authentication. Customer support requires enhancement, especially for Indian customers, and a more user-friendly dashboard is suggested.
  • "They need to improve their support because getting a response for basic requests took around 48 hours, which is too long."
  • "The product can improve by having more multitenancy capability, which is currently not available."
  • "The product can improve by having more multitenancy capability, which is currently not available."

ROI

Users report immediate ROI from Cloudflare Web Application Firewall, with key benefits in site visibility and uptime essential for e-commerce and banking services. While it doesn't directly impact bandwidth costs, its caching system helps reduce these expenses. Determining exact savings is challenging due to fixed enterprise plan fees and multiple influencing factors. Users consistently experience ROI from its implementation.

Pricing

Cloudflare Web Application Firewall's pricing uses a subscription-based model, typically paid monthly or annually without upfront infrastructure costs. Users find its cost competitive and generally more affordable than competitors, with pricing starting at $20 and up to $200 monthly. Enterprise subscriptions offer advanced features like DDoS protection. Although some international businesses find it relatively expensive, many consider the pricing reasonable and flexible, albeit less transparent for enterprises. Support is generally included without extra charges.
  • "It is not too pricey."
  • "It starts at $20 and can easily go up to $200 monthly"
  • "Cloudflare Web Application Firewall is more affordable than other solutions."

Popular Use Cases

Cloudflare Web Application Firewall is primarily utilized as a SaaS-based firewall, securing web applications and servers, routing traffic, managing threats, and implementing proxy features. It protects against DDoS attacks and malicious traffic, enabling secure authentication and authorization. Various sectors use it, including manufacturing and banking, for comprehensive security functions and to manage customer platforms. It encompasses features like load balancing, CDN, order routing, and DNS zone configuration.

Service and Support

Cloudflare Web Application Firewall's customer service generally receives positive feedback for technical support, being responsive and helpful. Many users report satisfaction without frequent need for assistance. However, Indian users note limitations in local support, experiencing difficulty in communication. Feedback varies with some expressing dissatisfaction with customer service responsiveness, while others rate it highly, mentioning quick issue resolution and helpful documentation. Some users recommend SLA-based plans for optimal support experiences.

Deployment

Cloudflare Web Application Firewall's initial setup is frequently described as easy and straightforward, often requiring minimal personnel and taking a short time, like a few hours or days. Some face challenges due to documentation, especially solo users without enterprise support. The setup involves simple domain and configuration tasks. Advanced configurations and maintenance might require more time, but basic deployment is accessible even to those with limited technical knowledge, making it suitable for small to large entities.

Scalability

Cloudflare Web Application Firewall offers strong scalability, highly rated by various users for its ability to scale effortlessly. Many large organizations effectively utilize it, handling extensive user numbers with ease, supported by APIs for automation. While cost concerns arise, the scalability itself is frequently rated near perfect. Users highlight its capability to integrate more features as needed, and it functions reliably without constant oversight, providing round-the-clock protection.

Stability

Users are confident in the stability of Cloudflare Web Application Firewall. Many rate its stability highly, often nine or ten out of ten. The firewall is praised for its reliability, showing no crashes, bugs, or glitches. Some users mention it successfully handles DDoS attacks and offers effective filtering options. There have been rare downtimes, but they were resolved quickly. Users switching from other solutions value its stable performance and advanced security features.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our Cloudflare Web Application Firewall Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company SizeCount
Small Business11
Midsize Enterprise6
Large Enterprise6
By reviewers
By visitors reading reviews
Company SizeCount
Small Business269
Midsize Enterprise138
Large Enterprise367
By visitors reading reviews

Top industries

By visitors reading reviews
Computer Software Company
16%
Financial Services Firm
9%
Comms Service Provider
8%
Manufacturing Company
8%
Media Company
6%
Government
5%
Construction Company
4%
Educational Organization
4%
Insurance Company
4%
Retailer
4%
Healthcare Company
4%
Real Estate/Law Firm
4%
Outsourcing Company
3%
University
3%
Hospitality Company
3%
Energy/Utilities Company
3%
Non Profit
2%
Consumer Goods Company
2%
Performing Arts
2%
Legal Firm
1%
Wholesaler/Distributor
1%
Transportation Company
1%
Pharma/Biotech Company
1%
Recreational Facilities/Services Company
1%
Marketing Services Firm
1%

Compare Cloudflare Web Application Firewall with alternative products

Go!

Learn more about Cloudflare Web Application Firewall

Cloudflare Web Application Firewall was previously known as Cloudflare WAF.

Cloudflare Web Application Firewall customers

crunchbase, udacity, marketo, okcupid, zendesk

Related questions

  • 55
Which lesser known firewall product has the best chance at unseating the market leaders?
  • 54
Which WAF solution would you recommend to cater to 100 to 125 concurrent sessions?
  • 78
What do you recommend for a securing Web Application?
  • 35
Fortinet vs Sophos? Help choose a NGFW solution that can replace Microsoft TMG.
  • 40
Imperva WAF vs. Barracuda: Which One is Better?
  • 168
F5 vs. Imperva WAF?
  • 221
When should companies use SSL Inspection?
  • 404
NGFW with URL Filtering vs Web Proxy
  • 560
How does a WAF help to protect against DDoS attacks?
  • 37
What's right for me? Fortinet or Citrix?

Product Categories

Product Categories
Web Application Firewall (WAF)

Popular Comparisons

Popular Comparisons
Prisma Cloud by Palo Alto Networks vs Cloudflare Web Application Firewall Logo
Prisma Cloud by Palo Alto Networks vs Cloudflare Web Application Firewall
Microsoft Azure Application Gateway vs Cloudflare Web Application Firewall Logo
Microsoft Azure Application Gateway vs Cloudflare Web Application Firewall
Azure Front Door vs Cloudflare Web Application Firewall Logo
Azure Front Door vs Cloudflare Web Application Firewall
F5 Advanced WAF vs Cloudflare Web Application Firewall Logo
F5 Advanced WAF vs Cloudflare Web Application Firewall
AWS WAF vs Cloudflare Web Application Firewall Logo
AWS WAF vs Cloudflare Web Application Firewall
Fortinet FortiWeb vs Cloudflare Web Application Firewall Logo
Fortinet FortiWeb vs Cloudflare Web Application Firewall
NetScaler vs Cloudflare Web Application Firewall Logo
NetScaler vs Cloudflare Web Application Firewall
Imperva Web Application Firewall vs Cloudflare Web Application Firewall Logo
Imperva Web Application Firewall vs Cloudflare Web Application Firewall
Akamai App and API Protector vs Cloudflare Web Application Firewall Logo
Akamai App and API Protector vs Cloudflare Web Application Firewall
Azure Web Application Firewall vs Cloudflare Web Application Firewall Logo
Azure Web Application Firewall vs Cloudflare Web Application Firewall
Radware Alteon vs Cloudflare Web Application Firewall Logo
Radware Alteon vs Cloudflare Web Application Firewall
Fastly vs Cloudflare Web Application Firewall Logo
Fastly vs Cloudflare Web Application Firewall
NGINX App Protect vs Cloudflare Web Application Firewall Logo
NGINX App Protect vs Cloudflare Web Application Firewall
Radware Cloud WAF Service vs Cloudflare Web Application Firewall Logo
Radware Cloud WAF Service vs Cloudflare Web Application Firewall
Check Point CloudGuard WAF vs Cloudflare Web Application Firewall Logo
Check Point CloudGuard WAF vs Cloudflare Web Application Firewall
See all alternatives
 
Cloudflare Web Application Firewall Reviews Summary
Author infoRatingReview Summary
IT Manager at Amla Commerce4.0Cloudflare Web Application Firewall effectively protects our global sites from attackers with features like WAF, rate limiter, and bot protection. Despite its benefits, support response times are slow. I've observed a positive return on investment with this solution.
Network Architect at a computer software company with 11-50 employees4.5I use Cloudflare Web Application Firewall for securing web apps and DDoS protection, valuing its rate limiting, custom rules, and operational manageability. However, it needs more multitenancy features. I prefer Cloudflare and also use Azure Application Gateway.
Senior Enterprise Security Architect at HGS - Hinduja Global Solutions4.5As a senior enterprise architect, I utilize Cloudflare Web Application Firewall for DDoS protection and data injection security. Although it features a vast signature repository, the learning curve is lengthy. Improvements in AI integration and web filtering are needed.
Head of Software Development at Obase4.0No summary available
Senior Software Engineer at FalconX4.0I primarily use Cloudflare Web Application Firewall for routing and monitoring purposes. It's easy to set up, supports caching for static content, and stays updated on security vulnerabilities. However, I've noticed some latency issues that could be improved.
Information Security Lead - Blue Team at FinAccel Pte Ltd.3.5I use Cloudflare Web Application Firewall to protect applications from DDoS attacks. While it's affordable and cloud-native, it lacks port forwarding and additional customer support channels like WhatsApp. I chose it over F5 NGINX, which doesn't support cloud-native environments.
Cloud Business Developer at GWS Cloud4.5I'm highly satisfied with Cloudflare Web Application Firewall because it's user-friendly, enabling quick issue identification and solution deployment. However, improvements are needed based on customer requirements. It efficiently resolves our problems, providing necessary features.
Head of Cloud & Cyber Security Services (Garaj) at a comms service provider with 1,001-5,000 employees4.5I'm using Cloudflare Web Application Firewall for managing customers on our self-service platform and for reselling. Its standout feature is integration with Cloud Suite. However, improvements in log management and better communication about free features are needed.