No more typing reviews! Try our Samantha, our new voice AI agent.

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

AWS WAF excels in blocking threats to external applications and offers an extra layer of security to web applications.
This service is scalable and cloud-native, enabling seamless integration with AWS services.
AWS WAF offers simplicity in setup and configuration, allowing for deployment in just a few minutes.
The tool's ability to filter and protect against various cyber attacks, including SQL injections and DDoS attacks, is highly valuable.
AWS WAF supports customization, allowing users to create specific rules for IP addresses, geographical locations, and HTTP headers.

CONS

Users emphasize the need for AWS WAF to enhance its automation capabilities, especially in rule management, to reduce manual efforts.
The current security features of AWS WAF may not be sufficient to combat evolving threats like DDoS and should be improved with more advanced capabilities.
There is feedback that AWS WAF's pricing structure is complex and could be more intuitive to better assist users in cost management.
AWS WAF should integrate AI or machine learning for real-time threat detection and proactive security measures.
There are calls for AWS WAF to expand compatibility with third-party services and improve managed rule sets to enhance its protective capabilities.
 

AWS WAF Pros review quotes

Azam S M - PeerSpot reviewer
Infrastructure Lead at Danat Fz LLC
Oct 9, 2025
The biggest benefit of AWS WAF for us is to filter malicious requests, so we can protect our environment and application from malicious actors.
Eucharia Okafor - PeerSpot reviewer
DevOps Engineer at a tech vendor with 1,001-5,000 employees
Dec 22, 2025
AWS WAF has helped to strengthen the security of my environment; it has also helped to improve the posture of our application, prevent all DDoS attacks and unnecessary traffic and SQL injection that is reducing the performance of our application.
reviewer1340643 - PeerSpot reviewer
Security Engineer at a computer software company with 1,001-5,000 employees
Apr 8, 2025
Some valuable features of AWS WAF include its seamless integration and ease of orchestration within the AWS platform.
Learn what your peers think about AWS WAF. Get advice and tips from experienced pros sharing their opinions. Updated: May 2026.
893,221 professionals have used our research since 2012.
Abdalla Kenawy - PeerSpot reviewer
AWS DevOps SRE/Infrastructure Engineer at Capgemini
Oct 30, 2024
The automation of blocking for security attacks is valuable, with AWS applying rate limiting.
Kavin Kalaiarasu - PeerSpot reviewer
Security Analyst at M2P Fintech
Jan 6, 2025
The cloud-native nature of AWS is crucial since most of our workload is in AWS, making AWS WAF native to Amazon Web Services.
EN
OCI/AWS Consultant at a government with 11-50 employees
Nov 11, 2024
AWS WAF acts as a barrier, analyzing HTTP communications between external users and web applications.
reviewer2143125 - PeerSpot reviewer
Director of Security Architecture at a healthcare company with 10,001+ employees
Jul 23, 2024
We integrate AWS WAF with several platforms within cloud hosting and other security solutions and provisions in our business. Regarding AI, it's been around for about 20 years, so it's not new. It's just a new buzzword. I've been in security for 30 years and remember using AI when I started 25-30 years ago. We have multiple forms of AI within our business.
Sita Thomas - PeerSpot reviewer
Associate Vice President - Engineering at Fedo.ai
Nov 27, 2024
One of the most valuable features of AWS WAF is its ability to filter web app traffic, allowing us to specify conditions such as IP addresses and HTTP headers.
AshishGautam - PeerSpot reviewer
IT Project Manager at Rajiv Gandhi Cancer Institute In India
Dec 27, 2023
The product's initial setup phase was very simple.
Abdul Qayyum - PeerSpot reviewer
Software Architect at Vodworks
Apr 18, 2024
The most valuable feature of AWS WAF is its highly configurable rules system.
 

AWS WAF Cons review quotes

Azam S M - PeerSpot reviewer
Infrastructure Lead at Danat Fz LLC
Oct 9, 2025
One of the things that should be improved in AWS WAF is the monitoring; we need to identify the requests and where they are coming from.
Eucharia Okafor - PeerSpot reviewer
DevOps Engineer at a tech vendor with 1,001-5,000 employees
Dec 22, 2025
AWS WAF can be improved if the dashboard is enhanced in such a way that everything will be displayed automatically without you going in there to see what is going on.
reviewer1340643 - PeerSpot reviewer
Security Engineer at a computer software company with 1,001-5,000 employees
Apr 8, 2025
AWS WAF's signature sets have room for improvement due to false positives.
Learn what your peers think about AWS WAF. Get advice and tips from experienced pros sharing their opinions. Updated: May 2026.
893,221 professionals have used our research since 2012.
Abdalla Kenawy - PeerSpot reviewer
AWS DevOps SRE/Infrastructure Engineer at Capgemini
Oct 30, 2024
Compatibility and integration functionalities, especially with services like Kafka for event-driven messaging, could be better.
Kavin Kalaiarasu - PeerSpot reviewer
Security Analyst at M2P Fintech
Jan 6, 2025
The dashboarding could be improved, and the default metrics provided by AWS WAF could be upgraded.
EN
OCI/AWS Consultant at a government with 11-50 employees
Nov 11, 2024
There is a lot of innovation talk, however, implementation might be lacking.
reviewer2143125 - PeerSpot reviewer
Director of Security Architecture at a healthcare company with 10,001+ employees
Jul 23, 2024
I'd like to see improvements in its usability and functionality. I'm also concerned about being too dependent on the cloud provider's WAF version. For security, using multiple vendors and not putting all our eggs in one basket is better.
Sita Thomas - PeerSpot reviewer
Associate Vice President - Engineering at Fedo.ai
Nov 27, 2024
I find the documentation somewhat complex to implement during the initial stages.
AshishGautam - PeerSpot reviewer
IT Project Manager at Rajiv Gandhi Cancer Institute In India
Dec 27, 2023
The area of reporting in the product needs to have a proper format.
Abdul Qayyum - PeerSpot reviewer
Software Architect at Vodworks
Apr 18, 2024
One area for improvement in AWS WAF could be the limitation on the number of rules, particularly those from third-party sources, within the free tier.