No more typing reviews! Try our Samantha, our new voice AI agent.

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

AWS WAF is highly valued for its ease of configuration and deployment, with straightforward initial setup and cloud-native integration.
The scalability and flexibility of AWS WAF are significant advantages, as it can automatically scale according to requirements and integrate with multiple AWS services.
AWS WAF offers robust security features, providing protection against threats like SQL injection and scripting attacks, which enhances overall security posture.
The customizable and highly configurable rules system in AWS WAF allows precise management of web application traffic, including geolocation-based access restrictions.
Customers appreciate the pay-as-you-go billing model of AWS WAF, allowing for cost-effective use without upfront payments or subscriptions.

CONS

AWS WAF must provide more features and improve security, including adding better bot and DDoS protection.
Pricing and cost management must be more intuitive, especially for smaller clients and businesses without technical expertise.
Technical support could be more responsive, knowledgeable, and user-friendly compared to other vendors.
Automation capabilities need improvement to reduce manual efforts in configuring rules and policy management.
Comprehensive and up-to-date documentation is necessary to avoid reliance on support and community forums.
 

AWS WAF Pros review quotes

Azam S M - PeerSpot reviewer
Infrastructure Lead at Danat Fz LLC
Oct 9, 2025
The biggest benefit of AWS WAF for us is to filter malicious requests, so we can protect our environment and application from malicious actors.
Eucharia Okafor - PeerSpot reviewer
DevSecOps Engineer at a tech vendor with 1,001-5,000 employees
Dec 22, 2025
AWS WAF has helped to strengthen the security of my environment; it has also helped to improve the posture of our application, prevent all DDoS attacks and unnecessary traffic and SQL injection that is reducing the performance of our application.
reviewer2849304 - PeerSpot reviewer
Senior Cloud Security at a healthcare company with 5,001-10,000 employees
Jun 5, 2026
AWS WAF has positively impacted our organization by improving our defense from our WAF firewalling the web application, including production and non-production environments.
Learn what your peers think about AWS WAF. Get advice and tips from experienced pros sharing their opinions. Updated: June 2026.
900,644 professionals have used our research since 2012.
Shashank N - PeerSpot reviewer
Security Engineer Dev Sec Ops at a outsourcing company with 1,001-5,000 employees
May 10, 2026
The initial setup is easy.
reviewer1340643 - PeerSpot reviewer
Security Engineer at a computer software company with 1,001-5,000 employees
Apr 8, 2025
Some valuable features of AWS WAF include its seamless integration and ease of orchestration within the AWS platform.
Abdalla Kenawy - PeerSpot reviewer
AWS DevOps SRE/Infrastructure Engineer at Capgemini
Oct 30, 2024
The automation of blocking for security attacks is valuable, with AWS applying rate limiting.
Kavin Kalaiarasu - PeerSpot reviewer
Security Analyst at M2P Fintech
Jan 6, 2025
The cloud-native nature of AWS is crucial since most of our workload is in AWS, making AWS WAF native to Amazon Web Services.
EN
OCI/AWS Consultant at a government with 11-50 employees
Nov 11, 2024
AWS WAF acts as a barrier, analyzing HTTP communications between external users and web applications.
reviewer2143125 - PeerSpot reviewer
Director of Security Architecture at a healthcare company with 10,001+ employees
Jul 23, 2024
We integrate AWS WAF with several platforms within cloud hosting and other security solutions and provisions in our business. Regarding AI, it's been around for about 20 years, so it's not new. It's just a new buzzword. I've been in security for 30 years and remember using AI when I started 25-30 years ago. We have multiple forms of AI within our business.
Sita Thomas - PeerSpot reviewer
Associate Vice President - Engineering at Fedo.ai
Nov 27, 2024
One of the most valuable features of AWS WAF is its ability to filter web app traffic, allowing us to specify conditions such as IP addresses and HTTP headers.
 

AWS WAF Cons review quotes

Azam S M - PeerSpot reviewer
Infrastructure Lead at Danat Fz LLC
Oct 9, 2025
One of the things that should be improved in AWS WAF is the monitoring; we need to identify the requests and where they are coming from.
Eucharia Okafor - PeerSpot reviewer
DevSecOps Engineer at a tech vendor with 1,001-5,000 employees
Dec 22, 2025
AWS WAF can be improved if the dashboard is enhanced in such a way that everything will be displayed automatically without you going in there to see what is going on.
reviewer2849304 - PeerSpot reviewer
Senior Cloud Security at a healthcare company with 5,001-10,000 employees
Jun 5, 2026
AWS WAF can be improved by not being too sensitive for some data because with some XML, it is sometimes very sensitive.
Learn what your peers think about AWS WAF. Get advice and tips from experienced pros sharing their opinions. Updated: June 2026.
900,644 professionals have used our research since 2012.
Shashank N - PeerSpot reviewer
Security Engineer Dev Sec Ops at a outsourcing company with 1,001-5,000 employees
May 10, 2026
The issue with AWS WAF is that the rule structure is very complicated and it is very hard to maintain.
reviewer1340643 - PeerSpot reviewer
Security Engineer at a computer software company with 1,001-5,000 employees
Apr 8, 2025
AWS WAF's signature sets have room for improvement due to false positives.
Abdalla Kenawy - PeerSpot reviewer
AWS DevOps SRE/Infrastructure Engineer at Capgemini
Oct 30, 2024
Compatibility and integration functionalities, especially with services like Kafka for event-driven messaging, could be better.
Kavin Kalaiarasu - PeerSpot reviewer
Security Analyst at M2P Fintech
Jan 6, 2025
The dashboarding could be improved, and the default metrics provided by AWS WAF could be upgraded.
EN
OCI/AWS Consultant at a government with 11-50 employees
Nov 11, 2024
There is a lot of innovation talk, however, implementation might be lacking.
reviewer2143125 - PeerSpot reviewer
Director of Security Architecture at a healthcare company with 10,001+ employees
Jul 23, 2024
I'd like to see improvements in its usability and functionality. I'm also concerned about being too dependent on the cloud provider's WAF version. For security, using multiple vendors and not putting all our eggs in one basket is better.
Sita Thomas - PeerSpot reviewer
Associate Vice President - Engineering at Fedo.ai
Nov 27, 2024
I find the documentation somewhat complex to implement during the initial stages.