Try our new research platform with insights from 80,000+ expert users
Founder4214 - PeerSpot reviewer
Founder at a consultancy with 1-10 employees
Consultant
Mar 27, 2019
It is a one-click WAF with no effort needed, but we need more support as we go global
Pros and Cons
  • "It is a one-click WAF with no effort needed."
  • "It is Amazon. Everything is scalable. It is beyond what we need."
  • "We need more support as we go global."

What is our primary use case?

The primary use case is application security.

We are using the latest version.

How has it helped my organization?

It is a one-click WAF with no effort needed.

What is most valuable?

Protection and WAF.

What needs improvement?

We need more support as we go global.

The UI could use improvement.

Buyer's Guide
AWS WAF
January 2026
Learn what your peers think about AWS WAF. Get advice and tips from experienced pros sharing their opinions. Updated: January 2026.
881,082 professionals have used our research since 2012.

What do I think about the stability of the solution?

It is stable.

What do I think about the scalability of the solution?

It is Amazon. Everything is scalable. It is beyond what we need.

How are customer service and support?

We hardly received technical support on this product.

How was the initial setup?

It was super easy to set up. We did it with one click.

Which other solutions did I evaluate?

We chose this solution because it is cloud native Amazon.

What other advice do I have?

We have an above average security posture.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Engineera5be - PeerSpot reviewer
Engineer at a tech vendor with 501-1,000 employees
Real User
Mar 26, 2019
Integrates well with our existing AWS solution, but the UI is lacking
Pros and Cons
  • "It's simple, easy to use."
  • "The user experience, the interface, is lacking. Sometimes it's hard to find certain areas that it has alerted on."

What is our primary use case?

We use it to protect our backend services.

How has it helped my organization?

Because it integrates with the existing AWS solution, we get a lot of support without having to do much extra work. It has helped increase staff productivity and has probably saved at least one engineer, not having to have an engineer on staff for it.

What is most valuable?

  • It's simple, easy to use.
  • Integration.

What needs improvement?

The user experience, the interface, is lacking. Sometimes it's hard to find certain areas that it has alerted on. Also, more fine-tuning would be convenient.

What do I think about the stability of the solution?

We haven't had any problems with it.

What do I think about the scalability of the solution?

We haven't run into any scale issues at the moment.

How are customer service and technical support?

AWS, in general, has good support.

Which solution did I use previously and why did I switch?

We were using just the built-in Amazon intrusion detection stuff. Then we decided to go for an actual full-blown WAF. We weren't using any actual WAF before. WAF is a general solution that we knew that we needed. It's a standard security measure.

How was the initial setup?

It was relatively simple, for the integration.

What's my experience with pricing, setup cost, and licensing?

There are different scale options available for WAF.

What other advice do I have?

The integration with AWS is simple and can get you off the ground and going quickly. But you could, over time, outgrow it.

We're working on having a more mature security portfolio. This allows us to have a different tool in the belt, to measure different issues that might pop up.

I would rate the solution as a six out of ten because of its relative ease of use. However, it's not as configurable as a third-party option.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Buyer's Guide
AWS WAF
January 2026
Learn what your peers think about AWS WAF. Get advice and tips from experienced pros sharing their opinions. Updated: January 2026.
881,082 professionals have used our research since 2012.
Senior Information Security Specialist at a tech services company with 1,001-5,000 employees
Real User
Mar 24, 2019
Blocks threats to our external applications and has caught everything so far
Pros and Cons
  • "The most valuable feature is the way it blocks threats to external applications."
  • "In a future release I would like to see automation. There's no interaction between the applications and that makes it tedious. We have to do the preparation all over again for each of our other applications."

What is our primary use case?

It is our web application firewall.

How has it helped my organization?

We do have a lot of external applications which are exposed to the internet and WAF provides protection for them. We haven't seen a decrease in the mean time to respond to threats because it has caught everything.

The solution has also increased staff productivity by as much as 50 percent.

What is most valuable?

The most valuable feature is the way it blocks threats to external applications.

What needs improvement?

In a future release I would like to see automation. There's no interaction between the applications and that makes it tedious. We have to do the preparation all over again for each of our other applications.

For how long have I used the solution?

One to three years.

What do I think about the stability of the solution?

We haven't had any problems with the stability at all.

What do I think about the scalability of the solution?

Up to now, the scalability has been good.

How are customer service and technical support?

I haven't had to use technical support yet.

Which solution did I use previously and why did I switch?

Our previous solution was also a WAF but it was not a scalable environment like the cloud is. Everybody is moving to the cloud. We were stuck on an appliance in our data center and we decided to move. We went with this solution because of the stability and quick response.

How was the initial setup?

The setup was a bit complex because our environment is a bit different. It was tough but it was good in the end.

What about the implementation team?

We used a consultant for the deployment and it was a great experience with them.

What's my experience with pricing, setup cost, and licensing?

There are no costs in addition to the standard licensing fees.

What other advice do I have?

My advice is "go for it, use it."

In terms of our security program's maturity, we're just beginning so we are still like a baby. But we are trying to get all the new stuff and improve altogether.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
NetworkAf67c - PeerSpot reviewer
Network Analyst
Real User
Mar 20, 2019
Makes sure files are protected, but the solution should be more proactive in detecting threats
Pros and Cons
  • "The most valuable feature is the security, making sure that files are protected, preventing unauthorized users from accessing the system."
  • "They have to do more to improve, to innovate more features. They need to increase the security. It has to be more active in detecting threats."

What is our primary use case?

It's all about the security of the cloud system.

How has it helped my organization?

It has improved our organization a lot because before we were having problems with access management. Things have gotten better using this product. It's protecting the files. It has been the best step for us.

We are no longer having problems with unauthorized access, where somebody breaches the system or comprises documents. Nothing like that has happened over the past year that we have been using this product. We're doing well and I believe we will continue to do well with this product.

Staff productivity has been high since we started using it. It has saved 80 to 90 percent of their time in some cases.

What is most valuable?

The most valuable feature is the security, making sure that files are protected, preventing unauthorized users from accessing the system. These are the best.

What needs improvement?

I would like them to fortify the system more. In every software platform there are issues or bugs, even though presently, there aren't many known and it is running without problems.

They have to do more to improve, to innovate more features. They need to increase the security. It has to be more active in detecting threats. It's better for the system if the platform is more proactive in detecting threats immediately, so that technicians or people on the security team will know that a threat is coming in.

For how long have I used the solution?

One to three years.

What do I think about the stability of the solution?

It's stable, it's a strong system. The stability is going to be even better because they're still trying to improve on it, and they bringing out more features.

What do I think about the scalability of the solution?

Scalability is one of the features. It has to be scalable to be able to effectively secure the system.

How are customer service and technical support?

Amazon Web Services has very good technical support. Whenever you encounter a problem you just call the support team. You'll be able to walk them through the problem and then they'll solve it.

Which solution did I use previously and why did I switch?

Our company didn't have structured security controls before this. We were encountering a lot of problems when it came to security, protection of the documents and system. They restructured the whole system. This is the platform that was recommended to us. Since we started using it, it has been great.

How was the initial setup?

The initial setup was rather complex.

What about the implementation team?

Most of the time we try to use a consultant for deployment. Our experience with them has been good. They know their jobs. They try to incorporate more features, teach us how to do things. It's a learning process and they're always there to make sure that we understand the stuff. They get things going.

What's my experience with pricing, setup cost, and licensing?

It's an annual subscription. There are no additional fees beyond the standard licensing.

What other advice do I have?

Everybody handles their own platform differently. Some people love what they have but haven't necessarily experienced anything else. This platform is a good one. If you have your own platform and you think it's better, that's fine. But get a taste of this one, try it and see how it feels in terms of security.

Security has always been a problem and it will always be a problem. There's no security platform or software that is 100 percent. We don't know when a Zero-day will happen. Hackers are everywhere, they are creating things and innovating every day. As far as I am concerned right now, the platform is good. It's doing its job.

I rate the solution at six out of ten. I don't want to give them 100 percent because sometimes things happen.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
reviewer939417 - PeerSpot reviewer
IT Auditor & Compliance Officer at a tech vendor with 51-200 employees
Real User
Jan 29, 2022
Well integrated, suitable for all sized businesses, but serverless needs improvement
Pros and Cons
  • "AWS WAF has a lot of integrated features and services. For example, there are security services that can be integrated very well for our customers."
  • "The serverless product from AWS WAF could be improved. For example, they have only one serverless series, Lambda, but they should extend and improve it. Additionally, the firewall rules are not very easy to configure."

What is our primary use case?

We are using AWS WAF for business purposes for clients. We host our client's platforms on AWS WAF.

What is most valuable?

AWS WAF has a lot of integrated features and services. For example, there are security services that can be integrated very well for our customers.

What needs improvement?

The serverless product from AWS WAF could be improved. For example, they have only one serverless series, Lambda, but they should extend and improve it. Additionally, the firewall rules are not very easy to configure.

For how long have I used the solution?

I have used AWS WAF for approximately five years.

What do I think about the stability of the solution?

I have found AWS WAF to be stable.

What do I think about the scalability of the solution?

The scalability of AWS WAF is very good.

The solution can be used in small to large-sized businesses.

How are customer service and support?

The customer service has been fine, we had no issues with them. We have been satisfied.

How was the initial setup?

The setup of AWS WAF is very easy.

What's my experience with pricing, setup cost, and licensing?

The price of AWS WAF is reasonable, it is not expensive and it is not cheap.

What other advice do I have?

I would recommend this solution to others.

I rate AWS WAF a seven out of ten.

Disclosure: My company has a business relationship with this vendor other than being a customer. partner
PeerSpot user
Buyer's Guide
Download our free AWS WAF Report and get advice and tips from experienced pros sharing their opinions.
Updated: January 2026
Buyer's Guide
Download our free AWS WAF Report and get advice and tips from experienced pros sharing their opinions.