Try our new research platform with insights from 80,000+ expert users

Arkose vs Imperva Application Security Platform comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 21, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Arkose
Ranking in Bot Management
9th
Average Rating
10.0
Reviews Sentiment
6.5
Number of Reviews
1
Ranking in other categories
Email Security (24th), Anomaly Detection Tools (5th)
Imperva Application Securit...
Ranking in Bot Management
1st
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
133
Ranking in other categories
CDN (4th), Web Application Firewall (WAF) (4th), Distributed Denial-of-Service (DDoS) Protection (4th), API Security (2nd)
 

Mindshare comparison

As of January 2026, in the Bot Management category, the mindshare of Arkose is 3.3%, up from 2.8% compared to the previous year. The mindshare of Imperva Application Security Platform is 13.1%, down from 20.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Bot Management Market Share Distribution
ProductMarket Share (%)
Imperva Application Security Platform13.1%
Arkose3.3%
Other83.6%
Bot Management
 

Featured Reviews

Vijay Rajput - PeerSpot reviewer
Senior Software Engineer at Robosoft Technologies
Provide different types of challenges to secure way to communicate tokens and good for multi-platform or device-supported application
I would recommend to use it if someone is interested in using Arkose for the first time. You provide authentication when a user types their username and password on your website or mobile app. But, you also provide an extra layer of security with Arkose by using an extra token. We can use it on websites, at least. For mobile, people use authentication with Google or phone numbers. It's authenticated by OTP. Google and Apple already provide default sign-ins, so there's no need for Arkose on mobile unless you use custom email IDs and passwords without SSO. You can use it on websites to create custom fields for registration and login. The documentation is also good. Maybe there is room for improvement on the backend side. But for usability and implementation, it would be a ten. I didn't face any issues when I implemented it in our applications.
reviewer1247523 - PeerSpot reviewer
Head of Sales Services Department at a comms service provider with 51-200 employees
Solution ensures website availability and proactive threat mitigation
Over the seven years, the most valuable features of Imperva DDoS that I have found are related to DDoS attacks, which are a group of attacks, and not all of them can be resolved on the endpoint level before the website. Using the web firewall before the website is a common use case to protect against malicious requests to the website. I have utilized Imperva's Intelligent Traffic Filtering feature. This feature helps me understand how the attack is progressing and what is happening inside the requests to our website. It allows me to granularly grant or deny access to certain parts of our website. This helps when we know our customers and the types of requests that can be sent from them, enabling us to block some malicious requests. Imperva DDoS has User Behavior Analytics and Threat Intelligence on its board, and this helps us to be protected proactively. Imperva DDoS connects to its database of threats, storing whole information about attacks all over the world in one simple engine. Everyone can use this feature, which can connect to this engine and get information about what is going on at the world level. That is the way to be protected at the company's level. The integration capabilities of Imperva DDoS are very easy and simple. We can run it in 2 hours.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I also like that they challenge crawling in CAPTCHA for mobile. This is good compared to the traditional way."
"The compliance is the most valuable aspect."
"The solution is cloud-based and offers us good uptime. It has combined web and API security. Therefore, with one license, you access both application security and also API security."
"Imperva monitors all traffic, even customer access, to the web application. Then, Imperva uses features like signatures to identify attacks like cross-site scripting or SQL injection."
"Technical support was very helpful."
"Simplifies putting everything in code."
"The solution can be configured in just a couple of minutes."
"It has threat intelligence and we are using Incapsula. With threat intelligence, we can separate HTTP and HTTPS traffic. We can use Incapsula to send all the threat intelligence to the WAF."
"It fits our requirements, as well as our budget."
 

Cons

"Arkose need to provide something for testing."
"The salespeople tend to exaggerate its capabilities, which can cost you money if you don't verify the information."
"An improvement for Imperva WAF would be to reduce the number of false positives and create more strong use cases based on AI/ML or behavioral analytics."
"The rules surrounding the making of web applications could be improved."
"Imperva DDoS does not provide version control."
"It would be nice to have more security control over mobile applications so I would suggest adding more mobile security features. It would also be beneficial to see improvements in regards to interface bandwidth performance, CPU time, and RAM size. Learning capability of the device is quite weak."
"The tool needs to include artificial intelligence and machine learning. It also needs to improve profiling."
"The support for the on-premises version needs improvement."
"The signature updates could be faster. Sometimes we have to upload signatures to the Imperva portal for checking and analysis before we can use them."
 

Pricing and Cost Advice

Information not available
"The tool's pricing is good."
"Varies depending on the needs of the customer."
"It is a very expensive solution. The price is very high. A lot of customers tell us that they would love to use Imperva more. I have some customers who have 50 websites, but they have only 10 websites on Imperva because of the price. They would love to have all their websites running through Imperva, but they can't. They have to choose the more critical websites to protect because the price is very high. It is a very good product, but it is too expensive. If you buy a plan for 20 megabytes and you don't consume all of your 20 megabytes, it is okay, but if you consume more, you are charged for the superior traffic."
"The pricing is somewhat expensive. It is actually a huge investment when compared to other countries."
"We are satisfied with the pricing."
"I rate the product price a four on a scale of one to ten, where one is a low price, and ten is a high price."
"The price of Imperva Web Application Firewalls is expensive compared to others."
"Pricing could be more competitive."
report
Use our free recommendation engine to learn which Bot Management solutions are best for your needs.
881,082 professionals have used our research since 2012.
 

Comparison Review

it_user68487 - PeerSpot reviewer
Security Expert with 51-200 employees
Nov 6, 2013
CloudFlare vs Incapsula: Web Application Firewall
CloudFlare vs Incapsula: Round 2 Web Application Firewall Comparative Penetration Testing Analysis Report v1.0 Summary This document contains the results of a second comparative penetration test conducted by a team of security specialists at Zero Science Lab against two cloud-based Web…
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business83
Midsize Enterprise25
Large Enterprise61
 

Questions from the Community

What needs improvement with Arkose?
Arkose need to provide something for testing. Maybe some test accounts or testing features. For example, I need to check our Arkose token fully, but sometimes it doesn't appear. Even if we are sett...
What is your primary use case for Arkose?
The main use case of Arkose was for fraud prevention. But we also used secure connections between servers using keys. Arkose provides secret and private keys. When we hit a request, we pass those k...
Which Web Application Firewall (WAF) would you recommend? R&S or Imperva?
Imperva is a strong choice, given their security focus and ongoing R&D into the product in areas such as bot management.
What do you like most about Imperva Incapsula?
We use Imperva DDoS to stop DDoS attacks and reduce the amount of unwanted queries against web services or web scraping.
What is your experience regarding pricing and costs for Imperva DDoS?
The pricing, setup costs, and licensing of Imperva DDoS are reasonable for the amount of technical capabilities provided. I would rate the pricing of Imperva DDoS as five, where one is very cheap a...
 

Also Known As

Arkose Email Intelligence, Arkose Bot Manager
Imperva Bot Management, Imperva Web Application Firewall, Imperva API Security
 

Overview

 

Sample Customers

Information Not Available
Hitachi, BNZ, Bitstamp, Moz, InnoGames, BTCChina, Wix, LivePerson, Zillow and more.
Find out what your peers are saying about Imperva, Akamai, Cloudflare and others in Bot Management. Updated: January 2026.
881,082 professionals have used our research since 2012.