No more typing reviews! Try our Samantha, our new voice AI agent.

AWS WAF vs SiteLock comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 3, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

AWS WAF
Ranking in Web Application Firewall (WAF)
7th
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
62
Ranking in other categories
No ranking in other categories
SiteLock
Ranking in Web Application Firewall (WAF)
37th
Average Rating
6.6
Reviews Sentiment
8.1
Number of Reviews
3
Ranking in other categories
Static Application Security Testing (SAST) (46th), CDN (16th), Distributed Denial-of-Service (DDoS) Protection (27th)
 

Mindshare comparison

As of November 2026, in the Web Application Firewall (WAF) category, the mindshare of AWS WAF is 4.0%, down from 6.2% compared to the previous year. The mindshare of SiteLock is 1.8%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Web Application Firewall (WAF) Mindshare Distribution
ProductMindshare (%)
AWS WAF4.0%
SiteLock1.8%
Other94.2%
Web Application Firewall (WAF)
 

Featured Reviews

reviewer2849304 - PeerSpot reviewer
Senior Cloud Security at a healthcare company with 5,001-10,000 employees
Centralized web firewalling has reduced our attack surface and protects multi‑cloud applications
AWS WAF can be improved by not being too sensitive for some data because with some XML, it is sometimes very sensitive. When we upload videos or photos, it is flagged as a malicious pattern, and sometimes it is not sensitive enough because some query patterns that have the capability to perform malicious actions still result in false positives from AWS. It would be better for AWS WAF if it not only had logs but also specific payloads or something that directly included the specific logs so we can have more detail in our analysis. I think it should be better if they improve their capabilities in reducing the attack surface and also have better visibility for OWASP top 10 web applications and the API. Regarding AWS WAF's AI capabilities, its governance and security are very good because our attack surface is mostly reduced. The new dashboard is a bit complicated; it is easier for non-technical users, but for technical professionals, it is sometimes confusing. While the security itself is good and the governance is good, I think it needs to improve the UI or the flow itself. The accuracy and reliability of AWS WAF's output is better than others. With the free version, it has a good filter with the attack surface and the reliability is good, but sometimes we need to adjust. With the free version, we also have to pay some amount of money if the number exceeds the default provided by AWS.
it_user723534 - PeerSpot reviewer
Guitarist at a media company with self employed
It's not easy to get out once you're in
Sitelock may perform a useful service, but be wary of giving them your credit card information. When you sign on for the paid service, Sitelock: * Hides (makes it difficult to find) that they default the auto-renew (you can't sign up without agreeing to have them automatically bill your credit card every year). * Hides (makes it difficult to find) how to stop auto-renew: * You can't just stop auto-renew from your billing panel, the way you can with reputable businesses. * You have to hunt their website for a link (in extremely small font) to the page which contains instructions for cancelling. * When you get to that page, turns out it's the 5000+ word "Terms of Service" document, which you have to scour to find a phone number. Then, you have to call and get put on hold (or if you like, they will call you back three days later). Once you finally get through, you have to jump through a lot of security hoops. All of the above, just to cancel the service. Their product may or may not be OK, but be forewarned that with Sitelock, it's not easy to get out once you're in.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The interface is good."
"As a basic WAF, it's better than having nothing, so if you need something simple out of the box with default features, AWS WAF is good."
"AWS has flexibility in terms of WAF rules."
"The security firewall plus the features that protect against database injections or scripting,"
"We do have a lot of external applications which are exposed to the internet and WAF provides protection for them."
"The stability of AWS WAF is valuable."
"We preferred the product based on its cost. AWS WAF is an out-of-the-box solution and integrates with the AWS services that we use. It's natively integrated with AWS."
"The most valuable feature of AWS WAF is its highly configurable rules system."
"Not only did SiteLock's website scanner find the issue with my website, but with SiteLock I was able to implement a security system to prevent future breaches."
"It seems to provide a bit of useful information on website health."
 

Cons

"When users choose the free service, there isn't great support available to them."
"For now, there is no feature to protect against attack of the bad bots"
"The solution could be more reliable."
"The product could be improved by expanding the weightage units of rules we have when writing policy."
"We should be able to do proper whitelisting."
"We need more support as we go global."
"The issue with AWS WAF is that the rule structure is very complicated and it is very hard to maintain."
"In a future release I would like to see automation. There's no interaction between the applications and that makes it tedious. We have to do the preparation all over again for each of our other applications."
"Sitelock may perform a useful service, but be wary of giving them your credit card information."
 

Pricing and Cost Advice

"AWS WAF has reasonable pricing."
"It's an annual subscription."
"The product’s pricing is reasonable."
"The pricing should be more affordable, especially as it pertains to small clients."
"It's quite affordable. It's in the middle."
"AWS WAF costs $5 monthly plus $1 for the rule. It's cheap, cost-wise. It's worth the money."
"You need an additional AWS subscription for this product if you are buying a managed tool."
"AWS WAF has reasonable pricing."
"You can't just stop auto-renew from your billing panel, the way you can with reputable businesses."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
920,929 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Manufacturing Company
9%
Comms Service Provider
8%
Outsourcing Company
7%
Construction Company
16%
Comms Service Provider
14%
Manufacturing Company
14%
Transportation Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business22
Midsize Enterprise12
Large Enterprise28
No data available
 

Questions from the Community

What are the limitations of AWS WAF vs alternative WAFs?
Hi Varun, I have had experienced with several WAF deployments and deep technical assessments of the following: 1. Imperva WAF 2. F5 WAF 3. Polarisec Cloud WAF Typical limitations on cloud WAF is t...
How does AWS WAF compare to Microsoft Azure Application Gateway?
Our organization ran comparison tests to determine whether Amazon’s Web Service Web Application Firewall or Microsoft Azure Application Gateway web application firewall software was the better fit ...
What is your experience regarding pricing and costs for AWS WAF?
AWS WAF is affordable; it depends on the number of rules you apply. The licensing cost for AWS WAF is just pay-as-you-go; it is a service-based model.
Ask a question
Earn 20 points
 

Also Known As

AWS Web Application Firewall
No data available
 

Overview

 

Sample Customers

eVitamins, 9Splay, Senao International
galaxyguitar.com, robertasinc.com, indiarunning.com, comprarenpr.com, idbasolutions.com, newgrip.com
Find out what your peers are saying about AWS WAF vs. SiteLock and other solutions. Updated: September 2026.
920,929 professionals have used our research since 2012.