Try our new research platform with insights from 80,000+ expert users

Barracuda Web Application Firewall vs Fortinet FortiWeb comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Barracuda Web Application F...
Ranking in Web Application Firewall (WAF)
17th
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
46
Ranking in other categories
No ranking in other categories
Fortinet FortiWeb
Ranking in Web Application Firewall (WAF)
1st
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
122
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of February 2026, in the Web Application Firewall (WAF) category, the mindshare of Barracuda Web Application Firewall is 2.0%, up from 2.0% compared to the previous year. The mindshare of Fortinet FortiWeb is 7.8%, down from 8.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Web Application Firewall (WAF) Market Share Distribution
ProductMarket Share (%)
Fortinet FortiWeb7.8%
Barracuda Web Application Firewall2.0%
Other90.2%
Web Application Firewall (WAF)
 

Featured Reviews

Shahzad Abid - PeerSpot reviewer
Director Information Technology at College of Physicians & Surgeons Pakistan
Has protected our legacy applications effectively but has required constant manual filtering due to false positives
I assess the effectiveness of the machine learning-driven threat detection in Barracuda Web Application Firewall as sometimes behaving abnormally, often showing me false positive attacks, so I have to fix these attacks from time to time. From a stability point of view, I would definitely rate Barracuda Web Application Firewall a seven out of ten. There is definitely some room for improvement; nothing is perfect in the world. I am not satisfied with the technical support from Barracuda. I am somewhat disappointed with the technical support that I have received so far. Whenever I generate a ticket for my problem, it goes to the Indian support team, and they all the time start with the most junior team member, consuming all my precious time. At the end, I have to close that ticket without any satisfactory solution. I have complained that they should shift my support to any other region because I don't need Indian support; they are simply pathetic and not up to mark. To improve Barracuda Web Application Firewall, customers should be given ongoing training opportunities regarding the product and its features. I am not familiar with many features that are available, only using those which are necessary for my applications. I believe Barracuda must provide clearer product information or training sessions to make it more user-friendly, as sometimes its interface can be rigid and lacking in helpful resources or user tutorials about its features. For it to get closer to a ten, I think advanced reporting is missing because, as I mentioned earlier, there are many false positive events being recorded. Often, when I analyze these attacks, they turn out to be genuine customers or users interacting with my product, but Barracuda tags them as attackers. Reducing false positives must be a priority.
HameedAhmed - PeerSpot reviewer
Joint Director at PAA
Security threats have been reduced through seamless deployment and strong integration with other tools
I have used Fortinet FortiWeb's integration features. We have easily integrated all of the applications with the product. Most of the applications we are using are in-house built. My technical team is looking after the best features. I have not used it extensively for maybe two and a half years. I have been involved in the installation, but I am not actually using the product. I work with it from time to time but not extensively. I would assess Fortinet FortiWeb's adaptive machine learning and artificial intelligence as having new patches installed regarding artificial intelligence, but when we bought it, I think the learning feature was there. Now they have installed artificial intelligence features through patches. We have a complete portfolio of Fortinet in our organization, including FortiMail, Fortinet FortiWeb, and FortiGate, along with multi-factor authentication. All of the products are from Fortinet. Fortinet tools integrate with each other and work in conjunction. I think Fortinet FortiWeb has helped us meet regulatory compliance because we are not a regulatory organization, but our sister organization is regulatory. We have regulatory compliance with the International Civil Aviation Authority, whose audit teams have checked our data center and these security products, and they are satisfied with us. The question about leveraging Fortinet FortiWeb's automated policy management does not pertain to my domain because I am not so technical, but I am in a management role now. My engineer is more technical than me. I would rate this product an eight point five out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The product's advanced bot and threat protection capabilities are valuable."
"Parameter Protection is a valuable feature."
"The product has fantastic support services."
"The solution has been quite stable. It's reliable."
"The volumetric DDoS defense is very good because I had a problem with a lot of volumetric DDoS attacks on my servers. After using Barracuda, those attacks have stopped and all the traffic is going smoothly to my servers and the system is working really well."
"The most valuable features of Barracuda Web Application Firewall include advanced bot protection, DDoS protection, and addressing the top ten vulnerabilities."
"Data leak prevention is very important and ensures protection against attacks."
"Since implementing Barracuda, I sleep smoothly knowing I have protection."
"It is a good product. We have just blocked everything coming from some geographical locations or certain countries, and it has been working very efficiently when I look at logs, events, and incidents generated from the system. It is generating very good analytic reports about it. This is the most valuable thing about this solution. It has load balancing and almost everything that a web application firewall needs. It is very flexible and easy to learn and configure. It can be easily learned and configured by using the information available on different channels such as YouTube."
"The most valuable features in Fortinet FortiWeb are sandboxing and threat prevention."
"Deployment can be straightforward"
"The product is easy to configure."
"The ease of configuration is valuable. We have Azure WAF, we have OCI WAF, and we also have Cloud Armor for GCP, but their configuration isn't very easy. It's pretty simple in FortiWeb, and we can enable or configure whatever we want."
"The solution is stable."
"The most valuable features are support and security."
"The solution has a good sandbox feature."
 

Cons

"We encountered a few glitches while implementing API security features into the product."
"The solution needs to leverage some additional features to a broader scale of software-defined networks."
"The solution could use more reports."
"As a service, Barracuda needs to host in Saudi Arabia, as they currently don't have this functionality."
"There's potential for improvement in the platform's CMS integration."
"I think the main area for improvement in this product is learning it, as can be seen when comparing it to the F5 web application firewall. F5 has a very powerful learning phase when you start using your web application firewall against your site. Barracuda has something like this, but not with the same functionality from my point of view."
"Barracuda Web Application Firewall lacks some of the more specified and structured features offered by solutions like Tenable."
"While the UI is good, it can get a little bit complicated."
"New releases and old releases have some bugs, some features do not work as good as we want but every new release the Fortinet team fixes up problems."
"FortiWeb needs to have support for the newest technology being used in web applications."
"The GUI could be better. It's limited."
"We would like to know more about the integration with the hardware or security products, such as Gemalto, because we need to move to that point."
"The initial setup in our data center was somewhat complex."
"We also need configuration settings that indicate the advantages or disadvantages of enabled features."
"We have encountered issues with webhooks and management of FortiWeb Web Application Firewall's on-premise version."
"The solution is rather complicated. If you know what to do, it's not bad, but it's complicated for a first time user to configure the solution. What I'd like to improve are the custom signatures."
 

Pricing and Cost Advice

"Our licensing fees are paid annually and the cost is between €600 and €800 (approximately $665.00 to $885.00 USD)."
"While I would have to check on the price of the solution, I feel it to be okay and it matches the market price."
"The product is expensive."
"Barracuda costs us $8,000 per year. Barracuda costs $20,000 for a full subscription, when you try to protect multi-site infrastructure, in different geographical zones and for different data centers. If you have only one site, Barracuda will be cheaper."
"Cost is a bit on the higher side. Big companies can afford it."
"They only offer a yearly licensing plan."
"The price of this solution is okay."
"They have competitive pricing."
"I rate the product price a four on a scale of one to ten, where one is a high price, and ten is a low price."
"Its subscription prices are cheaper, and it is not very expensive. From a price perspective, Fortinet is a very well-known security vendor. Subscriptions are very simple. They have a couple of licenses on an appliance, and that's it. The cost is not that big. One license is 40K, which they give with all the products. Another one includes the subscriptions for threat prevention, IPS, sandboxing, etc, which is more than enough."
"The tool is really expensive."
"FortiWeb can be purchased in VM mode for a lower price and the same features."
"FortiWeb WAF is priced well for customers compared to other vendors' solutions."
"I would rate the pricing a four out of ten."
"The product is expensive. I rate the pricing a ten out of ten."
"The solution is very inexpensive when compared to F5 Advanced WAF and Avi Networks but offers the same benefits."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
881,733 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
11%
Financial Services Firm
9%
Manufacturing Company
7%
University
6%
Financial Services Firm
10%
Computer Software Company
9%
Manufacturing Company
8%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business25
Midsize Enterprise8
Large Enterprise11
By reviewers
Company SizeCount
Small Business60
Midsize Enterprise27
Large Enterprise36
 

Questions from the Community

What do you like most about Barracuda Web Application Firewall?
It significantly improved our overall web security posture, addressing intrusions and enhancing control over web URLs in our environment.
What is your primary use case for Barracuda Web Application Firewall?
I am not using the API protection feature right now because I don't host any APIs through Barracuda Web Application Firewall. I use a second procedure for API, which is point-to-point VPN connectiv...
What is your experience regarding pricing and costs for Barracuda Web Application Firewall?
At the time I was acquiring Barracuda Web Application Firewall, I found it costly compared to other products. To overcome that price factor, I excluded some features or subscriptions to align with ...
What do you like most about Fortinet FortiWeb?
The WAF profiles has been effective at mitigating web-based threats.
What is your experience regarding pricing and costs for Fortinet FortiWeb?
The pricing for Fortinet FortiWeb varies with different models having different prices. It depends on the requirement. For VM machines, the price increases based on CPU configurations of 2, 4, or 8...
What needs improvement with Fortinet FortiWeb?
There is room for improvement in Fortinet FortiWeb. The team was only from FortiGate itself. They are making new firmware versions and releasing them before checking, which leads to many bugs in th...
 

Also Known As

No data available
FortiWeb Web Application Firewall (WAF)
 

Overview

 

Sample Customers

Oracle, CBS, Pioneer, Hyundai, Publix, Barnes Noble, Calzedonia, Nordstrom, Samsung, Nascar
Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG
Find out what your peers are saying about Barracuda Web Application Firewall vs. Fortinet FortiWeb and other solutions. Updated: February 2026.
881,733 professionals have used our research since 2012.