Try our new research platform with insights from 80,000+ expert users

Barracuda Web Application Firewall vs Prisma Cloud by Palo Alto Networks comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jul 24, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
76
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (12th)
Barracuda Web Application F...
Average Rating
8.2
Reviews Sentiment
7.5
Number of Reviews
44
Ranking in other categories
Web Application Firewall (WAF) (17th)
Prisma Cloud by Palo Alto N...
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
111
Ranking in other categories
Web Application Firewall (WAF) (8th), Container Security (1st), Cloud Security Posture Management (CSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (2nd), Data Security Posture Management (DSPM) (2nd)
 

Featured Reviews

Carlos Alam Hernandez Baruch - PeerSpot reviewer
Fast and secure deployments simplify operations for government and fintech clients
It is a fast and secure DNS. It is very easy to deploy, and my customers are happy with this tool. Additionally, the CDN performance in Mexico is excellent, providing fast service and tools. It offers reliability during high-traffic periods, ensuring no impact on the environment. It helps my clients avoid using on-premise boxes, simplifying operations as they only use the prices on Cloudflare.
Anne-Aimee Wollerich - PeerSpot reviewer
Managing bot traffic effectively enhances usability for non-technical users
Barracuda Web Application Firewall lacks some of the more specified and structured features offered by solutions like Tenable. Although Tenable is more expensive and less easily deployable, its features are more deepened and chiseled, particularly for IT personnel. For example, Tenable provides more comprehensive dark web scanning capabilities, which Barracuda could improve upon.
Harsh_Vardhan - PeerSpot reviewer
Provides visibility and control that our customers need
Different modules are valuable for different customers. We are leveraging CSPM. It is one of the best solutions for comprehensive visibility into cloud resource configurations and compliance. It has a lot of out-of-the-box policies, and the visibility that we are getting is impressive. The DSPM module is valuable. This is the latest one that Palo Alto procured from Dig Security. No competitor provides this functionality in a single pane of glass. The support for Linux and container security is also very good. That is the beauty of Prisma Cloud. However, in terms of Windows security, Prisma Cloud is lacking because currently, there is no runtime protection available. The UI is very good. We get all the things within a single UI. It is easy to use. A new user can easily understand it. It is very user-friendly.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The tool is user-friendly."
"The solution provides good load balancing and protection against DDoS attacks."
"It's a great product because it's scalable, has great coverage, and is mature with good defenses against DDoS attacks."
"Centralized, full-featured DNS."
"When using services like Heroku, Cloudflare is very useful for CNAME flattening. I also use it for their end-to-end SSL with TLS authentication on nginx for securing servers."
"New and innovative way to protect the client's data."
"The attacker won't have details since my public IP is anonymous. It offers us good privacy."
"The features of Cloudflare were found to be more beneficial and led to the decision to utilize it over other options."
"The updating and signature features are my primary use case for the solution. These features are beneficial to my organization."
"We only need one subscription to be protected against both active DDoS and offline DDoS attacks."
"The installation is straightforward."
"Parameter Protection is a valuable feature."
"It significantly improved our overall web security posture, addressing intrusions and enhancing control over web URLs in our environment."
"What I like most about Barracuda Web Application Firewall is its availability. I also like that it's an easy-to-use solution."
"The solution is user-friendly and easy to set up."
"Its recommendation about the probabilities on the website is great. It also has free probability managers for the website, which is really helpful. The protection engine, signature-based protection behavior, and analysis features are also great. It also has an ATP module for sandbox scanning and behavior analysis for file uploads."
"We found it to be easy and flexible. We could easily configure it for our needs, and we could spread the Prisma Cloud platform to 16 countries without encountering any kind of problem."
"What I found most valuable in Prisma Cloud by Palo Alto Networks is the VAS, such as the web application and API security. I feel that VAS adds a lot of value, mainly because it gives visibility through the application layer and threat detection features."
"I would say Twistlock is a fairly sophisticated tool."
"I find the CSPM area to be a more valuable and flexible feature."
"The solution's dashboard looks very user-friendly."
"The most valuable feature is that the rule set is managed and that it can be run on a regularly scheduled basis."
"As a pure-play CSPM, it is pretty good. From the data exposure perspective, Prisma Cloud does a fairly good job. Purely from the perspective of reading the conflicts, it is able to highlight any data exposures that I might be having."
"I like Palo Alto's threat protection and Wi-Fi coverage. It has advanced features like DNS security and sandboxing. The automation capabilities are excellent."
 

Cons

"I believe they currently have this feature, but there will most likely be integration with APIs so we can control some features through API."
"The solution could be more user-friendly."
"We have noticed multiple instances where Cloudflare falsely indicates that our servers are down, even when there is no actual load on them. This makes it challenging for us to identify the exact issue."
"Even if I wanted to, I wouldn't be able to buy Cloudflare in my country."
"One area of improvement is in the Access Rules. Hypothetically, if we wanted to block or challenge traffic outside of the United States, the only way to currently do that (as far as I know) is to enter every single country outside of the United States. That could be a labor intensive job. A solution could be to enable users to create a rule where traffic is only allowed within a certain country."
"There could be more courses with engineers. I like e-learning, however, having a specialist in a classroom is more comfortable for me."
"Cloudflare does not have an on-premise solution. If they had different approaches they could be better suited to accommodate more customers, such as on-premise and hybrid deployments. For example, hybrid deployments would be useful where you could move the traffic from the enterprise to the cloud."
"I would like Cloudflare to offer a dedicated account manager for large enterprise clients like us."
"In the Barracuda Web Application Firewall, there should be more affordable options for WAF as a service."
"The documentation is lacking. It's not like what you'd get if you were using Juniper or Cisco. They need to expand on it and make it more useful."
"I would suggest that someone implementing this product is knowledgeable in the IT field, and with the network needs. It is complex."
"This product could easily progress to be among the industry leaders. I think they need to improve enterprise level automation. It integrates with a small number of vulnerability scanners, so report results should be imported manually; same for SIEM integration."
"The solution needs to leverage some additional features to a broader scale of software-defined networks."
"They should improve their features, so they easily compare to the competition."
"There are false positives that I am receiving when compared to other WAFs."
"The solution could use more reports."
"Having auto Defender upgrades so that we do not have to upgrade Defender manually would be helpful."
"Sometimes, on the Azure side, there are issues. Some errors aren't being found on Prisma Cloud."
"The feedback that we have given to the Palo Alto team is that the UI can be improved. When you press the "back" button on your browser from the Investigate tab, the query that you're working on just disappears. It won't keep the query on the "back" button."
"When there are updates, whether daily, weekly, or monthly, it needs configuration or permission adjustments. There is no automation for that, which is too bad."
"In terms of improvement, there are some small things like hardening and making sure the Linux resources are deployed well but that's more at an operational level."
"For some custom policies, we need more features."
"When an account is onboarded, if it is missing any permission, it should automatically be updated with the required permissions and policies."
"It can be too expensive for small companies."
 

Pricing and Cost Advice

"The price of the solution is expensive."
"The cost primarily depends on the size of the organization."
"It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
"For Cloudflare, I recommend it heavily for small businesses with revenue under a couple of million dollars. Onboarding is easy, and they even have a free plan. This makes it simple for businesses in the $100,000-$500,000 range to try it out and see its value, allowing them to scale up their infrastructure as needed."
"The pricing for the service is reasonable, neither excessively cheap nor prohibitively expensive. It aligns well with the value of their solution."
"In terms of licensing costs, we don't pay for licensing for Cloudflare. We only establish communication, then for peering, Cloudflare takes care of the cross-connection in different data centers."
"The product's pricing is cheap."
"So far I use free tier and happy with it. You can subscribe to business package if needed."
"The product pricing was competitive for the value it offers regarding security features."
"The price of the solution is a little expensive. There is a license for this solution and it can be purchased every one, two, or five years."
"In my opinion, the product is fairly priced."
"Cost is a bit on the higher side. Big companies can afford it."
"The product is expensive."
"The solution is based on a licensing model and might be $360 for the hybrid version."
"They only offer a yearly licensing plan."
"The price is reasonable, more so than other products."
"The price is high. In the future, when there are more competitors at the same level with different clouds, maybe the position will be different."
"The pricing and licensing are expensive compared to the other offerings that we considered."
"Almost all the CSPM tools are pretty expensive."
"If a competitor came along and said, "We'll give you half the price," that doesn't necessarily mean that's the right answer, at all. We wouldn't necessarily entertain it that way. Does it do what we need it to do? Does it work with the things that we want it to work with? That is the important part for us. Pricing wasn't the big consideration it might be in some organizations. We spend millions on public cloud. In that context, it would not make sense to worry about the small price differences that you get between the products."
"Prisma Cloud is a high-end enterprise solution, making it quite expensive."
"Although the cost can be high, the value is worth the price tag."
"I wouldn't mind if it were cheaper. We are spending a fair amount of money on Prisma Cloud."
"You can expect a premium price because it is a premium quality product by a leading supplier."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
868,759 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Comms Service Provider
11%
Financial Services Firm
10%
Manufacturing Company
7%
Computer Software Company
16%
Financial Services Firm
9%
Manufacturing Company
7%
University
6%
Computer Software Company
15%
Financial Services Firm
14%
Manufacturing Company
10%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business45
Midsize Enterprise8
Large Enterprise25
By reviewers
Company SizeCount
Small Business25
Midsize Enterprise6
Large Enterprise11
By reviewers
Company SizeCount
Small Business34
Midsize Enterprise20
Large Enterprise58
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about Barracuda Web Application Firewall?
It significantly improved our overall web security posture, addressing intrusions and enhancing control over web URLs...
What is your primary use case for Barracuda Web Application Firewall?
Our primary use case was to track the traffic on websites or webshops to identify potential malicious actors, such as...
What is your experience regarding pricing and costs for Barracuda Web Application Firewall?
The pricing for Barracuda is quite high compared to other OEMs. Each transaction requires my purchase team to negotia...
What is your primary use case for Prisma Cloud by Palo Alto Networks?
Prisma Cloud helps support DevSecOps methodologies, making those responsibilities easier to manage.
What Cloud-Native Application Protection Platform do you recommend?
We like Prisma Cloud by Palo Alto Networks, since it offers us incredible visibility into our entire cloud system. We...
What do you think of Aqua Security vs Prisma Cloud?
Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valu...
 

Also Known As

Cloudflare DNS
No data available
Prisma Public Cloud, RedLock Cloud 360, RedLock, Twistlock, Aporeto
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Oracle, CBS, Pioneer, Hyundai, Publix, Barnes Noble, Calzedonia, Nordstrom, Samsung, Nascar
Amgen, Genpact, Western Asset, Zipongo, Proofpoint, NerdWallet, Axfood, 21st Century Fox, Veeva Systems, Reinsurance Group of America
Find out what your peers are saying about Barracuda Web Application Firewall vs. Prisma Cloud by Palo Alto Networks and other solutions. Updated: September 2025.
868,759 professionals have used our research since 2012.