Try our new research platform with insights from 80,000+ expert users

Check Point CloudGuard WAF vs Imperva Web Application Firewall comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
76
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (13th)
Check Point CloudGuard WAF
Average Rating
8.8
Reviews Sentiment
7.8
Number of Reviews
46
Ranking in other categories
Application Security Tools (9th), Web Application Firewall (WAF) (11th)
Imperva Web Application Fir...
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
52
Ranking in other categories
Web Application Firewall (WAF) (7th)
 

Featured Reviews

Carlos Alam Hernandez Baruch - PeerSpot reviewer
Fast and secure deployments simplify operations for government and fintech clients
It is a fast and secure DNS. It is very easy to deploy, and my customers are happy with this tool. Additionally, the CDN performance in Mexico is excellent, providing fast service and tools. It offers reliability during high-traffic periods, ensuring no impact on the environment. It helps my clients avoid using on-premise boxes, simplifying operations as they only use the prices on Cloudflare.
Dialungana Malungo - PeerSpot reviewer
Protects our web applications and APIs and has a very low false positive rate
CloudGuard WAF is a very straightforward solution. I do not have to worry about signatures. Most of the solutions that are out there are mainly based on signatures, and I have to do a lot of maintenance to get the signature updates, and sometimes, due to a lack of resources, I am not able to do so. With CloudGuard WAF, I have peace of mind, because most of the features are AI-based, and there is not much configuration that needs to be done on my side. Once set, I only go to CloudGuard WAF to check. I do not have to worry about signatures or updates. Everything is done perfectly, and I have a sense of peace because I know our applications are safe. It is very important for us that CloudGuard WAF protects our applications against threats without relying on signatures. That is definitely one of the key features I need.
Mitesh D Patel - PeerSpot reviewer
Effectively defends against threats like cross-site scripting (XSS), SQL injection, and others
It does bring value. For example, consider a BFSI customer. Their application is critical and represents their brand. Without a WAF, an attack could take their application down, harming their reputation. It leads to hampering the customer's workflow. With an Imperva WAF, they protect against attacks like DDoS or SQL injection, ensuring their application remains available and customers are happy. That's the main benefit for both the customer and the organization. The impact depends on the customer's use case. If their business primarily operates online, a CDN is beneficial for traffic optimization. Moreover, the integration options depend on the specific use case of our customers. Generally, integration capabilities are good with SIEM (Security Information and Event Management) parts.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The tool is user-friendly."
"The solution provides good load balancing and protection against DDoS attacks."
"I like Cloudflare's application gateway and DDoS protection."
"Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications."
"Even when there is a high load on our servers, Cloudflare is able to cache the data and serve it to users, ensuring they can still access the website."
"When using services like Heroku, Cloudflare is very useful for CNAME flattening. I also use it for their end-to-end SSL with TLS authentication on nginx for securing servers."
"The solution is stable, and the DNS servers are simple to use."
"The overall experience with Cloudflare is positive, with a rating of eight out of ten."
"We have not had any incidents. We could realize its benefits immediately. We watched and monitored the traffic, and it was amazing to see the results."
"It seamlessly protects through machine learning, giving us visibility into potential attacks and where they come from."
"The DirectStorage gives me a vision that I did not have of the check that occurs on the web servers."
"Check Point CloudGuard WAF offers comprehensive monitoring and alerting for my entire VMware virtual environment."
"Support is the same with on-premise devices, and it is very good. Since it is cloud-based, I do not need them as much."
"Since we've had CloudGuard, we've never had these issues happen again."
"The portal is quite intuitive."
"Check Point CloudGuard WAF works well for preemptively blocking Zero Day attacks and detecting hidden anomalies."
"Imperva Web Application Firewall is stable."
"There is a quick switch between any of the the nodes if something goes wrong, where there's a there's an attack against a specific area. The security setup is reasonably easy. It's not a problem to do setups and rules and integrations. And, yeah, just the the back end team is also very willing to insist if there's questions that that we cannot answer or with these questions that we do have"
"We can prevent attacks or issues even before they happen."
"It mitigates all of the availabilities of risks around web applications."
"Protection is the best solution since it has profile functionality."
"There are a number of features that are valuable such as the account takeover and various antivirus features."
"The dynamic profiling of websites is the solution's most valuable feature. The security is also good."
"Imperva Web Application Firewall is a highly stable solution and is very mature."
 

Cons

"Integration involving API with other products could be more user-friendly."
"The product support needs to be accessible from more places, a wider area of coverage."
"It would be helpful if the solution could continue evolving to compete with the other solutions on the market."
"The documentation could improve for Cloudflare DNS."
"If they improve on the placement of their data centers, it would be better. I'm living in a remote area. I would like to connect to them without any kind of lag."
"An integrated SSO feature would be useful for Cloudflare DNS."
"There could be more courses with engineers. I like e-learning, however, having a specialist in a classroom is more comfortable for me."
"It would be good if Cloudflare could have more servers for better traffic routing or an increase in the traffic routed. This is what I'd like to improve in Cloudflare."
"A feature we'd like to see in the future is something that could protect against other attack vectors, with a focus on application protection."
"Deeper and more transparent integration between Cloud Application Security and analysis monitoring tools could be very valuable - although the solution currently offers integrations with third-party security tools."
"You need to know exactly the system. You cannot have someone running the system if they don't have the knowledge to do so."
"While the GUI allows configuration for application-related features, specific definitions cannot be modified through the code."
"The learning curve was a challenge due to initially incorrect configurations. It took approximately a month and a half to understand how the solution works because of inadequate documentation."
"I feel like I need more clarity in understanding pricing for DDoS protection."
"There are improvements that can be made regarding pricing since it has a high initial cost."
"One of the big problems we found in Check Point, in general, is the support."
"The solution works for particular zones but isn't always the best solution for all zones."
"I don't really use it and therefore can't speak to areas of improvement."
"There is nothing specific where the application firewall is falling short."
"I would like to improve the tool's turnaround time in terms of support."
"Their portal is very limited and needs improvement."
"Imperva Web Application Firewall could improve the API integration. It was complex for us. Additionally, The onboarding could be better."
"The tool's UI is complicated. It would be best to have a more accessible UI dashboard to make the job easier."
"The initial setup could be simplified. Every time you have to install the solution you have to get in touch with support or somebody that can to do that for you."
 

Pricing and Cost Advice

"The pricing for the service is reasonable, neither excessively cheap nor prohibitively expensive. It aligns well with the value of their solution."
"A free version of the solution is available."
"Cloudflare's pricing is not much higher and is good for middle-level organizations."
"It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
"So far I use free tier and happy with it. You can subscribe to business package if needed."
"The solution has many features but there are ones that you need to pay for. Sometimes you have to find out which is available for free and which you have to pay for."
"The tool is a premium product, so it is very expensive."
"In terms of licensing costs, we don't pay for licensing for Cloudflare. We only establish communication, then for peering, Cloudflare takes care of the cross-connection in different data centers."
"I find the pricing to be reasonable."
"Check Point CloudGuard Application Security's pricing is not friendly."
"Check Point CloudGuard Application Security's pricing is comparable to other products in the market."
"The base solution costs approximately 30,000 euros, with an additional 2,000 euros per year for licenses and support."
"Considering all the benefits we've observed, we find the price to be satisfactory."
"If the pricing for the Infinity platform covers everything, it would be more straightforward. I had a hard time selling it to our CEO as a former CFO because of the differentials. There are different deltas year to year over a five-year period. It is very difficult to explain. It would be easier to digest for our executives if there was a flatter scale"
"I work for an Indian banking client. In India, companies are on a budget. The company liked Check Point very much, but it was a little bit costly compared to FortiWeb. However, it had more features compared to FortiWeb."
"The sales team or account managers from Check Point are top-notch. As I am using other products as well, my pricing was competitive compared to others."
"Imperva’s pricing is a bit higher in the market since it offers a full-blown WAF."
"It's an excellent product, but it can be very costly."
"The pricing is somewhat expensive. It is actually a huge investment when compared to other countries."
"There are a couple of different licensing models."
"Imperva Web Application Firewall price is higher compared to other solutions. However, everything is included in the price."
"The price of this solution is a little bit high compared to competitors."
"Imperva Web Application Firewall is expensive."
"The solution's pricing is an issue."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
865,295 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Comms Service Provider
11%
Financial Services Firm
9%
Manufacturing Company
7%
Computer Software Company
19%
Manufacturing Company
12%
Financial Services Firm
11%
Government
6%
Financial Services Firm
15%
Computer Software Company
12%
Insurance Company
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about CloudGuard for Application Security?
We have not had any incidents. We could realize its benefits immediately. We watched and monitored the traffic, and i...
What needs improvement with CloudGuard for Application Security?
There are improvements that can be made regarding pricing since it has a high initial cost. If they could reduce that...
Is Citrix ADC (formerly Netscaler) the best ADC to use and if not why?
For ADC, any ADC can do a good job. But in case if you want to add WAF functionality to the same ADC hardware you hav...
DDoS solutions: Any other solutions to consider aside from Radware DDoS Protection Service and F5 Silverline DDoS Protection?
You can have a look to Imperva Cloud WAF, the anti-DDoS mitigation is under 1s and works very well. I observed a lot ...
 

Also Known As

Cloudflare DNS
Check Point CloudGuard Application Security, CloudGuard Application Security, CloudGuard AppSec
No data available
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Orange España, Paschoalotto
BlueCross BlueShield, eHarmony, EMF Broadcasting, GE Healthcare, Metro Bank, The Motley Fool, Siemens
Find out what your peers are saying about Check Point CloudGuard WAF vs. Imperva Web Application Firewall and other solutions. Updated: July 2025.
865,295 professionals have used our research since 2012.