Cloudflare One vs Imperva Application Security Platform comparison

Cloudflare One vs. Imperva Application Security Platform

Download the complete report

Helped 881,082 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cloudflare One

Ranking in Distributed Denial-of-Service (DDoS) Protection

7th

Ranking in Bot Management

3rd

Average Rating

8.8

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

Email Security (21st), Secure Web Gateways (SWG) (16th), Data Loss Prevention (DLP) (21st), Cloud Access Security Brokers (CASB) (11th), Software Defined WAN (SD-WAN) Solutions (13th), Access Management (10th), ZTNA as a Service (8th), ZTNA (2nd), Secure Access Service Edge (SASE) (10th), Remote Browser Isolation (RBI) (3rd)

Imperva Application Securit...

Ranking in Distributed Denial-of-Service (DDoS) Protection

4th

Ranking in Bot Management

1st

Average Rating

8.6

Reviews Sentiment

7.1

Number of Reviews

133

Ranking in other categories

CDN (4th), Web Application Firewall (WAF) (4th), API Security (2nd)

Mindshare comparison

As of January 2026, in the Distributed Denial-of-Service (DDoS) Protection category, the mindshare of Cloudflare One is 4.1%, up from 3.9% compared to the previous year. The mindshare of Imperva Application Security Platform is 7.8%, down from 8.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Distributed Denial-of-Service (DDoS) Protection Market Share Distribution
Product	Market Share (%)
Imperva Application Security Platform	7.8%
Cloudflare One	4.1%
Other	88.1%

Distributed Denial-of-Service (DDoS) Protection

Featured Reviews

Cobe Van Coller

Network Architect at IP Dimension

Cloud security has improved remote access and has reduced costs for smaller client sites

I have used Cloudflare One's Identity-Aware Proxy, and it is quite straightforward from what I have seen so far. The app registration on the Azure side integrates fully into Cloudflare, and I am very satisfied with that part because it is easy to set up. The integration of Cloudflare One's Secure Web Gateway and Zero Trust Network Access works without any issues. That part is pretty automatic, and if you complete the rest of the setup, it comes together by itself with no issues from my side. What makes it nice is that we can actually start replacing on-site firewalls at this stage for the smaller clients because it does not matter if they go to a coffee shop or work from home; they are still secured by the same connection. The hops get shorter and you get better latency. We have done testing to see if it is better. One thing that we did notice with our proof of concept with our current client is that they have people connecting from the UK. When they used their previous VPN solution, uploading CAD drawings and other files to the server took a long time. They mentioned that it is much quicker on Cloudflare One's solution. I definitely believe that is part of the improved performance, and I am satisfied with that as well. What is nice about Cloudflare One is that it makes the setup easier and also easier to train technicians to maintain it. Compared to legacy systems, we do not need to get fancy firewalls in place that are costly. That is definitely also a cost-saver with Cloudflare One.

Read full review

reviewer1247523

Head of Sales Services Department at a comms service provider with 51-200 employees

Solution ensures website availability and proactive threat mitigation

Over the seven years, the most valuable features of Imperva DDoS that I have found are related to DDoS attacks, which are a group of attacks, and not all of them can be resolved on the endpoint level before the website. Using the web firewall before the website is a common use case to protect against malicious requests to the website. I have utilized Imperva's Intelligent Traffic Filtering feature. This feature helps me understand how the attack is progressing and what is happening inside the requests to our website. It allows me to granularly grant or deny access to certain parts of our website. This helps when we know our customers and the types of requests that can be sent from them, enabling us to block some malicious requests. Imperva DDoS has User Behavior Analytics and Threat Intelligence on its board, and this helps us to be protected proactively. Imperva DDoS connects to its database of threats, storing whole information about attacks all over the world in one simple engine. Everyone can use this feature, which can connect to this engine and get information about what is going on at the world level. That is the way to be protected at the company's level. The integration capabilities of Imperva DDoS are very easy and simple. We can run it in 2 hours.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The best feature is rate limiting. If I'm expecting 500 visits per hour, Cloudflare will limit the requests if I suddenly get 50,000."

"Cloudflare is simple to use."

"The capabilities of the software are strong enough for me to do what it's supposed to do. For me, we don't need to do a lot of configuration on our site. We just enable it and monitor it."

"It is a stable solution."

"The blocking feature is very good."

"Cloudflare, in my opinion, was easy to implement."

"Cloudflare Access is part of the Zero Trust philosophy."

"Cloudflare Zero Trust Platform removes the risk of exposing the applications to the public."

More Cloudflare One pros

"Imperva Web Application Firewall is stable."

"On the activity log, I can see the exact details, the visit, and the threat."

"The stability of the product is good since I haven't had any problems with the solution."

"The solution is scalable."

"It mitigates all of the availabilities of risks around web applications."

"The bot management features are very effective, as they help filter unwanted traffic using keywords."

"The solution is very scalable. It is one of the most important features. You can also expand resources and features as well."

"The setup of Imperva DDoS was easy."

More Imperva Application Security Platform pros

Cons

"The initial onboarding was causing us some confusion."

"Cloudflare Zero Trust Platform needs to improve its documentation. It took time to do the implementation."

"Our customers no longer use Cloudflare because its service is subpar."

"Operating and tuning the product is difficult."

"Feedback could be enhanced."

"The pricing is an area that can be improved. Pricing, as far as I recall, was the source of our problems."

"When there are any dynamic changes in complex applications, the tool takes a lot of time, making its analytics-related area a major matter of concern where improvements are needed."

"Lacks a VPN feature to provide a secure connection to the data center."

More Cloudflare One cons

"In the past, I have bugs on the WAF. I've contacted Imperva about them. Future releases should be less buggy."

"An improvement for Imperva WAF would be to reduce the number of false positives and create more strong use cases based on AI/ML or behavioral analytics."

"It would be beneficial to include vulnerability management in the solution, similar to what they have for their on-premise solution."

"The weakest point of Imperva is their first level of support, which should be improved. They should also improve the access and security logs viewing directly on the portal. I would like to see better access and security logs through the portal and not only through a SIM solution. Currently, if you want to explore your access and security logs from Imperva, you need a SIM tool or a SIM infrastructure on your side to do it. You can't do it manually or directly through the portal, which is a big problem for us. I had a call yesterday with Imperva for the roadmap, and I just told them this. They agreed that this is an improvement point from their side."

"Users would benefit from better documentation. There is official documentation, but sometimes we need more detail. We have some use cases that are not so run of the mill. It would be great if there was a knowledge base that we could go to for more answers."

"Imperva Web Application Firewall can improve by providing better features, such as improved prevention of zero-day attacks. Additionally, it should include a VR meta-analysis."

"The rules surrounding the making of web applications could be improved."

"Sometimes our web application firewall will slow down."

More Imperva Application Security Platform cons

Pricing and Cost Advice

"The prices are slightly expensive."

"The solution's pricing lacks transparency."

"The price tag is no longer $200,000, but rather $300,000 to $400,000. It's twice."

"The pricing of the solution is cheap. The licensing cost is also very low. I rate the cost and pricing a three out of ten."

"My company has to make yearly payments towards the licensing costs attached to the solution. There are no hidden charges apart from the licensing costs of the solution."

"Cloudflare Zero Trust Platform's pricing is good."

"The solution is not that expensive."

"The pricing is somewhere in the middle. I would rate the pricing a seven out of ten."

"We have an issue with Imperva Incapsula in the Iraqi market because of the high price."

"Imperva Web Application Firewall is expensive."

"It is a very expensive solution. The price is very high. A lot of customers tell us that they would love to use Imperva more. I have some customers who have 50 websites, but they have only 10 websites on Imperva because of the price. They would love to have all their websites running through Imperva, but they can't. They have to choose the more critical websites to protect because the price is very high. It is a very good product, but it is too expensive. If you buy a plan for 20 megabytes and you don't consume all of your 20 megabytes, it is okay, but if you consume more, you are charged for the superior traffic."

"The solution's pricing is an issue."

"It is very costly, but the return on investment is very high. Its cost was around $70,000, and we got it back in just six months."

"For enterprise contracts you will be in touch with a dedicated account manager who will guide you regarding licensing."

"We sell three-year licenses for Imperva Web Application Firewall to our customers. The price is a little expensive."

"Imperva Web Application Firewall's pricing is expensive."

More Imperva Application Security Platform pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Distributed Denial-of-Service (DDoS) Protection solutions are best for your needs.

See recommendations

881,082 professionals have used our research since 2012.

Comparison Review

it_user68487

Security Expert with 51-200 employees

Nov 6, 2013

CloudFlare vs Incapsula: Web Application Firewall

CloudFlare vs Incapsula: Round 2 Web Application Firewall Comparative Penetration Testing Analysis Report v1.0 Summary This document contains the results of a second comparative penetration test conducted by a team of security specialists at Zero Science Lab against two cloud-based Web…

Read full review

Top Industries

By visitors reading reviews

Computer Software Company

12%

Comms Service Provider

11%

Financial Services Firm

Manufacturing Company

No data available

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	10
Midsize Enterprise	2
Large Enterprise	10

By reviewers
Company Size	Count
Small Business	83
Midsize Enterprise	25
Large Enterprise	61

Questions from the Community

What needs improvement with Cloudflare Access?

Cloudflare Access has strong integration with Microsoft, among other platforms. However, when it comes to Kaspersky, we have clients who typically encounter challenges. The usual setup involves con...

What is your primary use case for Cloudflare Access?

Cloudflare Access provides secure access to internal applications for employees, external members of the organization, or third-party providers. It acts similarly to a VPN but uses a different kind...

What advice do you have for others considering Cloudflare Access?

Cloudflare Access is one of the best integrations available. While about two hundred vendors offer similar services, Cloudflare's approach as a SASE solution stands out. Clients prefer a single pla...

Which Web Application Firewall (WAF) would you recommend? R&S or Imperva?

Imperva is a strong choice, given their security focus and ongoing R&D into the product in areas such as bot management.

What do you like most about Imperva Incapsula?

We use Imperva DDoS to stop DDoS attacks and reduce the amount of unwanted queries against web services or web scraping.

What is your experience regarding pricing and costs for Imperva DDoS?

The pricing, setup costs, and licensing of Imperva DDoS are reasonable for the amount of technical capabilities provided. I would rate the pricing of Imperva DDoS as five, where one is very cheap a...

Cato SASE Cloud Platform vs Cloudflare One

Comparisons

Compared 5% of the time

Twingate vs Cloudflare One

Compared 4% of the time

Prisma Access by Palo Alto Networks vs Cloudflare One

Compared 4% of the time

Zscaler Zero Trust Exchange Platform vs Cloudflare One

Compared 4% of the time

FortiSASE vs Cloudflare One

Compared 3% of the time

More Cloudflare One Competitors

Cloudflare vs Imperva Application Security Platform

Compared 12% of the time

Akamai vs Imperva Application Security Platform

Compared 6% of the time

Fortinet FortiWeb vs Imperva Application Security Platform

Compared 6% of the time

F5 Advanced WAF vs Imperva Application Security Platform

Compared 5% of the time

Microsoft Azure Application Gateway vs Imperva Application Security Platform

Compared 4% of the time

More Imperva Application Security Platform Competitors

Product Reports

Cloudflare One

Download Cloudflare One product report

Imperva Application Security Platform

Download Imperva Application Security Platform product report

Imperva Application Security Platform report

Also Known As

Cloudflare Area 1 Email Security, Cloudflare Bot Management, Cloudflare Gateway, Cloudflare Zero Trust Platform, Cloudflare DDoS, Cloudflare SASE & SSE Platform

Imperva Bot Management, Imperva Web Application Firewall, Imperva API Security

Overview

Cloudflare One is a comprehensive platform for security, performance, and connectivity. It provides features like rate limiting, DDoS protection, and application access, tailored to enhance user experience while securing internet access and accelerating communications.

Designed to integrate security measures with ease of use and scalability, Cloudflare One offers a secure web gateway and zero trust network access. These features ensure seamless setup and operation, making connectivity reliable and protected. Users appreciate its integrated console, intuitive interface, and the ability to manage risk effectively. It offers straightforward deployment, improves latency, and boasts cost-effectiveness. While its onboarding process and documentation need enhancement, its value in content delivery and application shielding is notable. Despite challenges in integrating Cloudflare Access with existing VPNs and the need for better automation and support, it remains vital for DNS and infrastructure protection.

What features make Cloudflare One stand out?

Rate Limiting: Controls the traffic rate to prevent abuse.
DDoS Protection: Shields applications from distributed denial-of-service attacks.
Secure Web Gateway: Provides secure internet access with seamless operation.
Zero Trust Network Access: Ensures secure, application-based connectivity without relying on traditional VPNs.
Access for Connectivity: Facilitates access to internal applications securely.

What benefits should users look for in reviews?

Security: Robust measures for DNS and browsing protection.
Performance: Enhanced site accessibility and communication speed.
Cost-Effectiveness: Offers competitive pricing for its features.
Ease of Deployment: Straightforward and efficient setup process.

In industries like finance, retail, and technology, Cloudflare One is crucial for enabling secure remote access and protecting web applications against dynamic threats. It supports compliance access policies and enhances content delivery, playing a key role in safeguarding digital infrastructure.

Cloudflare

Imperva Application Security Platform delivers comprehensive and continuous web threat protection. Renowned for its ease of use, it shields web applications and databases from various cyber threats while integrating seamlessly with cloud and on-premises environments.

Imperva Application Security Platform protects web environments by offering advanced security measures against threats like DDoS attacks, SQL injections, and cross-site scripting. As a robust web application firewall, it provides extensive monitoring and bot management capabilities. The platform integrates content delivery networks for enhanced performance and scalability, while real-time traffic analysis ensures consistent protection. Despite its strengths, improvements can be made in policy management and customization options. Users seek better integration with third-party tools and more competitive pricing models. The inclusion of AI for enhanced analytics is also anticipated.

What are the key features of Imperva Application Security Platform?

Correlated Attack Validation: Enhances threat assessment by linking related security events.
Threat Radar: Offers visibility into potential and ongoing threats.
Virtual Patching: Provides protection against vulnerabilities without immediate code changes.
IncapRules: Allows creation of custom security policies.
DDoS Protection: Defends against large-scale distributed denial-of-service attacks.
CDN Integration: Improves content delivery speed and reliability.

What benefits should users look for in reviews?

User-Friendly Administration: Simplifies setup and ongoing management tasks.
Seamless Integration: Ensures smooth operation with existing infrastructure.
Comprehensive Threat Protection: Shields digital assets from a wide range of threats.
Hands-On Support: Provides timely and effective customer service assistance.

Imperva Application Security Platform is implemented in industries needing strong database and application protection. Companies use it to enforce geolocation restrictions and manage bots, benefiting sectors like finance and e-commerce where data security and threat monitoring are critical. Its ability to protect and ensure data accessibility makes it integral to business operations prioritizing cyber resilience.

Imperva

Sample Customers

23andMe

Hitachi, BNZ, Bitstamp, Moz, InnoGames, BTCChina, Wix, LivePerson, Zillow and more.

Cloudflare One vs. Imperva Application Security Platform