Try our new research platform with insights from 80,000+ expert users

Cloudflare Web Application Firewall vs Sucuri comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare Web Application ...
Ranking in Web Application Firewall (WAF)
5th
Average Rating
8.4
Reviews Sentiment
7.5
Number of Reviews
24
Ranking in other categories
No ranking in other categories
Sucuri
Ranking in Web Application Firewall (WAF)
24th
Average Rating
8.4
Reviews Sentiment
7.5
Number of Reviews
6
Ranking in other categories
Distributed Denial-of-Service (DDoS) Protection (16th), Domain Name System (DNS) Security (13th)
 

Mindshare comparison

As of July 2025, in the Web Application Firewall (WAF) category, the mindshare of Cloudflare Web Application Firewall is 7.4%, up from 6.4% compared to the previous year. The mindshare of Sucuri is 0.8%, down from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Web Application Firewall (WAF)
 

Featured Reviews

SachidDoshi - PeerSpot reviewer
Offers a huge signature repository and is superiorly effective in mitigating DDoS attacks
The solution's learning curve can still be further reduced, which presently stands at two or three months. The product has a custom rule set that users can modify and manifest as needed. The vendor can probably shorten the learning curve using cutting-edge technologies like AI. The solution provider can also work around the web applications and identify the toolset that needs to be implemented to deploy the solution in less time. The vendor has launched a SASE product that can function with Cloudflare Web Application Firewall, but many improvements are needed in terms of features, such as the web filtering feature, and CASB has not yet been added.
Akshit Malik - PeerSpot reviewer
Provides website security, safeguarding against various threats and effective protection against DDoS attacks
The initial setup is moderate because it's neither too easy nor too hard. Sucuri provides us with many ways to set up our site, handle the routing, and perform the necessary configurations. It's deployed on the cloud. We used the managed service of Sucuri and then routed all the requests from Sucuri to our AWS platform.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Cloudflare WAF provides protection through rules and functionalities like Cloudflare's SDRAP."
"The stability of Cloudflare Web Application Firewall deserves a perfect 10 out of 10."
"We extensively use the solution every day. The solution is very stable; we haven’t seen any glitches."
"The integration of Cloudflare with Cloud Suite is its most valuable feature."
"Does a good job preventing web application attacks."
"Some of the most valuable features of Cloudflare Web Application Firewall include its DNS zone setup and the zero trust policy."
"The setup process is very simple for me."
"Technical support has a very fast response time and they are helpful."
"The initial setup was very easy."
"Domain name scanning since it allows us to scan all our domain names and determine whether it has malware or if is reported as phishing."
"It significantly eases the workload and streamlines the initial setup required to protect a website."
"The initial setup was straightforward. Straight forward because the plugin can simply be installed and then it does its job. It's not complex, there is no learning curve. The online scan is simple, you put in the website address and the scan gives us a report on the browser itself. It's simple to use."
"I use it as a WAF, which is basically a web firewall to monitor and block traffic to our web server."
"The most valuable part is the analytics and visualization."
 

Cons

"The accuracy of the Cloudflare Web Application Firewall could be improved by reducing the number of false-negative alerts."
"They need to improve their support because getting a response for basic requests took around 48 hours, which is too long."
"If they add logs history within the Cloudflare offering, that would be a great benefit."
"The product can improve by having more multitenancy capability, which is currently not available."
"The notification part could be improved. It's very much connected to Web Application Firewall, rate-limiting, and DDoS protection."
"It would be ideal if the solution offered better log integration and more integration with different platforms."
"Cloudflare Web Application Firewall should improve visibility for a customer."
"Cloudflare Web Application Firewall should include port forwarding features."
"In terms of improvement, the cost factor is always there."
"The main improvement I would like to see is support for .NET applications. If they could include this feature, I would include more sites in the protection."
"Confident score: Currently it does not have one and there are cases that most websites flagged are false-positives."
"It would greatly benefit customers if they implemented an online chat or messaging system for quicker assistance."
"Sucuri could provide help for specific security alerts in-line instead of requiring users to search for it in the help section."
"I would rate this solution an eight out of ten. The reason is that we have found sometimes customers or Google saying that there is something wrong with the website but Sucuri says that the site is clean so we do have to look at the site manually which means that the Sucuri scan does not pick up anything and everything."
 

Pricing and Cost Advice

"The pricing model is very straightforward compared to the competition. You just pay per month for the product and usage."
"The solution is expensive."
"We pay $210 per month for CloudFlare WAF."
"What's my experience with pricing, setup cost, and licensing? I believe the pricing is not the best, but it's reasonable and acceptable. We also use the McAfee system in parallel. In terms of pricing, its okay - not great, but not bad either. It falls in the middle, which is acceptable. In terms of support licensing, last time, we were searching for a solution, and we considered products from resellers rather than directly from the cloud provider. However, the pricing we encountered was exceptionally high. As a result, we are inclined to select support from the reseller."
"Cloudflare offers different types of subscriptions for businesses, enterprises, and personal users, and the pricing is negotiable."
"It is not too pricey."
"Cloudflare Web Application Firewall is more affordable than other solutions."
"It starts at $20 and can easily go up to $200 monthly"
"The ROI has been very good. Because of the solution, I have a tax break. The site developers were not always experienced people. We used to pay more for cleaning up the site when it was infected. Now, we have peace of mind knowing that the solution will clean up the site and that we won't have to go through the unnecessary process of restoring it from a backup. The protection on the WAF and the measures for backups have also prevented our site from going down."
"It stands out as a more cost-effective option compared to other cloud-based security services like Cloudflare or JetPass."
"Sucuri offers different plans, both the standard plan and an advanced plan. So there are different plans to choose from."
"I’d simply say it’s really worth it."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
860,592 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Educational Organization
10%
Financial Services Firm
9%
Manufacturing Company
7%
Educational Organization
19%
Computer Software Company
12%
Manufacturing Company
8%
Real Estate/Law Firm
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about Cloudflare Web Application Firewall?
The product has a valuable security control functionality.
What needs improvement with Cloudflare Web Application Firewall?
I cannot say much about areas of improvement for Cloudflare Web Application Firewall because I haven't gone through deep understanding of it, as I am still learning. However, they need to improve t...
What do you like most about Sucuri?
The initial setup was very easy.
What is your experience regarding pricing and costs for Sucuri?
The pricing is very reasonable. Sucuri offer other features as an add-on, such as backup, but these have an additional cost. We host the sites ourselves, so I don't take it because it was redundant.
What needs improvement with Sucuri?
The main improvement I would like to see is support for .NET applications. If they could include this feature, I would include more sites in the protection. In future releases, perhaps Sucuri could...
 

Also Known As

Cloudflare WAF
No data available
 

Overview

 

Sample Customers

crunchbase, udacity, marketo, okcupid, zendesk
The Loft Salon, Tom McFarlin, WPBeginner, Taylor Town, Everything Everywhere, Financial Ducks in a Row, Chubstr, Real Advice Gal, Sujan Patel, Wallao, List25, School the World
Find out what your peers are saying about Cloudflare Web Application Firewall vs. Sucuri and other solutions. Updated: June 2025.
860,592 professionals have used our research since 2012.