No more typing reviews! Try our Samantha, our new voice AI agent.

Fortinet FortiDDoS vs Imperva Application Security Platform comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 22, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Ranking in Distributed Denial-of-Service (DDoS) Protection
3rd
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
79
Ranking in other categories
CDN (1st), WAN Optimization (4th), Managed DNS (1st), Domain Name System (DNS) Security (5th), Cloud Security Posture Management (CSPM) (18th)
Fortinet FortiDDoS
Ranking in Distributed Denial-of-Service (DDoS) Protection
12th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
15
Ranking in other categories
No ranking in other categories
Imperva Application Securit...
Ranking in Distributed Denial-of-Service (DDoS) Protection
4th
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
144
Ranking in other categories
CDN (2nd), Web Application Firewall (WAF) (1st), Bot Management (1st), API Security (2nd)
 

Mindshare comparison

As of May 2026, in the Distributed Denial-of-Service (DDoS) Protection category, the mindshare of Cloudflare is 14.0%, down from 19.1% compared to the previous year. The mindshare of Fortinet FortiDDoS is 2.2%, down from 2.8% compared to the previous year. The mindshare of Imperva Application Security Platform is 8.5%, up from 7.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Distributed Denial-of-Service (DDoS) Protection Mindshare Distribution
ProductMindshare (%)
Cloudflare14.0%
Imperva Application Security Platform8.5%
Fortinet FortiDDoS2.2%
Other75.3%
Distributed Denial-of-Service (DDoS) Protection
 

Featured Reviews

M.A. Faisal - PeerSpot reviewer
General Manager at bKash Limited
Advanced protection has secured critical web workloads and provides clear traffic visibility
From a security perspective, there remains a security loophole, as some browsers in the market can bypass the Turnstile solution, which requires approximately 40 seconds to do so. From a performance perspective, this is acceptable. We also tried Google reCAPTCHA, and that can also be bypassed. From a security perspective, I would say neither solution is completely secured. Regarding uptime, we have faced a couple of incidents due to Cloudflare in recent years, so I cannot say we receive 100% uptime for our region. We sometimes face challenges, including downtime and other issues. As a result, we are not receiving 100% uptime from Cloudflare's solution. Since most of our customers are in this region, we need alternatives. We need something more competitive than Cloudflare. Unfortunately, in Bangladesh, Cloudflare has three points of presence already, and we cannot find any other solution provider in Bangladesh as an alternative, which presents another challenge. Competitor solutions have more attack signatures, which ensure better security compared to Cloudflare's predefined configurations. Customers do not have options to modify any configuration parameters in Cloudflare, whereas other competitor solutions, such as F5 Distributed Cloud, allow customers to tune configurations according to their requirements. Cloudflare could improve in this area. Additionally, regarding visibility, Cloudflare has static visibility, but they could adopt dynamic graph features for their customers.
MO
IT Analyst at Evapco, Inc.
Reliable protection and smooth setup enhance company security
Currently, I have two firewalls, with one located in Sorocaba, model 90D, and the other in São Paulo, model 30D. They are connected by VPN. I use the firewalls for VPN and final protection for my company, and my equipment is maintained by an internet company called Multiprox The equipment works…
ST
Senior Cybersecurity Consultant at Cyberoutcome Limited
Strong policies and bot defenses have secured critical APIs and have reduced attack noise
From my research regarding the IAM space that Imperva Application Security Platform is trying to look into, I believe they still need to do a lot of modeling and modification to make sure that also helps. There are several competitors in the IAM space, so Imperva would do well if they can do some basic modeling and modifications from my own personal research and my own experience in the IAM space. Alternatively, they could actually just focus on trying to be stronger in the web application space and the database activity monitoring space.The main reason it is not a perfect ten is regarding support. At times, having to reach the support team takes eight hours to ten hours maximum. There are times when clients could have urgent issues to attend to. The support team could do more by having a faster response rate.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Centralized, full-featured DNS."
"The most valuable features of the solution are performance and security."
"Easier http to https redirect using page rules"
"We're using dynamic components to build flexible pages to create and manage Git merge requests for code and reviews."
"DDoS protection is this product’s most valuable feature."
"Many websites require an SSL certificate because they sell stuff and want SSL. Cloudflare comes with an SSL certificate built in. It's automatic. You sign yourself up for Cloudflare, and an SSL certificate automatically protects your website. You don't necessarily need a certificate if you have a connection between your website and your host, the server, Cloudflare, and the host."
"The solution automatically detects and responds to certain types of traffic based on geolocation."
"It's a reasonably priced solution that meets customers' needs and it's not too difficult to deploy."
"The product allows the users to adjust the thresholds."
"The protection resources and the support are valuable features of the solution."
"Packet inspection has been effective for mitigating DDoS attacks."
"The product's initial setup phase was really easy."
"The solution is very user-friendly and very easy to use."
"I find this product the best on-premises (in-line) DDoS mitigation solution that suits my current and future requirements."
"It is a user-friendly product in terms of monitoring and updating policies."
"Among its key features: Detects and mitigates DDoS attacks at L3 to L7; negligible to zero false-positives; Generates and sends reports without the need for an expensive third-party solution."
"IncapRules is one of the most valuable features, as you can create your own security and access control rules on top of your security policy. Using IncapRules we were able to easily block Layer 7 DDoS attacks several times."
"The WAF itself has been very valuable to me because it has such a complete range of features. Another reason why I like it is because it also takes care of the total overview of the traffic over the network."
"Imperva is a good solution; it has fewer false positives, is very simple to maintain, and is also simple to configure without needing any HTTP knowledge or understanding of HTTP programming languages."
"I love the solution's capabilities and the ease of the installation."
"The solution is a leader in the market and is easy to use."
"Incapsula delivers a massive improvement to website performance and security in less than 20 minutes, regardless of the CMS."
"Bad-IP blocking and signature-based blocking for web application security."
"Simplifies putting everything in code."
 

Cons

"We're facing challenges due to an upgrade in the machine learning model. The problem arises from some users abusing the APIs, resulting in an influx of suspicious traffic. Cloudflare's learning model mistakenly identifies this traffic as human. Consequently, it assigns it a higher trust score, akin to legitimate human traffic, causing complications in our architecture. Previously, such traffic would have been categorized as suspicious, enabling us to apply appropriate blocking rules. However, we encounter difficulties distinguishing between genuine and suspicious traffic with the new categorization. Despite these challenges, overall, Cloudflare remains the preferred solution compared to Azure, AWS CloudFront, and Google Cloud Armor."
"I believe they currently have this feature, but there will most likely be integration with APIs so we can control some features through API."
"It would be good if Cloudflare could have more servers for better traffic routing or an increase in the traffic routed."
"Latencies are always a problem."
"Several features that I think is essential is not available in the free and business package."
"The solution could use more analytics on the backend to give us more insights into everything."
"Yes, there were a few times when some of their CDN nodes would fail, creating serious speed issues with the site without any warning or notification from their side."
"Support response time could be improved."
"I find that there have been issues in the past year with the solution hanging. It freezes often."
"Technical support isn't too good with Fortinet. They could be more responsive and helpful overall."
"The only thing they need to do is to automate it. Today, you must create tools that do not require the use of an expert or anyone with special skills."
"The challenge lies within the customer environment, particularly in Brazil, where companies have stringent security requirements for implementing solutions."
"The web interface could be much better."
"The product’s pricing needs improvement."
"There aren't really any aspects of the solution we are unhappy with. It's been a positive experience overall."
"The tool needs to focus more on the area of application traffic management, where it currently has some shortcomings."
"Communication declined a bit as they got bigger – 7/10."
"The UI interface needs improvement."
"Certificate management could be improved."
"The Imperva Web Application Firewall automations are good, but there is still room for improvement with them."
"Their customer service sometimes has different responses for similar requests. We sometimes need to explain the issue many times before they understand."
"I think that better bot protection is needed in this solution."
"We faced issues regarding compliance with client procedures. The client had strict compliance rules, and Imperva needed to be on a VM, while the client required containerization, causing a conflict. They went with Imperva for the on-premise version but shelved the cloud project due to too many blockers."
"Because of all these services, you need to look at the company's services budget."
 

Pricing and Cost Advice

"I believe their performance has improved, but I'd like to refrain from discussing the pricing aspect related to the cloud. The pricing, in my opinion, could be simplified, and I think they should consider reevaluating the pricing for support, as it can be quite high. At times, this cost can make it challenging to choose CARFAGuard or opt for the support."
"The cost primarily depends on the size of the organization."
"The product's pricing is cheap."
"In terms of licensing costs, we don't pay for licensing for Cloudflare. We only establish communication, then for peering, Cloudflare takes care of the cross-connection in different data centers."
"I think the pricing is competitive. I think as far as licensing is concerned it's pretty straightforward because it's based on domain. It's just that sometimes domains could be tricky with some customers."
"We are using the free version."
"We don't have any issues with the price."
"The price is reasonable."
"It's quite pricey."
"The product’s pricing needs improvement."
"The solution is reasonably priced."
"Imperva Web Application Firewall is expensive."
"We sell three-year licenses for Imperva Web Application Firewall to our customers. The price is a little expensive."
"Imperva’s pricing is a bit higher in the market since it offers a full-blown WAF."
"We have an issue with Imperva Incapsula in the Iraqi market because of the high price."
"Pricing could be more competitive."
"Licensing can range from one to twenty thousand dollars annually. Additionally, some features, including software support, require an annual subscription as well."
"​Although the pricing can be a little high, it is worth the protection and security that it offers.​"
"Varies depending on the needs of the customer."
report
Use our free recommendation engine to learn which Distributed Denial-of-Service (DDoS) Protection solutions are best for your needs.
893,244 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
10%
Comms Service Provider
10%
Computer Software Company
8%
Manufacturing Company
8%
Comms Service Provider
12%
Financial Services Firm
9%
Government
8%
Computer Software Company
8%
Financial Services Firm
13%
Manufacturing Company
8%
Computer Software Company
7%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise11
Large Enterprise26
By reviewers
Company SizeCount
Small Business10
Large Enterprise6
By reviewers
Company SizeCount
Small Business88
Midsize Enterprise25
Large Enterprise69
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What is your experience regarding pricing and costs for Cloudflare?
The tool's pricing is moderate. I rate the product’s pricing a five out of ten, where one is cheap, and ten is expens...
Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Arbor would be the best bid, apart from Arbor, Palo Alto and Fortinet have good solutions. As this is an ISP, I would...
What is your experience regarding pricing and costs for Fortinet FortiDDoS?
Fortinet FortiDDoS offers lower costs compared to other solutions. The licensing costs are annually renewed.
What needs improvement with Fortinet FortiDDoS?
There is a need for more features that protect personal information, especially given the PDP issue in Indonesia.
Which Web Application Firewall (WAF) would you recommend? R&S or Imperva?
Imperva is a strong choice, given their security focus and ongoing R&D into the product in areas such as bot mana...
What is your experience regarding pricing and costs for Imperva DDoS?
The pricing, setup costs, and licensing of Imperva DDoS are reasonable for the amount of technical capabilities provi...
What needs improvement with Imperva DDoS?
I would like to see improvements in the pooling of threats and attacks, possibly to enlarge the scale of indicators o...
 

Also Known As

Cloudflare DNS
Fortinet DDoS, FortiDDos
Imperva Bot Management, Imperva Web Application Firewall, Imperva API Security
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Black Gold Regional Schools, Amadeus Hospitality, Jefferson County, Chunghwa Telecom, City of Boroondara, Dimension Data
Hitachi, BNZ, Bitstamp, Moz, InnoGames, BTCChina, Wix, LivePerson, Zillow and more.
Find out what your peers are saying about Fortinet FortiDDoS vs. Imperva Application Security Platform and other solutions. Updated: April 2026.
893,244 professionals have used our research since 2012.