Imperva Application Security Platform vs Wallarm NG WAF comparison

Imperva Application Security Platform vs. Wallarm NG WAF

Download the complete report

Helped 884,873 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cloudflare Web Application ...

Mindshare comparison

As of March 2026, in the Web Application Firewall (WAF) category, the mindshare of Cloudflare Web Application Firewall is 5.4%, down from 6.9% compared to the previous year. The mindshare of Imperva Application Security Platform is 8.1%, up from 7.1% compared to the previous year. The mindshare of Wallarm NG WAF is 0.8%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Web Application Firewall (WAF) Mindshare Distribution
Product	Mindshare (%)
Imperva Application Security Platform	8.1%
Cloudflare Web Application Firewall	5.4%
Wallarm NG WAF	0.8%
Other	85.7%

Web Application Firewall (WAF)

Featured Reviews

Dean Barisic

CTO at PlayNirvana

Advanced security reporting has protected high-traffic betting platforms from constant attacks

I don't see room for improvement to Cloudflare Web Application Firewall. One thing I don't know much about because we have a dedicated IT team for that, and I'm not involved with Cloudflare much anymore. But if I were to compare them to F5, I would like to see more features that F5 offers. F5 has an option to bring the whole infrastructure, the whole WAF and all their packages, Bot Management, and everything else on your infrastructure. You need to install certain services from their side, and then you can choose if you would like requests to hit your servers immediately or if requests need to be proxied through F5 backbone. That would be a nice addition because we have 90% of the traffic as legit traffic coming from whitelisted servers. If it comes from whitelisted servers, I don't need to go every request through the backbone; I could easily just IP whitelist everything. Then I could maybe have Bot Management on my infrastructure that drastically reduces the price of Cloudflare. I would like to see Push CDN more improved in the next release of Cloudflare Web Application Firewall. And maybe something similar to Pushpin that Fastly has, which is an option where you can push messages that then can be scaled globally over the network. From our perspective, if we have a listener that listens for stock updates, I would just need to have one processor that pushes those updates to the Cloudflare API, and then Cloudflare would broadcast that message to all listeners. Cloudflare will check the order of the message, and if you, as a customer, are not connected or have some kind of network issue, when you reconnect, you will receive the latest state and missing updates.

Solution ensures website availability and proactive threat mitigation

reviewer1247523

Head of Sales Services Department at a comms service provider with 51-200 employees

Over the seven years, the most valuable features of Imperva DDoS that I have found are related to DDoS attacks, which are a group of attacks, and not all of them can be resolved on the endpoint level before the website. Using the web firewall before the website is a common use case to protect against malicious requests to the website. I have utilized Imperva's Intelligent Traffic Filtering feature. This feature helps me understand how the attack is progressing and what is happening inside the requests to our website. It allows me to granularly grant or deny access to certain parts of our website. This helps when we know our customers and the types of requests that can be sent from them, enabling us to block some malicious requests. Imperva DDoS has User Behavior Analytics and Threat Intelligence on its board, and this helps us to be protected proactively. Imperva DDoS connects to its database of threats, storing whole information about attacks all over the world in one simple engine. Everyone can use this feature, which can connect to this engine and get information about what is going on at the world level. That is the way to be protected at the company's level. The integration capabilities of Imperva DDoS are very easy and simple. We can run it in 2 hours.

Helps us to monitor attacks to our sites and prevents a lot of them

it_user796242

Information Security Engineer at a tech vendor with 51-200 employees

Set up Wallarm as a reverse proxy. Do not replace your web server. Use Wallarm first in monitoring mode, then learn from Wallarm which type of request is false positive and which type of request is not. This process takes a couple of weeks for very highly-loaded web applications (few millions of unique visitors in one month). Then you can turn Wallarm into blocking mode and everything will be fine. Do not forget to build a monitoring system, the wave, and API for it. Before we started using Wallarm, I already knew Ivan (CEO) and Stepan (COO) from a couple of years before. Ivan had his own security company and Stepan was working on a Russian security magazine called Xakep. They told us that they wanted to create a new WAF and already had a working version of it. They asked me to test it. We did tests, and it was really good. After few month after testing, we signed an agreement. Our choice was made not because we knew these guys for a long time, but because the product was really cool and we were glad to start using it as one of the first on the market!

More Cloudflare Web Application Firewall pros

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The setup process is very simple for me."

"The impact of Cloudflare Web Application Firewall's integration with existing web technologies on our site's performance and security measures is quite great, actually."

"The product has improved our security posture by blocking bad actors."

"The integration of Cloudflare with Cloud Suite is its most valuable feature."

"Does a good job preventing web application attacks."

"I'm highly satisfied. It's remarkably user-friendly, enabling me to quickly identify issues, and deploy solutions, and it offers the necessary features."

"Caching is the most valuable feature of Cloudflare Web Application Firewall."

"Technical support has a very fast response time and they are helpful."

"The solution is stable."

"Essentially, it has added an extra layer of protection to my clients through their DNS routing service."

"Imperva is easy to use and deploy. The UI is excellent."

"The most valuable features of Imperva Web Application Firewall are the monitoring of databases and the dashboards are easy to understand."

"I am impressed with the product's automatic bot mechanism. It also gives us the control to create our own custom bot rules."

"Customer Support has been the biggest help in dire situations."

"It is easy to use and has good security."

"This implementation helped our organization a lot in handling web attacks by hackers and other malicious intruders."

More Imperva Application Security Platform pros

"Helps us to monitor situation in regards to attacks to our sites and prevents a lot of them."

Cons

"If they add logs history within the Cloudflare offering, that would be a great benefit."

"The product can improve by having more multitenancy capability, which is currently not available."

"They have some limitations with third-party integrations."

"The user interface is very simple and straightforward, but users need knowledge about DNS to accomplish tasks."

"The accuracy of the Cloudflare Web Application Firewall could be improved by reducing the number of false-negative alerts."

"I have experienced some difficulties with Cloudflare's support as a customer based in India."

"The blocked logs are difficult to read at times."

"Cloudflare Web Application Firewall should improve visibility for a customer."

More Cloudflare Web Application Firewall cons

"We would like them to hire people in Sweden because it's quite hard when people are sitting in the UK or Belgium because some of the customers really want them to be local."

"I think that better bot protection is needed in this solution."

"The solution needs to improve Integration with third parties for their on-prem deployment models. The integration is not that good yet."

"The API is lackluster but especially for customers."

"There is nothing specific where the application firewall is falling short."

"The reporting is missing some features, such as: only two export formats, and the time period does not include the last day, week, year."

"They recently separated the WAF and the DAM management gateways in order for each of these to be managed from different areas, so I believe it now requires additional investments for what was previously a single complete solution."

"It would be nice to have more security control over mobile applications so I would suggest adding more mobile security features. It would also be beneficial to see improvements in regards to interface bandwidth performance, CPU time, and RAM size. Learning capability of the device is quite weak."

More Imperva Application Security Platform cons

"The biggest problem for us was the stability and speed using the first version of Wallarm. Now, it is fine."

Pricing and Cost Advice

"The annual licensing fee is $10,000 USD."

"Cloudflare offers different types of subscriptions for businesses, enterprises, and personal users, and the pricing is negotiable."

"It is not too pricey."

"We pay $210 per month for CloudFlare WAF."

"The solution's pricing option needs to be more transparent for enterprise clients."

"The pricing model is very straightforward compared to the competition. You just pay per month for the product and usage."

"It starts at $20 and can easily go up to $200 monthly"

"Cloudflare Web Application Firewall is more affordable than other solutions."

More Cloudflare Web Application Firewall pricing and cost advice

"Everybody complains about the price of this solution."

"The cost of this solution depends on the platform."

"It is a very expensive solution. The price is very high. A lot of customers tell us that they would love to use Imperva more. I have some customers who have 50 websites, but they have only 10 websites on Imperva because of the price. They would love to have all their websites running through Imperva, but they can't. They have to choose the more critical websites to protect because the price is very high. It is a very good product, but it is too expensive. If you buy a plan for 20 megabytes and you don't consume all of your 20 megabytes, it is okay, but if you consume more, you are charged for the superior traffic."

"There is a license or subscription renewal that our customers pay."

"The license is on a yearly basis."

"It is not expensive compared to the other similar solutions in this category."

"Make sure you understand the way that Imperva charges. It's very affordable. However, I would like to see a package with the Virtual Patching included. You get to do patching separately."

"It is a very affordable solution."

More Imperva Application Security Platform pricing and cost advice

"Pricing must be cheaper than the competition and the licensing must be good."

See which vendors are best for you

Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.

See recommendations

884,873 professionals have used our research since 2012.

Comparison Review

it_user68487

Security Expert with 51-200 employees

Nov 6, 2013

CloudFlare vs Incapsula: Web Application Firewall

CloudFlare vs Incapsula: Round 2 Web Application Firewall Comparative Penetration Testing Analysis Report v1.0 Summary This document contains the results of a second comparative penetration test conducted by a team of security specialists at Zero Science Lab against two cloud-based Web…

What is your experience regarding pricing and costs for Cloudflare Web Application Firewall?

Top Industries

By visitors reading reviews

Computer Software Company

11%

Manufacturing Company

Financial Services Firm

Comms Service Provider

Financial Services Firm

12%

Manufacturing Company

Computer Software Company

Comms Service Provider

Government

13%

Financial Services Firm

12%

Manufacturing Company

11%

Insurance Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	16
Midsize Enterprise	6
Large Enterprise	6

By reviewers
Company Size	Count
Small Business	84
Midsize Enterprise	25
Large Enterprise	62

No data available

Questions from the Community

The price of Cloudflare Web Application Firewall is reasonable.

What needs improvement with Cloudflare Web Application Firewall?

I don't see room for improvement to Cloudflare Web Application Firewall. One thing I don't know much about because we...

What is your primary use case for Cloudflare Web Application Firewall?

We are using Cloudflare Web Application Firewall's advanced reporting and analytics tools with their Zero Trust, so e...

Which Web Application Firewall (WAF) would you recommend? R&S or Imperva?

Imperva is a strong choice, given their security focus and ongoing R&D into the product in areas such as bot mana...

What is your experience regarding pricing and costs for Imperva DDoS?

The pricing, setup costs, and licensing of Imperva DDoS are reasonable for the amount of technical capabilities provi...

What needs improvement with Imperva DDoS?

I would like to see improvements in the pooling of threats and attacks, possibly to enlarge the scale of indicators o...

Fortinet FortiWeb vs Cloudflare Web Application Firewall

Ask a question

Earn 20 points

Comparisons

Compared 8% of the time

Check Point CloudGuard WAF vs Cloudflare Web Application Firewall

Compared 7% of the time

Azure Web Application Firewall vs Cloudflare Web Application Firewall

Compared 5% of the time

F5 Advanced WAF vs Cloudflare Web Application Firewall

Compared 5% of the time

AWS WAF vs Cloudflare Web Application Firewall

Compared 5% of the time

More Cloudflare Web Application Firewall Competitors

Cloudflare vs Imperva Application Security Platform

Compared 11% of the time

Fortinet FortiWeb vs Imperva Application Security Platform

Compared 6% of the time

Akamai vs Imperva Application Security Platform

Compared 6% of the time

F5 Advanced WAF vs Imperva Application Security Platform

Compared 3% of the time

Check Point CloudGuard WAF vs Imperva Application Security Platform

Compared 2% of the time

More Imperva Application Security Platform Competitors

Akamai API Security vs Wallarm NG WAF

Compared 10% of the time

Cequence Security vs Wallarm NG WAF

Compared 10% of the time

Venusense Web Application Firewall vs Wallarm NG WAF

Compared 8% of the time

Salt Security vs Wallarm NG WAF

Compared 8% of the time

Fortinet FortiWeb vs Wallarm NG WAF

Compared 6% of the time

More Wallarm NG WAF Competitors

Product Reports

Cloudflare Web Application Firewall

Download Cloudflare Web Application Firewall product report

Cloudflare Web Application Firewall report

Imperva Application Security Platform

Download Imperva Application Security Platform product report

Imperva Application Security Platform report

Web Application Firewall (WAF)

Download Wallarm NG WAF product report

Also Known As

Cloudflare WAF

Imperva Bot Management, Imperva Web Application Firewall, Imperva API Security

Wallarm NG-WAF

Overview

Cloudflare Web Application Firewall's intuitive dashboard enables users to build powerful rules through easy clicks and also provides Terraform integration. Every request to the WAF is inspected against the rule engine and the threat intelligence curated from protecting over 27 Million websites. Suspicious requests can be blocked, challenged or logged as per the needs of the user while legitimate requests are routed to the destination, agnostic of whether it lives on-premise or in the cloud. Analytics and Cloudflare Logs enable visibility into actionable metrics for the user.

Cloudflare

Imperva Application Security Platform delivers comprehensive and continuous web threat protection. Renowned for its ease of use, it shields web applications and databases from various cyber threats while integrating seamlessly with cloud and on-premises environments.

Imperva Application Security Platform protects web environments by offering advanced security measures against threats like DDoS attacks, SQL injections, and cross-site scripting. As a robust web application firewall, it provides extensive monitoring and bot management capabilities. The platform integrates content delivery networks for enhanced performance and scalability, while real-time traffic analysis ensures consistent protection. Despite its strengths, improvements can be made in policy management and customization options. Users seek better integration with third-party tools and more competitive pricing models. The inclusion of AI for enhanced analytics is also anticipated.

What are the key features of Imperva Application Security Platform?

Correlated Attack Validation: Enhances threat assessment by linking related security events.
Threat Radar: Offers visibility into potential and ongoing threats.
Virtual Patching: Provides protection against vulnerabilities without immediate code changes.
IncapRules: Allows creation of custom security policies.
DDoS Protection: Defends against large-scale distributed denial-of-service attacks.
CDN Integration: Improves content delivery speed and reliability.

What benefits should users look for in reviews?

User-Friendly Administration: Simplifies setup and ongoing management tasks.
Seamless Integration: Ensures smooth operation with existing infrastructure.
Comprehensive Threat Protection: Shields digital assets from a wide range of threats.
Hands-On Support: Provides timely and effective customer service assistance.

Imperva Application Security Platform is implemented in industries needing strong database and application protection. Companies use it to enforce geolocation restrictions and manage bots, benefiting sectors like finance and e-commerce where data security and threat monitoring are critical. Its ability to protect and ensure data accessibility makes it integral to business operations prioritizing cyber resilience.

Imperva

Wallarm NG WAF provides advanced security by integrating machine learning, making it essential for modern web applications. It offers protection against sophisticated threats and automates many processes.

Wallarm NG WAF leverages AI-driven technology to deliver robust security measures. It helps in defending web applications from cybersecurity threats with enhanced threat detection and response capabilities. Beyond vulnerability insights, Wallarm enhances security protocols, scales with growing online demands, and ensures comprehensive threat coverage, fostering a safer web environment.

What are the key features of Wallarm NG WAF?

AI-Powered Threat Detection: Identifies and mitigates sophisticated attacks efficiently.
Automated Security Updates: Continuously updates defense strategies without manual intervention.
Flexible Deployment: Easily integrates across cloud, on-premise, and hybrid setups.
Scalability: Adapts to growing traffic volumes with consistent protection.
Detailed Reporting: Provides comprehensive analytics on web security posture.

What benefits can users expect from Wallarm NG WAF?

Increased Security: Enhances threat detection and reduces vulnerabilities.
Operational Efficiency: Reduces manual intervention with automated tasks.
Cost-Effectiveness: Optimizes security expenditure by preventing potential breaches.
Time Savings: Automates repetitive actions, saving valuable time for IT teams.

In industries like finance, e-commerce, and healthcare, Wallarm NG WAF is implemented to ensure data protection and compliance with stringent security standards. Its adaptability allows it to meet industry-specific requirements, offering specialized configurations tailored to each sector's unique demands.

Wallarm

Sample Customers

crunchbase, udacity, marketo, okcupid, zendesk

Hitachi, BNZ, Bitstamp, Moz, InnoGames, BTCChina, Wix, LivePerson, Zillow and more.

Panasonic. Miro. Rappi. Wargaming. Gannett. Omio. Acronis. Workforce Software. Tipalti. SEMRush.

Imperva Application Security Platform vs. Wallarm NG WAF