No more typing reviews! Try our Samantha, our new voice AI agent.

Microsoft Azure Application Gateway vs Wallarm NG WAF comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare Web Application ...
Sponsored
Ranking in Web Application Firewall (WAF)
6th
Average Rating
8.6
Reviews Sentiment
7.4
Number of Reviews
26
Ranking in other categories
No ranking in other categories
Microsoft Azure Application...
Ranking in Web Application Firewall (WAF)
11th
Average Rating
7.4
Reviews Sentiment
6.8
Number of Reviews
50
Ranking in other categories
Application Delivery Controllers (ADC) (12th)
Wallarm NG WAF
Ranking in Web Application Firewall (WAF)
39th
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
5
Ranking in other categories
API Security (14th)
 

Mindshare comparison

As of August 2026, in the Web Application Firewall (WAF) category, the mindshare of Cloudflare Web Application Firewall is 3.8%, down from 5.8% compared to the previous year. The mindshare of Microsoft Azure Application Gateway is 3.0%, down from 7.9% compared to the previous year. The mindshare of Wallarm NG WAF is 1.0%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Web Application Firewall (WAF) Mindshare Distribution
ProductMindshare (%)
Cloudflare Web Application Firewall3.8%
Microsoft Azure Application Gateway3.0%
Wallarm NG WAF1.0%
Other92.2%
Web Application Firewall (WAF)
 

Featured Reviews

DB
CTO at PlayNirvana
Advanced security reporting has protected high-traffic betting platforms from constant attacks
I don't see room for improvement to Cloudflare Web Application Firewall. One thing I don't know much about because we have a dedicated IT team for that, and I'm not involved with Cloudflare much anymore. But if I were to compare them to F5, I would like to see more features that F5 offers. F5 has an option to bring the whole infrastructure, the whole WAF and all their packages, Bot Management, and everything else on your infrastructure. You need to install certain services from their side, and then you can choose if you would like requests to hit your servers immediately or if requests need to be proxied through F5 backbone. That would be a nice addition because we have 90% of the traffic as legit traffic coming from whitelisted servers. If it comes from whitelisted servers, I don't need to go every request through the backbone; I could easily just IP whitelist everything. Then I could maybe have Bot Management on my infrastructure that drastically reduces the price of Cloudflare. I would like to see Push CDN more improved in the next release of Cloudflare Web Application Firewall. And maybe something similar to Pushpin that Fastly has, which is an option where you can push messages that then can be scaled globally over the network. From our perspective, if we have a listener that listens for stock updates, I would just need to have one processor that pushes those updates to the Cloudflare API, and then Cloudflare would broadcast that message to all listeners. Cloudflare will check the order of the message, and if you, as a customer, are not connected or have some kind of network issue, when you reconnect, you will receive the latest state and missing updates.
SS
Cloud Specialist at a tech services company with 10,001+ employees
Mutual TLS has secured our web services and now needs broader protocol support
The most valuable feature we have found in Microsoft Azure Application Gateway is mutual TLS. We find mutual TLS valuable because we can verify the client securely by setting up the trust certificate of the client, and also if we do it at the client side as well. This successfully develops mutual trust, ensuring that we know the client who is calling our service is a legitimate client. That is a very nice feature.Microsoft Azure Application Gateway has helped manage our traffic efficiently because we have many web services that we can put behind the same URL, and we can have different URLs with the same Application Gateway with a limited number of listeners. We can do host-based routing as well as URL-based routing or path-based routing. It supports both, so we can have even a single URL supporting many applications, or we can have different URLs for different applications respectively. We have both use cases.
it_user796242 - PeerSpot reviewer
Information Security Engineer at a tech vendor with 51-200 employees
Helps us to monitor attacks to our sites and prevents a lot of them
Set up Wallarm as a reverse proxy. Do not replace your web server. Use Wallarm first in monitoring mode, then learn from Wallarm which type of request is false positive and which type of request is not. This process takes a couple of weeks for very highly-loaded web applications (few millions of unique visitors in one month). Then you can turn Wallarm into blocking mode and everything will be fine. Do not forget to build a monitoring system, the wave, and API for it. Before we started using Wallarm, I already knew Ivan (CEO) and Stepan (COO) from a couple of years before. Ivan had his own security company and Stepan was working on a Russian security magazine called Xakep. They told us that they wanted to create a new WAF and already had a working version of it. They asked me to test it. We did tests, and it was really good. After few month after testing, we signed an agreement. Our choice was made not because we knew these guys for a long time, but because the product was really cool and we were glad to start using it as one of the first on the market!

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We like that there's load balancing, firewall capabilities, DDoS protection, et cetera, all covered by Cloudflare."
"Caching is the most valuable feature of Cloudflare Web Application Firewall."
"Very glad the WAF rulesets works out of box, and requires very little tuning or maintenance."
"It's pretty convenient and pretty easy to set up and run. And then kind of for static content, it also offers caching."
"The solution protects our application, which runs on the HTTP protocol, from DDoS attacks."
"There is a huge signature repository"
"Cloudflare WAF provides protection through rules and functionalities like Cloudflare's SDRAP."
"In general, it's a very good product: the solution is very stable, the performance is great, the product offers very good scalability, the pricing is very reasonable, the installation is very straightforward and quite simple, and technical support has a very fast response time and is helpful."
"In my experience, Microsoft products have a smooth integration and facilitate easy management and monitoring. Using Azure Application Gateway allows us to efficiently handle the system loads."
"The best features for Microsoft Azure Application Gateway basically protect your application and provide security-related features and also divert the traffic to different instances of your application."
"The load balancing features are valuable."
"The solution's integration is very good."
"This is a SaaS product, so it is always up to date."
"It is a scalable solution...The installation phase of Microsoft Azure Application Gateway is very easy."
"The pricing is quite good."
"The most valuable feature is WAF."
"Vulnerability scanner and WAF are valuable features."
"Perimeter control and active vulnerability scanner are the most valuable features."
"They are the only solution that fits our success criteria and business objectives: WAF must have a low (<5%) false negative rate and be ready to protect from all well-known web attacks."
"With active threat detection, we are no longer over-swamped with tons of useless events."
"Helps us to monitor situation in regards to attacks to our sites and prevents a lot of them."
"The most powerful feature is the ability to first learn what type of query to make to your web application when it is attacked and what type of query creates a false positive to your app."
 

Cons

"Cloudflare should update the version of the ModSecurity core rule set that they run on."
"The learning curve was steep initially."
"The ModSecurity core rules need to be updated."
"The rate limiting functionality could be enhanced, as we find it somewhat limited."
"If they add logs history within the Cloudflare offering, that would be a great benefit."
"Cloudflare Web Application Firewall should improve visibility for a customer."
"The accuracy of the Cloudflare Web Application Firewall could be improved by reducing the number of false-negative alerts."
"Its stability could be better."
"Implementing and standardizing the solution across the IT landscape in a heterogeneous environment is painful."
"The tool is a pain to deal with when it comes to the area of configuration."
"We faced some downtime while validating CNAME."
"The solution should provide more security for certificate-based services so that we can implement more security on that."
"It could be easier to change servicing."
"The pricing of the solution is a bit high. The solution should offer different pricing systems."
"Microsoft Azure Application Gateway's first deployment is complex. It needs to improve its pricing."
"The monitoring on the solution could be better."
"It needs more customization in PDF reports."
"There were several stability issues during the first pilot."
"Technical support is 6 or 7 out of 10. Sometimes we have had trouble with communication and understanding."
"The biggest problem for us was the stability and speed using the first version of Wallarm. Now, it is fine."
"Wallarm uses a learning mechanism to detect attacks and to avoid false positives. If Wallarm blocks some illegitimate request, then you can go to the management console and mark this request as false positive, but sometimes this does not work properly."
 

Pricing and Cost Advice

"Cloudflare Web Application Firewall is more affordable than other solutions."
"We pay $210 per month for CloudFlare WAF."
"The solution's pricing option needs to be more transparent for enterprise clients."
"The pricing model is very straightforward compared to the competition. You just pay per month for the product and usage."
"It starts at $20 and can easily go up to $200 monthly"
"It is not too pricey."
"The solution is expensive."
"Cloudflare offers different types of subscriptions for businesses, enterprises, and personal users, and the pricing is negotiable."
"The tool's pricing model is pay-as-you-go."
"I would rate the pricing a three out of ten, with ten being cheap and one being expensive."
"The pricing is based on how much you use the solution."
"The cost is not an issue."
"The product is not expensive."
"Microsoft Azure Application Gateway is expensive."
"We use the tool's basic subscription. Its licensing costs are monthly."
"There is a need to pay a fixed price per month to use the product. There are no additional payments to be made to Microsoft apart from the charges paid towards the monthly licensing costs attached to the solution."
"​Pricing must be cheaper than the competition and the licensing must be good.​"
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
908,834 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
17%
Comms Service Provider
9%
Financial Services Firm
9%
Outsourcing Company
7%
Financial Services Firm
10%
Manufacturing Company
9%
Computer Software Company
8%
Government
8%
Financial Services Firm
19%
Government
11%
Insurance Company
8%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise6
Large Enterprise6
By reviewers
Company SizeCount
Small Business23
Midsize Enterprise6
Large Enterprise24
No data available
 

Questions from the Community

What needs improvement with Cloudflare Web Application Firewall?
I don't see room for improvement to Cloudflare Web Application Firewall. One thing I don't know much about because we...
What is your primary use case for Cloudflare Web Application Firewall?
We are using Cloudflare Web Application Firewall's advanced reporting and analytics tools with their Zero Trust, so e...
What's the difference between Azure Front Door and Application Gateway?
We found Azure Front Door to be easily scaled and very stable. The implementation is very fast and Microsoft provides...
How does AWS WAF compare to Microsoft Azure Application Gateway?
Our organization ran comparison tests to determine whether Amazon’s Web Service Web Application Firewall or Microsoft...
What is your experience regarding pricing and costs for Microsoft Azure Application Gateway?
Regarding the pricing and licensing of Application Gateway, it is not cheap because the version we are using is WAF V...
Ask a question
Earn 20 points
 

Also Known As

Cloudflare WAF
Azure Application Gateway, MS Azure Application Gateway
Wallarm NG-WAF
 

Overview

 

Sample Customers

crunchbase, udacity, marketo, okcupid, zendesk
Lilly, AccuWeather, AIRFRANCE, Honeywell
Panasonic. Miro. Rappi. Wargaming. Gannett. Omio. Acronis. Workforce Software. Tipalti. SEMRush.
Find out what your peers are saying about Microsoft Azure Application Gateway vs. Wallarm NG WAF and other solutions. Updated: August 2026.
908,834 professionals have used our research since 2012.