No more typing reviews! Try our Samantha, our new voice AI agent.

NGINX App Protect vs Sucuri comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

NGINX App Protect
Ranking in Web Application Firewall (WAF)
19th
Average Rating
8.2
Reviews Sentiment
6.4
Number of Reviews
27
Ranking in other categories
Container Security (27th), API Security (9th)
Sucuri
Ranking in Web Application Firewall (WAF)
36th
Average Rating
8.4
Reviews Sentiment
7.5
Number of Reviews
6
Ranking in other categories
Distributed Denial-of-Service (DDoS) Protection (25th), Domain Name System (DNS) Security (24th)
 

Mindshare comparison

As of September 2026, in the Web Application Firewall (WAF) category, the mindshare of NGINX App Protect is 2.0%, up from 1.7% compared to the previous year. The mindshare of Sucuri is 1.6%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Web Application Firewall (WAF) Mindshare Distribution
ProductMindshare (%)
NGINX App Protect2.0%
Sucuri1.6%
Other96.4%
Web Application Firewall (WAF)
 

Featured Reviews

Valerio Guaglianone - PeerSpot reviewer
Dev Ops Engineer at adesso AG
Long-term web protection has supported reliable traffic management but needs a simpler interface
NGINX App Protect is a good product. I have used both versions from F5 -also the free version- (I mean the NGINX/NGINX One/App Protect free trial period), and I think it is a good product. It's stable, affordable, and easy to manage. NGINX App Protect is a comprehensive security solution that combines advanced WAF, DoS protection, API security, and DevSecOps automation in a lightweight, scalable package ideal for modern cloud-native architectures. The adaptive machine learning capabilities are truly commendable, as the solution can establish traffic baselines and detect anomalies in real time. It automatically adjusts security policies, minimizing the need for manual intervention and reducing false positives. Additionally, it supports scalable deployment across diverse environments, including on-premises, cloud, Kubernetes, and containers, offering both flexibility and scalability I have experience with the web server, F5 load balancer, and similar products provided by Ergon, for eg. the web application firewall and the Microgateway for K8S. I'm also familiar with F5 BIG-IP products.
JS
Hardware Engineer at Ministry of Defense
A cost-effective choice for website security and informative support with issues related to CDN quality
One area where they could improve is in providing real-time support options because now you need to open a support ticket and wait for their response. It would greatly benefit customers if they implemented an online chat or messaging system for quicker assistance. I have found their Content Delivery Network service to be lacking in quality, and it could certainly be enhanced to provide better performance. I would also like to see improvements in the deployment process, as it currently takes more time than desirable. Another significant concern is that their service when your website is down, turns it into a static site. This means that if customers try to visit your site during downtime, they will see old content from the static site, which is not ideal. The CDN and tracking services are areas that need improvement, as well as addressing their bandwidth limitations.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The initial setup was simple and took three to four days."
"The policies are flexible based on the technologies you use."
"I really love NGINX App Protect; I love the functionality, the ease of implementation, the very user-friendly Instance Manager, and its integration with DevOps, and as an NGINX Ingress controller using the Plus certificate it is working perfectly and making things a lot easier than the regular one while successfully stopping threats like injection, running scripts, and SQL injections."
"We have seen a return on investment using NGINX App Protect."
"The tool is not complex and is very user-friendly."
"NGINX App Protect has complete control over the HTTP session."
"It's very easy to deploy."
"We use NGINX for security headers, and as a proxy; it is also a very good tool for load balancing."
"It significantly eases the workload and streamlines the initial setup required to protect a website."
"Rather than locate some things manually, the Sucuri plugin scans and allows us to pinpoint whether there is malware or some problem in the site."
"I use it as a WAF, which is basically a web firewall to monitor and block traffic to our web server."
"The most valuable part is the analytics and visualization."
"For people who own a personal website, this solution is worth trying out since their security solution is somewhat full-fledged."
"The initial setup was very easy."
"The initial setup was straightforward. Straight forward because the plugin can simply be installed and then it does its job. It's not complex, there is no learning curve. The online scan is simple, you put in the website address and the scan gives us a report on the browser itself. It's simple to use."
"Domain name scanning since it allows us to scan all our domain names and determine whether it has malware or if is reported as phishing."
 

Cons

"The GUI and web GUI configuration could be improved to be easier to manage and use."
"The integration of NGINX App Protect could improve."
"I think NGINX App Protect could be improved by having it come out of the box with NGINX."
"It's challenging if you need to go for a high throughput."
"Setting policies and parameters through the UI should be more automated because the process is manual, where we can only edit one rule at a time."
"NGINX's technical support is good, but sometimes their response time is delayed, or they don't have the technical skills to resolve issues."
"The price of NGINX App Protect could improve."
"The contributions I think sometimes take a toll on you like you're going to spend a lot of time on the right contributions."
"The main improvement I would like to see is support for .NET applications. If they could include this feature, I would include more sites in the protection."
"In terms of improvement, the cost factor is always there."
"Sucuri could provide help for specific security alerts in-line instead of requiring users to search for it in the help section."
"Confident score: Currently it does not have one and there are cases that most websites flagged are false-positives."
"I would rate this solution an eight out of ten. The reason is that we have found sometimes customers or Google saying that there is something wrong with the website but Sucuri says that the site is clean so we do have to look at the site manually which means that the Sucuri scan does not pick up anything and everything."
"It would greatly benefit customers if they implemented an online chat or messaging system for quicker assistance."
 

Pricing and Cost Advice

"NGINX is not expensive."
"There are no additional fees."
"The price of NGINX App Protect is not much different from the products that fall under the leader category of Gartner Magic Quadrant."
"NGINX App Protect is expensive."
"The product's price is high."
"Really understand the licensing model, because we underestimated that."
"There is a license needed to use NGINX App Protect."
"The price of NGINX App Protect is approximately $3,000 annually. All of our licenses are observed by a managed service partner."
"I’d simply say it’s really worth it."
"The ROI has been very good. Because of the solution, I have a tax break. The site developers were not always experienced people. We used to pay more for cleaning up the site when it was infected. Now, we have peace of mind knowing that the solution will clean up the site and that we won't have to go through the unnecessary process of restoring it from a backup. The protection on the WAF and the measures for backups have also prevented our site from going down."
"It stands out as a more cost-effective option compared to other cloud-based security services like Cloudflare or JetPass."
"Sucuri offers different plans, both the standard plan and an advanced plan. So there are different plans to choose from."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
913,924 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
13%
Financial Services Firm
11%
Construction Company
8%
Healthcare Company
7%
Comms Service Provider
14%
Construction Company
13%
Outsourcing Company
10%
Financial Services Firm
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise7
Large Enterprise14
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for NGINX App Protect?
I will not be able to answer about my experience with pricing, setup cost, and licensing for NGINX App Protect, as something different handles that in my team.
What needs improvement with NGINX App Protect?
I did not face any issues with NGINX App Protect. The only issue that we had is that someone was trying to install the POC for the customer, and he by mistake installed the Instance Manager on the ...
What is your primary use case for NGINX App Protect?
I have been dealing with NGINX App Protect and the WAF policy. I usually recommend NGINX App Protect for banking and telecom, and for anyone that has their own database or servers that they host we...
Ask a question
Earn 20 points
 

Also Known As

NGINX WAF, NGINX Web Application Firewall
No data available
 

Overview

 

Sample Customers

Information Not Available
The Loft Salon, Tom McFarlin, WPBeginner, Taylor Town, Everything Everywhere, Financial Ducks in a Row, Chubstr, Real Advice Gal, Sujan Patel, Wallao, List25, School the World
Find out what your peers are saying about NGINX App Protect vs. Sucuri and other solutions. Updated: September 2026.
913,924 professionals have used our research since 2012.