Imperva DDoS Reviews

Hands down, the WAF is the most valuable feature; being able to identify, block, whitelist or blacklist as needed, are all valuable.

We now have visibility into our traffic in a scope that we never had before, especially being able to review bot vs human traffic and country of origin.

Reporting and the main Sites dashboard could use refinement. We have a lot of sites, and scrolling through the dashboard becomes cumbersome.

I have used it for six months.

The only deployment issue we encountered was getting Incapsula and Akamai to play nice. However, the Incapsula engineers were very helpful in helping us configure our sites in the WAF correctly.

We have not encountered any stability issues.

We have not encountered any scalability issues.

I have yet to need customer service.

I rate the level of technical support as very high.

We had not used a WAF before deploying Incapsula.

The setup was straightforward and simple.

We implemented it ourselves with the guidance of the Incapsula team.

It is too soon to tell regarding ROI.

Know your bandwidth requirements.

Before choosing this product, we evaluated so, so, so many other options.

Incapsula was acquired by Imperva. We had a need to provide a solution for our clients and the Incapsula solution and Cloud WAF (Web Application Firewall) allowed us to have people subscribe to Incapsula as a service. It was easy to work with because we would just put in the hostname and the IP address of the websites in Incapsula's DNS. When the DNS is resolved it first passes through Incapsula and makes a stops in the Cloud WAF before it sends the website itself.  

Customers can trust it because the traffic going to the customer passes through Incapsula's cloud service. So if there is an attack, the website and the visitors are protected because it will take care of such issues and it eliminates the bad traffic. Both ends are taken care of so the website is protected from hackers because it first goes through the Incapsula Cloud WAF. That is the basic high-level architecture of how the Incapsula works.  

We distributors of Imperva in Africa. I am responsible for our business presence in Eastern and Western Africa. I am fixed locally here in Nigeria. Being distributors, we have a pretty good idea of how the market is in general and how the products are used. All the partners who implement it and who resell sell it, buy it from us and deploy for customer accounts. We cover a high percentage of the financial service industry here in Nigeria.  

For this part of the world, several things are important. It is important that the clients have the features which they get to use to get against bad traffic, of course as this is the reason for the product. But especially for customers in this region, it is also the opportunity to use the service platform. They do not have to own it or maintain it and they may not otherwise have the capacity to deploy this type of solution. Instead, they can pay for it as a service. It works so well here that even some of the banks are using it.  

The most valuable feature is the ability to mitigate bad traffic. I think the highest traffic we would experience can be handled by the Incapsula Cloud WAF because it can scale. So if there is some attack on a website and there is high volume, instead of it disrupting the website and disrupting business operations, it is not a problem for the customer's website. That ability to mitigate problems with the traffic is why the clients use the product to protect their valuable data and customer interactions.  

If I had the opportunity to recommend an enhancement to Imperva it would be to have more POP (Point of Presence) in East and West Africa, and in Central Africa as well. There is only one POP in South Africa. There are other ones are in Europe, America, and Asia and sometimes the latency can be an issue because for your traffic to hit the website — say in East Africa. First, it has to first go to the nearest point of presence. Because of the distance, there can be some problems. So if they have a POP closer to manage customers around Africa this could be a better service to clients.  

I have only recently begun to use Imperva Incapsula compared to the amount of time I have been in the industry. For more than a decade and I have tried my hands on various security solutions, mainly having to do with network infrastructure.  But now I am back to working with security solutions and, over this past year, I have engaged mostly with applications in data security. Before that, I was doing a lot more with the whole of network security. Incapsula is more of an application for data security and it is something which Imperva does pretty well.  

The stability is not an issue. The product is serviced and maintained for the client.  

Virtually all the banks in Nigeria, Ghana, East, and West Africa, are using Imperva. Of course, they are using it for various things, but for the most part, they use it for data security and application security and then also a little bit on the Incapsula platform.  

The scalability depends on the customer but there are really no features that a client will want to request that Imperva does not handle in terms of scalability. Of course, you cannot compare the size of the banks and the input and output demands of banking in Western European countries or the Americas with the needs of banking in Africa.  

For us, it is a good solution.  

Response from technical support has been very good. I would say that they are excellent because they are always willing to attend to customers' requests. They provide support based on time zones so there is good access.  

Because it is a cloud product and the setup is minimal, it is straightforward and quickly implemented.  

I do have experience with Imperva SecureSphere. I am working with various solutions that have various features and how these solutions work for different customers. For one customer, I was trying to do some research to see if they should replace Trustwave WAF with a different solution because the customer asked me about other possibilities. This was my first customer who had asked me to look into Trustwave, so I also took the time to research that product. But different products fit different businesses and industries better.  

I am not an expert in every solution of this type, but I have a pretty good idea of what makes them work as a good solution based on customer needs. I do not do the implementation because I am more in a position of doing pre-sales and consultancy.  

I would highly recommend Imperva Incapsula especially for customers who want extra security for their web presence.  

On a scale from one to ten where one is the worst and ten is the best, I would rate the Incapsula product overall as a nine-out-of-ten.  

The most valuable features for us are the DDoS and Bot.

I would like to have support for SSL management and secure DNS.

We have been using Imperva for more than a year.

We have had no problems with stability.

Imperva is a scalable solution. We have about 20 users but it's protecting our main website.

I would say that technical support is average.

We did not use another similar solution prior to Imperva.

The initial setup was simple. It took about two hours to deploy.

The cost is on par with other solutions such as Cloudflare and Akamai. There's not much difference in it.

I would rate this solution a seven out of ten.

The solution has good DDoS protection, and some good common features, such as no attack surfaces, parameter sanitization, and attack analytics.

The dashboard of the solution is complex. It is complex in the sense that there are too many options. There are two types of Incapsula dashboards. One is the on-prem version and one is cloud-based. Cloud-based is okay. The on-prem one needs some work.

The solution needs to improve Integration with third parties for their on-prem deployment models. The integration is not that good yet.

The solution is stable.

Scalability is pretty easy on the base platform. You just add another, and you're ready to go. We deal mostly with enterprise-level clients.

The company has really improved its technical support over the past year. Before that, I wouldn't rate them as very good, but they are much better now.

The difficulty of the initial setup depends on the customer. If it's a complex environment that they're processing, and/or if there's a downtime period, it may take more or less time. It depends on the number of applications that we have to integrate as well. 

We are Imperva partners, so we work with clients that use different deployment models, including on-premises and cloud.

I'd recommend to those considering implementation to look at your organization's requirements and then compare your options.

I would rate the solution 7.5 or eight out of ten.

We offer implementation services for our customers.

Most customers use Imperva Incapsula to protect themselves from WAF attacks. If they need an application load balancing, whether it is on a single data center or if they have a B2B extension. Also, if they need protection from the bots. Imperva has all of those functionalities.

It's very pretty easy to onboard the URL. One of the unique features included with Imperva is its advanced bot protection. In addition the base licensing modules with most of the features.

In terms of features, Imperva is quite good; it outperforms its competitors.

Pricing could be more competitive.

It would be beneficial to include vulnerability management in the solution, similar to what they have for their on-premise solution.

I have been working with Imperva Incapsula for more than three years.

I have been using the latest update.

The stability is quite good. It has an uptime of 99%. None of our customers have complained about its uptime and its availability.

The majority of our customers are enterprise businesses, with some SMB, but it depends on their budget, as well as their needs, and whether it is for security or compliance purposes.

Imperva is quite expensive for organizations that use it for compliance purposes. Other WAP solutions, such as Fortinet or Barracuda, which are slightly less expensive than Imperva, will be considered.

Imperva Incapsula is easy to scale.

I believe that Technical support is 24/7. They are also very quick to respond via email.

We work with all of the Imperva solutions from the database, monitoring tools, and the web applications firewall.

The initial setup Is quite simple and straightforward. We only have seven steps to follow. It's a very simple and straightforward process.

If the customer agrees to a DNS sense, it will take no more than 10 to 15 minutes.

Imperva is responsible for maintenance.

Incapsula is a SaaS (software-as-a-service) provider. Anyone can do the applications, but you must subscribe to the service.

Pricing is a challenge for most of our customers.

I cannot provide a comparison because I have not worked with any other vendors.

I would recommend this solution to others because it is pretty simple to implement, and you don't need a dedicated WAP technician to maintain this solution. 

Anyone in the organization can easily implement it, and it can be maintained with a little application knowledge. On the application side, you do not need to be a subject matter expert it is not necessary.

I would rate Imperva Incapsula a nine out of ten.

The company uses this solution to protect us from any potential attacks. We are customers of Imperva and I'm the company director. 

Imperva makes it easier for us to put everything in code; we use Terraform to deploy our infrastructure. 

This is a very limited tool if you're looking to customize. It would be helpful if Imperva would provide additional resources for Terraform that can easily be deployed. There are some cases where we're currently unable to use Terraform.

I've been using this solution for six months. 

The solution is stable although sometimes content delivery seems to be affected because it's in the cloud.

Scalability is fine and we haven't had any issues with resource consumption. 

Technical support is quite proactive in sharing information.

The initial setup is relatively straightforward. 

I rate this solution eight out of 10. 

• Hidden origin
• IP whitelist
• Country blocking
• Anti-DDoS
• Special page protection (two-factor authentication)

For example, we host a website for customer in China. Incapsula can help to hide the real origin and provide access control over different pages. And it can protect the website from being attacked.

Incapsula provides 7x24 service for protection, which saves us a lot of manpower.

• Customer service: Their customer service sometimes has different responses for similar requests. We sometimes need to explain the issue many times before they understand. Their CS staff is not well trained according to a consistent standard. For the same requests, some of them can perform well, but some of them might do it wrong.
• Network management: Their network department sometimes doesn’t take the responsibility to improve network latency until we raise the problem many times or to top management. Sometimes, we encounter latency issues. Only sometimes does their network staff update their routing to improve the performance. Other times, they will not do so and they push the responsibility to another carrier.

I have used it for one year.

Sometimes their system has routed our Asia traffic to US/EU and we needed to ask them to change the route back to Asia.

Their Asia bandwidth, i.e. to China, sometimes has a lot of lag. And they take a long time to improve it, until they add a new ISP to improve the bandwidth.

Technical support is 7/10.

We previously used Akamai. Incapsula is much cheaper and the administration is much easier.

Initial setup is easy, as Incapsula allows us to create new sites through their GUI or using an API.

Incapsula pricing is very affordable.

Before choosing this product, I did not evaluate other options.

If you don’t have a strong IT team for security, Incapsula is a good starting point for outsourcing your internet-facing security issues.

• Faultless inlining & minification: Every competing product breaks the layout, but we are yet to see Incapsula break a site
• Installation requires just a CNAME entry, avoiding the risk of email downtime.
• Instant PCI compliance and protection from the OWASP Top 10 vulnerabilities.
• CDN & DDoS protection.

Incapsula delivers a massive improvement to website performance and security in less than 20 minutes, regardless of the CMS. We love it so much that we decided to create a new service around this product, which could result in our largest income stream yet.

They once terminated a free account without warning, resulting in a few days downtime. But you get what you pay for.

I have been using it for two years.

I have not encountered any stability issues.

I have not encountered any scalability issues.

Technical support is first class. These guys are sharp.

We moved from CloudFlare because Incapsula’s minification was faultless, and their CNAME installation procedure avoided downtime for other services such as email.

It was very easy to set up: 20 minutes and you're done.

Go for the $59/month Pro plan. Free accounts can get terminated, and the higher plans are only if you like to have your own SSL certificate, or get regular DDoS attacks. The Pro plan has everything you need; it's just that you're using Imperva's SSL certificate, not yours.

Before choosing this product, we evaluate other options in great detail. We looked at CloudFlare, W3 Total Cache, WP Super Cache, Wordfence, BulletProof Security, Varnish, Mod_Security, ConfigServer, and a variety of other options. Incapsula isn't the cheapest, but is way in front of the competition. You'll easily spend double/triple the cost of your Incapsula subscription on maintaining any other solution, whereas Incapsula handles all that overhead for you, right out of the box.

Don't wait till you've been hacked; get protected now. It'll cost you at least a year of Incapsula fees to recover from website hacking. And if your website is running slow, Google is probably already penalising your site, when the fix is so easy. Incapsula is by far the fastest fix for both website speed and security.