Has anyone worked with PCI DSS v4.0 and WAF solutions?

Hello community,

I work for a small professional services company.

PCI DSS version 4.0 requirement 6.4 calls out security controls for customer-facing apps. This would be a WAF to cover OWASP Top10 + Bots + API Security + automated attacks, etc. The top cloud WAFs are Imperva, Akamai, Cloudflare, and Fastly. I am curious to find out if anyone's gone through this from a PCI DSS perspective. Thank you.

Resumes ZenithSGP

consult at Zenith Strategic Global Partners

Buyer's Guide

Web Application Firewall (WAF)

January 2026

Get the category report

Helped 881,114 peers since 2012

There are no answers yet

Buyer's Guide

Web Application Firewall (WAF)

January 2026

Download Free Report

Find out what your peers are saying about Fortinet, F5, Amazon Web Services (AWS) and others in Web Application Firewall (WAF). Updated: January 2026.

DOWNLOAD NOW

881,114 professionals have used our research since 2012.

Discover and compare trending products

Web Application Firewall (WAF)

A Web Application Firewall (WAF) is a specialized security tool designed to protect web applications by monitoring and filtering HTTP traffic between a web application and the Internet. It plays a crucial role in safeguarding against threats and vulnerabilities.WAFs help defend web applications from several common threats by analyzing requests to prevent malicious data from passing through. These solutions work by effectively blocking common attacks such as SQL injection and cross-site...

Download Web Application Firewall (WAF) Report Read more