Has anyone worked with PCI DSS v4.0 and WAF solutions?

Hello community,

I work for a small professional services company.

PCI DSS version 4.0 requirement 6.4 calls out security controls for customer-facing apps. This would be a WAF to cover OWASP Top10 + Bots + API Security + automated attacks, etc. The top cloud WAFs are Imperva, Akamai, Cloudflare, and Fastly. I am curious to find out if anyone's gone through this from a PCI DSS perspective. Thank you.

Resumes ZenithSGP

consult at Zenith Strategic Global Partners

Buyer's Guide

Web Application Firewall (WAF)

November 2026

Get the category report

Helped 920,939 peers since 2012

There are no answers yet

Buyer's Guide

Web Application Firewall (WAF)

November 2026

Download Free Report

Find out what your peers are saying about Imperva, Radware, F5 and others in Web Application Firewall (WAF). Updated: November 2026.

DOWNLOAD NOW

920,939 professionals have used our research since 2012.

Discover and compare trending products

Web Application Firewall (WAF)

A Web Application Firewall (WAF) provides security by monitoring and filtering HTTP traffic between a web application and the internet. It protects applications from cyber threats such as SQL injection and cross-site scripting.Designed to offer a layer of security for web applications, WAFs prevent attacks by keeping an eye on HTTP traffic. These solutions help users safeguard sensitive data, enhance privacy, and ensure compliance with industry regulations. By intercepting and inspecting HTTP...

Download Web Application Firewall (WAF) Report Read more