Has anyone worked with PCI DSS v4.0 and WAF solutions?

Hello community,

I work for a small professional services company.

PCI DSS version 4.0 requirement 6.4 calls out security controls for customer-facing apps. This would be a WAF to cover OWASP Top10 + Bots + API Security + automated attacks, etc. The top cloud WAFs are Imperva, Akamai, Cloudflare, and Fastly. I am curious to find out if anyone's gone through this from a PCI DSS perspective. Thank you.

Resumes ZenithSGP

consult at Zenith Strategic Global Partners

Buyer's Guide

Web Application Firewall (WAF)

April 2026

Get the category report

Helped 893,311 peers since 2012

There are no answers yet

Buyer's Guide

Web Application Firewall (WAF)

April 2026

Download Free Report

Find out what your peers are saying about Imperva, Fortinet, F5 and others in Web Application Firewall (WAF). Updated: April 2026.

DOWNLOAD NOW

893,311 professionals have used our research since 2012.

Discover and compare trending products

Web Application Firewall (WAF)

Web Application Firewall (WAF) solutions are essential for protecting applications from various online threats, ensuring continuous access and data security for enterprises.Web Application Firewalls are designed to monitor, filter, and block HTTP traffic to and from a web application, encapsulating the critical task of securing applications from vulnerabilities like cross-site scripting (XSS), SQL injection, and other OWASP top threats. These solutions offer customizable rules for specific...

Download Web Application Firewall (WAF) Report Read more