Cloudflare Web Application Firewall Reviews

Name: Cloudflare Web Application Firewall
Brand: Cloudflare
Rating: 4.2 (23 reviews)

4.2 out of 5

23 reviews
95% willing to recommend

What is Cloudflare Web Application Firewall?

Cloudflare Web Application Firewall's intuitive dashboard enables users to build powerful rules through easy clicks and also provides Terraform integration. Every request to the WAF is inspected against the rule engine and the threat intelligence curated from protecting over 27 Million websites. Suspicious requests can be blocked, challenged or logged as per the needs of the user while legitimate requests are routed to the destination, agnostic of whether it lives on-premise or in the cloud. Analytics and Cloudflare Logs enable visibility into actionable metrics for the user.

Get the Cloudflare Web Application Firewall Buyer's Guide and find out what your peers are saying about Cloudflare Web Application Firewall, Prisma Cloud by Palo Alto Networks, Microsoft Azure Application Gateway and more!

Cloudflare Web Application Firewall is the #7 ranked solution in top Web Application Firewalls. PeerSpot users give Cloudflare Web Application Firewall an average rating of 8.4 out of 10. Cloudflare Web Application Firewall is most commonly compared to Prisma Cloud by Palo Alto Networks: Cloudflare Web Application Firewall vs Prisma Cloud by Palo Alto Networks. Cloudflare Web Application Firewall is popular among the midsize enterprise segment, accounting for 40% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a educational organization, accounting for 28% of all views.

Buyer's Guide

Cloudflare Web Application Firewall

February 2025

Get the report

Helped 832,138 peers since 2012

Featured reviews

SachidDoshi

Senior Enterprise Security Architect at HGS - Hinduja Global Solutions

The solution's learning curve can still be further reduced, which presently stands at two or three months. The product has a custom rule set that users can modify and manifest as needed. The vendor can probably shorten the learning curve using cutting-edge technologies like AI. The solution provider can also work around the web applications and identify the toolset that needs to be implemented to deploy the solution in less time. The vendor has launched a SASE product that can function with Cloudflare Web Application Firewall, but many improvements are needed in terms of features, such as the web filtering feature, and CASB has not yet been added.

Read full review

Hitesh R

Solutions Architect at Amazure Technologies Private Limited

I find the deployment process for Cloudflare's firewall to be very smooth. Someone with a basic understanding of networking and security will be able to implement the firewall's basic features within 15 minutes. The deployment of a new domain on Cloudflare can be completed within 15 minutes if the necessary administrative authority and support from the DNS team are available during the process. It also includes the time needed for domain registration. We are working for an ITSM organization and have multiple administrators. During the deployment phase of the solution in the organization, we have limited the number of administrators to just five to ten individuals. We also arranged a few KT sessions to help the company employees who are involved in working with this solution. As of now, they have started working on the tool.

Read full review

SumitSingh1

Senior Software Engineer at FalconX

I mainly use it for routing and then for monitoring the firewall We saw some improvements in our website security or our network security. Rulesets are kind of majorly used for subdomain routing and rate limiting. When we expose our API, so we need to evaluate their use cases. It's pretty…

Read full review

Cloudflare Web Application Firewall mindshare

As of February 2025, the mindshare of Cloudflare Web Application Firewall in the Web Application Firewall (WAF) category stands at 7.2%, up from 6.5% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Web Application Firewall (WAF)

PeerAnalyst reports

Type	Title	Date
Category	Web Application Firewall (WAF)	Feb 2, 2025	Download
Product	Reviews, tips, and advice from real users	Feb 2, 2025	Download
Comparison	Cloudflare Web Application Firewall vs AWS WAF	Feb 2, 2025	Download
Comparison	Cloudflare Web Application Firewall vs F5 Advanced WAF	Feb 2, 2025	Download
Comparison	Cloudflare Web Application Firewall vs Microsoft Azure Application Gateway	Feb 2, 2025	Download

Title	Rating	Mindshare	Recommending
Prisma Cloud by Palo Alto Networks	4.2	2.2%	98%	108 interviews Add to research
Microsoft Azure Application Gateway	3.6	10.2%	78%	46 interviews Add to research

Valuable Features

Cloudflare Web Application Firewall excels with its SaaS nature, API configurability, OWASP rulesets, minimal false positives, and ease of configuration. Users appreciate its stable performance, scalability, competitive pricing, and straightforward installation. They value its features like caching, DDoS protection, comprehensive security controls, and custom rules. Its extensive data center network, rapid signature updates, rate limiting, zero trust policy, integration capabilities, and user-friendly interface make it a preferred choice for managing and protecting applications.

"The setup process is very simple for me."
"The rate limiting features and customizations in terms of URL match and applying policies are valuable to me."
"Cloudflare is cheaper compared to Azure WAF, which I have considered before."

Room for Improvement

Cloudflare Web Application Firewall needs to update the ModSecurity core rule set and improve documentation clarity. Enhancements in log integration, reporting granularity, and customer support are desired. Reducing false-negative alerts, improving user interface, and better multitenancy capabilities are sought. Users find complexity in managing rules and desire better notification management and increased integration options. They seek enhanced port forwarding, rate limiting, and DDoS protection features. Simplifying configuration and reducing latency are also important improvements.

"The product can improve by having more multitenancy capability, which is currently not available."
"The product can improve by having more multitenancy capability, which is currently not available."
"The learning curve was steep initially."

Pricing

Cloudflare Web Application Firewall offers a subscription-based pricing model without upfront infrastructure costs, starting from $20 to $200 monthly, with annual licenses available around $10,000. While some find it relatively expensive, especially in Eastern Europe, others view it as more affordable than competitors like Azure WAF. Features such as advanced protection are included, and support is bundled without extra charges. Pricing transparency and feature-related costs vary, making it competitive yet sometimes perceived as non-transparent for enterprise clients.

"It is not too pricey."
"It starts at $20 and can easily go up to $200 monthly"
"Cloudflare Web Application Firewall is more affordable than other solutions."

Popular Use Cases

Organizations use Cloudflare Web Application Firewall primarily as a SaaS-based tool to protect web applications from malicious traffic, DDoS attacks, and data injections. It functions as a reverse proxy, load balancer, and comprehensive security solution. Users employ it for protecting servers, managing authentication and authorization, and migrating applications. It integrates with CDN, provides zero-trust security, and adapts to different sector requirements, such as banking and retail, while offering tailored configurations.

Service and Support

Users report that Cloudflare Web Application Firewall's technical support is generally helpful and responsive. Satisfaction levels are high, with many appreciating quick response times. Challenges arise with Indian support and complex integration issues. While some customers express dissatisfaction, others praise the support quality, rating it highly. Local support and resellers are often utilized before contacting Cloudflare. Users utilizing enterprise plans find support easy to access, although some experience difficulties finding technical expertise. Response times could be improved.

Deployment

Cloudflare Web Application Firewall's setup is mostly simple and quick, often seamless for users with technical knowledge. Some faced challenges due to poor documentation, especially without enterprise support. Basic setups took minutes to a few hours, while more comprehensive implementations required days to months, depending on complexity and organizational needs. Maintenance was minimal, but some found difficulties in fine-tuning configurations. Companies appreciated the ease of deployment and minimal infrastructure requirements, although some encountered learning curves.

Scalability

Cloudflare Web Application Firewall offers excellent scalability, making it easy for many users to expand use as required. Users observe seamless scalability, with some praising its integration capabilities and automation. Organizations can scale effortlessly, managing multiple domains and utilizing APIs, though additional features might incur costs. Its capacity to support thousands of users reflects strong scalability, which many rate highly, acknowledging its efficiency in handling diverse needs without constant oversight.

Stability

Cloudflare Web Application Firewall is highly stable, with many users rating its reliability between eight and ten out of ten. There are no significant bugs, crashes, or glitches, and it effectively prevents attacks with features like rate limiting and DDoS protection. Customers who switched from AWS Web Application Firewall report satisfaction. Though occasional software updates may introduce temporary issues, they are quickly resolved. Users consistently experience minimal downtime and consistently reliable performance.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Cloudflare Web Application Firewall Buyer's Guide for additional reliable information.