


AWS WAF and Akamai App and API Protector compete in the web application security category. While AWS WAF offers strong integration with AWS services and cost-efficiency, Akamai provides richer security features and better protection for complex environments.
Features: AWS WAF is known for its scalability, effortless integration with AWS services, and flexible rule configuration. It provides cost-effective, on-demand cloud protection with customizable rules. Akamai App and API Protector is strong in sophisticated threat protection, scalability, and DDoS defenses, making it suitable for high-traffic sites. Its comprehensive security features offer a holistic approach to threat management.
Room for Improvement: AWS WAF can improve automation and documentation clarity, and some users note that its customer support could be better. Akamai users have suggested improvements in bot protection and deeper integrations with third-party tools. Additionally, understanding the pricing structure and documentation remains a challenge for AWS WAF customers, whereas Akamai's complexity requires better integration support to handle advanced attack vectors.
Ease of Deployment and Customer Service: AWS WAF is easily deployed within AWS environments, with a user-friendly setup process, though users desire improved customer support. Akamai offers high scalability but poses some deployment challenges and could benefit from more straightforward interactions with customer service. While AWS ensures integration within public cloud infrastructures, Akamai remains effective across hybrid environments.
Pricing and ROI: AWS WAF's pay-as-you-go model is viewed as affordable for businesses using AWS services, providing flexibility but with potential high costs for extensive security needs. Akamai, perceived as expensive, justifies its price with comprehensive security features valued by large enterprises. AWS WAF attracts cost-conscious users with dynamic usage pricing, whereas Akamai's bundled services are appreciated despite their complexity and cost.
My experience with the pricing or licensing of Cloudflare Web Application Firewall is that many features can be accessed for free, so the pricing is definitely reasonable.
With AWS WAF, it is easier for us to block unwanted malicious DDoS attacks and threats from coming into our web application.
I would rate the technical support with Cloudflare as excellent every time I've had to contact them.
The technical support of Cloudflare Web Application Firewall rates between five and seven at maximum.
Resolving issues can take time because the support personnel may lack product expertise, leading to delays.
They reach out when you send them a ticket, and within 24 hours or less, someone is able to get back to you to solve your problem.
The scalability of Cloudflare Web Application Firewall rates between 8 to 9, as it depends upon the use cases and what exactly the client needs.
AWS WAF does scale in the sense that it is fully managed and has automatic scaling.
The stability of Cloudflare Web Application Firewall deserves a perfect 10 out of 10.
Since it protects web applications from common attacks such as SQL injection and XSS, it is very stable.
In terms of reliability, I would rate AWS WAF about six out of ten due to the need for improved signature sets.
We faced issues with AWS WAF when writing the custom rules.
The product can improve by having more multitenancy capability, which is currently not available.
I think they're doing a good job with DNS and as support for any domains that I create or that my clients create, it's mandatory for me to ensure they have Cloudflare as their DNS provider.
They need to improve their support because getting a response for basic requests took around 48 hours, which is too long.
Compared to firewalls, WAFs generally provide limited stateful analysis capabilities.
The way we see it now is just mentioned as a percentage from bots and actual users, which should include proper graphs and detailed information.
Features like bot protection or DDoS mitigation, available with other WAF vendors, do not come natively with AWS WAF.
Due to our status as an AWS shop, AWS WAF is cost-effective for us, and we benefit from discounts due to our extensive use of AWS services.
The licensing cost for AWS WAF is just pay-as-you-go; it is a service-based model.
The custom rules and the geo-redundant geographical rule feature, which allows me to implement geographical rules for customers, add significant value.
The best features of Cloudflare Web Application Firewall are multiple, including the WAF, rate limiter, and bot attack protection.
Cloudflare Web Application Firewall's advanced reporting and analytics tools add a layer that we're able to visualize and see before it actually hits the local firewall.
The area in which Akamai excels compared to other competitors with a WAF is in threat intelligence, as threats continually evolve, requiring ongoing updates to backend algorithms to effectively capture smart bots.
The biggest benefit of AWS WAF for us is to filter malicious requests, so we can protect our environment and application from malicious actors.
It has also helped to improve the posture of our application, prevent all DDoS attacks, and unnecessary traffic and SQL injection that is reducing the performance of our application.
The cloud-native nature of AWS is crucial since most of our workload is in AWS, making AWS WAF native to Amazon Web Services.
| Product | Market Share (%) |
|---|---|
| AWS WAF | 5.6% |
| Cloudflare Web Application Firewall | 5.6% |
| Akamai App and API Protector | 3.0% |
| Other | 85.8% |


| Company Size | Count |
|---|---|
| Small Business | 15 |
| Midsize Enterprise | 6 |
| Large Enterprise | 6 |
| Company Size | Count |
|---|---|
| Small Business | 4 |
| Midsize Enterprise | 7 |
| Large Enterprise | 18 |
| Company Size | Count |
|---|---|
| Small Business | 22 |
| Midsize Enterprise | 12 |
| Large Enterprise | 26 |
Cloudflare Web Application Firewall's intuitive dashboard enables users to build powerful rules through easy clicks and also provides Terraform integration. Every request to the WAF is inspected against the rule engine and the threat intelligence curated from protecting over 27 Million websites. Suspicious requests can be blocked, challenged or logged as per the needs of the user while legitimate requests are routed to the destination, agnostic of whether it lives on-premise or in the cloud. Analytics and Cloudflare Logs enable visibility into actionable metrics for the user.
Akamai App and API Protector provides website security by preventing DDoS attacks, acting as an application firewall, managing content delivery, and monitoring APIs. It adapts to threat profiles and is used for fast media delivery and identifying malicious activities.
Akamai App and API Protector offers strong protection, adaptable security features, and efficient traffic management. Its WAF blocks IP addresses and country-specific threats while preventing SQL injections. Companies utilize it for scalable CDN services and comprehensive traffic analysis. Known for its cost-effectiveness and user-friendly dashboard, this protector stands out for its customizable rules and technical support. Users also highlight the ease of integration and detailed attack insights available through its advanced dashboard.
What are the key features of Akamai App and API Protector?In media, Akamai App and API Protector ensures smooth streaming by handling high bandwidth demands. E-commerce companies use it to guard against fraud and data breaches. Financial sectors rely on its ability to protect sensitive transactions. Implementations in healthcare focus on safeguarding patient data while maintaining compliance with regulations.
AWS Web Application Firewall (WAF) is a firewall security system that monitors incoming and outgoing traffic for applications and websites based on your pre-defined web security rules. AWS WAF defends applications and websites from common Web attacks that could otherwise damage application performance and availability and compromise security.
You can create rules in AWS WAF that can include blocking specific HTTP headers, IP addresses, and URI strings. These rules prevent common web exploits, such as SQL injection or cross-site scripting. Once defined, new rules are deployed within seconds, and can easily be tracked so you can monitor their effectiveness via real-time insights. These saved metrics include URIs, IP addresses, and geo locations for each request.
AWS WAF Features
Some of the solution's top features include:
Reviews from Real Users
AWS WAF stands out among its competitors for a number of reasons. Two major ones are its user-friendly interface and its integration capabilities.
Kavin K., a security analyst at M2P Fintech, writes, “I believe the most impressive features are integration and ease of use. The best part of AWS WAF is the cloud-native WAF integration. There aren't any hidden deployments or hidden infrastructure which we have to maintain to have AWS WAF. AWS maintains everything; all we have to do is click the button, and WAF will be activated. Any packet coming through the internet will be filtered through.”
We monitor all Web Application Firewall (WAF) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.