Try our new research platform with insights from 80,000+ expert users

Akamai App and API Protector vs Azure Web Application Firewall comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
71
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (14th)
Akamai App and API Protector
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
28
Ranking in other categories
Web Application Firewall (WAF) (8th), Distributed Denial-of-Service (DDoS) Protection (4th), Cloud and Data Center Security (10th)
Azure Web Application Firewall
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
11
Ranking in other categories
Web Application Firewall (WAF) (13th), Microsoft Security Suite (19th)
 

Featured Reviews

Spencer Malmad - PeerSpot reviewer
It's easy to set up because you point the DNS to it, and it's working in under 15 minutes
Cloudflare is highly scalable. Cloudflare is a system with a web portal that the end users like me see. It's a console where we can adjust the DNS, caching, and security features all in that console. Cloudflare owns thousands of servers across the world that cache the data. It's a powerful solution. When clients sign up for Cloudflare, they're getting this monster content delivery network, security, and a web application firewall in one. It's all rolled into one, and it's massive. Unless you have your website hosted on a massive hosting provider, there's no way that you can deliver the amount of data that Cloudflare can provide to the end users. If you have static content, there's no way that you can ever match what Cloudflare can do. Obviously, there are competitors to Cloudflare that do the same, but I'm saying other types of solutions. Let's say you go with F5. Great, that's on-prem. That's in your colo. You can't deliver as much data to the internet as you can with a CDN. You don't have to spend $20,000 on a net scaler, F5, or whatever Cisco's selling now. You don't have to buy that. You pay them $50 a month or $150 a month. It's totally worth it because even in five years, you'll never get the performance value, not just the actual ROI. You have to consider how much throughput you can get with Cloudflare.
Deepesh  Singh - PeerSpot reviewer
Bot Manager and different features to manage threats
As a product, it has good capabilities, including professional support. However, it's risky for us to rely on AI for real-time traffic management. We use in-house analytics but avoid automatic actions due to their high impact. For example, I live in a developing country. Everyone has different types of phones, apps, and everything else. So, if someone is using a legacy phone, that is still a use case here. If AI decides that this is an end-of-life phone or end-of-life Android operating system, it starts blocking that traffic. We may potentially lose millions or probably thousands and hundreds of thousands of hits per second. Everything is all about how well we serve payments because we're into payments. So, AI is used for analytics but not for real-time decisions. We can't afford to block traffic based on AI models due to the variety of devices and operating systems our users have.
Thomas Zebar - PeerSpot reviewer
Is priced well, is stable, and the initial setup is straightforward
I previously used Barracuda Web Application Firewall. I hope that Azure Web Application Firewall will look at other products and replicate some of their functionality. Azure WAF is doing great because it is designed to host web applications in Azure. However, it can be improved with other services. Barracuda is the most advanced firewall in the industry, so Azure WAF could pick some of its features and replicate them into its own application firewall. Barracuda WAF was deployed in parallel to the traffic. Azure WAF should not be deployed in the middle of the traffic. It should support both public and private points of presence. Additionally, like Barracuda, Azure WAF should have an inspection engine that covers not just Microsoft products, but also products from other manufacturers. This would be a great addition to the product and would increase its security functionality.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"There are key things that are used for our enterprise customers, such as Lambda and DNS."
"The most valuable feature of Cloudflare DNS is security."
"What I like best about Cloudflare is that my company can use it to trace and manage applications and monitor traffic. The solution tells you if there's a spike in traffic. Cloudflare also sends you a link to check your equipment and deployment and track it through peering, so it's a valuable tool."
"Easier http to https redirect using page rules"
"The solution is stable, and the DNS servers are simple to use."
"The solution automatically detects and responds to certain types of traffic based on geolocation."
"I get a lot of value from Cloudflare's API because it enables you to build a separate environment inside the solution. You can create a domain for performing test requests before you move to the production environment and connect various domains."
"The technical support is good."
"It enables us to move faster with new products because we have this layer of protection set up in our infrastructure."
"Everything will be handled by Akamai's system before it reaches our infrastructure."
"It is scalable for DDoS."
"Adaptive stream delivery and WAF protection are valuable."
"The product is user-friendly."
"Features like scalability and uptime are most effective."
"The features are powerful and better than F5."
"The solution easily identifies, delays, or allows business traffic."
"The integration it has with GitHub is great."
"The most valuable feature is that it allows us to publish our applications behind the firewall."
"The most valuable feature of Azure Web Application Firewall is its ability to filter requests and block false positives by using custom rules and the OWASP rule set."
"Azure WAF is extremely stable."
"It's a good option if you want a solution that's ready to go and easy for your team to learn. It's cloud-based, so you don't need to buy or maintain any hardware infrastructure."
"We have found the most valuable features to be the web application, minimal skills required for management, control through policies, and automation."
"It's quite a stable product and works well with Microsoft products."
"The solution has good dashboards."
 

Cons

"The solution could use more analytics on the backend to give us more insights into everything. More reports would be helpful."
"Support response time could be improved."
"The product needs to improve its automation."
"Cloudflare doesn't have a reverse lookup. We can only do a DNS lookup to get the IP address from the hostname. It doesn't work if you want to look up the hostname from an IPA address."
"There should be a specific price list for enterprise-level customers."
"I would like Cloudflare to offer a dedicated account manager for large enterprise clients like us."
"They lack a good way to manage DNS as a company, since everything is relegated to single account logins until you get to the higher levels. They have come out with a paid feature to remedy this, but I have not had a chance to fully review it yet to know if it fixes the access problem."
"It would be beneficial for us if Cloudflare could offer a scrubbing solution. This would involve taking a snapshot of my website and keeping it live during a DDoS attack, ensuring uninterrupted service for our users. DDoS attacks are typically short in duration, and having Cloudflare maintain the site's availability from its secure network would enhance the overall user experience. I would appreciate it if Cloudflare could consider implementing this feature. Many organizations already utilize similar capabilities in their CDN platforms, where a static snapshot of the web page is displayed during DDoS attacks. In terms of features, Cloudflare needs to enhance its resilience and stay more focused on adopting new technologies. For instance, solutions like F5 XC Box, Access Solution, and Distributed Cloud Solution have impressive features, and Cloudflare should strive to match and exceed those capabilities. There's a need for improvement in areas like AI-based DDoS attacks and Layer 7 WAF features. Cloudflare should prioritize enhancements in areas such as behavioral DDoS and protection against SQL injection attacks, considering the prevalent trend of public exposure to the internet for business reasons. Overall, Cloudflare needs to invest more in advancing its feature set."
"The custom rules must be improved."
"The WAF features definitely have a lot of room for improvement. A lot of the WAF is really basic. For some products or some of our solutions, we need to run a second layer of more advanced WAF. If it had better layer seven protection then we would not need a second WAF."
"It could have better analytics and reporting visibility in the OEM console."
"One thing I asked them is to integrate the API discovery product that they have and push that data into Akamai App and API Protector so that we do not have two types of reviews to identify the type of traffic. We already know the APIs that are frequently getting used, so analysis becomes easier. We can integrate both products and use them."
"The pricing could be reduced a bit."
"They are already very flexible, but room for improvement is there. Reports generation could be better and should be improved."
"One area where Akamai can improve is the captcha part. Cloudflare provides a captcha if there are a certain number of threats. For example, I can assign that if there are 10 requests within a second from a single IP, it should send a captcha to the user. The user should fill in the captcha, and only after that, the user should be able to access our website. This captcha feature should be built into Bot Manager. I love this captcha feature of Cloudflare."
"Could integrate more features for each security."
"There is a need to be able to configure the solution more."
"In Brazil, we have some problems with the phone service that affect our connection with the cloud. However, it isn't common."
"Azure WAF should not be deployed in the middle of the traffic."
"The knowledge base could be improved."
"The support for proxy forwarding could improve."
"Deployment should be simplified so that a non-techie can handle it."
"From a reporting perspective, they could do more there."
"We would like to see additional site services using AI to provide information about blocking requests and offer analytics on the origin of calls."
 

Pricing and Cost Advice

"I believe their performance has improved, but I'd like to refrain from discussing the pricing aspect related to the cloud. The pricing, in my opinion, could be simplified, and I think they should consider reevaluating the pricing for support, as it can be quite high. At times, this cost can make it challenging to choose CARFAGuard or opt for the support."
"The solution is expensive when compared to other products but offers unlimited bandwidth."
"Cloudflare's pricing is not much higher and is good for middle-level organizations."
"It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
"The price of the solution is expensive."
"There are no additional costs beyond the standard licensing fees."
"The price is reasonable."
"So far I use free tier and happy with it. You can subscribe to business package if needed."
"Based on the billing discussions in the DevOps team, Akamai's cost does not seem to be a major thing. However, LOE is an issue. When it comes to support, we know that even all the competitors do this. For a 30-minute issue, they give us a LOE of one or two hours. That is a basic practice, but that is something we worry about."
"The solution is expensive."
"Its price is slightly high. Every company has a justification for the high price. Overall, it feels worth the money based on how the service has been structured, but we do negotiate it."
"It's more expensive than others, but the ROI is good for large-scale infrastructure."
"The product’s price is high."
"Its price is at the medium level. It is not very high. It is also not very low. It serves the purpose."
"There is no license at all for Akamai. They are going to charge us only for the usage."
"Cost depends on the volume of traffic."
"The price is for this solution is fair and there is a license needed."
"I give the pricing a nine out of ten."
"The price is reasonable. It is approximately $2,000 US per month."
"Azure WAF has price advantages over other WAF solutions. The pricing model is flexible because you pay on a scale based on the level of protection you need."
"We have an enterprise agreement with Microsoft and the pricing is good."
"The price of the solution depends on your architecture and how you manage it. You can control the cost in Azure quite well. The costs do not directly correlate to expenses in the features we are using."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
824,067 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
25%
Computer Software Company
13%
Comms Service Provider
7%
Financial Services Firm
7%
Financial Services Firm
26%
Computer Software Company
14%
Manufacturing Company
8%
Insurance Company
5%
Computer Software Company
20%
Financial Services Firm
12%
Manufacturing Company
10%
Insurance Company
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What is your experience regarding pricing and costs for Akamai Web Application Protector?
The price is higher than others. It could be about 80% to 70% more expensive than other tools. So, it’s not just a sl...
What needs improvement with Akamai Web Application Protector?
It could have better analytics and reporting visibility in the OEM console.
What is your experience regarding pricing and costs for Azure Web Application Firewall?
The price is reasonable. It is approximately $2,000 US per month. This cost is one of the main reasons why we selecte...
What needs improvement with Azure Web Application Firewall?
Microsoft is constantly working on improvements. We would like to see additional site services using AI to provide in...
 

Also Known As

Cloudflare DNS
Akamai Web Application Protector, Akamai Kona Site Defender, Akamai Kona DDoS Defender
No data available
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Douglas Omaha Technology Commission, ZALORA, PrintPlanet
Information Not Available
Find out what your peers are saying about Akamai App and API Protector vs. Azure Web Application Firewall and other solutions. Updated: December 2024.
824,067 professionals have used our research since 2012.