Try our new research platform with insights from 80,000+ expert users

Akamai App and API Protector vs FortiWeb Web Application Firewall (WAF) comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
71
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (14th)
Akamai App and API Protector
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
28
Ranking in other categories
Web Application Firewall (WAF) (8th), Distributed Denial-of-Service (DDoS) Protection (4th), Cloud and Data Center Security (10th)
FortiWeb Web Application Fi...
Average Rating
8.2
Number of Reviews
22
Ranking in other categories
Web Application Firewall (WAF) (16th)
 

Featured Reviews

Spencer Malmad - PeerSpot reviewer
It's easy to set up because you point the DNS to it, and it's working in under 15 minutes
Cloudflare is highly scalable. Cloudflare is a system with a web portal that the end users like me see. It's a console where we can adjust the DNS, caching, and security features all in that console. Cloudflare owns thousands of servers across the world that cache the data. It's a powerful solution. When clients sign up for Cloudflare, they're getting this monster content delivery network, security, and a web application firewall in one. It's all rolled into one, and it's massive. Unless you have your website hosted on a massive hosting provider, there's no way that you can deliver the amount of data that Cloudflare can provide to the end users. If you have static content, there's no way that you can ever match what Cloudflare can do. Obviously, there are competitors to Cloudflare that do the same, but I'm saying other types of solutions. Let's say you go with F5. Great, that's on-prem. That's in your colo. You can't deliver as much data to the internet as you can with a CDN. You don't have to spend $20,000 on a net scaler, F5, or whatever Cisco's selling now. You don't have to buy that. You pay them $50 a month or $150 a month. It's totally worth it because even in five years, you'll never get the performance value, not just the actual ROI. You have to consider how much throughput you can get with Cloudflare.
Deepesh  Singh - PeerSpot reviewer
Bot Manager and different features to manage threats
As a product, it has good capabilities, including professional support. However, it's risky for us to rely on AI for real-time traffic management. We use in-house analytics but avoid automatic actions due to their high impact. For example, I live in a developing country. Everyone has different types of phones, apps, and everything else. So, if someone is using a legacy phone, that is still a use case here. If AI decides that this is an end-of-life phone or end-of-life Android operating system, it starts blocking that traffic. We may potentially lose millions or probably thousands and hundreds of thousands of hits per second. Everything is all about how well we serve payments because we're into payments. So, AI is used for analytics but not for real-time decisions. We can't afford to block traffic based on AI models due to the variety of devices and operating systems our users have.
Nitith Unarat - PeerSpot reviewer
Identifies potential DDoS attacks and suspicious domain activity
The price could be close to Imperva; Imperva is the number one firewall. FortiWeb cannot do some kind of ADC solution, like load balancing. I hope they improve that. I'm looking for the ADC solution, the load balancing solution. Because application firewalls with multiple line solutions do come with it. So, I think it should be integrated within FortiWeb WAF.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"DDoS attacks target unprotected machines. Cloudflare detects and stops these attacks using internal systems. It identifies incoming DDoS attacks, issuing challenges or blocking them immediately."
"It's very user-friendly."
"The most valuable feature of Cloudflare is that it has a free version. They give us the free version with the anti-DDoS features and also the load balancing solution."
"The solution is stable, and the DNS servers are simple to use."
"The UI is good."
"The DDoS protection is the most valuable aspect of the solution."
"The solution automatically detects and responds to certain types of traffic based on geolocation."
"The solution offers the flexibility to control configuration rules."
"The support that we got from their technical team has been fantastic. I have never experienced this level of support from other CDN providers."
"It gives us a report of traffic. It gives us a report of the day-to-day URL traffic, and it also gives an individual report. If we reach out to Akamai, they give us the IPs as well."
"Everything will be handled by Akamai's system before it reaches our infrastructure."
"The product is user-friendly."
"It is scalable for DDoS."
"The solution can scale extremely well."
"The CDN and the WAF features are the best."
"The features are powerful and better than F5."
"The product is easy to configure."
"The most valuable features of the solution are SD-WAN, filtration, web filter, application filter, and IPS."
"The initial setup was easy since it was possible to get remote support for the product."
"FortiWeb Web Application Firewall blocks attacks from application layers and provides protection."
"The solution is transparent and smooth."
"The solution's integration with other products is easy. Its most valuable feature is the antivirus engine. The tool helps us comply with GDPR and KVKK standards."
"It is good for web tracking applications."
"The platform's stability is good."
 

Cons

"It would be good if Cloudflare could have more servers for better traffic routing or an increase in the traffic routed. This is what I'd like to improve in Cloudflare."
"The timing aspect can lead to it being considered overpriced. This is a particular concern we have with Cloudflare, as they may struggle with accurately detecting the client."
"One area of improvement is in the Access Rules. Hypothetically, if we wanted to block or challenge traffic outside of the United States, the only way to currently do that (as far as I know) is to enter every single country outside of the United States. That could be a labor intensive job. A solution could be to enable users to create a rule where traffic is only allowed within a certain country."
"Cloudflare could offer a better view or maybe dashboards of the main resources used in the client."
"Support response time could be improved."
"The product support needs to be accessible from more places, a wider area of coverage."
"Areas like how assessment, discovery, and payload are dealt with and how it all comes into your organization can be considered when trying to make suggestions to Cloudflare for improvements."
"We're facing challenges due to an upgrade in the machine learning model. The problem arises from some users abusing the APIs, resulting in an influx of suspicious traffic. Cloudflare's learning model mistakenly identifies this traffic as human. Consequently, it assigns it a higher trust score, akin to legitimate human traffic, causing complications in our architecture. Previously, such traffic would have been categorized as suspicious, enabling us to apply appropriate blocking rules. However, we encounter difficulties distinguishing between genuine and suspicious traffic with the new categorization. Despite these challenges, overall, Cloudflare remains the preferred solution compared to Azure, AWS CloudFront, and Google Cloud Armor."
"It could have better analytics and reporting visibility in the OEM console."
"If we talk about application layer attacks, including WAF, CloudFlare is leading. Akamai can focus a bit more on the application layer attacks and how to protect them."
"The solution could offer even more integrations."
"Could integrate more features for each security."
"The custom rules must be improved."
"One area where Akamai can improve is the captcha part. Cloudflare provides a captcha if there are a certain number of threats. For example, I can assign that if there are 10 requests within a second from a single IP, it should send a captcha to the user. The user should fill in the captcha, and only after that, the user should be able to access our website. This captcha feature should be built into Bot Manager. I love this captcha feature of Cloudflare."
"It's fine for a simple tool, but as I recall, if you encounter a lot of bots, scrapers, and other things, you'll need this tool bot and this other thing they offer called Bot Manager."
"The WAF features definitely have a lot of room for improvement. A lot of the WAF is really basic. For some products or some of our solutions, we need to run a second layer of more advanced WAF. If it had better layer seven protection then we would not need a second WAF."
"The documentation is poor."
"The product is complicated to set up."
"FortiWeb WAF's tuning causes trouble. It's complicated. The solution needs to improve the signature feature as well."
"FortiWeb Web Application Firewall's signature database updates could be improved."
"There is room for improvement in the support. The response time could be faster. Plus, they ask for a lot of information. It is not easy to get support."
"FortiWeb Web Application Firewall needs to improve its performance."
"The product lacks features offered by enterprise-level firewall tools."
"It would be good if the solution integrated with other solutions, like SAP."
 

Pricing and Cost Advice

"I give the price a five out of ten."
"So far I use free tier and happy with it. You can subscribe to business package if needed."
"We don't have any issues with the price."
"The product's pricing is minimal compared to other products."
"It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
"In terms of licensing costs, we don't pay for licensing for Cloudflare. We only establish communication, then for peering, Cloudflare takes care of the cross-connection in different data centers."
"There are no additional costs beyond the standard licensing fees."
"That is one of the great features. I was able to access the majority of the features and services for free."
"Its price is slightly high. Every company has a justification for the high price. Overall, it feels worth the money based on how the service has been structured, but we do negotiate it."
"There is no license at all for Akamai. They are going to charge us only for the usage."
"Price-wise, I would say Akamai's pricing is competitive."
"It's more expensive than others, but the ROI is good for large-scale infrastructure."
"The price they are offering is quite reasonable for premium customers, but it's very expensive if you're a small and medium-sized enterprises."
"Based on the billing discussions in the DevOps team, Akamai's cost does not seem to be a major thing. However, LOE is an issue. When it comes to support, we know that even all the competitors do this. For a 30-minute issue, they give us a LOE of one or two hours. That is a basic practice, but that is something we worry about."
"One reason not all people use Akamai is that it is a little bit more expensive than some other providers."
"The product is expensive, but it is worth the money."
"I rate the tool's pricing an eight out of ten."
"FortiWeb has a good presence because of its price."
"It is a cheap solution."
"The tool is really expensive."
"I rate the product price a four on a scale of one to ten, where one is a high price, and ten is a low price."
"FortiWeb WAF is priced well for customers compared to other vendors' solutions."
"The product provides very good prices to customers. The price is set well and offers great value for money."
"This product offers two pricing options: a standard package and an advanced package."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
824,067 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
25%
Computer Software Company
13%
Comms Service Provider
7%
Financial Services Firm
7%
Financial Services Firm
26%
Computer Software Company
14%
Manufacturing Company
8%
Insurance Company
5%
Financial Services Firm
15%
Comms Service Provider
10%
Manufacturing Company
10%
Computer Software Company
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What is your experience regarding pricing and costs for Akamai Web Application Protector?
The price is higher than others. It could be about 80% to 70% more expensive than other tools. So, it’s not just a sl...
What needs improvement with Akamai Web Application Protector?
It could have better analytics and reporting visibility in the OEM console.
What do you like most about FortiWeb Web Application Firewall (WAF)?
The most valuable features of the solution are SD-WAN, filtration, web filter, application filter, and IPS.
What is your experience regarding pricing and costs for FortiWeb Web Application Firewall (WAF)?
FortiWeb uses a subscription-based license, but there is also an option for a perpetual license. It's not the cheapes...
What needs improvement with FortiWeb Web Application Firewall (WAF)?
For users not familiar with Fortinet, it could be beneficial to provide more user-friendly analytics and reporting. T...
 

Also Known As

Cloudflare DNS
Akamai Web Application Protector, Akamai Kona Site Defender, Akamai Kona DDoS Defender
No data available
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Douglas Omaha Technology Commission, ZALORA, PrintPlanet
Information Not Available
Find out what your peers are saying about Akamai App and API Protector vs. FortiWeb Web Application Firewall (WAF) and other solutions. Updated: December 2024.
824,067 professionals have used our research since 2012.