Try our new research platform with insights from 80,000+ expert users

Akamai App and API Protector vs Imperva Web Application Firewall comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
76
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (13th)
Akamai App and API Protector
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
28
Ranking in other categories
Web Application Firewall (WAF) (8th), Distributed Denial-of-Service (DDoS) Protection (4th), Cloud and Data Center Security (10th)
Imperva Web Application Fir...
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
52
Ranking in other categories
Web Application Firewall (WAF) (7th)
 

Featured Reviews

Carlos Alam Hernandez Baruch - PeerSpot reviewer
Fast and secure deployments simplify operations for government and fintech clients
It is a fast and secure DNS. It is very easy to deploy, and my customers are happy with this tool. Additionally, the CDN performance in Mexico is excellent, providing fast service and tools. It offers reliability during high-traffic periods, ensuring no impact on the environment. It helps my clients avoid using on-premise boxes, simplifying operations as they only use the prices on Cloudflare.
Deepesh  Singh - PeerSpot reviewer
Bot Manager and different features to manage threats
As a product, it has good capabilities, including professional support. However, it's risky for us to rely on AI for real-time traffic management. We use in-house analytics but avoid automatic actions due to their high impact. For example, I live in a developing country. Everyone has different types of phones, apps, and everything else. So, if someone is using a legacy phone, that is still a use case here. If AI decides that this is an end-of-life phone or end-of-life Android operating system, it starts blocking that traffic. We may potentially lose millions or probably thousands and hundreds of thousands of hits per second. Everything is all about how well we serve payments because we're into payments. So, AI is used for analytics but not for real-time decisions. We can't afford to block traffic based on AI models due to the variety of devices and operating systems our users have.
Mitesh D Patel - PeerSpot reviewer
Effectively defends against threats like cross-site scripting (XSS), SQL injection, and others
It does bring value. For example, consider a BFSI customer. Their application is critical and represents their brand. Without a WAF, an attack could take their application down, harming their reputation. It leads to hampering the customer's workflow. With an Imperva WAF, they protect against attacks like DDoS or SQL injection, ensuring their application remains available and customers are happy. That's the main benefit for both the customer and the organization. The impact depends on the customer's use case. If their business primarily operates online, a CDN is beneficial for traffic optimization. Moreover, the integration options depend on the specific use case of our customers. Generally, integration capabilities are good with SIEM (Security Information and Event Management) parts.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Generally, I am satisfied with this product."
"Cloudflare DNS is widely used, and it's good for websites. If we use Cloudflare DNS and update one record, it updates in their office instantly."
"Even when there is a high load on our servers, Cloudflare is able to cache the data and serve it to users, ensuring they can still access the website."
"Many websites require an SSL certificate because they sell stuff and want SSL. Cloudflare comes with an SSL certificate built in. It's automatic. You sign yourself up for Cloudflare, and an SSL certificate automatically protects your website. You don't necessarily need a certificate if you have a connection between your website and your host, the server, Cloudflare, and the host."
"The most valuable feature of Cloudflare is the GUI. You are able to control the solution very well through the interface. There is a lot of functionality that is embedded in the service."
"Easier http to https redirect using page rules"
"Cloudflare allows us to self-host services such as Rocket.Chat and Node-RED, in high-availability mode, thanks to round robin DNS which allows us to share one hostname between our two locations."
"It's a great product because it's scalable, has great coverage, and is mature with good defenses against DDoS attacks."
"The solution can scale extremely well."
"The most valuable feature is the DDoS protection, which is the main reason we got it."
"Traffic filtering and WAF are valuable."
"The support that we got from their technical team has been fantastic. I have never experienced this level of support from other CDN providers."
"We are getting security for each and every API."
"It gives us a report of traffic. It gives us a report of the day-to-day URL traffic, and it also gives an individual report. If we reach out to Akamai, they give us the IPs as well."
"I can attest to its benefits in terms of understanding and mitigating threats...The solution's technical support team seems to be pretty responsive."
"Akamai Web Application Protector is a good solution that provides basic web application protection."
"There are a number of features that are valuable such as the account takeover and various antivirus features."
"Configuration for different application sources is most valuable. We can segregate the traffic that an application is carrying and identify the sizing in Imperva."
"It mitigates all of the availabilities of risks around web applications."
"We can prevent attacks or issues even before they happen."
"It is easy to use and has good security."
"The features I have found most valuable with Imperva Web Application Firewall are account takeover protection, advanced bot protection, and API security."
"The solution is very scalable. It is one of the most important features. You can also expand resources and features as well."
"The most valuable features of Imperva Web Application Firewall are the monitoring of databases and the dashboards are easy to understand."
 

Cons

"The analytics, basically the dashboard, doesn't have much to it."
"Areas like how assessment, discovery, and payload are dealt with and how it all comes into your organization can be considered when trying to make suggestions to Cloudflare for improvements."
"Cloudflare could be improved by introducing a mid-tier pricing option."
"We're facing challenges due to an upgrade in the machine learning model. The problem arises from some users abusing the APIs, resulting in an influx of suspicious traffic. Cloudflare's learning model mistakenly identifies this traffic as human. Consequently, it assigns it a higher trust score, akin to legitimate human traffic, causing complications in our architecture. Previously, such traffic would have been categorized as suspicious, enabling us to apply appropriate blocking rules. However, we encounter difficulties distinguishing between genuine and suspicious traffic with the new categorization. Despite these challenges, overall, Cloudflare remains the preferred solution compared to Azure, AWS CloudFront, and Google Cloud Armor."
"Integration involving API with other products could be more user-friendly."
"The product needs to improve its automation."
"It would be helpful if the solution could continue evolving to compete with the other solutions on the market."
"I believe they currently have this feature, but there will most likely be integration with APIs so we can control some features through API."
"Akamai needs to focus on quickly responding to risks, even those that may potentially be of zero threat..Maybe some of the documentation is a little confusing. They have a lot of different places where you can go to get information, and some of the information is quite out of date."
"There are some issues with pushing configurations across a network. It still takes about 20 minutes and that means to retract it's another 20 minutes."
"They are already very flexible, but room for improvement is there. Reports generation could be better and should be improved."
"We are experimenting with EdgeWorkers to write our own code at the Edge level. It could grow to be much better."
"The pricing could be reduced a bit."
"It could have better analytics and reporting visibility in the OEM console."
"It would be better if there weren't any issues with latency. We had latency issues, but I think they are all solved now."
"Support and the pricing need to improve."
"The only disadvantage of Imperva is that it is a pretty costly solution."
"There's always room for improvement. Occasionally, there might be false-positive alerts."
"It would be useful if the solution used more intelligence in attack protection. For example, firewalls are to be dependent on the configuration, but if they could have some data science around it the solution would be even better. The profiling of the traffic, and making decisions surrounding that should be intelligence-based, instead of being based on the configuration of the firewall itself."
"The initial setup could be simplified. Every time you have to install the solution you have to get in touch with support or somebody that can to do that for you."
"Support is one thing I wish Imperva could improve."
"The user interface could be better."
"There could be some limitations that from the converged infrastructure perspective: when you want to converge with everything and you want Imperva to get there easily because it's not a cloud component. For example, when you want to build servers and you're using OneView to manage your software-defined networks, implementing Imperva right away is not that simple. But if you're doing just a simple cloud infrastructure with servers in there, you're good to go. Also, we are not able, with Imperva, to block by signatures. Imperva by itself needs to be complemented with another service to do URL filtering."
"Their portal is very limited and needs improvement."
 

Pricing and Cost Advice

"The price is reasonable."
"The solution has many features but there are ones that you need to pay for. Sometimes you have to find out which is available for free and which you have to pay for."
"There are no additional costs beyond the standard licensing fees."
"That is one of the great features. I was able to access the majority of the features and services for free."
"The pricing for the service is reasonable, neither excessively cheap nor prohibitively expensive. It aligns well with the value of their solution."
"I believe their performance has improved, but I'd like to refrain from discussing the pricing aspect related to the cloud. The pricing, in my opinion, could be simplified, and I think they should consider reevaluating the pricing for support, as it can be quite high. At times, this cost can make it challenging to choose CARFAGuard or opt for the support."
"Cloudflare's pricing is not much higher and is good for middle-level organizations."
"A free version of the solution is available."
"Price-wise, I would say Akamai's pricing is competitive."
"Akamai is very expensive."
"If you want quality, you have to pay the price. Its price is fair. Their account managers are also very helpful. They help you a lot with pricing even though they are working with Akamai."
"The price they are offering is quite reasonable for premium customers, but it's very expensive if you're a small and medium-sized enterprises."
"Cost depends on the volume of traffic."
"The solution is expensive."
"The product’s price is high."
"There is no license at all for Akamai. They are going to charge us only for the usage."
"It's an excellent product, but it can be very costly."
"There is a license for this solution and we purchase the license annually with no additional fees."
"It is a very affordable solution."
"Make sure you understand the way that Imperva charges. It's very affordable. However, I would like to see a package with the Virtual Patching included. You get to do patching separately."
"The tool is expensive."
"Imperva Web Application Firewall's pricing is expensive."
"It is very costly, but the return on investment is very high. Its cost was around $70,000, and we got it back in just six months."
"Imperva Web Application Firewall price is higher compared to other solutions. However, everything is included in the price."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
861,524 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Comms Service Provider
11%
Financial Services Firm
10%
Manufacturing Company
7%
Financial Services Firm
23%
Computer Software Company
11%
Manufacturing Company
8%
Insurance Company
5%
Financial Services Firm
16%
Computer Software Company
12%
Insurance Company
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What is your experience regarding pricing and costs for Akamai Web Application Protector?
The price is higher than others. It could be about 80% to 70% more expensive than other tools. So, it’s not just a sl...
What needs improvement with Akamai Web Application Protector?
It could have better analytics and reporting visibility in the OEM console.
Is Citrix ADC (formerly Netscaler) the best ADC to use and if not why?
For ADC, any ADC can do a good job. But in case if you want to add WAF functionality to the same ADC hardware you hav...
DDoS solutions: Any other solutions to consider aside from Radware DDoS Protection Service and F5 Silverline DDoS Protection?
You can have a look to Imperva Cloud WAF, the anti-DDoS mitigation is under 1s and works very well. I observed a lot ...
 

Also Known As

Cloudflare DNS
Akamai Web Application Protector, Akamai Kona Site Defender, Akamai Kona DDoS Defender
No data available
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Douglas Omaha Technology Commission, ZALORA, PrintPlanet
BlueCross BlueShield, eHarmony, EMF Broadcasting, GE Healthcare, Metro Bank, The Motley Fool, Siemens
Find out what your peers are saying about Akamai App and API Protector vs. Imperva Web Application Firewall and other solutions. Updated: July 2025.
861,524 professionals have used our research since 2012.