Try our new research platform with insights from 80,000+ expert users

AWS WAF vs Comodo cWatch comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
74
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (14th)
AWS WAF
Average Rating
8.0
Reviews Sentiment
7.6
Number of Reviews
58
Ranking in other categories
Web Application Firewall (WAF) (1st)
Comodo cWatch
Average Rating
9.6
Reviews Sentiment
7.1
Number of Reviews
4
Ranking in other categories
CDN (13th), Web Application Firewall (WAF) (28th)
 

Featured Reviews

Spencer Malmad - PeerSpot reviewer
It's easy to set up because you point the DNS to it, and it's working in under 15 minutes
Cloudflare is highly scalable. Cloudflare is a system with a web portal that the end users like me see. It's a console where we can adjust the DNS, caching, and security features all in that console. Cloudflare owns thousands of servers across the world that cache the data. It's a powerful solution. When clients sign up for Cloudflare, they're getting this monster content delivery network, security, and a web application firewall in one. It's all rolled into one, and it's massive. Unless you have your website hosted on a massive hosting provider, there's no way that you can deliver the amount of data that Cloudflare can provide to the end users. If you have static content, there's no way that you can ever match what Cloudflare can do. Obviously, there are competitors to Cloudflare that do the same, but I'm saying other types of solutions. Let's say you go with F5. Great, that's on-prem. That's in your colo. You can't deliver as much data to the internet as you can with a CDN. You don't have to spend $20,000 on a net scaler, F5, or whatever Cisco's selling now. You don't have to buy that. You pay them $50 a month or $150 a month. It's totally worth it because even in five years, you'll never get the performance value, not just the actual ROI. You have to consider how much throughput you can get with Cloudflare.
Kavin Kalaiarasu - PeerSpot reviewer
AWS's cloud-native security simplifies rule enforcement but needs better DDoS integration
The dashboarding could be improved, and the default metrics provided by AWS WAF could be upgraded. The rate at which AWS updates their managed rule sets could be better. Features like bot protection or DDoS mitigation, available with other WAF vendors, do not come natively with AWS WAF. Instead, they are part of AWS Shield. Providing DDoS protection as part of their WAF solution would be beneficial.
Bernardo Murillo - PeerSpot reviewer
Alerts organizations if any malware is detected and removes it quickly
The solution allows me to change my logo. It gives me a white-label portal because I am a partner. OWASP has been the most effective in malware prevention. It can detect if the headers are okay and do FTP scans. We get alerts if we have some malware. It is removed very quickly.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution offers the flexibility to control configuration rules."
"New and innovative way to protect the client's data."
"What I like best about Cloudflare is that my company can use it to trace and manage applications and monitor traffic. The solution tells you if there's a spike in traffic. Cloudflare also sends you a link to check your equipment and deployment and track it through peering, so it's a valuable tool."
"The simplicity of the overall dashboard makes it a great product for a user like me who has less understanding of the internet than a developer or other more technical people. It gives me peace of mind. I also love the easy customization of the Page Rules."
"From what I've seen so far, there are no negatives to report as of yet"
"I like Cloudflare's application gateway and DDoS protection."
"Cloudflare allows us to self-host services such as Rocket.Chat and Node-RED, in high-availability mode, thanks to round robin DNS which allows us to share one hostname between our two locations."
"When using services like Heroku, Cloudflare is very useful for CNAME flattening. I also use it for their end-to-end SSL with TLS authentication on nginx for securing servers."
"The most valuable aspect is that it protects our code. It's a bit difficult to overwrite code in our application. It also protects against threats."
"The cloud-native nature of AWS is crucial since most of our workload is in AWS, making AWS WAF native to Amazon Web Services."
"The most valuable feature is the capability to limit access based on geographical location by restricting specific IP addresses."
"The cloud-native nature of AWS is crucial since most of our workload is in AWS, making AWS WAF native to Amazon Web Services."
"One of the most valuable features of AWS WAF is its ability to filter web app traffic, allowing us to specify conditions such as IP addresses and HTTP headers."
"AWS WAF is a stable solution. The performance of the solution is very good."
"Stable and scalable web application firewall. Setting it up is straightforward."
"The simple configuration and the scalability have been most valuable. We are able to scale across all of our different AWS instances."
"We get alerts if we have some malware."
"The solution is pretty stable. I've never faced pressing issues or hanging issue."
"The FIM feature, the information in the new management system, and their support are the most valuable features. The scanned results are quite fast as compared to other platforms compared to scanning timing. It takes about a minute or two minutes. Also, the results of the Comodo scan results are in detail."
 

Cons

"It would be beneficial for us if Cloudflare could offer a scrubbing solution. This would involve taking a snapshot of my website and keeping it live during a DDoS attack, ensuring uninterrupted service for our users. DDoS attacks are typically short in duration, and having Cloudflare maintain the site's availability from its secure network would enhance the overall user experience. I would appreciate it if Cloudflare could consider implementing this feature. Many organizations already utilize similar capabilities in their CDN platforms, where a static snapshot of the web page is displayed during DDoS attacks. In terms of features, Cloudflare needs to enhance its resilience and stay more focused on adopting new technologies. For instance, solutions like F5 XC Box, Access Solution, and Distributed Cloud Solution have impressive features, and Cloudflare should strive to match and exceed those capabilities. There's a need for improvement in areas like AI-based DDoS attacks and Layer 7 WAF features. Cloudflare should prioritize enhancements in areas such as behavioral DDoS and protection against SQL injection attacks, considering the prevalent trend of public exposure to the internet for business reasons. Overall, Cloudflare needs to invest more in advancing its feature set."
"The documentation could improve for Cloudflare DNS."
"The tool needs to improve caching of servers. The product needs to include PFX certificate as well."
"I think the APIs are a little bit hard for us to work with. The APIs could be more open so that we could integrate better with our SolarWinds or our monitoring solution."
"Areas like how assessment, discovery, and payload are dealt with and how it all comes into your organization can be considered when trying to make suggestions to Cloudflare for improvements."
"One area of improvement is in the Access Rules. Hypothetically, if we wanted to block or challenge traffic outside of the United States, the only way to currently do that (as far as I know) is to enter every single country outside of the United States. That could be a labor intensive job. A solution could be to enable users to create a rule where traffic is only allowed within a certain country."
"Cloudflare could be improved by introducing a mid-tier pricing option."
"The analytics, basically the dashboard, doesn't have much to it."
"The area of reporting in the product needs to have a proper format."
"The default content policy available in the tool is not very strong compared to the competitors."
"While the complexity of the installation can vary from one service to another, overall, I would say that it and the configuration and navigation are somewhat complex."
"The technical support does not respond to bugs in the coding of the product."
"There is room for improvement in pricing."
"We need more support as we go global."
"The solution could improve by having better rules, they are very basic at the moment. There are more attacks coming and we have to use third-party solutions, such as FIA. The features are not sufficient to prevent all the attacks, such as DDoS. Overall the solution should be more secure."
"The product must provide more features."
"The portal is a little slow."
"The solution needs to build better performance, specifically in the hardware resources."
"A small problem is from the support team. Sometimes they are a bit delayed."
 

Pricing and Cost Advice

"We are using the free version."
"The cost primarily depends on the size of the organization."
"That is one of the great features. I was able to access the majority of the features and services for free."
"The tool is a premium product, so it is very expensive."
"I think the pricing is competitive. I think as far as licensing is concerned it's pretty straightforward because it's based on domain. It's just that sometimes domains could be tricky with some customers."
"In terms of licensing costs, we don't pay for licensing for Cloudflare. We only establish communication, then for peering, Cloudflare takes care of the cross-connection in different data centers."
"There are no additional costs beyond the standard licensing fees."
"It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
"There are no separate licensing costs we pay for since it is included in the plan we purchase."
"It has a variable pricing scheme."
"I rate the product price a five on a scale of one to ten, where one is high price, and ten is low price"
"You need an additional AWS subscription for this product if you are buying a managed tool."
"The price is average."
"There are different scale options available for WAF."
"AWS is not that costly by comparison. They are maybe close to $40 per month. I think it was between $29 or $39."
"The pricing is good and manageable."
"Comodo cWatch’s first level, which has fewer features, costs $7."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
842,296 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
21%
Computer Software Company
13%
Comms Service Provider
9%
Financial Services Firm
8%
Computer Software Company
16%
Financial Services Firm
14%
Manufacturing Company
8%
Government
6%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What are the limitations of AWS WAF vs alternative WAFs?
Hi Varun, I have had experienced with several WAF deployments and deep technical assessments of the following: 1. Im...
How does AWS WAF compare to Microsoft Azure Application Gateway?
Our organization ran comparison tests to determine whether Amazon’s Web Service Web Application Firewall or Microsoft...
What do you like most about AWS WAF?
The most valuable feature of AWS WAF is its highly configurable rules system.
What needs improvement with Comodo cWatch?
The portal is a little slow. I have to wait for it to load all the information. CDN's performance must be improved.
What is your primary use case for Comodo cWatch?
I use the solution to detect vulnerabilities in the site.
What is your experience regarding pricing and costs for Comodo cWatch?
Comodo cWatch’s price is very good compared to Cloudflare’s. The first level of Cloudflare costs us about $20. The ne...
 

Also Known As

Cloudflare DNS
AWS Web Application Firewall
cWatch
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
eVitamins, 9Splay, Senao International
Xerox, Intel, HP, UPS, Western Union, Western Digital
Find out what your peers are saying about AWS WAF vs. Comodo cWatch and other solutions. Updated: March 2025.
842,296 professionals have used our research since 2012.