Cloudflare vs Fortinet FortiWeb comparison

Cancel
You must select at least 2 products to compare!
Cloudflare Logo
8,896 views|7,547 comparisons
96% willing to recommend
Fortinet Logo
9,391 views|6,820 comparisons
88% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Cloudflare and Fortinet FortiWeb based on real PeerSpot user reviews.

Find out in this report how the two Distributed Denial of Service (DDOS) Protection solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Cloudflare vs. Fortinet FortiWeb Report (Updated: February 2023).
772,649 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The most valuable feature of Cloudflare is the GUI. You are able to control the solution very well through the interface. There is a lot of functionality that is embedded in the service.""I like Cloudflare's application gateway and DDoS protection.""Smaller businesses have seen great ROI due to the low investment and strong performance.""The most valuable feature is the web application firewall.""Cloudflare has many features.""The simplicity of the overall dashboard makes it a great product for a user like me who has less understanding of the internet than a developer or other more technical people. It gives me peace of mind. I also love the easy customization of the Page Rules.""Many websites require an SSL certificate because they sell stuff and want SSL. Cloudflare comes with an SSL certificate built in. It's automatic. You sign yourself up for Cloudflare, and an SSL certificate automatically protects your website. You don't necessarily need a certificate if you have a connection between your website and your host, the server, Cloudflare, and the host.""Generally, I am satisfied with this product."

More Cloudflare Pros →

"The solution has a good sandbox feature.""It can scale well.""The reason I recommend this product is because it guarantees that your network will be safe if it is set up properly and you fully utilize most of the functions.""FortiWeb offers machine learning in the latest product. This fixed many problems. There are no false negatives.""The most valuable feature in this solution is the ability to disseminate between the user entering some wrong value to the field, and a suspicious actor trying to exploit some known vulnerability.""The most valuable features in Fortinet FortiWeb are sandboxing and threat prevention.""The support services, performance, and pricing are all valuable features. The performance is excellent.""The most valuable feature is that this product represents a whole solution, including a WAF, and even anti-defacements."

More Fortinet FortiWeb Pros →

Cons
"One area of improvement is in the Access Rules. Hypothetically, if we wanted to block or challenge traffic outside of the United States, the only way to currently do that (as far as I know) is to enter every single country outside of the United States. That could be a labor intensive job. A solution could be to enable users to create a rule where traffic is only allowed within a certain country.""Although I think it's quite good, it doesn't provide me with all the features I would expect to have if I were using Imperva.""They lack a good way to manage DNS as a company, since everything is relegated to single account logins until you get to the higher levels. They have come out with a paid feature to remedy this, but I have not had a chance to fully review it yet to know if it fixes the access problem.""I would like Cloudflare to offer a dedicated account manager for large enterprise clients like us.""If they improve on the placement of their data centers, it would be better. I'm living in a remote area. I would like to connect to them without any kind of lag.""It should be easier to collect the logs with companies like Sumo. However, based on my discussions with the salespeople, I understand that's how they make their money. With the enterprise product, they want people doing those kinds of enterprise features to do the logging. They want them to pay a lot of money, and that's where I have an issue with them. That should be a default. You should be able to get the log no matter what. The logging should be universal.""Sometimes their more advanced caching tools can cause higher first-byte times and problems with JavaScript.""DNS Management."

More Cloudflare Cons →

"Fortinet FortiWeb is not scalable. You'll need more budget to change the hardware.""New releases and old releases have some bugs, some features do not work as good as we want but every new release the Fortinet team fixes up problems.""I know that we have run into some issues with an SSL certificate and how it functions. Sometimes this breaks connectivity or just limits certain websites that are whitelisted.""For advanced users, it would be really useful to have access and the ability to manipulate packets. If we can access and manipulate the contents of packets, even encrypted packets... that would be powerful. Since we're looking at packets arriving at our network, we would have the private key to access those packets and their information.""The dashboards are not that configurable. Application-specific dashboards can be improved. If we have 50 applications, there should be something to see what's happening with these 50 applications. There could be a graph or a consolidated alert page where all alerts are inbuilt. They have other products that I can use, but this feature should be built into FortiWeb.""I had some small problems when I was upgrading firmware. After the upgrade, some of my certificates were deleted.​""We use Kubernetes, so I would like to have a plugin to configure FortiWeb Cloud automatically using Kubernetes Ingress. That would reduce the complexity of setting up an Ingress object in Kubernetes. Some competing solutions help you configure Ingress and Kubernetes automatically.""The Layer 7 DDoS attacks need improvement, it could be better."

More Fortinet FortiWeb Cons →

Pricing and Cost Advice
  • "So far I use free tier and happy with it. You can subscribe to business package if needed."
  • "I think the pricing is competitive. I think as far as licensing is concerned it's pretty straightforward because it's based on domain. It's just that sometimes domains could be tricky with some customers."
  • "There are no additional costs beyond the standard licensing fees."
  • "The cost primarily depends on the size of the organization."
  • "We don't have any issues with the price."
  • "The price is reasonable."
  • "The solution is expensive when compared to other products but offers unlimited bandwidth."
  • "It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
  • More Cloudflare Pricing and Cost Advice →

  • "Cheaper than others."
  • "FortiWeb can be purchased in VM mode for a lower price and the same features."
  • "Keep a loose margin between your actual bandwidth and the product sizing when using hardware appliances. Only virtual machines are upgradable to larger sizes."
  • "​It really pays off to buy licences for multiple years​."
  • "​The pricing is reasonable."
  • "The license cost depends on the size of the box or the size of the solution. It can go from €200 Euros to a few hundred thousand Euros a year depending on your size."
  • "The solution gives us the best price to performance ratio."
  • "The costs are standard. We pay around $1,600 yearly."
  • More Fortinet FortiWeb Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Distributed Denial of Service (DDOS) Protection solutions are best for your needs.
    772,649 professionals have used our research since 2012.
    Comparison Review
    Anonymous User
    Questions from the Community
    Top Answer:Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GRE tunnels. We have decreased site load times on Mobile 3G from 8 to 1,6 seconds by… more »
    Top Answer:Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
    Top Answer:The WAF profiles has been effective at mitigating web-based threats.
    Top Answer:The pricing is in the middle. I would rate the pricing a five out of ten. It feels like a justified cost for the features, but it might get more expensive in the future. Also, keep in mind that Check… more »
    Top Answer:I'd like more customization. I'm not sure if everyone would agree, as it might add complexity. But for advanced users, it would be really useful to have access and the ability to manipulate packets… more »
    Ranking
    Views
    8,896
    Comparisons
    7,547
    Reviews
    17
    Average Words per Review
    520
    Rating
    8.4
    Views
    9,391
    Comparisons
    6,820
    Reviews
    22
    Average Words per Review
    754
    Rating
    7.7
    Comparisons
    Learn More
    Overview

    Cloudflare is a highly-regarded Content Delivery Network (CDN) and a Distribution Denial of Service (DDoS) protection solution. The robust global cloud platform that is Cloudflare ensures users are able to connect to the internet quickly, securely, and reliably. Cloudflare is one of the world's largest networks in the marketplace today. Using Cloudflare, businesses, educational entities, NGOs, vloggers, bloggers, and anyone else with an internet presence can use the solution and experience more secure, faster websites and applications.

    Currently, there are millions of internet locations on Cloudflare, and the Cloudflare network continues to grow every day by the thousands. The solution is able to fulfill the requests for millions of websites seamlessly and serves on average 45 million HTTP requests per second.

    Cloudflare has safe, secure data centers in close to 300 cities worldwide to ensure every client request is filled as quickly as possible. It is Cloudflare’s edge network that makes this possible by keeping content and other services as close to each client as possible, so the information requests are always only seconds away.

    Many organizations that work in democracy, civil society, human rights, or the arts are able to access Cloudflare highest levels of protection for free via Project Galileo. Additionally, official election websites can be secured from hacking and fraud through Cloudflare’s Project Athenian, also at no additional cost.

    Cloudflare can also help organizations of all sizes develop a robust zero-trust strategy to ensure the highest levels of productivity and profitability. Employees, stakeholders, and end-users have a greater level of satisfaction and overall improved user experience, which can, in turn, result in higher revenues and overall ROI. Zero-trust and BYOD ( bring your own device) access ensure end-users and employees always have the best resources and technology available to them at all times.



    Cloudflare Benefits

    Cloudflare has many benefits. Some of its most valuable benefits include:

    • Faster load times
    • Robust DNS security
    • Intuitive cloud Web Application Firewall (WAF)
    • Free universal SSL
    • Image Enhancement
    • Automatic Browser Caching
    • Next-generation cloud load balancer
    • Accelerated Mobile Pages (AMP)
    • Rate Limiting
    • Minification
    • Zero-trust capabilities 
    • Cost-effective
    • Reduced carbon footprint

    Reviews from Real Users

    “Many websites require an SSL certificate because they sell stuff and want SSL. Cloudflare comes with an SSL certificate built in. It's automatic. You sign yourself up for Cloudflare, and an SSL certificate automatically protects your website. If you have a connection between your website and your host, the server, Cloudflare, and the host, you don't necessarily need a certificate.”  Spencer M., Owner at Tech Exchange

    “What I like best about Cloudflare is that my company can use it to trace and manage applications and monitor traffic. The solution tells you if there's a spike in traffic. Cloudflare also sends you a link to check your equipment and deployment and track it through peering, so it's a valuable tool.” Daniel P., Network engineer at Ufinet

    The most valuable feature of Cloudflare is the GUI. You are able to control the solution very well through the interface. There is a lot of functionality that is embedded in the service.” A PeerSpot user who is a Competence Center Manager at a tech services company. 

    Fortinet FortiWeb is a Web Application Firewall (WAF) that protects your web applications and APIs from attacks targeting known as well as unknown vulnerabilities. As the surface of your web applications evolves with each change of existing features and deployment of new features, your APIs are left exposed. Fortinet FortiWeb provides the board protection capabilities required to protect web applications without sacrificing performance or manageability.

    Fortinet FortiWeb is an automatic, advanced multi-layer solution that provides secure protection by discerning irregular behavior and distinguishing between malicious and benign anomalies. In addition, the approach delivers powerful bot mitigation capacities which authorize harmless bots to connect while blocking malicious bot activity securely. Regardless of where an application is hosted, Fortinet FortiWeb will safeguard business applications by providing deployment options, such as virtual machines, hardware appliances, and containers that can be deployed in the data center, cloud environments, or in the cloud-native SaaS solution.

    Fortinet FortiWeb Features and Benefits

    APIs and web applications have become integral to the rising demand for business-critical applications. Now more than ever, businesses are in need of an automatic firewall that will provide them with security, without sacrificing performance or reliability. Fortinet FortiWeb offers a variety of features and benefits, including:

    • Security fabric integration: FortiWeb integrates with other Fortinet solutions to provide advanced protection from persistent threats.

    • Proven web application and API protection: FortiWeb safeguards applications from all DDOS attacks, malicious bot attacks, and OWASP Top-10 threats.

    • Advanced visual analytics: FortiWeb offers a unique visual reporting tool that other WAF solutions don’t by providing a detailed analysis of attack elements and sources.

    • Hardware-based acceleration: With fast and secure traffic encryption and decryption, FortiWeb provides best-in-class WAF protection.

    • ML-based threat detection: FortiWeb delivers multi-layer machine learning defense protection to defend against zero-day attacks and reduce false positives.

    • False positive mitigation tools: Reduce daily management of policies through advanced tools to guarantee only unwanted traffic is blocked.

    Reviews from Real Users

    Fortinet FortiWeb offers an industry-leading Web Application Firewall, and users are satisfied with it for a number of reasons, including the ability to control everything from the dashboard and the PCI-compliant reports it offers.

    Carlos P., director of business and digital transformation at SERNIVEL3, notes, "You have the ability to control everything from one single dashboard."

    A director at a tech service company, says, "Banks have to be compliant with PCI and other things, and FortiWeb is absolutely amazing in terms of providing these reports. Otherwise, they will have to spend a lot of time on them."

    Sample Customers
    Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
    Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG
    Top Industries
    REVIEWERS
    Financial Services Firm22%
    Comms Service Provider22%
    Engineering Company13%
    Marketing Services Firm9%
    VISITORS READING REVIEWS
    Educational Organization38%
    Computer Software Company11%
    Financial Services Firm8%
    Comms Service Provider4%
    REVIEWERS
    Financial Services Firm24%
    Comms Service Provider20%
    Computer Software Company17%
    Government10%
    VISITORS READING REVIEWS
    Educational Organization38%
    Computer Software Company12%
    Financial Services Firm7%
    Comms Service Provider6%
    Company Size
    REVIEWERS
    Small Business65%
    Midsize Enterprise12%
    Large Enterprise23%
    VISITORS READING REVIEWS
    Small Business18%
    Midsize Enterprise46%
    Large Enterprise36%
    REVIEWERS
    Small Business49%
    Midsize Enterprise22%
    Large Enterprise28%
    VISITORS READING REVIEWS
    Small Business18%
    Midsize Enterprise48%
    Large Enterprise34%
    Buyer's Guide
    Cloudflare vs. Fortinet FortiWeb
    February 2023
    Find out what your peers are saying about Cloudflare vs. Fortinet FortiWeb and other solutions. Updated: February 2023.
    772,649 professionals have used our research since 2012.

    Cloudflare is ranked 1st in Distributed Denial of Service (DDOS) Protection with 57 reviews while Fortinet FortiWeb is ranked 4th in Web Application Firewall (WAF) with 83 reviews. Cloudflare is rated 8.4, while Fortinet FortiWeb is rated 8.0. The top reviewer of Cloudflare writes "It's easy to set up because you point the DNS to it, and it's working in under 15 minutes". On the other hand, the top reviewer of Fortinet FortiWeb writes "Cost-effective, easy to configure, and works very well as a single solution for multiple environments". Cloudflare is most compared with Akamai, Azure Front Door, Imperva DDoS, AWS Shield and Microsoft Azure Application Gateway, whereas Fortinet FortiWeb is most compared with F5 Advanced WAF, Fortinet FortiADC, AWS WAF, Azure Web Application Firewall and Radware Alteon. See our Cloudflare vs. Fortinet FortiWeb report.

    We monitor all Distributed Denial of Service (DDOS) Protection reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.