Try our new research platform with insights from 80,000+ expert users

Cloudflare vs NGINX App Protect comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Cloudflare
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
71
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (14th)
NGINX App Protect
Average Rating
8.4
Reviews Sentiment
7.4
Number of Reviews
22
Ranking in other categories
Web Application Firewall (WAF) (15th), Container Security (22nd), API Security (4th)
 

Mindshare comparison

While both are Security Services solutions, they serve different purposes. Cloudflare is designed for Distributed Denial-of-Service (DDoS) Protection and holds a mindshare of 19.9%, down 20.8% compared to last year.
NGINX App Protect, on the other hand, focuses on Web Application Firewall (WAF), holds 2.1% mindshare, down 2.9% since last year.
Distributed Denial-of-Service (DDoS) Protection
Web Application Firewall (WAF)
 

Featured Reviews

Spencer Malmad - PeerSpot reviewer
It's easy to set up because you point the DNS to it, and it's working in under 15 minutes
Cloudflare is highly scalable. Cloudflare is a system with a web portal that the end users like me see. It's a console where we can adjust the DNS, caching, and security features all in that console. Cloudflare owns thousands of servers across the world that cache the data. It's a powerful solution. When clients sign up for Cloudflare, they're getting this monster content delivery network, security, and a web application firewall in one. It's all rolled into one, and it's massive. Unless you have your website hosted on a massive hosting provider, there's no way that you can deliver the amount of data that Cloudflare can provide to the end users. If you have static content, there's no way that you can ever match what Cloudflare can do. Obviously, there are competitors to Cloudflare that do the same, but I'm saying other types of solutions. Let's say you go with F5. Great, that's on-prem. That's in your colo. You can't deliver as much data to the internet as you can with a CDN. You don't have to spend $20,000 on a net scaler, F5, or whatever Cisco's selling now. You don't have to buy that. You pay them $50 a month or $150 a month. It's totally worth it because even in five years, you'll never get the performance value, not just the actual ROI. You have to consider how much throughput you can get with Cloudflare.
Tomaz Sobczak - PeerSpot reviewer
Signature-based detection, DOS protection, and bot protection
NGINX App Protect is easier to automate and configure, or manage from an API. This is good for securing applications. However, it's not suitable for more complex tasks. NGINX App Protect positively impacted performance changes. There's a cache or it works like a proxy, so it can speed up applications. It can also offload some functions from servers, which NGINX can handle faster.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution provides good load balancing and protection against DDoS attacks."
"DDoS attacks target unprotected machines. Cloudflare detects and stops these attacks using internal systems. It identifies incoming DDoS attacks, issuing challenges or blocking them immediately."
"The solution offers the flexibility to control configuration rules."
"Many websites require an SSL certificate because they sell stuff and want SSL. Cloudflare comes with an SSL certificate built in. It's automatic. You sign yourself up for Cloudflare, and an SSL certificate automatically protects your website. You don't necessarily need a certificate if you have a connection between your website and your host, the server, Cloudflare, and the host."
"The most valuable feature of Cloudflare is the GUI. You are able to control the solution very well through the interface. There is a lot of functionality that is embedded in the service."
"The most valuable features of the solution are performance and security."
"Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications."
"When using services like Heroku, Cloudflare is very useful for CNAME flattening. I also use it for their end-to-end SSL with TLS authentication on nginx for securing servers."
"NGINX App Protect has complete control over the HTTP session."
"The stability of the product is very impressive since it handles 60,000 to 70,000 requests or transactions per second."
"The initial setup was simple and took three to four days."
"It has the best documentation features."
"NGINX App Protect's best features are auto-learning, which creates a profile of applications that are deployed, bot protection, and force protection, which lets you configure your brute force policy and alert for and prevent brute force attacks."
"WAF is useful to track mitigation, inclusion, prevention, and the parametric firewall."
"NGINX App Protect is stable."
"There's a cache, or it works like a proxy, so it can speed up applications."
 

Cons

"The solution could be more user-friendly."
"The documentation could improve for Cloudflare DNS."
"Cloudflare could offer a better view or maybe dashboards of the main resources used in the client."
"DNS Management."
"There might be helpful if there was some web application firewall feature."
"The solution could use more analytics on the backend to give us more insights into everything. More reports would be helpful."
"It should confirm audit findings of the assigned area with auditees to ensure that the audit conclusions are based on an accurate understanding of the issues."
"If they improve on the placement of their data centers, it would be better. I'm living in a remote area. I would like to connect to them without any kind of lag."
"I encountered issues with NGINX App Protect while trying to upgrade custom rules."
"The integration of NGINX App Protect could improve."
"Areas for improvement would be if NGINX could scan for vulnerabilities and learn and update the signatures of DoS attacks."
"Currently, the policies have to be handled manually, and you have to create from scratch, which can be a bit time-consuming, in a large environment."
"As far as scalability, it takes a long time for deployment."
"The setup of NGINX App Protect is complex. The full process took one week to complete. Additionally, we had to change the network infrastructure platform which took one month."
"It doesn't have more advanced features like no false-positive security, which you can configure in Advanced WAF."
"NGINX App Protect would be improved with integration with Shape and F5 WAF, which would make it easy for users to manage all their web application security with a single solution."
 

Pricing and Cost Advice

"So far I use free tier and happy with it. You can subscribe to business package if needed."
"In terms of licensing costs, we don't pay for licensing for Cloudflare. We only establish communication, then for peering, Cloudflare takes care of the cross-connection in different data centers."
"I believe their performance has improved, but I'd like to refrain from discussing the pricing aspect related to the cloud. The pricing, in my opinion, could be simplified, and I think they should consider reevaluating the pricing for support, as it can be quite high. At times, this cost can make it challenging to choose CARFAGuard or opt for the support."
"The solution is expensive when compared to other products but offers unlimited bandwidth."
"I give the price a five out of ten."
"We are using the free version."
"The pricing for the service is reasonable, neither excessively cheap nor prohibitively expensive. It aligns well with the value of their solution."
"It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
"Our licensing costs are about $40,000 a year."
"There is a license needed to use NGINX App Protect."
"There is a monthly or annual subscription to use NGINX App Protect. There are not any additional costs to the subscription."
"The pricing is reasonable because NGINX operates on an instance basis."
"NGINX is not expensive."
"The solution's price is reasonable."
"There are not any additional costs we had to pay to use NGINX App Protect."
"Really understand the licensing model, because we underestimated that."
report
Use our free recommendation engine to learn which Distributed Denial-of-Service (DDoS) Protection solutions are best for your needs.
824,067 professionals have used our research since 2012.
 

Comparison Review

it_user68487 - PeerSpot reviewer
Nov 6, 2013
CloudFlare vs Incapsula: Web Application Firewall
CloudFlare vs Incapsula: Round 2 Web Application Firewall Comparative Penetration Testing Analysis Report v1.0 Summary This document contains the results of a second comparative penetration test conducted by a team of security specialists at Zero Science Lab against two cloud-based Web…
 

Top Industries

By visitors reading reviews
Educational Organization
25%
Computer Software Company
13%
Comms Service Provider
7%
Financial Services Firm
7%
Computer Software Company
20%
Financial Services Firm
14%
Healthcare Company
6%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GRE tunnels. We have decreased site load times on Mobile 3G from 8 to 1,6 seconds ...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service that offers great redundancy and advanced security with built-in unmetered and ...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What needs improvement with NGINX App Protect?
The product's price is high, making it an area of concern where improvements are required. The tool's licensing model is also not good. The product should have more documentation, especially like t...
 

Also Known As

Cloudflare DNS
NGINX WAF, NGINX Web Application Firewall
 

Learn More

 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Information Not Available
Find out what your peers are saying about Cloudflare vs. NGINX App Protect and other solutions. Updated: May 2020.
824,067 professionals have used our research since 2012.