


Imperva Application Security Platform and F5 Advanced WAF are two key contenders in the application security market. While Imperva stands out for its customization and integration capabilities, especially in cloud-based security, F5 gains an edge with its advanced attack mitigation features and machine learning capabilities.
Features: Imperva is known for its advanced DDoS protection, web application firewall, and cloud-based security options. Its customization and integration abilities are significant strengths. F5 Advanced WAF excels with robust attack mitigation features including bot protection and machine learning capabilities. Its broad threat intelligence and traffic management options contribute greatly to its appeal.
Room for Improvement: Imperva users report issues with interface usability and limited customization options, along with high pricing. Suggestions for improvements include better reporting, enhanced customer support, and more effective geolocation strategies. F5 faces criticism for its complexity in deployment and high costs, with users desiring a more intuitive interface and better customer support processes. Users also suggest simpler policy configuration and extended API protection functionality.
Ease of Deployment and Customer Service: Imperva supports diverse deployment environments including public, private, and hybrid clouds, offering flexibility according to infrastructure needs. F5 primarily supports on-premises environments with limited cloud integration. Imperva is noted for rapid response times and comprehensive tech support, despite some communication difficulties. F5 provides dependable technical support but needs to improve response efficiency and resource accessibility.
Pricing and ROI: Imperva is perceived as expensive, with its pricing seen as competitive given the offered features, although enterprise agreements may be advantageous. Its ROI is realized through enhanced security and compliance, though the high cost remains a concern. F5 is similarly costly, with its pricing justified by the feature set for high-stakes environments. The lack of transparent licensing structures may deter smaller businesses. Both solutions provide significant ROI for organizations in need of advanced security solutions, such as financial institutions.
For the small project I was working on, using the basic tier provided a huge improvement at zero cost.
In terms of return on investment with Cloudflare, it costs my time to set them up, but basically once they're set up, it's done.
Time savings in daily operations come from the automatic learning and signature update reducing the need for constant manual rule management, allowing the security and network teams to spend significantly less time handling false positive application-related escalations.
Subscription models offer clearer ROI due to a more competitive pricing scheme.
F5 Advanced WAF protects our organization and provides security, achieving a return on investment.
They know how much money they are losing while the system is down, so by increasing the possibility of not having a down website or web application, return on investment can be calculated easily.
Cloudflare does not offer hands-on technical support to fix customer problems but rather a self-service model.
I would rate the technical support with Cloudflare as excellent every time I've had to call them.
I have primarily worked not with the tool's customer support but with the product's sales engineers and technical sales engineers, who seem to know their stuff.
Both response time and availability need to be improved.
F5 Advanced WAF provides the insights and notifications I need in terms of reporting and alerting.
If there is a bug, the support is usually understanding and resolves issues.
I would rate the technical support of Imperva DDoS as ten.
It is a SaaS tool, but the fact that they have workloads deployed across the world proves that it is a highly scalable tool.
The tool offers very good performance, even during high-traffic periods.
I rate the solution’s scalability an eight out of ten.
99% of customers are using the cloud version of Imperva DDoS protection, so they just purchase the new license and scale as needed.
I rate the solution’s stability an eight out of ten.
The service is very stable with no impacts during high-traffic periods.
F5 Advanced WAF has been very reliable and consistent for us; in our on-premise enterprise setup, it has been stable and predictable in day-to-day operations without any unexpected crashes or WAF-related downtime in production.
The stability of Imperva DDoS is very good, as it seems they have a lot of servers around the world.
Despite these challenges, overall, Cloudflare remains the preferred solution compared to Azure, AWS CloudFront, and Google Cloud Armor.
Areas like how assessment, discovery, and payload are dealt with and how it all comes into your organization can be considered when trying to make suggestions to Cloudflare for improvements.
There are some performance considerations when it comes to dynamic content that involves fetching data from databases or using APIs.
Deployment training for F5 Advanced WAF is lacking and restricts growth by being inaccessible and costly for partners.
Overall, these are not blockers, merely enhancement opportunities, and once tuned, F5 Advanced WAF is very stable and reliable; improving usability, reporting, and onboarding would make it even more effective for larger environments.
There is excellent clarity in the LTM and the WAF.
Maybe Imperva DDoS could use endpoints to get information about the attacks before they commence from the endpoint level or establish cooperation with endpoint vendors to share this information.
I find it to be cheap.
I rate the product’s pricing a five out of ten, where one is cheap, and ten is expensive.
The tool is a premium product, so it is very expensive.
Licensing is capacity-driven, so you need careful planning based on traffic volume and use cases, and adding features such as Bot Protection impacts costs; once licensing is clear and sized correctly, there are no surprises.
Subscription models have competitive pricing, while perpetual licenses involve an upfront higher cost.
The price is affordable and satisfactory.
I would rate the pricing of Imperva DDoS as five, where one is very cheap and ten is very expensive.
The most valuable features of the solution are performance and security.
Techniques like minification and image compression reduce the size of assets, leading to better performance and faster user load times.
The solution has been able to compare it to the market, and I think the product has taken great strides in automating quite a bit of things, and they use a lot of AI.
The Advanced Attack Signature database is very strong and regularly updated, effectively blocking SQL injections, cross-site scripting, command injections, and file inclusion attacks while allowing selective enabling or disabling of signatures to avoid blocking genuine traffic.
F5 Advanced WAF offers the best features that are capable of stopping any type of attack, and it is a really reliable and stable product that you can rely on to stop any type of attack.
The perpetual license, despite an initial higher cost, lacks transparency regarding support expiration.
I have utilized Imperva's Intelligent Traffic Filtering feature. This feature helps me understand how the attack is progressing and what is happening inside the requests to our website.

| Company Size | Count |
|---|---|
| Small Business | 46 |
| Midsize Enterprise | 8 |
| Large Enterprise | 25 |
| Company Size | Count |
|---|---|
| Small Business | 26 |
| Midsize Enterprise | 15 |
| Large Enterprise | 30 |
| Company Size | Count |
|---|---|
| Small Business | 83 |
| Midsize Enterprise | 25 |
| Large Enterprise | 61 |
Cloudflare enhances web performance and security with features like CDN caching and DDoS mitigation while providing easy DNS management and intuitive setup through its user-friendly dashboard.
Cloudflare is recognized for its comprehensive web security and performance solutions. Speed improvements are achieved through caching mechanisms and DDoS protection, combining ease of DNS management with flexible page rules. The robust analytics and threat insight tools provide valuable data, assisted by a user-friendly dashboard allowing quick setup and configuration. An API offers dynamic DNS settings ensuring low latency and high performance across the globe.
What are Cloudflare's key features?Cloudflare finds utility across industries for DNS management and defense mechanisms. Its content delivery network assures fast content distribution and fortified security. Businesses integrate features like web application firewalls, load balancing, end-to-end SSL, and zero trust to protect websites from cyber threats while ensuring resilience and reliable performance.
F5 Advanced WAF is a web application security solution for financial and government sectors, e-commerce, and public-facing websites. It offers protection against various attacks, including botnets, web scraping, and foreign entities. The solution can be deployed on-premises or in the cloud and is often used with other security tools. Its most valuable features include DDoS and DNS attack protection, SSL uploading, anomaly detection, and the ability to input custom rules.
F5 Advanced WAF has helped organizations to expose more services to the public while providing an extra layer of protection, preventing revenue loss, and securing connectivity.
Imperva Application Security Platform delivers comprehensive and continuous web threat protection. Renowned for its ease of use, it shields web applications and databases from various cyber threats while integrating seamlessly with cloud and on-premises environments.
Imperva Application Security Platform protects web environments by offering advanced security measures against threats like DDoS attacks, SQL injections, and cross-site scripting. As a robust web application firewall, it provides extensive monitoring and bot management capabilities. The platform integrates content delivery networks for enhanced performance and scalability, while real-time traffic analysis ensures consistent protection. Despite its strengths, improvements can be made in policy management and customization options. Users seek better integration with third-party tools and more competitive pricing models. The inclusion of AI for enhanced analytics is also anticipated.
What are the key features of Imperva Application Security Platform?Imperva Application Security Platform is implemented in industries needing strong database and application protection. Companies use it to enforce geolocation restrictions and manage bots, benefiting sectors like finance and e-commerce where data security and threat monitoring are critical. Its ability to protect and ensure data accessibility makes it integral to business operations prioritizing cyber resilience.
We monitor all Web Application Firewall (WAF) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.