Try our new research platform with insights from 80,000+ expert users

Fastly vs Imperva DDoS comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 5, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Ranking in CDN
1st
Ranking in Distributed Denial-of-Service (DDoS) Protection
1st
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
74
Ranking in other categories
Managed DNS (1st), Cloud Security Posture Management (CSPM) (14th)
Fastly
Ranking in CDN
6th
Ranking in Distributed Denial-of-Service (DDoS) Protection
8th
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
7
Ranking in other categories
Web Application Firewall (WAF) (17th)
Imperva DDoS
Ranking in CDN
7th
Ranking in Distributed Denial-of-Service (DDoS) Protection
7th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
77
Ranking in other categories
Web Application Firewall (WAF) (18th)
 

Mindshare comparison

As of March 2025, in the Distributed Denial-of-Service (DDoS) Protection category, the mindshare of Cloudflare is 18.9%, down from 19.3% compared to the previous year. The mindshare of Fastly is 2.1%, up from 2.1% compared to the previous year. The mindshare of Imperva DDoS is 7.0%, down from 8.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Distributed Denial-of-Service (DDoS) Protection
 

Featured Reviews

Spencer Malmad - PeerSpot reviewer
It's easy to set up because you point the DNS to it, and it's working in under 15 minutes
Cloudflare is highly scalable. Cloudflare is a system with a web portal that the end users like me see. It's a console where we can adjust the DNS, caching, and security features all in that console. Cloudflare owns thousands of servers across the world that cache the data. It's a powerful solution. When clients sign up for Cloudflare, they're getting this monster content delivery network, security, and a web application firewall in one. It's all rolled into one, and it's massive. Unless you have your website hosted on a massive hosting provider, there's no way that you can deliver the amount of data that Cloudflare can provide to the end users. If you have static content, there's no way that you can ever match what Cloudflare can do. Obviously, there are competitors to Cloudflare that do the same, but I'm saying other types of solutions. Let's say you go with F5. Great, that's on-prem. That's in your colo. You can't deliver as much data to the internet as you can with a CDN. You don't have to spend $20,000 on a net scaler, F5, or whatever Cisco's selling now. You don't have to buy that. You pay them $50 a month or $150 a month. It's totally worth it because even in five years, you'll never get the performance value, not just the actual ROI. You have to consider how much throughput you can get with Cloudflare.
Nick Wilsdon - PeerSpot reviewer
An easily scalable and stable product that provides exceptional support
The product should provide improved bot detection and management. The product should also provide support for code management. Everybody working in CDN is currently looking for ways to better manage code deployment with various authorization levels and synchronization with our lower environments. Matching up what's happening in CDN with what's happening on the origin regarding testing would always be useful.
Syed Ubaid Ali Jafri - PeerSpot reviewer
I like the content monitoring feature which I haven't seen in other WAF solutions.
They could improve by minimizing false positive results. Although this occurs less with Imperva, we would like to see some further improvements. We have been using this product for last 1 years, it's result is very impressive. But due to the excessive load on the Web site where thousands of requests‎ are generated from legitimate users, however the request in which any sequential or specialised characters are requested would be directly blocked by impreva . Currently imperva blocks the special character request generated from the user, as I conduct a test where I am parsing the encoded html values of the same special characters to the input field, imperva bypasses these encoded values for example : ' i.e. %27 or / i.e %2F, the WAF bypasses these encoded characters. I hope that this device should have a capability to detect the pattern which is associated with Xss or Xsrf, rather then by not blocking the request which contains any special characters.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Cloudflare has many features."
"The technical support is good."
"Cloudflare allows us to self-host services such as Rocket.Chat and Node-RED, in high-availability mode, thanks to round robin DNS which allows us to share one hostname between our two locations."
"The solution is very good at mitigating threats."
"Cloudflare DNS is widely used, and it's good for websites. If we use Cloudflare DNS and update one record, it updates in their office instantly."
"The solution provides good load balancing and protection against DDoS attacks."
"The most valuable feature of the solution is external DNS. It is also very secure. They have their own main server and once you configure it, the product takes care of everything. There are no issues in resolving IPs and low latency is also present."
"Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications."
"Rate limiting is a good feature that protects from volumetric attacks."
"The product helps our organization to access sites located in different regions quickly."
"Its initial setup process is straightforward."
"Compute@Edge features are valuable to me."
"Support is good; the product works as advertised. We have a Slack connection with them. So we can basically ask for help, live, engage, and ring when they respond. Very quickly."
"Fastly uses configuration versioning, where you can deploy a new version in less than one minute."
"The product's initial setup phase is straightforward."
"The solution has a very good interface."
"The solution's most valuable aspect is that it is easy to configure."
"The most valuable features for us are the DDoS and Bot."
"The technical support is excellent."
"Simplifies putting everything in code."
"On the site security, I can see which countries have incidents, whether it was a robot attack, a real human user, or non-human user."
"The solution is very good at intercepting traffic before it gets to our data centers."
"On the activity log, I can see the exact details, the visit, and the threat."
 

Cons

"Cloudflare doesn't have a reverse lookup. We can only do a DNS lookup to get the IP address from the hostname. It doesn't work if you want to look up the hostname from an IPA address."
"The product needs to improve its automation."
"For the free and Pro plans, Cloudflare could use a simple bot to provide information to users. This would improve support, especially for less advanced users who utilize the free components."
"Cloudflare does not have an on-premise solution. If they had different approaches they could be better suited to accommodate more customers, such as on-premise and hybrid deployments. For example, hybrid deployments would be useful where you could move the traffic from the enterprise to the cloud."
"Cloudflare could be improved by introducing a mid-tier pricing option."
"Areas like how assessment, discovery, and payload are dealt with and how it all comes into your organization can be considered when trying to make suggestions to Cloudflare for improvements."
"Cloudflare should add more documentation and pricing to the cloud version."
"I believe they currently have this feature, but there will most likely be integration with APIs so we can control some features through API."
"The product should provide improved bot detection and management."
"Stronger analytics would be helpful, like showing configurations that haven't served a certain amount of traffic in a while. With many properties, things can get lost track of - duplicates or unused configurations not properly decommissioned."
"It is missing a "staging" platform to deploy a test configuration with all of the real settings, which would allow us to properly test before putting it into production."
"Support is not that great."
"Fastly's customer service area needs improvement."
"The solution's pricing could be better."
"What I don't like about Fastly is that they charge a heavy price."
"The solution should integrate with something that looks at continuous security management."
"Analytics in the area of risk need to be improved to supply more information to the users for creating better environments."
"Incapsula services also provides load balancing services for their service IP address environment. So far, with monitoring their services, the IP address was only changed once."
"I would like to see automated reporting to improve visibility."
"I miss being able to integrate the dashboard with other BI tools we are using. We have to export and import data to be able to present it, and doing so is a lot of work."
"The log analytics interface within Incapsula isn't really good. For example, if you have to get all logs from there, it's a very cumbersome process."
"Users would benefit from better documentation. There is official documentation, but sometimes we need more detail. We have some use cases that are not so run of the mill. It would be great if there was a knowledge base that we could go to for more answers."
"Imperva should have more points of presence in Africa."
 

Pricing and Cost Advice

"We are using the free tier of the solution."
"The product's pricing is cheap."
"It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
"That is one of the great features. I was able to access the majority of the features and services for free."
"So far I use free tier and happy with it. You can subscribe to business package if needed."
"For Cloudflare, I recommend it heavily for small businesses with revenue under a couple of million dollars. Onboarding is easy, and they even have a free plan. This makes it simple for businesses in the $100,000-$500,000 range to try it out and see its value, allowing them to scale up their infrastructure as needed."
"The cost primarily depends on the size of the organization."
"I think the pricing is competitive. I think as far as licensing is concerned it's pretty straightforward because it's based on domain. It's just that sometimes domains could be tricky with some customers."
"It is an expensive solution."
"Fastly is less expensive than one of its competitors."
"You need to pay a premium price for the tool."
"The solution is cheaper than other products in the market."
"The pricing has been very competitive."
"I've generally found Fastly to be very competitive in pricing, especially around Compute@Edge."
"In my opinion, Fastly is priced competitively."
"Pricing could be more competitive."
"We are satisfied with the pricing."
"It is a very expensive solution. The price is very high. A lot of customers tell us that they would love to use Imperva more. I have some customers who have 50 websites, but they have only 10 websites on Imperva because of the price. They would love to have all their websites running through Imperva, but they can't. They have to choose the more critical websites to protect because the price is very high. It is a very good product, but it is too expensive. If you buy a plan for 20 megabytes and you don't consume all of your 20 megabytes, it is okay, but if you consume more, you are charged for the superior traffic."
"The license is on a yearly basis."
"The data packages are higher than our needs so we end up paying for data that we don't use."
"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a five out of ten."
"We have an issue with Imperva Incapsula in the Iraqi market because of the high price."
"For enterprise contracts you will be in touch with a dedicated account manager who will guide you regarding licensing."
report
Use our free recommendation engine to learn which Distributed Denial-of-Service (DDoS) Protection solutions are best for your needs.
839,422 professionals have used our research since 2012.
 

Comparison Review

it_user68487 - PeerSpot reviewer
Nov 6, 2013
CloudFlare vs Incapsula: Web Application Firewall
CloudFlare vs Incapsula: Round 2 Web Application Firewall Comparative Penetration Testing Analysis Report v1.0 Summary This document contains the results of a second comparative penetration test conducted by a team of security specialists at Zero Science Lab against two cloud-based Web…
 

Top Industries

By visitors reading reviews
Educational Organization
24%
Computer Software Company
13%
Comms Service Provider
8%
Financial Services Firm
8%
Computer Software Company
18%
Comms Service Provider
10%
Financial Services Firm
9%
Manufacturing Company
8%
Financial Services Firm
17%
Computer Software Company
14%
Manufacturing Company
9%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about Fastly?
Support is good; the product works as advertised. We have a Slack connection with them. So we can basically ask for h...
What needs improvement with Fastly?
What I don't like about Fastly is that they charge a heavy price. The pricing is different per region. If you have a ...
What do you like most about Imperva Incapsula?
We use Imperva DDoS to stop DDoS attacks and reduce the amount of unwanted queries against web services or web scraping.
What is your experience regarding pricing and costs for Imperva DDoS?
The pricing is rated a ten on a scale where ten is very expensive. The solution is only cloud-based and does not prov...
What needs improvement with Imperva DDoS?
Pricing can be improved, as it is quite expensive. Additionally, support response times for emails can sometimes be d...
 

Comparisons

 

Also Known As

Cloudflare DNS
No data available
Imperva Incapsula
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Twitter, Airbnb, Alaska Airlines, Pinterest, Vimeo, The Guardian, The New York Times, Ticketmaster, The Drupal Association, Opera, about.com, imgur, Etsy, Foursquare, GitHub, New Relic, shopify, Shazam, Firebase
Hitachi, BNZ, Bitstamp, Moz, InnoGames, BTCChina, Wix, LivePerson, Zillow and more.
Find out what your peers are saying about Fastly vs. Imperva DDoS and other solutions. Updated: February 2025.
839,422 professionals have used our research since 2012.