Imperva Application Security Platform vs Wallarm NG WAF comparison

Imperva Application Security Platform vs. Wallarm NG WAF

Download the complete report

Helped 885,728 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cloudflare Web Application ...

Mindshare comparison

As of April 2026, in the Web Application Firewall (WAF) category, the mindshare of Cloudflare Web Application Firewall is 5.4%, down from 6.9% compared to the previous year. The mindshare of Imperva Application Security Platform is 8.1%, up from 7.1% compared to the previous year. The mindshare of Wallarm NG WAF is 0.8%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Web Application Firewall (WAF) Mindshare Distribution
Product	Mindshare (%)
Imperva Application Security Platform	8.1%
Cloudflare Web Application Firewall	5.4%
Wallarm NG WAF	0.8%
Other	85.7%

Web Application Firewall (WAF)

Featured Reviews

Dean Barisic

CTO at PlayNirvana

Advanced security reporting has protected high-traffic betting platforms from constant attacks

I don't see room for improvement to Cloudflare Web Application Firewall. One thing I don't know much about because we have a dedicated IT team for that, and I'm not involved with Cloudflare much anymore. But if I were to compare them to F5, I would like to see more features that F5 offers. F5 has an option to bring the whole infrastructure, the whole WAF and all their packages, Bot Management, and everything else on your infrastructure. You need to install certain services from their side, and then you can choose if you would like requests to hit your servers immediately or if requests need to be proxied through F5 backbone. That would be a nice addition because we have 90% of the traffic as legit traffic coming from whitelisted servers. If it comes from whitelisted servers, I don't need to go every request through the backbone; I could easily just IP whitelist everything. Then I could maybe have Bot Management on my infrastructure that drastically reduces the price of Cloudflare. I would like to see Push CDN more improved in the next release of Cloudflare Web Application Firewall. And maybe something similar to Pushpin that Fastly has, which is an option where you can push messages that then can be scaled globally over the network. From our perspective, if we have a listener that listens for stock updates, I would just need to have one processor that pushes those updates to the Cloudflare API, and then Cloudflare would broadcast that message to all listeners. Cloudflare will check the order of the message, and if you, as a customer, are not connected or have some kind of network issue, when you reconnect, you will receive the latest state and missing updates.

Read full review

reviewer1247523

Head of Sales Services Department at a comms service provider with 51-200 employees

Solution ensures website availability and proactive threat mitigation

Over the seven years, the most valuable features of Imperva DDoS that I have found are related to DDoS attacks, which are a group of attacks, and not all of them can be resolved on the endpoint level before the website. Using the web firewall before the website is a common use case to protect against malicious requests to the website. I have utilized Imperva's Intelligent Traffic Filtering feature. This feature helps me understand how the attack is progressing and what is happening inside the requests to our website. It allows me to granularly grant or deny access to certain parts of our website. This helps when we know our customers and the types of requests that can be sent from them, enabling us to block some malicious requests. Imperva DDoS has User Behavior Analytics and Threat Intelligence on its board, and this helps us to be protected proactively. Imperva DDoS connects to its database of threats, storing whole information about attacks all over the world in one simple engine. Everyone can use this feature, which can connect to this engine and get information about what is going on at the world level. That is the way to be protected at the company's level. The integration capabilities of Imperva DDoS are very easy and simple. We can run it in 2 hours.

Read full review

it_user796242

Information Security Engineer at a tech vendor with 51-200 employees

Helps us to monitor attacks to our sites and prevents a lot of them

Set up Wallarm as a reverse proxy. Do not replace your web server. Use Wallarm first in monitoring mode, then learn from Wallarm which type of request is false positive and which type of request is not. This process takes a couple of weeks for very highly-loaded web applications (few millions of unique visitors in one month). Then you can turn Wallarm into blocking mode and everything will be fine. Do not forget to build a monitoring system, the wave, and API for it. Before we started using Wallarm, I already knew Ivan (CEO) and Stepan (COO) from a couple of years before. Ivan had his own security company and Stepan was working on a Russian security magazine called Xakep. They told us that they wanted to create a new WAF and already had a working version of it. They asked me to test it. We did tests, and it was really good. After few month after testing, we signed an agreement. Our choice was made not because we knew these guys for a long time, but because the product was really cool and we were glad to start using it as one of the first on the market!

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Cloudflare WAF provides protection through rules and functionalities like Cloudflare's SDRAP."

"The setup process is very simple for me."

"For us, the key feature of Cloudflare is DDoS protection and IP hiding, especially since we are a crypto company."

"Does a good job preventing web application attacks."

"It's pretty convenient and pretty easy to set up and run. And then kind of for static content, it also offers caching."

"The security features are valuable. The particular feature we use is called OWASP."

"Caching is the most valuable feature of Cloudflare Web Application Firewall."

"The stability of Cloudflare Web Application Firewall deserves a perfect 10 out of 10."

More Cloudflare Web Application Firewall pros

"Based on my experience, and what I know this product can do, I would never recommend another solution."

"Imperva is a good solution; it has fewer false positives, is very simple to maintain, and is also simple to configure without needing any HTTP knowledge or understanding of HTTP programming languages."

"The features that are most valuable are the protection against denial-of-service attacks and all kinds of other internet attacks."

"The ease of testing Incapsula and then implementing it into production is one of the most remarkable product experiences in my IT career."

"It is easy to manage and expand."

"Simplifies putting everything in code."

"Its inline transferring mode is the most valuable because it is 100% transparent. When you change the IP, there is no change on the network side. If you can't and want to try to reach an IP, you can reach the server IP. There are many other advanced security features in it. The smallest appliances of Imperva can handle the highest traffic at a customer site. For example, a smaller appliance from Imperva can provide you the same security as an F5 product."

"Final words : I was pretty much convinced by the Incapsula CDN, Overall it worked well without any glitches or breaking down the theme or stylesheet of my blog."

More Imperva Application Security Platform pros

"With active threat detection, we are no longer over-swamped with tons of useless events."

"They are the only solution that fits our success criteria and business objectives: WAF must have a low (<5%) false negative rate and be ready to protect from all well-known web attacks."

"Helps us to monitor situation in regards to attacks to our sites and prevents a lot of them."

"Perimeter control and active vulnerability scanner are the most valuable features."

"Vulnerability scanner and WAF are valuable features."

"The most powerful feature is the ability to first learn what type of query to make to your web application when it is attacked and what type of query creates a false positive to your app."

Cons

"The product can improve by having more multitenancy capability, which is currently not available."

"Their documentation could be better. They don't have documentation that explains everything well."

"The reporting could be improved if it were more granular."

"The ModSecurity core rules need to be updated."

"The platform's control features related to real-time authentication and response time need improvement."

"Support can be challenging at times."

"The notification part could be improved. It's very much connected to Web Application Firewall, rate-limiting, and DDoS protection."

"If they add logs history within the Cloudflare offering, that would be a great benefit."

More Cloudflare Web Application Firewall cons

"Imperva Web Application Firewall is very expensive."

"Sometimes our web application firewall will slow down."

"Incapsula services also provides load balancing services for their service IP address environment. So far, with monitoring their services, the IP address was only changed once."

"The tool needs to improve CPU and storage memory."

"Support is one thing I wish Imperva could improve."

"Imperva Web Application Firewall can improve by adding more features to the dashboard. increasing the visibility of the real-time events, besides configuring the administration itself."

"The product's customization capabilities are a bit problematic, requiring support cases for backend modifications."

More Imperva Application Security Platform cons

"Technical support is 6 or 7 out of 10. Sometimes we have had trouble with communication and understanding."

"The biggest problem for us was the stability and speed using the first version of Wallarm. Now, it is fine."

"Wallarm uses a learning mechanism to detect attacks and to avoid false positives. If Wallarm blocks some illegitimate request, then you can go to the management console and mark this request as false positive, but sometimes this does not work properly."

"There were several stability issues during the first pilot."

"It needs more customization in PDF reports."

"The biggest problem for us was the stability and speed using the first version of Wallarm."

Pricing and Cost Advice

"The annual licensing fee is $10,000 USD."

"The pricing model is very straightforward compared to the competition. You just pay per month for the product and usage."

"The solution's pricing option needs to be more transparent for enterprise clients."

"We pay $210 per month for CloudFlare WAF."

"Cloudflare Web Application Firewall is more affordable than other solutions."

"It starts at $20 and can easily go up to $200 monthly"

"It is not too pricey."

"The solution is expensive."

More Cloudflare Web Application Firewall pricing and cost advice

"It is a very affordable solution."

"Varies depending on the needs of the customer."

"Imperva’s pricing is a bit higher in the market since it offers a full-blown WAF."

"There are a couple of different licensing models."

"It is expensive."

"The cost is on par with other solutions such as Cloudflare and Akamai."

"It's an excellent product, but it can be very costly."

"For enterprise contracts you will be in touch with a dedicated account manager who will guide you regarding licensing."

More Imperva Application Security Platform pricing and cost advice

"Pricing must be cheaper than the competition and the licensing must be good."

See which vendors are best for you

Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.

See recommendations

885,728 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

19%

Computer Software Company

Comms Service Provider

Manufacturing Company

Financial Services Firm

11%

Manufacturing Company

Computer Software Company

Comms Service Provider

Financial Services Firm

13%

Government

12%

Manufacturing Company

10%

Insurance Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	16
Midsize Enterprise	6
Large Enterprise	6

By reviewers
Company Size	Count
Small Business	84
Midsize Enterprise	25
Large Enterprise	62

No data available

Questions from the Community

What is your experience regarding pricing and costs for Cloudflare Web Application Firewall?

The price of Cloudflare Web Application Firewall is reasonable.

What needs improvement with Cloudflare Web Application Firewall?

I don't see room for improvement to Cloudflare Web Application Firewall. One thing I don't know much about because we...

What is your primary use case for Cloudflare Web Application Firewall?

We are using Cloudflare Web Application Firewall's advanced reporting and analytics tools with their Zero Trust, so e...

Which Web Application Firewall (WAF) would you recommend? R&S or Imperva?

Imperva is a strong choice, given their security focus and ongoing R&D into the product in areas such as bot mana...

What is your experience regarding pricing and costs for Imperva DDoS?

The pricing, setup costs, and licensing of Imperva DDoS are reasonable for the amount of technical capabilities provi...

What needs improvement with Imperva DDoS?

I would like to see improvements in the pooling of threats and attacks, possibly to enlarge the scale of indicators o...

Fortinet FortiWeb vs Cloudflare Web Application Firewall

Ask a question

Earn 20 points

Comparisons

Compared 7% of the time

Check Point CloudGuard WAF vs Cloudflare Web Application Firewall

Compared 7% of the time

Azure Web Application Firewall vs Cloudflare Web Application Firewall

Compared 6% of the time

AWS WAF vs Cloudflare Web Application Firewall

Compared 5% of the time

F5 Advanced WAF vs Cloudflare Web Application Firewall

Compared 5% of the time

More Cloudflare Web Application Firewall Competitors

Cloudflare vs Imperva Application Security Platform

Compared 11% of the time

Fortinet FortiWeb vs Imperva Application Security Platform

Compared 6% of the time

Akamai vs Imperva Application Security Platform

Compared 5% of the time

F5 Advanced WAF vs Imperva Application Security Platform

Compared 3% of the time

Akamai App and API Protector vs Imperva Application Security Platform

Compared 2% of the time

More Imperva Application Security Platform Competitors

Cequence Security vs Wallarm NG WAF

Compared 11% of the time

Akamai API Security vs Wallarm NG WAF

Compared 10% of the time

Venusense Web Application Firewall vs Wallarm NG WAF

Compared 10% of the time

Salt Security vs Wallarm NG WAF

Compared 8% of the time

Fortinet FortiWeb vs Wallarm NG WAF

Compared 7% of the time

More Wallarm NG WAF Competitors

Product Reports

Cloudflare Web Application Firewall

Download Cloudflare Web Application Firewall product report

Cloudflare Web Application Firewall report

Imperva Application Security Platform

Download Imperva Application Security Platform product report

Imperva Application Security Platform report

Web Application Firewall (WAF)

Download Wallarm NG WAF product report

Also Known As

Cloudflare WAF

Imperva Bot Management, Imperva Web Application Firewall, Imperva API Security

Wallarm NG-WAF

Overview

Cloudflare Web Application Firewall's intuitive dashboard enables users to build powerful rules through easy clicks and also provides Terraform integration. Every request to the WAF is inspected against the rule engine and the threat intelligence curated from protecting over 27 Million websites. Suspicious requests can be blocked, challenged or logged as per the needs of the user while legitimate requests are routed to the destination, agnostic of whether it lives on-premise or in the cloud. Analytics and Cloudflare Logs enable visibility into actionable metrics for the user.

Cloudflare

Imperva Application Security Platform delivers comprehensive and continuous web threat protection. Renowned for its ease of use, it shields web applications and databases from various cyber threats while integrating seamlessly with cloud and on-premises environments.

Imperva Application Security Platform protects web environments by offering advanced security measures against threats like DDoS attacks, SQL injections, and cross-site scripting. As a robust web application firewall, it provides extensive monitoring and bot management capabilities. The platform integrates content delivery networks for enhanced performance and scalability, while real-time traffic analysis ensures consistent protection. Despite its strengths, improvements can be made in policy management and customization options. Users seek better integration with third-party tools and more competitive pricing models. The inclusion of AI for enhanced analytics is also anticipated.

What are the key features of Imperva Application Security Platform?

Correlated Attack Validation: Enhances threat assessment by linking related security events.
Threat Radar: Offers visibility into potential and ongoing threats.
Virtual Patching: Provides protection against vulnerabilities without immediate code changes.
IncapRules: Allows creation of custom security policies.
DDoS Protection: Defends against large-scale distributed denial-of-service attacks.
CDN Integration: Improves content delivery speed and reliability.

What benefits should users look for in reviews?

User-Friendly Administration: Simplifies setup and ongoing management tasks.
Seamless Integration: Ensures smooth operation with existing infrastructure.
Comprehensive Threat Protection: Shields digital assets from a wide range of threats.
Hands-On Support: Provides timely and effective customer service assistance.

Imperva Application Security Platform is implemented in industries needing strong database and application protection. Companies use it to enforce geolocation restrictions and manage bots, benefiting sectors like finance and e-commerce where data security and threat monitoring are critical. Its ability to protect and ensure data accessibility makes it integral to business operations prioritizing cyber resilience.

Imperva

Wallarm NG WAF provides advanced security by integrating machine learning, making it essential for modern web applications. It offers protection against sophisticated threats and automates many processes.

Wallarm NG WAF leverages AI-driven technology to deliver robust security measures. It helps in defending web applications from cybersecurity threats with enhanced threat detection and response capabilities. Beyond vulnerability insights, Wallarm enhances security protocols, scales with growing online demands, and ensures comprehensive threat coverage, fostering a safer web environment.

What are the key features of Wallarm NG WAF?

AI-Powered Threat Detection: Identifies and mitigates sophisticated attacks efficiently.
Automated Security Updates: Continuously updates defense strategies without manual intervention.
Flexible Deployment: Easily integrates across cloud, on-premise, and hybrid setups.
Scalability: Adapts to growing traffic volumes with consistent protection.
Detailed Reporting: Provides comprehensive analytics on web security posture.

What benefits can users expect from Wallarm NG WAF?

Increased Security: Enhances threat detection and reduces vulnerabilities.
Operational Efficiency: Reduces manual intervention with automated tasks.
Cost-Effectiveness: Optimizes security expenditure by preventing potential breaches.
Time Savings: Automates repetitive actions, saving valuable time for IT teams.

In industries like finance, e-commerce, and healthcare, Wallarm NG WAF is implemented to ensure data protection and compliance with stringent security standards. Its adaptability allows it to meet industry-specific requirements, offering specialized configurations tailored to each sector's unique demands.

Wallarm

Sample Customers

crunchbase, udacity, marketo, okcupid, zendesk

Hitachi, BNZ, Bitstamp, Moz, InnoGames, BTCChina, Wix, LivePerson, Zillow and more.

Panasonic. Miro. Rappi. Wargaming. Gannett. Omio. Acronis. Workforce Software. Tipalti. SEMRush.

Imperva Application Security Platform vs. Wallarm NG WAF