No more typing reviews! Try our Samantha, our new voice AI agent.

Imperva Application Security Platform vs NGINX App Protect comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 22, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.8
Imperva boosts security, reduces manual interventions, yielding quick ROI, especially in banking, though initial costs can be high.
Sentiment score
5.8
NGINX App Protect offers notable ROI, enhancing security, integrating with CICD pipelines, and providing compliance and time-saving benefits.
They know how much money they are losing while the system is down, so by increasing the possibility of not having a down website or web application, return on investment can be calculated easily.
Head of Sales Services Department at a comms service provider with 51-200 employees
I was able to save over seven million dollars last year as return on investment in the company.
Senior Cybersecurity Consultant at Cyberoutcome Limited
I have seen a return on investment with Imperva Application Security Platform, as it is generally associated with time savings, because the review of alerts and the visibility it gives saves us significant operational time.
Ingeniero Preventa at Imperia
 

Customer Service

Sentiment score
7.0
The Imperva Application Security Platform's support is praised for responsiveness but criticized for inconsistencies, especially between cloud and on-premises environments.
Sentiment score
5.8
NGINX App Protect's support is reliable and helpful, though costs and occasional delays affect accessibility for some users.
I would rate the technical support of Imperva DDoS as ten.
Head of Sales Services Department at a comms service provider with 51-200 employees
They need to work faster on the response time because of issues of urgent replies.
Senior Cybersecurity Consultant at Cyberoutcome Limited
Responsive support addressing urgent needs.
Cybersecurity Consultant at Accenture Singapore Services Pte Ltd
They were quick and efficient when we had issues.
Project Manager at a comms service provider with 10,001+ employees
I would rate the customer support a 9 on a scale of 1 to 10.
Tech Lead at a tech vendor with 51-200 employees
 

Scalability Issues

Sentiment score
7.4
Imperva Application Security Platform offers scalable solutions for various organizations, with cloud deployment preferred despite some pricing and performance challenges.
Sentiment score
6.1
NGINX App Protect offers strong scalability praised by users, despite challenges with policy limits and deployment delays.
99% of customers are using the cloud version of Imperva DDoS protection, so they just purchase the new license and scale as needed.
Head of Sales Services Department at a comms service provider with 51-200 employees
I have not even needed support after deployment, since it has remained stable.
CTO at Malam Engineering PLC
It is easy to always scale to add more users.
Senior Cybersecurity Consultant at Cyberoutcome Limited
The scalability of NGINX App Protect is good and open source at its best.
Tech Lead at a tech vendor with 51-200 employees
 

Stability Issues

Sentiment score
7.9
Imperva Application Security Platform is praised for stability and reliability, with minor issues occurring mainly during high traffic.
Sentiment score
8.4
Users praise NGINX App Protect's stability and reliability, outperforming competitors, handling high traffic efficiently, and receiving high ratings.
It is also a stable product without much glitch or downtime.
Senior Presales Consultant at Techlab security
One notable drawback is that, unlike Fortinet, which offers fast track labs and continuous enablement, Imperva Application Security Platform lacks lab access and fast track labs for enablement and product advertising.
CTO at Malam Engineering PLC
We experienced downtime or crashes with Imperva Application Security Platform when traffic went really strong or fast because people tried to get tickets.
Soc Analyst at Cineplex Inc
It is a quality solution, and I would rate its stability as eight out of ten.
IT Architect at a financial services firm with 10,001+ employees
 

Room For Improvement

Imperva Application Security Platform needs better integration, simpler dashboards, improved AI, and enhanced user interface for higher satisfaction.
NGINX App Protect needs enhancements in automation, UI, security, performance, and support, with complex setup and integration issues.
To convince my clients, a purely on-prem solution would be ideal since they are financial institutions.
CTO at Malam Engineering PLC
Maybe Imperva DDoS could use endpoints to get information about the attacks before they commence from the endpoint level or establish cooperation with endpoint vendors to share this information.
Head of Sales Services Department at a comms service provider with 51-200 employees
Regarding return on investment, ROI, I can say it is noticeable with Imperva Application Security Platform.
Senior Presales Consultant at Techlab security
There was more information from F5 regarding hardware requirements and specifications to deploy the service.
IT Architect at a financial services firm with 10,001+ employees
For now, I think NGINX App Protect is good, but maybe I would like to see the logging feature added.
Dev Ops Engineer at BARQ Systems
The GUI and web GUI configuration could be improved to be easier to manage and use.
Dev Ops Engineer at adesso AG
 

Setup Cost

Imperva's Application Security Platform has high, complex pricing, yet some find it competitive for its security benefits and enterprise flexibility.
NGINX App Protect offers reasonable annual pricing, ranging from $25,000 to $400,000, aligning with industry-leading solutions.
I would rate the pricing of Imperva DDoS as five, where one is very cheap and ten is very expensive.
Head of Sales Services Department at a comms service provider with 51-200 employees
the setup cost was high, with the hardware installation in the data center being particularly expensive.
Cyber Security Product Owner at a energy/utilities company with 10,001+ employees
We have noticed faster response times and fewer security alerts because after doing some custom policy tuning, everything seemed to be aligned and we have fewer attacks to monitor and fewer alerts to monitor.
Senior Cybersecurity Consultant at Cyberoutcome Limited
 

Valuable Features

Imperva Application Security Platform offers robust threat protection, user-friendly interface, and comprehensive reporting for enhanced web security management.
NGINX App Protect provides comprehensive security features including automation, real-time threat detection, DDoS protection, and flexible deployment options.
The API security feature is particularly valuable because most attackers do not try to come in from where it is expected.
Senior Cybersecurity Consultant at Cyberoutcome Limited
If someone attempts to access the server, the WAF blocks that SSRF alert, or RCE, Remote Code Execution alert, blocking immediately based on the signature, not only by the payload or the IP address.
SOC Analyst L1 at CMS-IT-SERVICES-PVT-LTD
It reduces the DDoS attacks and reduces the attacks from threat actors, including SQL Injection and zero-day attacks, by using dynamic application profiling from Imperva.
IT Security Analyst & Engineer (Project, Remote) Australia-Europe at a manufacturing company with 10,001+ employees
The most valuable feature is the ability to operate in a DevOps environment and to be configured through API and pipeline by the developers themselves.
IT Architect at a financial services firm with 10,001+ employees
Some threats like injection and running scripts, SQL injections, these all get stopped and rejected by the server.
Dev Ops Engineer at BARQ Systems
Detecting bots and blocking IPs have proven effective for securing applications.
Project Manager at a comms service provider with 10,001+ employees
 

Categories and Ranking

Imperva Application Securit...
Ranking in Web Application Firewall (WAF)
1st
Ranking in API Security
1st
Average Rating
8.6
Reviews Sentiment
6.9
Number of Reviews
147
Ranking in other categories
CDN (2nd), Distributed Denial-of-Service (DDoS) Protection (4th), Bot Management (1st)
NGINX App Protect
Ranking in Web Application Firewall (WAF)
19th
Ranking in API Security
9th
Average Rating
8.2
Reviews Sentiment
6.4
Number of Reviews
27
Ranking in other categories
Container Security (28th)
 

Mindshare comparison

As of August 2026, in the Web Application Firewall (WAF) category, the mindshare of Imperva Application Security Platform is 7.6%, up from 7.6% compared to the previous year. The mindshare of NGINX App Protect is 2.1%, up from 1.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Web Application Firewall (WAF) Mindshare Distribution
ProductMindshare (%)
Imperva Application Security Platform7.6%
NGINX App Protect2.1%
Other90.3%
Web Application Firewall (WAF)
 

Featured Reviews

reviewer2818155 - PeerSpot reviewer
Senior Associate at a tech vendor with 10,001+ employees
Application protection has improved and reporting and dashboards still need refinement
I believe Imperva Application Security Platform should have a more interactive wizard. While the dashboard is good, it could be more eye-catching. Based on my perspective, I recommend modifying the dashboards, especially the main dashboard where I can see the traffic hit count, alerts, and other latest information. In terms of reporting, I find it challenging to create reports; in my earlier days, it was difficult. Over time, I have learned how to create reports, but it should be easier to do so. I have used other tools such as firewalls or SolarWinds, where creating a report is straightforward and does not take much time, unlike in Imperva, where I have to add many elements. Modifications in the integration aspects would also be beneficial.
Valerio Guaglianone - PeerSpot reviewer
Dev Ops Engineer at adesso AG
Long-term web protection has supported reliable traffic management but needs a simpler interface
NGINX App Protect is a good product. I have used both versions from F5 -also the free version- (I mean the NGINX/NGINX One/App Protect free trial period), and I think it is a good product. It's stable, affordable, and easy to manage. NGINX App Protect is a comprehensive security solution that combines advanced WAF, DoS protection, API security, and DevSecOps automation in a lightweight, scalable package ideal for modern cloud-native architectures. The adaptive machine learning capabilities are truly commendable, as the solution can establish traffic baselines and detect anomalies in real time. It automatically adjusts security policies, minimizing the need for manual intervention and reducing false positives. Additionally, it supports scalable deployment across diverse environments, including on-premises, cloud, Kubernetes, and containers, offering both flexibility and scalability I have experience with the web server, F5 load balancer, and similar products provided by Ergon, for eg. the web application firewall and the Microgateway for K8S. I'm also familiar with F5 BIG-IP products.
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
910,437 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
12%
Outsourcing Company
9%
Construction Company
8%
Manufacturing Company
7%
Comms Service Provider
12%
Financial Services Firm
12%
Construction Company
8%
Computer Software Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business88
Midsize Enterprise25
Large Enterprise70
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise7
Large Enterprise14
 

Questions from the Community

Which Web Application Firewall (WAF) would you recommend? R&S or Imperva?
Imperva is a strong choice, given their security focus and ongoing R&D into the product in areas such as bot management.
What is your experience regarding pricing and costs for Imperva DDoS?
The pricing, setup costs, and licensing of Imperva DDoS are reasonable for the amount of technical capabilities provided. I would rate the pricing of Imperva DDoS as five, where one is very cheap a...
What needs improvement with Imperva DDoS?
I would like to see improvements in the pooling of threats and attacks, possibly to enlarge the scale of indicators of compromise. For example, the initiation of an attack on the endpoint level cou...
What is your experience regarding pricing and costs for NGINX App Protect?
I will not be able to answer about my experience with pricing, setup cost, and licensing for NGINX App Protect, as something different handles that in my team.
What needs improvement with NGINX App Protect?
I did not face any issues with NGINX App Protect. The only issue that we had is that someone was trying to install the POC for the customer, and he by mistake installed the Instance Manager on the ...
What is your primary use case for NGINX App Protect?
I have been dealing with NGINX App Protect and the WAF policy. I usually recommend NGINX App Protect for banking and telecom, and for anyone that has their own database or servers that they host we...
 

Also Known As

Imperva Bot Management, Imperva Web Application Firewall, Imperva API Security
NGINX WAF, NGINX Web Application Firewall
 

Overview

 

Sample Customers

Hitachi, BNZ, Bitstamp, Moz, InnoGames, BTCChina, Wix, LivePerson, Zillow and more.
Information Not Available
Find out what your peers are saying about Imperva Application Security Platform vs. NGINX App Protect and other solutions. Updated: August 2026.
910,437 professionals have used our research since 2012.