Imperva DDoS Reviews

Previously I was in software development for more than 15 years. I had developed web applications for internet and cable TV companies. Now, I am a sales executive for Imperva Cloud WAF. 

Imperva Cloud WAF, previously Imperva Incapsula, is a web application firewall that is implemented in the cloud. It protects a public facing web application. It will track if a hacker is doing brute force attack. The web application firewall will detect it and block the source. This could be an IP address or the main name specific for a country. You can then update the profile of your server to block those IP addresses where the attack is coming from .

We have placed Imperva Cloud in our client's employee self service system that they are logged into. The website is protected by Imperva so that employees and customers can log in all over the Philippines. The client is a power generation company, which is a critical service, and has branches all over the Philippines.

We partner with a couple of on-premise data centers in the Philippines, one is PIM. They also provide cloud solutions. We bundle our solutions into their cloud projects.

Imperva Incapsula has many valuable features. One, it protects the top 10 OWAS vulnerability, the open web application software platform, this is standard. Secondly, it protects against broken authentication. As well, it has remote execution of code.

Imperva always needs to adjust to new versions of cyber attacks, it needs to be faster, improve the resiliency of the software of the solution.

I have been using Imperva Cloud WAF for three years.

Imperva is stable. Based on Gartner's survey we are top three, meaning we are reliable based on customer feedback.

This is a scalable solution. We have data centers all over the world. The solution can be set up to be optimized wherever the clients are accessing.

Technical support has good response time. I am also the liaison officer for the technical team in Singapore. Support responds quickly and they do attend to the issues that we raise to them.

The implementation of Imperva Cloud WAF is easy. All you need to do is change the DNS settings, because it is a cloud solution there is no appliance that you need to install at the data center. It just changes the DNS settings, and then a couple of IP address and domain name settings to allow a couple of those IP addresses and domain names settings into the firewall of the client and the firewall of Imperva.

The actual installation will only take a few hours and then full implementation within 24 hours. The initial setup takes time because of the configuration on the client-side. We prepared a questionnaire for the client to assist with preparation.

We created a cross-comparison against hiring a team of cybersecurity staff versus getting a subscription. After using Imperva Cloud for the past three years the cost is already acceptable against hiring a team.

The price depends on the client's needs, it will be impacted depending on whether they need diverse production, or account take over for example.

There is an initial four package bundle with the price changing monthly.

I would rate this solution an 8 out of 10.

We use this product as our Web Application Firewall. It provides web-based protection for us. Our requirements are not very complex.

Some maintenance must be performed by our IT team.

We have been working with Imperva Incapsula for two years.

The stability is okay. We use it extensively, on a daily basis. The firewall operates 24 hours per day.

We have approximately 500 employees that are protected with this product.

We have not had any problems with their technical support.

We did not use another Web Application Firewall before Imperva.

Incapsula is not a difficult product to deploy.

The vendor assisted us with the deployment.

We have an IT support team that is responsible for maintenance.

We have a yearly contract and I am happy with the pricing. Imperva charges us based on bandwidth, which is better than other vendors that charge us according to data transfer. In these cases, our costs are quite high.

Outside of our package, there are no additional fees.

Overall, I am really happy with this solution. This includes the features and capabilities, as well as the cost. It fits our requirements, as well as our budget.

I would rate this solution a nine out of ten.

The company uses this solution to protect us from any potential attacks. We are customers of Imperva and I'm the company director. 

Imperva makes it easier for us to put everything in code; we use Terraform to deploy our infrastructure. 

This is a very limited tool if you're looking to customize. It would be helpful if Imperva would provide additional resources for Terraform that can easily be deployed. There are some cases where we're currently unable to use Terraform.

I've been using this solution for six months. 

The solution is stable although sometimes content delivery seems to be affected because it's in the cloud.

Scalability is fine and we haven't had any issues with resource consumption. 

Technical support is quite proactive in sharing information.

The initial setup is relatively straightforward. 

I rate this solution eight out of 10. 

Our primary use case is DDoS protection. We are using it to protect access to internet sites. It is a SaaS solution, so everybody has the latest version. 

DDoS protection and WAF are the most valuable features. It is easy to deploy a service. It is easy and quick to deploy to a new website.

Its price could be improved. It is quite expensive.

It will be good if we could export the configuration. Currently, to control the configuration, we need to go to each website, which is not very convenient.

I have been using this solution for six years.

Its capacity is okay for us, and we don't need to scale it or expand its usage.

Their technical support is good. We get a quick response from them.

It was simple. It is very easy and quick to deploy.

It was done in-house.

It is expensive.

I would recommend this solution to others. It has been working fine for us, and it has all the features that we need. I would advise others to know the exact bandwidth that is required for the project because the cost is based on the bandwidth. You must evaluate the required bandwidth beforehand.

I would rate Imperva Incapsula a nine out of ten. Technically, it is a very good solution.

The first use case was due to the need to protect DDoS attacks as well as protection for SQL injection. The existing application was no longer supported, and to prevent further attacks from occurring, WAF Imperva was applied. The rollout was very fast due to the need for DNS notes only.

In the old days, we experienced many problems with denial of service attacks, and identifying them was very difficult because we did not have a WAF solution. After the deployment, the solution gave us the visibility we needed.

Anti-DDoS protection, as well as other protections like SQL injection, Cross-Site Scripting, and antiscanner. These types of protection are valuable to the business due to the daily attacks on our portals, and that often cannot be seen without a tool like this.

Imperva now offers add-ons to add functionality, but I would like to see these included in the product, even if it would cost more.

No issues with stability.

No issues with scalability.

Very good, although I have not had any problems so far.

No, this is the first solution I have used.

It was straightforward, very simple. I only entered the domain and Incapsula returned the DNS data that I needed to change for the protection to be configured.

I did not participate in the process of choosing the solution.

Only configure it by enabling all protections. This is very important for preventing attacks.

Incapsula was acquired by Imperva. We had a need to provide a solution for our clients and the Incapsula solution and Cloud WAF (Web Application Firewall) allowed us to have people subscribe to Incapsula as a service. It was easy to work with because we would just put in the hostname and the IP address of the websites in Incapsula's DNS. When the DNS is resolved it first passes through Incapsula and makes a stops in the Cloud WAF before it sends the website itself.  

Customers can trust it because the traffic going to the customer passes through Incapsula's cloud service. So if there is an attack, the website and the visitors are protected because it will take care of such issues and it eliminates the bad traffic. Both ends are taken care of so the website is protected from hackers because it first goes through the Incapsula Cloud WAF. That is the basic high-level architecture of how the Incapsula works.  

We distributors of Imperva in Africa. I am responsible for our business presence in Eastern and Western Africa. I am fixed locally here in Nigeria. Being distributors, we have a pretty good idea of how the market is in general and how the products are used. All the partners who implement it and who resell sell it, buy it from us and deploy for customer accounts. We cover a high percentage of the financial service industry here in Nigeria.  

For this part of the world, several things are important. It is important that the clients have the features which they get to use to get against bad traffic, of course as this is the reason for the product. But especially for customers in this region, it is also the opportunity to use the service platform. They do not have to own it or maintain it and they may not otherwise have the capacity to deploy this type of solution. Instead, they can pay for it as a service. It works so well here that even some of the banks are using it.  

The most valuable feature is the ability to mitigate bad traffic. I think the highest traffic we would experience can be handled by the Incapsula Cloud WAF because it can scale. So if there is some attack on a website and there is high volume, instead of it disrupting the website and disrupting business operations, it is not a problem for the customer's website. That ability to mitigate problems with the traffic is why the clients use the product to protect their valuable data and customer interactions.  

If I had the opportunity to recommend an enhancement to Imperva it would be to have more POP (Point of Presence) in East and West Africa, and in Central Africa as well. There is only one POP in South Africa. There are other ones are in Europe, America, and Asia and sometimes the latency can be an issue because for your traffic to hit the website — say in East Africa. First, it has to first go to the nearest point of presence. Because of the distance, there can be some problems. So if they have a POP closer to manage customers around Africa this could be a better service to clients.  

I have only recently begun to use Imperva Incapsula compared to the amount of time I have been in the industry. For more than a decade and I have tried my hands on various security solutions, mainly having to do with network infrastructure.  But now I am back to working with security solutions and, over this past year, I have engaged mostly with applications in data security. Before that, I was doing a lot more with the whole of network security. Incapsula is more of an application for data security and it is something which Imperva does pretty well.  

The stability is not an issue. The product is serviced and maintained for the client.  

Virtually all the banks in Nigeria, Ghana, East, and West Africa, are using Imperva. Of course, they are using it for various things, but for the most part, they use it for data security and application security and then also a little bit on the Incapsula platform.  

The scalability depends on the customer but there are really no features that a client will want to request that Imperva does not handle in terms of scalability. Of course, you cannot compare the size of the banks and the input and output demands of banking in Western European countries or the Americas with the needs of banking in Africa.  

For us, it is a good solution.  

Response from technical support has been very good. I would say that they are excellent because they are always willing to attend to customers' requests. They provide support based on time zones so there is good access.  

Because it is a cloud product and the setup is minimal, it is straightforward and quickly implemented.  

I do have experience with Imperva SecureSphere. I am working with various solutions that have various features and how these solutions work for different customers. For one customer, I was trying to do some research to see if they should replace Trustwave WAF with a different solution because the customer asked me about other possibilities. This was my first customer who had asked me to look into Trustwave, so I also took the time to research that product. But different products fit different businesses and industries better.  

I am not an expert in every solution of this type, but I have a pretty good idea of what makes them work as a good solution based on customer needs. I do not do the implementation because I am more in a position of doing pre-sales and consultancy.  

I would highly recommend Imperva Incapsula especially for customers who want extra security for their web presence.  

On a scale from one to ten where one is the worst and ten is the best, I would rate the Incapsula product overall as a nine-out-of-ten.  

We mainly use this solution as a web application firewall. We have CMS systems in our portfolio, which our customers use, and the full information portraits are running on our infrastructure and in our CMS product. We, therefore, use this solution mainly for protection and to improve performance.

I found that it is very easy to set everything up. I like the user-friendly interface.

I think the pricing needs some tweaks. 

Imperva Incapsula is a very stable solution.

We use this solution as a crowd solution, a software service so we don't have any issues regarding its performance or scalability. Our IT administrators use Incapsula to maintain the solution because they have knowledge about how this protection works.

I am satisfied with the customer service. The few times that we had issues, they technical support team was able to solve our issues. 

The initial setup was very easy and straightforward. Our customers need good protection so we do the installation for them to protect our sites. 

We are resellers and in addition to supplying the product, we also offer support. 

We compared this with other solutions like Akamai, but it couldn't deliver the same as Imperva Incapsula. We don't use specific application tweaks. We only use basic mechanisms of cashing and six years ago, when we were looking for a solution, there was no solution like this one out there. Incapsula does what we need it to do, and we like the easy installation process. We think still that Incapsula is the best.

Because we are resellers, we prefer that our customers use it. But even if I wasn't a reseller, I would still recommend it. I love the solution's capabilities and the ease of the installation. 

In the future, I would like to see better pricing. E.x. the additional bandwidth packages are higher than our needs so we end up paying for data that we don't use. I want them to provide me with the particular quantity of megabytes I need. I don't want to pay extra money for megabytes that I will not use in the future.

I rate this program nine out of ten.

• Faultless inlining & minification: Every competing product breaks the layout, but we are yet to see Incapsula break a site
• Installation requires just a CNAME entry, avoiding the risk of email downtime.
• Instant PCI compliance and protection from the OWASP Top 10 vulnerabilities.
• CDN & DDoS protection.

Incapsula delivers a massive improvement to website performance and security in less than 20 minutes, regardless of the CMS. We love it so much that we decided to create a new service around this product, which could result in our largest income stream yet.

They once terminated a free account without warning, resulting in a few days downtime. But you get what you pay for.

I have been using it for two years.

I have not encountered any stability issues.

I have not encountered any scalability issues.

Technical support is first class. These guys are sharp.

We moved from CloudFlare because Incapsula’s minification was faultless, and their CNAME installation procedure avoided downtime for other services such as email.

It was very easy to set up: 20 minutes and you're done.

Go for the $59/month Pro plan. Free accounts can get terminated, and the higher plans are only if you like to have your own SSL certificate, or get regular DDoS attacks. The Pro plan has everything you need; it's just that you're using Imperva's SSL certificate, not yours.

Before choosing this product, we evaluate other options in great detail. We looked at CloudFlare, W3 Total Cache, WP Super Cache, Wordfence, BulletProof Security, Varnish, Mod_Security, ConfigServer, and a variety of other options. Incapsula isn't the cheapest, but is way in front of the competition. You'll easily spend double/triple the cost of your Incapsula subscription on maintaining any other solution, whereas Incapsula handles all that overhead for you, right out of the box.

Don't wait till you've been hacked; get protected now. It'll cost you at least a year of Incapsula fees to recover from website hacking. And if your website is running slow, Google is probably already penalising your site, when the fix is so easy. Incapsula is by far the fastest fix for both website speed and security.