# AWS WAF vs Fastly's Web Application and API Security Comparison | | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **Star Rating** | 4.3 out of 5 | 4.2 out of 5 | | **Total Reviews** | 72 | 30 | | **Largest Market Segment** | Small-Business (34.4% of reviews) | Mid-Market (51.7% of reviews) | | **Entry Level Price** | No pricing available | No pricing available | --- ## Top Pros & Cons ### AWS WAF Pros: - WAF (Web Application Firewall) (2 reviews) - Cloud Integration (1 reviews) Cons: - Complex Configuration (1 reviews) - Expensive (1 reviews) ### Fastly's Web Application and API Security Pros: - Ease of Use (5 reviews) - Security (5 reviews) Cons: - Expensive (3 reviews) - Poor Customer Support (3 reviews) --- ## Ratings Comparison | Rating | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **Meets Requirements** | 8.9 (48 reviews) | 8.9 (25 reviews) | | **Ease of Use** | 8.2 (48 reviews) | 9.1 (25 reviews) | | **Ease of Setup** | 8.1 (33 reviews) | 9.1 (16 reviews) | | **Ease of Admin** | 8.2 (32 reviews) | 9.2 (16 reviews) | | **Quality of Support** | 8.7 (44 reviews) | 9.1 (25 reviews) | | **Has the product been a good partner in doing business?** | 8.8 (31 reviews) | 9.2 (16 reviews) | | **Product Direction (% positive)** | 9.0 (48 reviews) | 9.5 (24 reviews) | --- ## Pricing ### AWS WAF #### Entry-Level Pricing No pricing available #### Free Trial No information available ### Fastly's Web Application and API Security #### Entry-Level Pricing No pricing available #### Free Trial Yes --- ## Features Comparison By Category ### Website Security | Product | Score | Reviews | |---|---|---| | **AWS WAF** | N/A | N/A | | **Fastly's Web Application and API Security** | N/A | N/A | #### Administration | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **Content Delivery** | Not enough data | Not enough data | | **Dashboard & Reporting** | Not enough data | Not enough data | | **Alerting** | Not enough data | Not enough data | #### Risk Analysis | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **Blacklist and Whitelist** | Not enough data | Not enough data | | **Vulnerability Assessment** | Not enough data | Not enough data | | **Security Auditing** | Not enough data | Not enough data | #### Threat Protection | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **Firewall** | Not enough data | Not enough data | | **DDoS Protection** | Not enough data | Not enough data | | **Malware Detection** | Not enough data | Not enough data | | **Malware Removal** | Not enough data | Not enough data | #### Generative AI | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **AI Text Summarization** | Not enough data | Not enough data | ### Web Application Firewall (WAF) | Product | Score | Reviews | |---|---|---| | **AWS WAF** | 8.6/10 | 31 | | **Fastly's Web Application and API Security** | 8.6/10 | 9 | #### Analysis | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **Logging and Reporting** | 8.3 (24 reviews) | 9.1 (9 reviews) | | **Issue Tracking** | 8.0 (21 reviews) | 8.1 (7 reviews) | | **Security Monitoring** | 8.9 (25 reviews) | 9.1 (9 reviews) | #### Controls | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **Application-Layer Controls ** | 9.2 (22 reviews) | 8.8 (8 reviews) | | **Traffic Controls** | 8.7 (24 reviews) | 8.1 (7 reviews) | | **Network Controls** | 8.8 (23 reviews) | 8.1 (7 reviews) | #### Functionality | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **API / Integrations** | 8.9 (22 reviews) | 9.1 (9 reviews) | | **Extensibility** | 8.2 (20 reviews) | 8.1 (7 reviews) | | **Bot Traffic** | 9.0 (5 reviews) | Not enough data | #### Generative AI | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **AI Text Summarization** | 7.7 (10 reviews) | Not enough data | ### DDoS Protection | Product | Score | Reviews | |---|---|---| | **AWS WAF** | N/A | N/A | | **Fastly's Web Application and API Security** | N/A | N/A | #### Management | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **IT Alerting** | Not enough data | Not enough data | | **Network Capacity** | Not enough data | Not enough data | | **Logging** | Not enough data | Not enough data | | **API / Integrations** | Not enough data | Not enough data | #### Protection | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **DNS Protection** | Not enough data | Not enough data | | **Website Protection** | Not enough data | Not enough data | | **Infrastructure Protection** | Not enough data | Not enough data | #### Resolution | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **Attack Mitigation** | Not enough data | Not enough data | | **Network Monitoring** | Not enough data | Not enough data | | **Security Monitoring** | Not enough data | Not enough data | | **Anomoly Detection** | Not enough data | Not enough data | | **Resolution Automation** | Not enough data | Not enough data | ### Cloud Security Monitoring and Analytics | Product | Score | Reviews | |---|---|---| | **AWS WAF** | N/A | N/A | | **Fastly's Web Application and API Security** | N/A | N/A | #### Activity Monitoring | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **Usage Monitoring** | Not enough data | Not enough data | | **Database Monitoring** | Not enough data | Not enough data | | **API Monitoring** | Not enough data | Not enough data | | **Activity Monitoring** | Not enough data | Not enough data | #### Security | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **Compliance Monitoring** | Not enough data | Not enough data | | **Risk Analysis** | Not enough data | Not enough data | | **Reporting** | Not enough data | Not enough data | #### Administration | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **Security Automation** | Not enough data | Not enough data | | **Security Integration** | Not enough data | Not enough data | | **Multicloud Visibility** | Not enough data | Not enough data | #### Agentic AI - Cloud Security Monitoring and Analytics | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **Autonomous Task Execution** | Not enough data | Not enough data | | **Proactive Assistance** | Not enough data | Not enough data | | **Decision Making** | Not enough data | Not enough data | ### API Security | Product | Score | Reviews | |---|---|---| | **AWS WAF** | N/A | N/A | | **Fastly's Web Application and API Security** | N/A | N/A | #### API Management | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **API Discovery** | Not enough data | Not enough data | | **API Monitoring** | Not enough data | Not enough data | | **Reporting** | Not enough data | Not enough data | | **Change Management** | Not enough data | Not enough data | #### Security Testing | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **Compliance Monitoring** | Not enough data | Not enough data | | **API Verification** | Not enough data | Not enough data | | **API Testing** | Not enough data | Not enough data | #### Security Management | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **Security and Policy Enforcement** | Not enough data | Not enough data | | **Anomoly Detection** | Not enough data | Not enough data | | **Bot Detection** | Not enough data | Not enough data | ### Cloud Edge Security | Product | Score | Reviews | |---|---|---| | **AWS WAF** | N/A | N/A | | **Fastly's Web Application and API Security** | N/A | N/A | #### Management | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **Multicloud Management** | Not enough data | Not enough data | | **DLP Configuration** | Not enough data | Not enough data | | **Dynamic Scaling** | Not enough data | Not enough data | | **Policy Enforcement** | Not enough data | Not enough data | #### Monitoring | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **Data Center Networking** | Not enough data | Not enough data | | **Multicloud Visibility** | Not enough data | Not enough data | | **Anomaly Detection** | Not enough data | Not enough data | #### Protection | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **Firewall-as-a-Service** | Not enough data | Not enough data | | **Cloud Application Brokerage** | Not enough data | Not enough data | | **Web Gateway** | Not enough data | Not enough data | | **Adaptive Access Control** | Not enough data | Not enough data | ### Client-Side Protection | Product | Score | Reviews | |---|---|---| | **AWS WAF** | N/A | N/A | | **Fastly's Web Application and API Security** | N/A | N/A | #### Threat Detection and Protection - Client-Side Protection | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **Continuous Scanning** | Not enough data | Not enough data | | **Signature-Based Detection** | Not enough data | Not enough data | | **Threat Protection** | Not enough data | Not enough data | | **Risk Prioritization** | Not enough data | Not enough data | | **Heuristic Analysis** | Not enough data | Not enough data | #### Data Security - Client-Side Protection | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **First-Party JavaScript Obfuscation** | Not enough data | Not enough data | | **Browser Security** | Not enough data | Not enough data | | **Encryption** | Not enough data | Not enough data | | **Obfuscation** | Not enough data | Not enough data | | **Data Loss Prevention (DLP)** | Not enough data | Not enough data | | **Third-Party Security** | Not enough data | Not enough data | | **Endpoint Security** | Not enough data | Not enough data | #### Logging and Monitoring - Client-Side Protection | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **Event Logging** | Not enough data | Not enough data | | **Reporting** | Not enough data | Not enough data | | **Real-Time Monitoring** | Not enough data | Not enough data | ### Threat Intelligence | Product | Score | Reviews | |---|---|---| | **AWS WAF** | N/A | N/A | | **Fastly's Web Application and API Security** | N/A | N/A | #### Orchestration | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **Asset Management** | Not enough data | Not enough data | | **Security Workflow Automation** | Not enough data | Not enough data | | **Deployment** | Not enough data | Not enough data | | **Sandboxing** | Not enough data | Not enough data | #### Information | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **Proactive Alerts** | Not enough data | Not enough data | | **Malware Detection** | Not enough data | Not enough data | | **Intelligence Reports** | Not enough data | Not enough data | #### Personalization | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **Endpoint Intelligence** | Not enough data | Not enough data | | **Security Validation** | Not enough data | Not enough data | | **Dynamic/Code Analysis** | Not enough data | Not enough data | #### Generative AI | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **AI Text Summarization** | Not enough data | Not enough data | | **Generate Attack Scenarios** | Not enough data | Not enough data | | **Generate Threat Detection Rules** | Not enough data | Not enough data | | **Generate Threat Summaries** | Not enough data | Not enough data | #### Agentic AI - Threat Intelligence | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **Autonomous Task Execution** | Not enough data | Not enough data | | **Multi-step Planning** | Not enough data | Not enough data | | **Proactive Assistance** | Not enough data | Not enough data | | **Decision Making** | Not enough data | Not enough data | ### Cloud Security | Product | Score | Reviews | |---|---|---| | **AWS WAF** | N/A | N/A | | **Fastly's Web Application and API Security** | N/A | N/A | #### Cloud Visibility | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **Data Discovery** | Not enough data | Not enough data | | **Cloud Registry** | Not enough data | Not enough data | | **Cloud Gap Analytics** | Not enough data | Not enough data | #### Security | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **Data Security** | Not enough data | Not enough data | | **Data loss Prevention** | Not enough data | Not enough data | | **Security Auditing** | Not enough data | Not enough data | #### Identity | Feature | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **SSO** | Not enough data | Not enough data | | **Governance** | Not enough data | Not enough data | | **User Analytics** | Not enough data | Not enough data | --- ## Categories **Shared Categories (1):** [Web Application Firewalls (WAF)](https://www.g2.com/categories/web-application-firewall-waf) **Unique to Fastly's Web Application and API Security (8):** [Cloud Edge Security Software](https://www.g2.com/categories/cloud-edge-security), [API Security Tools](https://www.g2.com/categories/api-security), [Cloud Security Monitoring and Analytics Software](https://www.g2.com/categories/cloud-security-monitoring-and-analytics), [Bot Detection and Mitigation Software](https://www.g2.com/categories/bot-detection-and-mitigation), [DDoS Protection Solutions](https://www.g2.com/categories/ddos-protection), [Threat Intelligence Software](https://www.g2.com/categories/threat-intelligence), [Client-Side Protection Solutions](https://www.g2.com/categories/client-side-protection), [Website Security Software](https://www.g2.com/categories/website-security) --- ## Reviewer Demographics ### By Company Size | Segment | AWS WAF | Fastly's Web Application and API Security | |---|---|---| | **Small-Business** | 34.4% | 13.8% | | **Mid-Market** | 34.4% | 51.7% | | **Enterprise** | 31.3% | 34.5% | ### By Industry #### AWS WAF - **Information Technology and Services:** 21.9% - **Computer Software:** 9.4% - **Retail:** 7.8% - **Computer & Network Security:** 7.8% - **Marketing and Advertising:** 7.8% - **Banking:** 4.7% - **Internet:** 4.7% - **Hospital & Health Care:** 4.7% - **Financial Services:** 4.7% - **Consumer Goods:** 3.1% - **Other:** 23.4% #### Fastly's Web Application and API Security - **Computer Software:** 17.2% - **Information Technology and Services:** 13.8% - **Computer & Network Security:** 6.9% - **Financial Services:** 6.9% - **Hospital & Health Care:** 6.9% - **Automotive:** 3.4% - **Banking:** 3.4% - **Biotechnology:** 3.4% - **Broadcast Media:** 3.4% - **Entertainment:** 3.4% - **Other:** 31.0% --- ## Alternatives ### Alternatives to AWS WAF - [F5 NGINX](https://www.g2.com/products/f5-nginx/reviews) — 4.6/5 stars (107 reviews) - [Imperva App Protect](https://www.g2.com/products/imperva-app-protect/reviews) — 4.1/5 stars (80 reviews) - [Sucuri](https://www.g2.com/products/sucuri/reviews) — 3.3/5 stars (48 reviews) - [ModSecurity](https://www.g2.com/products/modsecurity/reviews) — 4.2/5 stars (14 reviews) - [Cloudflare Application Security and Performance](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews) — 4.5/5 stars (601 reviews) - [Google Cloud Armor](https://www.g2.com/products/google-cloud-armor/reviews) — 4.0/5 stars (23 reviews) - [Imperva Web Application Firewall (WAF)](https://www.g2.com/products/imperva-web-application-firewall-waf/reviews) — 4.7/5 stars (41 reviews) - [Barracuda Web Application Firewall](https://www.g2.com/products/barracuda-web-application-firewall/reviews) — 4.3/5 stars (14 reviews) - [Azure Application Gateway](https://www.g2.com/products/azure-application-gateway/reviews) — 4.4/5 stars (160 reviews) - [HAProxy](https://www.g2.com/products/haproxy/reviews) — 4.7/5 stars (900 reviews) ### Alternatives to Fastly's Web Application and API Security - [Cloudflare Application Security and Performance](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews) — 4.5/5 stars (601 reviews) - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) — 4.7/5 stars (794 reviews) - [HAProxy](https://www.g2.com/products/haproxy/reviews) — 4.7/5 stars (900 reviews) - [FortiCNAPP](https://www.g2.com/products/forticnapp/reviews) — 4.4/5 stars (386 reviews) - [Postman](https://www.g2.com/products/postman/reviews) — 4.6/5 stars (1775 reviews) - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) — 4.6/5 stars (420 reviews) - [Sumo Logic](https://www.g2.com/products/sumo-logic/reviews) — 4.3/5 stars (399 reviews) - [Fingerprint](https://www.g2.com/products/fingerprintjs-fingerprint/reviews) — 4.7/5 stars (386 reviews) - [Coralogix](https://www.g2.com/products/coralogix/reviews) — 4.6/5 stars (343 reviews) - [IBM QRadar SIEM](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews) — 4.4/5 stars (335 reviews) --- ## Top Discussions ### AWS WAF - Title: [What is AWS WAF used for?](https://www.g2.com/discussions/what-is-aws-waf-used-for) — 1 comment > **Top comment:** "Web application firewalls are used for protection of web applications from owasp top 10 vulnerabilities basis on different CVEs. AWS WAF is nothing but..." ### Fastly's Web Application and API Security No discussions available for this product. --- **Source:** [G2.com](https://www.g2.com) | [Comparison Page](https://www.g2.com/compare/aws-waf-vs-fastly-s-web-application-and-api-security)