--- title: AWS WAF Reviews meta_title: 'AWS WAF Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 72 reviews by the users' company size, role or industry to find out how AWS WAF works for a business like yours. aggregate_rating: rating_value: 4.3 review_count: 72 scale: '5' date_modified: '2026-07-17' parent_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- # AWS WAF Reviews **Vendor:** Amazon Web Services (AWS) **Category:** [Web Application Firewalls (WAF)](https://www.g2.com/categories/web-application-firewall-waf) **Average Rating:** 4.3/5.0 **Total Reviews:** 72 ## About AWS WAF AWS WAF (Web Application Firewall) is a security service designed to protect web applications and APIs from common web exploits and bots that can compromise security, affect availability, or consume excessive resources. By enabling users to define customizable web security rules, AWS WAF allows precise control over which traffic to allow or block, ensuring robust protection tailored to specific application needs. Key Features and Functionality: - Customizable Security Rules: Users can create rules to filter web requests based on conditions such as IP addresses, HTTP headers, HTTP body, or custom URIs, allowing for tailored security measures. - Managed Rule Groups: AWS WAF offers pre-configured rule groups managed by AWS or AWS Marketplace sellers, providing protection against common threats like SQL injection and cross-site scripting (XSS). These rules are regularly updated to address emerging vulnerabilities. - Bot Control: The service includes capabilities to monitor, block, or rate-limit common and pervasive bots, helping to prevent automated attacks such as web scraping and credential stuffing. - Real-Time Monitoring and Logging: AWS WAF integrates with Amazon CloudWatch, offering real-time metrics and capturing detailed information about web requests. This visibility aids in analyzing traffic patterns and fine-tuning security settings. - DDoS Protection: When used in conjunction with AWS Shield, AWS WAF provides automatic protection against Distributed Denial of Service (DDoS) attacks, ensuring application availability during large-scale attack attempts. - Integration with AWS Services: AWS WAF seamlessly integrates with other AWS services such as Amazon CloudFront, Application Load Balancer, and Amazon API Gateway, enabling centralized security management across various applications. Primary Value and Problem Solved: AWS WAF addresses the critical need for robust web application security by providing a scalable and customizable firewall solution. It empowers organizations to protect their web applications and APIs from a wide range of threats, including common exploits and automated attacks, without compromising performance. By offering both managed and custom rule capabilities, AWS WAF enables businesses to implement security measures that align with their specific requirements. Its integration with other AWS services and real-time monitoring features further enhance an organization's ability to maintain a strong security posture, ensuring the availability and integrity of their web applications. ## AWS WAF Pros & Cons **What users like:** - Users value the **easy protection against common attacks** provided by AWS WAF, streamlining website security management. (2 reviews) - Users appreciate the **native cloud integration** of AWS WAF, enhancing security without compatibility hassles. (1 reviews) - Users value the **custom rules** of AWS WAF, simplifying protection against common web attacks with minimal manual effort. (1 reviews) - Users appreciate the **easy protection against common attacks** provided by AWS WAF, requiring minimal manual setup. (1 reviews) - Users value the **automated DDoS protection** of AWS WAF, which offers rapid and effective layer 7 attack mitigation. (1 reviews) - Users value the **native integration with AWS services** that simplifies security management and enhances overall protection. (1 reviews) - Users value the **seamless integration with AWS services** , enhancing security without the hassle of separate tools. (1 reviews) **What users dislike:** - Users find the **complex configuration** challenging initially, leading to confusion, especially regarding pricing. (1 reviews) - Users find the **pricing confusing** for beginners, making it a challenging experience to get started with AWS WAF. (1 reviews) - Users find the **ineffective blocking** of specific regions limits their ability to enforce strict geographic access controls. (1 reviews) ## AWS WAF Reviews ### 1. A very flexible and low cost basic extandable WAF with a few limitations **Rating:** 4.0/5.0 stars **Reviewed by:** Siddharth W. | Test Engineer, Computer Software, Enterprise (> 1000 emp.) **Reviewed Date:** August 17, 2018 **What do you like best about AWS WAF?** The functionality could be extended via lambda functions and the rules could be distributed across the whole system. Easy to set up and really east to get started **What do you dislike about AWS WAF?** Limitations on the number of rules and also the price seems to be a little high **Recommendations to others considering AWS WAF:** It does have some flaws, but it does the job well, the API is good and pretty fast. Do give it a try **What problems is AWS WAF solving and how is that benefiting you?** Monitored how the client application using AWS responded to different web requests, We created different rules and access control lists to block the existing attack threats like SQL injections or cross-site scriptings ### 2. About AWS WAF **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Higher Education | Enterprise (> 1000 emp.) **Reviewed Date:** November 27, 2018 **What do you like best about AWS WAF?** 100% the best thing about it is the pricing, especially compared with other commercial options. You can protect multiple workloads with a simple, affordable, AWS-api and console interface.There are commercial rulesets availalbe for very little money and that is super attactive. **What do you dislike about AWS WAF?** The one big drawbacks (curretnly) are the inability to link more than one commercial ruleset and the lack of control for where to redirect rejected traffic. **Recommendations to others considering AWS WAF:** See if the commercial rulesets meet your needs. **What problems is AWS WAF solving and how is that benefiting you?** Oh, what a WAF does: protect web sites and web-based services. ### 3. Great WAF and Shield experience **Rating:** 4.5/5.0 stars **Reviewed by:** Brian L. | Senior Consultant, Hospital & Health Care, Enterprise (> 1000 emp.) **Reviewed Date:** November 27, 2018 **What do you like best about AWS WAF?** Highly scalable and automate able. Able to automate rolling out across all accounts and add as part of new account creation. **What do you dislike about AWS WAF?** Somewhat limited in functionality. Had ability to add custom automation to resolve shortcomings. **What problems is AWS WAF solving and how is that benefiting you?** Able to move away from third party solution for great cost savings. ### 4. AWS - WAF: Nice and easy firewall for your apps **Rating:** 3.5/5.0 stars **Reviewed by:** Utkarsh S. | Leaders in Innovation Fellow, Public Policy, Small-Business (50 or fewer emp.) **Reviewed Date:** September 25, 2018 **What do you like best about AWS WAF?** The setup procedure is pretty straightforward and fast. Get up and running in minutes, the wizard like format is very easy to work with. **What do you dislike about AWS WAF?** It's still not available in all regions, that's the only minus point I can think of. **What problems is AWS WAF solving and how is that benefiting you?** Business wise the AWS WAF allows the developers to focus on building a feature rich app with really rock solid security using just some clicks. The security layer is pretty robust too. ### 5. Great tool **Rating:** 5.0/5.0 stars **Reviewed by:** ayman r. | VP Services and Support, Mid-Market (51-1000 emp.) **Reviewed Date:** November 28, 2018 **What do you like best about AWS WAF?** very simple and greate tool to use; highly recommend it **What do you dislike about AWS WAF?** nothing; can find online docs that will help setup and quickly deploy. **What problems is AWS WAF solving and how is that benefiting you?** helping prevent attacks from hackers and others trying to take down our online applicaiton. ### 6. Easy to use - Also managed by IoC **Rating:** 5.0/5.0 stars **Reviewed by:** amanda c. | SRE, Mid-Market (51-1000 emp.) **Reviewed Date:** November 29, 2018 **What do you like best about AWS WAF?** I like that there is terraform integration for WAF, we easily created a module that is scalable **What do you dislike about AWS WAF?** The WAF interface is pretty old, it could definitely be looked at. **Recommendations to others considering AWS WAF:** New interface **What problems is AWS WAF solving and how is that benefiting you?** Security benefits ### 7. Plug and PLay WAF Service **Rating:** 4.0/5.0 stars **Reviewed by:** Ramdoyal V. | Public Cloud CoE Lead, Enterprise (> 1000 emp.) **Reviewed Date:** November 27, 2018 **What do you like best about AWS WAF?** The way we can easily create and assign web ACL to multiple application. **What do you dislike about AWS WAF?** Some features that are in advanced shield that can be move to general **What problems is AWS WAF solving and how is that benefiting you?** Securing the applications exposed publicly. ### 8. Easy Setup, Could be better **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Pharmaceuticals | Small-Business (50 or fewer emp.) **Reviewed Date:** March 02, 2019 **What do you like best about AWS WAF?** It's pretty easy to get started using the tutorials. **What do you dislike about AWS WAF?** Easier to understand background information would be helpful. **What problems is AWS WAF solving and how is that benefiting you?** Security requirements ### 9. Great service - some way to go to be a mature service **Rating:** 2.0/5.0 stars **Reviewed by:** Verified User in Internet | Enterprise (> 1000 emp.) **Reviewed Date:** November 28, 2018 **What do you like best about AWS WAF?** Compared to a traditional WAF, having a WAF as a managed service means I don't have to worry about running infrastructure. **What do you dislike about AWS WAF?** AWS WAF can be a little bare bones requiring you to stand up other AWS infra for more advanced use cases other more established products would include out of the box. **What problems is AWS WAF solving and how is that benefiting you?** Protecting the main web site ### 10. Easy setup and effective **Rating:** 4.5/5.0 stars **Reviewed by:** Dante M. | Senior DevOps Engineer, Internet, Mid-Market (51-1000 emp.) **Reviewed Date:** November 27, 2018 **What do you like best about AWS WAF?** Simple setup and direct integration. Quick deploy. **What do you dislike about AWS WAF?** Limited rulesets to begin with and documentation hard to search. **What problems is AWS WAF solving and how is that benefiting you?** Ddos ### 11. I wish it did more out of the box **Rating:** 2.5/5.0 stars **Reviewed by:** Verified User in Consumer Goods | Mid-Market (51-1000 emp.) **Reviewed Date:** November 29, 2018 **What do you like best about AWS WAF?** I like how easy it is to setup and integrate with the rest of my assets **What do you dislike about AWS WAF?** While setup is easy, doing non trivial things with it still requires too much work, and often feels brittle. I'm directly comparing this against cloudflare. **What problems is AWS WAF solving and how is that benefiting you?** Standard owasp, bot protection, etc. ### 12. SImple firewall aplication **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Marketing and Advertising | Small-Business (50 or fewer emp.) **Reviewed Date:** November 28, 2018 **What do you like best about AWS WAF?** The fact that I can combine rules base on differents components like Http headers, methods, origins and more **What do you dislike about AWS WAF?** Some time it is hard to find the way to link one component to another **What problems is AWS WAF solving and how is that benefiting you?** Seguring a Digital Signage application. WAF prevent different attacks to our EC2 infrastructure ### 13. AWS WAF is slowly but on the rise! **Rating:** 3.5/5.0 stars **Reviewed by:** Adde A. | IT Project Manager , Enterprise (> 1000 emp.) **Reviewed Date:** September 14, 2018 **What do you like best about AWS WAF?** The ease and simplicity of adding new firewalls for your web apps hosted in Route 53 **What do you dislike about AWS WAF?** The product is fairly new and does not offer extensive fairwalls compared to the likes of Cloudflare. **What problems is AWS WAF solving and how is that benefiting you?** Configure web apps firewalls for apps hosted using AWS Route 53 ### 14. Easy to implement secure web security **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Internet | Enterprise (> 1000 emp.) **Reviewed Date:** November 26, 2018 **What do you like best about AWS WAF?** Simple web security for legacy a web applications that are not currently part of a development cycle. **What do you dislike about AWS WAF?** None. This product did what we needed. No issues. **What problems is AWS WAF solving and how is that benefiting you?** Needed to solve security concern about web application that is not currently being developed. ### 15. Secure your web apps **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.) **Reviewed Date:** November 28, 2018 **What do you like best about AWS WAF?** Everyone should be using AWS WAF to secure their production websites and API's and mitigate the risk of SQL injections, DDoS attacks etc. **What do you dislike about AWS WAF?** It can get fairly expensive if you are not using it right. **What problems is AWS WAF solving and how is that benefiting you?** Web Application Firewalls ### 16. I love WAF my security team does not **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Hospital & Health Care | Mid-Market (51-1000 emp.) **Reviewed Date:** November 28, 2018 **What do you like best about AWS WAF?** I love that I have native integration into AWS resources **What do you dislike about AWS WAF?** No ability to execute any kind of learning mode to understand traffic before I implement securty rules. Rules creation is a bit ackward sometimes. **What problems is AWS WAF solving and how is that benefiting you?** Security on ALBs ### 17. Useful but expensive **Rating:** 2.5/5.0 stars **Reviewed by:** Verified User in Consumer Goods | Enterprise (> 1000 emp.) **Reviewed Date:** November 27, 2018 **What do you like best about AWS WAF?** All at one place,ease of use and implementation. Support and of course credibility. **What do you dislike about AWS WAF?** Any thing above basic is expensive. So it is not cost efficient to use for the applications on cheaper markets. **Recommendations to others considering AWS WAF:** Lower cost **What problems is AWS WAF solving and how is that benefiting you?** Security ### 18. WAF integration **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Retail | Enterprise (> 1000 emp.) **Reviewed Date:** November 28, 2018 **What do you like best about AWS WAF?** The ease of integration with cloud front **What do you dislike about AWS WAF?** Occasionly i need detailed configuration **What problems is AWS WAF solving and how is that benefiting you?** API, web site and WS security on the permiter ### 19. WAF review **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Entertainment | Enterprise (> 1000 emp.) **Reviewed Date:** November 29, 2018 **What do you like best about AWS WAF?** Its easy setup, easy to use and instant benefits **What do you dislike about AWS WAF?** Nothing really **What problems is AWS WAF solving and how is that benefiting you?** DDoS attack and filter of unwanted requests ### 20. Guardduty and WAF are just the tools for the security posteure **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Education Management | Enterprise (> 1000 emp.) **Reviewed Date:** November 27, 2018 **What do you like best about AWS WAF?** ability to integrate in monitoring and remediation **What do you dislike about AWS WAF?** interface. and lack of inherent integration with KIBANA **What problems is AWS WAF solving and how is that benefiting you?** Cloud/Edge Security ### 21. Too tedious **Rating:** 2.5/5.0 stars **Reviewed by:** Verified User in Retail | Small-Business (50 or fewer emp.) **Reviewed Date:** September 28, 2018 **What do you like best about AWS WAF?** Nothing really! It was too tedious to use at first so I ended up going with a different software **What do you dislike about AWS WAF?** I didn’t like how un-simplified it was. Far too difficult **What problems is AWS WAF solving and how is that benefiting you?** I tried it but ended up going with another software ### 22. A very nice web application **Rating:** 4.5/5.0 stars **Reviewed by:** jomin v. | Small-Business (50 or fewer emp.) **Reviewed Date:** December 01, 2016 **What do you like best about AWS WAF?** It is so easy to access this via Remote Desktop. **What do you dislike about AWS WAF?** Personally I don't have any dislikes so far. I always recommend this product. **Recommendations to others considering AWS WAF:** I would strongly recommend this product to anybody those who look for Web application firewall. **What problems is AWS WAF solving and how is that benefiting you?** Currently we access the Informatica, MSTR applications through the Amazon Web application. ## AWS WAF Discussions - [What is AWS WAF used for?](https://www.g2.com/discussions/what-is-aws-waf-used-for) - 1 comment - [View AWS WAF pricing details and edition comparison](https://www.g2.com/products/aws-waf/reviews?page=2§ion=pricing&secure%5Bexpires_at%5D=2026-08-01+23%3A30%3A12+-0500&secure%5Bsession_id%5D=1d5af1ab-2bf9-41b3-8d4c-1a19d1463b0c&secure%5Btoken%5D=9e8afcddabc13ada120a1729c0226cada3d84acf84d1b3adef535b7c2546bd24&format=llm_user) ## AWS WAF Integrations - [Amazon API Gateway](https://www.g2.com/products/amazon-api-gateway/reviews) - [Amazon AWS Platform](https://www.g2.com/products/amazon-aws-platform/reviews) - [Amazon CloudFront](https://www.g2.com/products/amazon-cloudfront/reviews) - [Amazon EC2](https://www.g2.com/products/amazon-ec2/reviews) - [Amazon Lightsail](https://www.g2.com/products/amazon-lightsail/reviews) - [AWS Auto Scaling](https://www.g2.com/products/aws-auto-scaling/reviews) - [AWS CloudTrail](https://www.g2.com/products/aws-cloudtrail/reviews) - [AWS Elastic Load Balancing](https://www.g2.com/products/aws-elastic-load-balancing/reviews) - [AWS Lambda](https://www.g2.com/products/aws-lambda/reviews) ## AWS WAF Features **Analysis** - Logging and Reporting - Issue Tracking - Security Monitoring **Controls** - Application-Layer Controls - Traffic Controls - Network Controls **Functionality** - API / Integrations - Extensibility - Bot Traffic **Generative AI** - AI Text Summarization ## Top AWS WAF Alternatives - [F5 NGINX](https://www.g2.com/products/f5-nginx/reviews) - 4.6/5.0 (106 reviews) - [Sucuri](https://www.g2.com/products/sucuri/reviews) - 3.3/5.0 (47 reviews) - [ModSecurity](https://www.g2.com/products/modsecurity/reviews) - 4.2/5.0 (14 reviews)