--- title: Fastly's Web Application and API Security Reviews meta\_title: 'Fastly''s Web Application and API Security Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 30 reviews by the users' company size, role or industry to find out how Fastly's Web Application and API Security works for a business like yours. aggregate\_rating: rating\_value: 4.2 review\_count: 30 scale: '5' date\_modified: '2026-08-09' parent\_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- # Fastly's Web Application and API Security Reviews & Product Details Claimed ###### Profile Status This profile is currently managed by Fastly's Web Application and API Security but has limited features. Are you part of the Fastly's Web Application and API Security team? [Upgrade your plan](https://sell.g2.com) to enhance your branding and engage with visitors to your profile! Fastly’s AppSec solutions empower teams to mitigate threats and control bots while helping the business move faster, confidently. Protect Your Apps and APIs While Accelerating Growth with Fastly’s Next-Gen WAF, DDoS Protection, Bot Management, API Security, and more. Our solutions are designed to help you stop cyber threats from derailing your biggest moments, accelerate innovation while minimizing new risk, and govern bots without increasing user friction. * * * Seller [Fastly](https://www.g2.com/sellers/fastly) Discussions [Fastly's Web Application and API Security Community](https://www.g2.com/products/fastly-s-web-application-and-api-security/discuss) Solution Type Best-of-Breed Overview by Julie Rockett Show More ## Value at a Glance Averages based on real user reviews. ### Time to Implement 1 month ### Perceived Cost $$$$$ [ View More Pricing Information ](https://www.g2.com/products/fastly-s-web-application-and-api-security/pricing) ## Top-Rated Alternatives [ ![Cloudflare Application Security and Performance](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Cloudflare Application Security and Performance") Cloudflare Application Security and Performance 4.5/5(684) ](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews) [ ![Wiz](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Wiz") Wiz 4.7/5(842) ](https://www.g2.com/products/wiz-wiz/reviews) [ ![HAProxy](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "HAProxy") HAProxy 4.7/5(912) ](https://www.g2.com/products/haproxy/reviews) [ View All Alternatives ](https://www.g2.com/products/fastly-s-web-application-and-api-security/competitors/alternatives) ## User Insights Average based on 30 real user reviews. Implementation Time 1 month Perceived Cost $$$$$ [Log in to unlock pricing and user insights](/login) ## Fastly's Web Application and API Security Integrations (1) What do users say about integrations? Integration information sourced from real user reviews. [ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") AWS Cloud Development Kit (AWS CDK) ](https://www.g2.com/products/aws-cloud-development-kit-aws-cdk/reviews) Show More ![Verified User in Computer Software](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer Software") AC Verified User in Computer Software Small-Business (50 or fewer emp.) 6/20/2023 "This works, but it looks kind of expensive" 4.5/5 What do you like best about Fastly's Web Application and API Security? Users of your site will be able to open your website on https without any extra setup on their side. Review collected by and hosted on G2.com. What do you dislike about Fastly's Web Application and API Security? If you have more than two hostnames (i.e. domains plus subdomains), you hit kind of a tall wall in pricing. Review collected by and hosted on G2.com. What problems is Fastly's Web Application and API Security solving and how is that benefiting you? It's a devops thing, you need to (1) get a certificate from a certificate authority and (2) set it up on your reverse proxy. Fastly TLS does these two things, and it integrates with your existing Fastly deliver service. Or their new edge compute system. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Automann T.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Automann T.") AT Automann T. Mid-Market (51-1000 emp.) 3/9/2023 "Easy to deploy and use via their GUI" 5/5 What do you like best about Fastly's Web Application and API Security? The Fastly Next-Gen WAF is relatively easy to setup and implement. Very good customer support (and team) was provided to us and our development team as well. Easy to use GUI as well. Review collected by and hosted on G2.com. What do you dislike about Fastly's Web Application and API Security? Haven't had any difficulties so far with our experience using the WAF product. Review collected by and hosted on G2.com. What problems is Fastly's Web Application and API Security solving and how is that benefiting you? We had problems with attaks, but this solution provides attack protection, including DDOS protection. Review collected by and hosted on G2.com. Show More 9/9/2024 Validated ReviewerIncentivizedSource: G2 invite ![Rithika G.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Rithika G.") RG Rithika G. Cloud Engineer Information Technology and Services Enterprise (\> 1000 emp.) 4/11/2022 "Tuning Package provided by Fastly is superb for WAF maintenance & to prevent WAF bypass attacks" 4/5 What do you like best about Fastly's Web Application and API Security? Fastly gives top-notch security over our SSDN application as we carry out its deployment specified by our clients. It provides enhanced proxy security features that will mask all our activities from other legitimate traffic. It allows me to establish rules in regards to my customer needs and helps prevent vulnerabilities & maintaining the overall security posture. It also effectively allows me to filter the web traffic so that I can mitigate the potential application layer attacks such as cross-site scripting, SQL injection and other HHTP protocol violations. Review collected by and hosted on G2.com. What do you dislike about Fastly's Web Application and API Security? Defining rules is quite challenging and if not properly established, the billing cost will rise. Since we work on various critical applications for our clients, we don't mind the incurring cost as Fastly Cloud security offers excellent WAF protection for our SSDN web applications. Review collected by and hosted on G2.com. What problems is Fastly's Web Application and API Security solving and how is that benefiting you? Fastly cloud security provisions various WAF tuning packages which enhance the overall protection against critical threats & WAF bypass attacks. It's quick to define rules, filter policies & develop its structure using Fastly WAF dashboard & it also ensures the management of request latency for the addition of each rule. It also detects malicious traffic requests which are sent over HTTPS & HTTP and enabling its WAF services does not require any modifications to our on-premise servers or web applications which is convenient. For all additional configuration refinements, we contact the Fastly customer support team and get the WAF provisions done in no time. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite JW Jason W. CISO Mid-Market (51-1000 emp.) 3/26/2021 "Great visibility with low administrative overhead" 5/5 What do you like best about Fastly's Web Application and API Security? The ease of setup and day-to-day administration is hard to beat. It's really nice to have a tool that doesn't need daily tuning for false positives. Review collected by and hosted on G2.com. What do you dislike about Fastly's Web Application and API Security? Having to manually update the agents. Auto-updating agents would remove the only current administration I really have to do, outside of new rule creation. Review collected by and hosted on G2.com. Recommendations to others considering Fastly's Web Application and API Security: If you're looking into a WAF, do a PoC of Signal Sciences. Setup time is so low that it's minimal effort and you'll be surprised at the ease-of-use. Review collected by and hosted on G2.com. What problems is Fastly's Web Application and API Security solving and how is that benefiting you? We're securing 100% of externally facing applications with Signal Sciences, with very little tuning necessary on our part. We were in full blocking mode within the first 2 weeks and haven't hit any false positives over the past few years. We've realized a few operational benefits as well, by using SigSci to track HTTP error codes spiking. Review collected by and hosted on G2.com. Show More 3/26/2022 Current UserValidated ReviewerSource: Organic ![Antonio V.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Antonio V.") AV Antonio V. Sr Cyber Security Analyst Mid-Market (51-1000 emp.) 3/9/2021 "Easy to set up, easy to manage, outstanding visibility" 5/5 What do you like best about Fastly's Web Application and API Security? Pre built detection rules, ability to immediately turn on blocking without fear of blocking legitimate traffic, easy to build custom rules and test them, API integration, integration with SIEM tool. Multiple deployment models that fit with our environment allowing complete visibility and protection for all of our applications and API's. Great customer support when called upon quick to respond and work on solving issues Review collected by and hosted on G2.com. What do you dislike about Fastly's Web Application and API Security? At this moment I do not have anything negative about the product. Would like to have agents and modules update automatically Review collected by and hosted on G2.com. What problems is Fastly's Web Application and API Security solving and how is that benefiting you? Small Security team in a web application centric business, Signal Sciences has provided great insights into our applications and allowed us to move to blocking flagged traffic without lengthy time consuming Core Rule Set tuning and also to normalize and understand some of our apps behavior. Flexibility of deployment allows for our team to support new business requirements without sacrificing the security of our applications Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic ![Joshua D.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Joshua D.") JD Joshua D. Lead Software Engineer Mid-Market (51-1000 emp.) 3/9/2021 "Very powerful WAF; not for novices" 4/5 What do you like best about Fastly's Web Application and API Security? The GUI console is great for observing requests. I often use it over other platforms to monitor requests. The templated rules and new features make the "dislike" of this questionnaire much less relevant today. Review collected by and hosted on G2.com. What do you dislike about Fastly's Web Application and API Security? The setup was difficult. It took us a lot of time and energy to get setup. A year ago it was much less capable without a lot more work. Today a lot of those issues are resolved with new features recently released. Review collected by and hosted on G2.com. What problems is Fastly's Web Application and API Security solving and how is that benefiting you? We get targeted by credential stuffing bots constantly. SigSci has helped us cut that down drastically. Previously, we were spending a dozen or so man-hours a week fighting these bots. That included AWS scaling events. Today we mostly forget about the WAF as it does what it needs to do. That's what you want from a security application - to be there when you need it but you not having to babysit it. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic ![Narasimha Rao S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Narasimha Rao S.") NS Narasimha Rao S. Senior Solutions Architect - Portfolio Enterprise (\> 1000 emp.) 12/28/2021 Business partner of the seller or seller's competitor, not included in G2 scores. "Signal Science Review" 4.5/5 What do you like best about Fastly's Web Application and API Security? Dashboard Onboard Integration with modern tech applications Review collected by and hosted on G2.com. What do you dislike about Fastly's Web Application and API Security? Alerts can be more flexible to integrate with pager duty, etc Review collected by and hosted on G2.com. What problems is Fastly's Web Application and API Security solving and how is that benefiting you? Ingrates easily with Application Security Legacy Secured Model Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Jorge Alberto T.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Jorge Alberto T.") JT Jorge Alberto T. Security Executive Mid-Market (51-1000 emp.) 2/23/2021 "RASP / WAF Review" 4.5/5 What do you like best about Fastly's Web Application and API Security? Very easy and fast integration with different types of architecture patterns and applications. Support of agents with reverse proxy solutions. No false positives at the moment. No PII/PCI information is stored and ability to redact any sensitive data. Rules are very easy to configure and deploy. Intelligent network that shares malicious IPs, attacks, etc. Which allows to be one step ahead of any attempt against our applications. Integration with SIEMs. Review collected by and hosted on G2.com. What do you dislike about Fastly's Web Application and API Security? Lack of AWS Lambda support integration. Lack of communication about releases, roadmap and new functionalities. Static conditions in template rules, should allow more flexibility. Review collected by and hosted on G2.com. What problems is Fastly's Web Application and API Security solving and how is that benefiting you? Avoid technical teams to review false positives. Able to categorize functionalities within the application to have a better understanding of any anomalies and create rules according to security and business needs. Flexibility for deployment for different security problems (agent, reverse proxy, PaaS, etc.) Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic ![Mario D.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Mario D.") MD Mario D. Infrastructure Engineer Mid-Market (51-1000 emp.) 3/15/2021 "Easy-to-configure and developer oriented solution." 4.5/5 What do you like best about Fastly's Web Application and API Security? - It is very easy and safe to operate in blocking mode, so it provides automatic protection out of the box without the need of complex configuration. - It provides a set of rules for dynamic request rates action, that allow to cover multiple DDOS scenarios. Review collected by and hosted on G2.com. What do you dislike about Fastly's Web Application and API Security? I haven't found an issue that I dislike so far. Review collected by and hosted on G2.com. Recommendations to others considering Fastly's Web Application and API Security: Compare time to implementation and configuration overhead, for us Signal Sciences WAF was the best offer we could find on these key criterias. Review collected by and hosted on G2.com. What problems is Fastly's Web Application and API Security solving and how is that benefiting you? Identifying and blocking common OWASP attacks and protecting our application against DDOS attacks. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic ![Verified User in Sporting Goods](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Sporting Goods") AS Verified User in Sporting Goods Mid-Market (51-1000 emp.) 5/17/2021 "Amazing product. Even better support. A must have service in 2021." 5/5 What do you like best about Fastly's Web Application and API Security? It was relatively easy to setup. Some pretty good rules 'out of the box'. Onboarding suppoort team was excellent. Review collected by and hosted on G2.com. What do you dislike about Fastly's Web Application and API Security? Nothing I can think of at this point. Pretty straightforward process. Review collected by and hosted on G2.com. Recommendations to others considering Fastly's Web Application and API Security: If you are in the market for a secure, well supported, fully featured WAF, this is a great product/service. Review collected by and hosted on G2.com. What problems is Fastly's Web Application and API Security solving and how is that benefiting you? We wanted to make sure that our sites were rock solid from a security perspective. This solution provided peace of mind when it comes to a no nonsense firewall. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic ## Pricing Insights Averages based on real user reviews. ### Time to Implement 1 month ### Perceived Cost $$$$$ [ View More Pricing Information ](https://www.g2.com/products/fastly-s-web-application-and-api-security/pricing) Fastly's Web Application and API Security Comparisons ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_cacdec8b8edeace9b3c89e0c2cded695/aws-waf.jpg "Product Avatar Image") AWS WAF 4.3/5(72) [ Compare Now ](https://www.g2.com/compare/aws-waf-vs-fastly-s-web-application-and-api-security) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_65c94fd396adf448fb1d27e503b86982/wiz-wiz.png "Product Avatar Image") Wiz 4.7/5(842) [ Compare Now ](https://www.g2.com/compare/fastly-s-web-application-and-api-security-vs-wiz-wiz) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_aeae116c52945fdecd7ed16d621cb315/google-cloud-armor.png "Product Avatar Image") Google Cloud Armor 4/5(23) [ Compare Now ](https://www.g2.com/compare/fastly-s-web-application-and-api-security-vs-google-cloud-armor) ##### Categories on G2 [API Security](https://www.g2.com/categories/api-security)[Threat Intelligence](https://www.g2.com/categories/threat-intelligence)[Cloud Security Monitoring and Analytics](https://www.g2.com/categories/cloud-security-monitoring-and-analytics) [API Security](https://www.g2.com/categories/api-security)[Threat Intelligence](https://www.g2.com/categories/threat-intelligence)[Cloud Security Monitoring and Analytics](https://www.g2.com/categories/cloud-security-monitoring-and-analytics)[Bot Detection and Mitigation](https://www.g2.com/categories/bot-detection-and-mitigation)[Web Application Firewall (WAF)](https://www.g2.com/categories/web-application-firewall-waf)[DDoS Protection](https://www.g2.com/categories/ddos-protection)[Website Security](https://www.g2.com/categories/website-security)[Cloud Edge Security](https://www.g2.com/categories/cloud-edge-security)[Client-Side Protection](https://www.g2.com/categories/client-side-protection) [Show MoreShow Less](javascript:void(0);) ##### Explore More [HubSpot Marketing Hub vs Google Analytics: which is better for mid-market B2B teams proving pipeline ROI?](https://www.g2.com/discussions/hubspot-marketing-hub-vs-google-analytics-which-is-better-for-mid-market-b2b-teams-proving-pipeline-roi)[What are the most reliable and stable grant management solutions based on verified customer reviews from established enterprises?](https://www.g2.com/discussions/what-are-the-most-reliable-and-stable-grant-management-solutions-based-on-verified-customer-reviews-from-established-enterprises)[Most reliable cloud monitoring tools for my app](https://www.g2.com/discussions/most-reliable-cloud-monitoring-tools-for-my-app) [What's the best generative AI platform for app development](https://www.g2.com/discussions/what-s-the-best-generative-ai-platform-for-app-development)[best cloud infrastructure monitoring software](https://www.g2.com/discussions/what-s-the-best-cloud-infrastructure-monitoring-software)[Pros and Cons Details](https://www.g2.com/products/fastly-s-web-application-and-api-security/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)