--- title: Fastly's Web Application and API Security Reviews meta\_title: 'Fastly''s Web Application and API Security Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 30 reviews by the users' company size, role or industry to find out how Fastly's Web Application and API Security works for a business like yours. aggregate\_rating: rating\_value: 4.2 review\_count: 30 scale: '5' date\_modified: '2026-08-09' parent\_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops ---

# Fastly's Web Application and API Security Reviews & Product Details

Claimed

###### Profile Status

This profile is currently managed by Fastly's Web Application and API Security but has limited features.  
  
Are you part of the Fastly's Web Application and API Security team? [Upgrade your plan](https://sell.g2.com) to enhance your branding and engage with visitors to your profile!

Fastly’s AppSec solutions empower teams to mitigate threats and control bots while helping the business move faster, confidently. Protect Your Apps and APIs While Accelerating Growth with Fastly’s Next-Gen WAF, DDoS Protection, Bot Management, API Security, and more. Our solutions are designed to help you stop cyber threats from derailing your biggest moments, accelerate innovation while minimizing new risk, and govern bots without increasing user friction.

* * *

Seller
[Fastly](https://www.g2.com/sellers/fastly)
Discussions
[Fastly's Web Application and API Security Community](https://www.g2.com/products/fastly-s-web-application-and-api-security/discuss)
Solution Type

Best-of-Breed

Overview by
Julie Rockett

Show More

## Value at a Glance

Averages based on real user reviews.

### Time to Implement

1 month

### Perceived Cost

$$$$$

[
View More Pricing Information
](https://www.g2.com/products/fastly-s-web-application-and-api-security/pricing)

## Top-Rated Alternatives

[

 ![Cloudflare Application Security and Performance](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Cloudflare Application Security and Performance")

Cloudflare Application Security and Performance

4.5/5(686)

](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews)

[

 ![Wiz](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Wiz")

Wiz

4.7/5(842)

](https://www.g2.com/products/wiz-wiz/reviews)

[

 ![HAProxy](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "HAProxy")

HAProxy

4.7/5(912)

](https://www.g2.com/products/haproxy/reviews)

[
View All Alternatives
](https://www.g2.com/products/fastly-s-web-application-and-api-security/competitors/alternatives)

## User Insights

Average based on 30 real user reviews.

Implementation Time

1 month

Perceived Cost

$$$$$

[Log in to unlock pricing and user insights](/login)

## Fastly's Web Application and API Security Integrations
(1)

What do users say about integrations?

Integration information sourced from real user reviews.

[

 ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image")

AWS Cloud Development Kit (AWS CDK)

](https://www.g2.com/products/aws-cloud-development-kit-aws-cdk/reviews)

Show More

 ![Verified User in Retail](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Retail")
UR

Verified User in Retail

Mid-Market (51-1000 emp.)

3/5/2021

"Cost effective solution"

4/5

What do you like best about Fastly's Web Application and API Security?

First and foremost, they're cost effective and has better rate limiting features compared to WAF.

The interface for creating signals and rules are very simple to use, yet has enough depth for you to cover your use cases.

Support has been responsive and very helpful. They make my job easier, you just need to know what you want to do and they can pretty much help you execute. Review collected by and hosted on G2.com.

What do you dislike about Fastly's Web Application and API Security?

Advanced rules requires help from support. We have advanced users that would rather have the autonomy to create and test these rules on their own. It has definitely been getting better. Review collected by and hosted on G2.com.

What problems is Fastly's Web Application and API Security solving and how is that benefiting you?

The main problem that we use SigSci to solve is ATOs. We have been able to signal and block over 2 million malicious reqs/mo that otherwise would've hit our core infrastructure. Review collected by and hosted on G2.com.

Show More

Validated ReviewerSource: Organic

 ![Anna b.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Anna b.")
AB

Anna b.

Web Developer

Enterprise (\> 1000 emp.)

9/26/2020

"Very strong and Stable security system with flexible configuration ability"

4.5/5

What do you like best about Fastly's Web Application and API Security?

The Fastly Cloud Security is from a veru strong platform.It is a world iwde distributed web network which provide the strong infrastructure sercurity sytem to web applications against the vulnerabilities.It enforce the protection at edge for customer who can easily reach the application and perform the functions with cinfidence. Review collected by and hosted on G2.com.

What do you dislike about Fastly's Web Application and API Security?

The Fastly Cloud Security provides the highly protection against many cyber attacks.It is really costly.It needs an expert for the proper implementaion of the solution,as its all features must be utilize to get the best results. Review collected by and hosted on G2.com.

Recommendations to others considering Fastly's Web Application and API Security:

The Fastly Cloud Security is a strong and powerful protector against any web attacks.The edge cloud security satisfy the compliance obligation.It provides the comprehensive logging and descriptive reporting system which helps the critical analysis. Thats why I always recommend to use The Fastly Cloud Security . Review collected by and hosted on G2.com.

What problems is Fastly's Web Application and API Security solving and how is that benefiting you?

The Fastly Cloud Security free trial is avialable for the testing .My company has used the services of The Fastly Cloud Security solution. I have realised that it worked very well against the DDos and Bot attacks.It saves the Web application by changing the APIs rules at the real time through active log system. Review collected by and hosted on G2.com.

Show More

Validated ReviewerIncentivizedSource: G2 invite

 ![Cody G.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Cody G.")
CG

Cody G.

Software Engineer

Enterprise (\> 1000 emp.)

9/14/2020

"Have Strong Security Rules with real time analyical Reporting"

4.5/5

What do you like best about Fastly's Web Application and API Security?

The Fastly Cloud Security is a very strong and stable security provider. It also enforces security rules in the system to give the deep insight into the suspicious traffc.It also gives ability to update the configuration for smooth workflow.It is designed to protect the applications against the malicious attacks.Fastly Cloud Security is high bandwidth globally distributed network is developed to accomodate the DDoS attacks. Review collected by and hosted on G2.com.

What do you dislike about Fastly's Web Application and API Security?

The Fastly Cloud Security though a good security provider with the real time approach, however it need the technical IT staff to configure the rules in real time though APIs to active the blocking mode and passive logging mode.It can be over pricing for the company. Review collected by and hosted on G2.com.

Recommendations to others considering Fastly's Web Application and API Security:

The Fastly Cloud Security is built in a very strong egde cloud platform with stable and powerful security system.It also provides the free trial testinf for the checking purpose.The Fastly Cloud Security protects against the injection attacks cross site scripting as well.I think it is highly recommended now a days. Review collected by and hosted on G2.com.

What problems is Fastly's Web Application and API Security solving and how is that benefiting you?

The Fastly Cloud Security has a very good deffewnce system against all the cyber attacks.It has partnered with PerimeterX to provide the predictive,behaviour based bot detection and mitigation at the network edge.This joint offer save the application with both cache and web content defending againstbot abuse. Review collected by and hosted on G2.com.

Show More

Validated ReviewerIncentivizedSource: G2 invite

MR

Mike R.

Enterprise (\> 1000 emp.)

5/15/2020

"Impressive WAF, highly flexible, fantastic feature set, and effective!"

5/5

What do you like best about Fastly's Web Application and API Security?

Signal Sciences was incredibly easy to install and instrument in to our application. In a battery of performance tests we determined that the WAF had a statistically negligible impact which was great to see. In terms of effectiveness, it did a great job at catching all attacks we were sending at it. As a vendor, Signal Sciences has been a great partner for us. They're quick to support us should we encounter issues of any kind. We have a fair number of architectures of which Signal Sciences supported all of them and more. It is highly flexible and can support a number of different deployment methods. Keeping any components updated are a breeze as well. Review collected by and hosted on G2.com.

What do you dislike about Fastly's Web Application and API Security?

I don't have any dislikes of the product. Overall Signal Sciences has been one of the best WAFs I've ever worked with. Review collected by and hosted on G2.com.

Recommendations to others considering Fastly's Web Application and API Security:

You'll be pleasantly surprised with Signal Sciences. I have worked with a lot of different WAFs and this was hands down the best WAF I've ever worked with. I highly recommend pursuing them as your WAF solution. Review collected by and hosted on G2.com.

What problems is Fastly's Web Application and API Security solving and how is that benefiting you?

Historically our applications didn't have a WAF, however, with the modern threat landscape and the burgeoning number of attacks we prioritized WAF as a key security tool. The key problem we were solving was the lack of solid web security defenses. Our threat detection abilities have increased greatly since deploying this tool in addition to the needed protections we were previously missing. Review collected by and hosted on G2.com.

Show More

Current UserValidated ReviewerSource: Organic

 ![Verified User in Biotechnology](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Biotechnology")
EB

Verified User in Biotechnology

Mid-Market (51-1000 emp.)

3/5/2021

"Great Product"

4/5

What do you like best about Fastly's Web Application and API Security?

The proactive nature of the protection it provides Review collected by and hosted on G2.com.

What do you dislike about Fastly's Web Application and API Security?

The agents and web server modules update process Review collected by and hosted on G2.com.

What problems is Fastly's Web Application and API Security solving and how is that benefiting you?

Enhanced visibility in web requests, protecting sites form malicious attempts Review collected by and hosted on G2.com.

Show More

Current UserValidated ReviewerSource: Organic

 ![Verified User in Sports](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Sports")
AS

Verified User in Sports

Mid-Market (51-1000 emp.)

3/5/2021

"Signal Sciences WAF"

5/5

What do you like best about Fastly's Web Application and API Security?

Ease of deployment. Able to configure Full Blocking mode in days not weeks. Review collected by and hosted on G2.com.

What do you dislike about Fastly's Web Application and API Security?

I am not able to provide any downsides as I have not experienced any. New features should be communicated in the portal. Review collected by and hosted on G2.com.

What problems is Fastly's Web Application and API Security solving and how is that benefiting you?

Securing critical production and staging applications. With little administrative effort been able to configure full blocking mode and geo block access at the application level. Review collected by and hosted on G2.com.

Show More

Validated ReviewerSource: Organic

 ![Verified User in Non-Profit Organization Management](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Non-Profit Organization Management")
EN

Verified User in Non-Profit Organization Management

Mid-Market (51-1000 emp.)

5/17/2020

"Loving SigSci"

4/5

What do you like best about Fastly's Web Application and API Security?

Speed to implement, insights from the tool, progressive product roadmap, support, and of course the protection it affords our business. Review collected by and hosted on G2.com.

What do you dislike about Fastly's Web Application and API Security?

Older versions required an agent to be maintained, although the new cloud version has done away with this. Review collected by and hosted on G2.com.

What problems is Fastly's Web Application and API Security solving and how is that benefiting you?

Originally we needed a solution that would work with our architecture - spent months trying to integrate some of the traditional WAF products without success, we had SigSci up and running in a day. Simple to use WAF. Review collected by and hosted on G2.com.

Show More

Current UserValidated ReviewerSource: Organic

 ![Verified User in Security and Investigations](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Security and Investigations")
AS

Verified User in Security and Investigations

Small-Business (50 or fewer emp.)

1/23/2019

"Better than most WAFs but not "next-gen""

1.5/5

What do you like best about Fastly's Web Application and API Security?

Compared to other WAF products the UI and general functionality is more comprehensible. Out of the box Signal Sciences works and does detect basic injection attacks. Review collected by and hosted on G2.com.

What do you dislike about Fastly's Web Application and API Security?

Doing advanced config is not easy, lots of UX problems and deciding which install path to take in the first place was very confusing. Was also surprised about all the extra charges, starting with a hefty setup fee and trying to push a multi year deal on us after a short pilot phase. Review collected by and hosted on G2.com.

Recommendations to others considering Fastly's Web Application and API Security:

Expect to have time to setup and configure the product. It seems easier, and is, than most WAFs but still requires hand holding and UX is not always clear. Review collected by and hosted on G2.com.

What problems is Fastly's Web Application and API Security solving and how is that benefiting you?

Increasing security on our web application. Getting some visibility into attacks and gaining PCI compliance. Review collected by and hosted on G2.com.

Show More

Current UserValidated ReviewerSource: Organic

 ![Verified User in Human Resources](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Human Resources")
AH

Verified User in Human Resources

Mid-Market (51-1000 emp.)

8/16/2018

"Great WAF With Tons of Potential"

5/5

What do you like best about Fastly's Web Application and API Security?

It's one of the few WAFs that you can easily put into block mode without the risk of dropping legitimate traffic. The company is new which means lot's of engineering ideas and enhancements are implemented. Review collected by and hosted on G2.com.

What do you dislike about Fastly's Web Application and API Security?

Since the company is so new, some expected features just aren't there. They are very open to enhancement requests. Review collected by and hosted on G2.com.

Recommendations to others considering Fastly's Web Application and API Security:

Give it a try. Though they are a cloud service, all processing is done on your servers. Only analytical data is sent back to them. You can redact anything you want. No Request payloads ever make it to their servers. Review collected by and hosted on G2.com.

What problems is Fastly's Web Application and API Security solving and how is that benefiting you?

We are security our web application. We never had the visibility into web attacks that we do now. It's a great product! Review collected by and hosted on G2.com.

Show More

Current UserValidated ReviewerIncentivizedSource: G2 invite

 ![Verified User in Financial Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Financial Services")
AF

Verified User in Financial Services

Enterprise (\> 1000 emp.)

5/23/2018

"WAF that actually works!"

4/5

What do you like best about Fastly's Web Application and API Security?

Signal science is very flexible with its deployment strategy and the insight on the web traffic of your application is tremendous. Review collected by and hosted on G2.com.

What do you dislike about Fastly's Web Application and API Security?

Signal science agent updates, i wish agent updates could be automated and we don't have to update it often. Review collected by and hosted on G2.com.

What problems is Fastly's Web Application and API Security solving and how is that benefiting you?

The visibility it provides on web traffic is amazing. Features like 24 hour block and thresholds on request are great Review collected by and hosted on G2.com.

Show More

Validated ReviewerIncentivizedSource: G2 invite

## Pricing Insights

Averages based on real user reviews.

### Time to Implement

1 month

### Perceived Cost

$$$$$

[
View More Pricing Information
](https://www.g2.com/products/fastly-s-web-application-and-api-security/pricing)

Fastly's Web Application and API Security Comparisons

 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_cacdec8b8edeace9b3c89e0c2cded695/aws-waf.jpg "Product Avatar Image")

AWS WAF

4.3/5(72)

[
Compare Now
](https://www.g2.com/compare/aws-waf-vs-fastly-s-web-application-and-api-security)

 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_65c94fd396adf448fb1d27e503b86982/wiz-wiz.png "Product Avatar Image")

Wiz

4.7/5(842)

[
Compare Now
](https://www.g2.com/compare/fastly-s-web-application-and-api-security-vs-wiz-wiz)

 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_aeae116c52945fdecd7ed16d621cb315/google-cloud-armor.png "Product Avatar Image")

Google Cloud Armor

4/5(23)

[
Compare Now
](https://www.g2.com/compare/fastly-s-web-application-and-api-security-vs-google-cloud-armor)

##### Categories on G2

[API Security](https://www.g2.com/categories/api-security)[Threat Intelligence](https://www.g2.com/categories/threat-intelligence)[Cloud Security Monitoring and Analytics](https://www.g2.com/categories/cloud-security-monitoring-and-analytics)

[API Security](https://www.g2.com/categories/api-security)[Threat Intelligence](https://www.g2.com/categories/threat-intelligence)[Cloud Security Monitoring and Analytics](https://www.g2.com/categories/cloud-security-monitoring-and-analytics)[Bot Detection and Mitigation](https://www.g2.com/categories/bot-detection-and-mitigation)[Web Application Firewall (WAF)](https://www.g2.com/categories/web-application-firewall-waf)[DDoS Protection](https://www.g2.com/categories/ddos-protection)[Website Security](https://www.g2.com/categories/website-security)[Cloud Edge Security](https://www.g2.com/categories/cloud-edge-security)[Client-Side Protection](https://www.g2.com/categories/client-side-protection)

[Show MoreShow Less](javascript:void(0);)

##### Explore More

[HubSpot Marketing Hub vs Google Analytics: which is better for mid-market B2B teams proving pipeline ROI?](https://www.g2.com/discussions/hubspot-marketing-hub-vs-google-analytics-which-is-better-for-mid-market-b2b-teams-proving-pipeline-roi)[What are the most reliable and stable grant management solutions based on verified customer reviews from established enterprises?](https://www.g2.com/discussions/what-are-the-most-reliable-and-stable-grant-management-solutions-based-on-verified-customer-reviews-from-established-enterprises)[Most reliable cloud monitoring tools for my app](https://www.g2.com/discussions/most-reliable-cloud-monitoring-tools-for-my-app)

[What's the best generative AI platform for app development](https://www.g2.com/discussions/what-s-the-best-generative-ai-platform-for-app-development)[best cloud infrastructure monitoring software](https://www.g2.com/discussions/what-s-the-best-cloud-infrastructure-monitoring-software)[Pros and Cons Details](https://www.g2.com/products/fastly-s-web-application-and-api-security/reviews?qs=pros-and-cons)

[Show MoreShow Less](javascript:void(0);)