# Best Web Application Firewalls (WAF) for Small Business ## How Many Web Application Firewalls (WAF) Products Does G2 Track? **Total Products under this Category:** 93 ### Category Stats (Jul 2026) - **Average Rating:** 4.45/5 The average rating of products in this category, based on all submitted ratings - **Top Trending Product:** Harness Platform (+0.22%) - Among all products in this category, Harness Platform recorded the largest rating increase compared to last month _Last updated: July 31, 2026_ ## How Does G2 Rank Web Application Firewalls (WAF) Products? **Why You Can Trust G2's Software Rankings:** - 30 Analysts and Data Experts - 3,200+ Authentic Reviews - 93+ Products - Unbiased Rankings G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category. ## G2 Grid® for Web Application Firewalls (WAF) ![G2 Grid® for Web Application Firewalls (WAF) plotting products by satisfaction and market presence](https://www.g2.com/categories/web-application-firewall-waf/grids.png?focus%5B%5D=10700&focus%5B%5D=1339605&focus%5B%5D=55067&focus%5B%5D=20178&focus%5B%5D=155229&focus%5B%5D=52168&focus%5B%5D=67033&focus%5B%5D=10939) Highlighted products: Cloudflare Application Security and Performance, Check Point WAF (formerly CloudGuard WAF), HAProxy, AWS WAF, Radware Cloud WAF, Azure Application Gateway, Google Cloud Armor, and Sucuri. Underlying data: [Grid® JSON](https://www.g2.com/categories/web-application-firewall-waf/grids.json?focus%5B%5D=cloudflare-application-security-and-performance&focus%5B%5D=check-point-waf-formerly-cloudguard-waf&focus%5B%5D=haproxy&focus%5B%5D=aws-waf&focus%5B%5D=radware-cloud-waf&focus%5B%5D=azure-application-gateway&focus%5B%5D=google-cloud-armor&focus%5B%5D=sucuri&segment=small-business) **Sponsored** ### Fortinet Managed Rules for AWS WAF Fortinet’s WAF rulesets are additional security signatures that can be used to enhance the protections included in the base AWS WAF product. They are updated on a regular basis to include the latest threat intelligence from the award-winning FortiGuard Labs. The Complete OWASP Top 10 Ruleset provides a comprehensive package for web application protection offered by Fortinet to help address the OWASP Top 10 web application threats. Includes protection for various Injection attacks such as SQL and command Injection , Cross Site Scripting, General and Known Exploits, Malicious Bots and Common Vulnerabilities and Exposures (CVE). [Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list_llm&secure%5Bcategory_id%5D=1522&secure%5Bchosen_at%5D=2026-07-31T18%3A58%3A16Z&secure%5Bdisplayable_resource_id%5D=1522&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=page_category&secure%5Bplacement_resource_ids%5D%5B%5D=1522&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=145276&secure%5Bresource_id%5D=1522&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fweb-application-firewall-waf%2Fsmall-business%3Fopen_modal_url%3D%252Fproducts%252Fgoogle-cloud-armor%252Fwishlists%253Fhost_path%253D%25252Fcategories%25252Fweb-application-firewall-waf%25252Fsmall-business%2526source%253Dcategory&secure%5Btoken%5D=803ec1e09ad52c43dfd40f1b9d8bb133abf01dfadcd074c33077bc92479a4e3e&secure%5Burl%5D=https%3A%2F%2Fwaf-security.com%2F%3Futm_source%3Dg2%26utm_medium%3Dcpc%26utm_id%3Ddirect-publisher&secure%5Burl_type%5D=custom_url) ### [Cloudflare Application Security and Performance](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews) Cloudflare is the connectivity cloud for the "everywhere world," on a mission to help build a better Internet. We provide a unified platform of networking, security, and developer services delivered from a single, intelligent global network that spans hundreds of cities in over 125 countries. This empowers organizations of all sizes, from small businesses to the world's largest enterprises, to make their employees, applications, and networks faster and more secure everywhere, while significantly reducing complexity and cost. Our comprehensive platform includes: - Advanced Security: Protect your online presence with industry-leading DDoS protection, a robust Web Application Firewall (WAF), Bot mitigation, and API security. Implement Zero Trust security to secure remote access, data, and applications for your entire workforce. - Superior Performance: Accelerate website and application loading times globally with our Content Delivery Network (CDN), intelligent DNS, and smart routing capabilities. Optimize images and deliver dynamic content with unparalleled speed. - Powerful Developer Tools: Empower your developers to build and deploy full-stack applications at the edge using Cloudflare Workers (serverless functions), R2 Storage (object storage without egress fees), and D1 (serverless SQL database). Cloudflare helps connect and protect millions of customers globally, offering the control, visibility, and reliability businesses need to work, develop, and accelerate their operations in today's hyperconnected landscape. Our global network continuously learns and adapts, ensuring your digital assets are always protected and performing at their best. **Average Rating:** 4.5/5.0 **Total Reviews:** 633 #### How Do G2 Users Rate Cloudflare Application Security and Performance? - **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 8.7/10) - **Traffic Controls:** 9.0/10 (Category avg: 9.1/10) - **Security Monitoring:** 9.1/10 (Category avg: 9.0/10) - **Issue Tracking:** 8.5/10 (Category avg: 8.7/10) #### Who Is the Company Behind Cloudflare Application Security and Performance? - **Seller:** [Cloudflare, Inc.](https://www.g2.com/sellers/cloudflare-inc) - **Company Website:** www.cloudflare.com - **Year Founded:** 2009 - **HQ Location:** San Francisco, California - **Twitter:** @Cloudflare 286,254 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=9ff5cfe687bc4033753bbb82d49b4ac651d4582458542d4a881a39a74fc7cad2&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F407222%2F&secure%5Burl_type%5D=linkedin_company_website) 7,190 employees on LinkedIn® #### Who Uses This Product? - **Who Uses This:** Web Developer, Software Engineer - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 61% Small, 27% Medium #### What Do G2 Reviewers Say About Cloudflare Application Security and Performance? _AI-generated summary from verified user reviews_ ##### Pros - Users commend Cloudflare for its **robust security features** , including automatic DDoS protection and a helpful Web Application Firewall. - Users appreciate the **ease of use** of Cloudflare, with an intuitive dashboard simplifying security and performance management. - Users appreciate the **user-friendly interface** and comprehensive features of Cloudflare, streamlining security and performance management. - Users commend the **enhanced performance** of Cloudflare, noting faster page loads and seamless integration for website security. - Users value the **effective DDoS protection** from Cloudflare, ensuring peace of mind with enhanced application security. ##### Cons - Users find the **complex user interface** challenging, especially when navigating advanced features and configurations effectively. - Users find the platform **expensive** , especially as many useful features require upgrading to higher-priced plans. - Users experience a **complex setup** requiring extra time, making it less friendly for those unfamiliar with security configurations. - Users find the **complexity** of advanced configurations challenging, especially for those new to security platforms. - Users note a **steep learning curve** for advanced features, which can complicate their overall experience with Cloudflare. #### What Are Recent G2 Reviews of Cloudflare Application Security and Performance? **["Unified Security and Performance Platform That Delivers Fast, Reliable Results"](https://www.g2.com/survey_responses/cloudflare-application-security-and-performance-review-13184266)** **Rating:** 4.5/5.0 stars _— Atharva S._ [Read full review](https://www.g2.com/survey_responses/cloudflare-application-security-and-performance-review-13184266) **["Enterprise-Grade Security and Global Performance in One Cloudflare Platform"](https://www.g2.com/survey_responses/cloudflare-application-security-and-performance-review-13168803)** **Rating:** 5.0/5.0 stars _— Sai Sumanth C._ [Read full review](https://www.g2.com/survey_responses/cloudflare-application-security-and-performance-review-13168803) #### What Are G2 Users Discussing About Cloudflare Application Security and Performance? - [What is Cloudflare Spectrum used for?](https://www.g2.com/discussions/what-is-cloudflare-spectrum-used-for) - 1 comment - [What is Cloudflare Bot Management used for?](https://www.g2.com/discussions/what-is-cloudflare-bot-management-used-for) - [Does Cloudflare provide hosting?](https://www.g2.com/discussions/does-cloudflare-provide-hosting) - 2 comments - [How good is Cloudflare DNS?](https://www.g2.com/discussions/how-good-is-cloudflare-dns) - 1 comment, 1 upvote - [What does DDoS protection do?](https://www.g2.com/discussions/what-does-ddos-protection-do) ### [Check Point WAF (formerly CloudGuard WAF)](https://www.g2.com/products/check-point-waf-formerly-cloudguard-waf/reviews) CloudGuard WAF is a cloud-native Web and API security solution designed to help users safeguard their applications from both known and unknown threats. By leveraging advanced contextual AI, this solution provides precise threat prevention without the need for traditional signature-based detection methods. This innovative approach allows organizations to maintain a robust security posture while minimizing the risks associated with evolving cyber threats. Targeted primarily at businesses that rely on web applications and APIs, CloudGuard WAF is particularly beneficial for enterprises in sectors such as finance, healthcare, and e-commerce, where data protection is paramount. The solution is designed to address the complex security challenges that arise in modern application environments, especially those utilizing continuous integration and continuous deployment (CI/CD) practices. As organizations increasingly adopt cloud-native architectures, the need for flexible and efficient security solutions becomes critical. One of the standout features of CloudGuard WAF is its preemptive protection capabilities. By employing machine learning-based security measures, the solution can effectively prevent zero-day threats, which are vulnerabilities that have not yet been discovered or patched. This proactive approach eliminates the reliance on frequent signature updates, allowing organizations to stay ahead of potential attacks without the need for constant manual intervention. Moreover, CloudGuard WAF excels in precise detection, enabling it to identify a broader range of attacks while minimizing the need for ongoing fine-tuning and exception creation. This feature not only enhances the accuracy of threat detection but also reduces the operational burden on security teams, allowing them to focus on more strategic initiatives rather than routine adjustments. Designed with cloud-native principles in mind, CloudGuard WAF supports CI/CD-friendly deployment and automation. This means that organizations can easily integrate the solution into their existing workflows, from installation to upgrades and configuration. By utilizing declarative infrastructure-as-code or APIs, users can streamline their security processes, ensuring that their applications remain protected as they evolve. Overall, CloudGuard WAF represents a significant advancement in the realm of web and API security, offering organizations a sophisticated and adaptable solution to combat the ever-changing landscape of cyber threats. Its combination of preemptive protection, precise detection, and cloud-native design makes it a valuable asset for any organization looking to enhance its security posture in today's digital environment. **Average Rating:** 4.3/5.0 **Total Reviews:** 86 #### How Do G2 Users Rate Check Point WAF (formerly CloudGuard WAF)? - **Has the product been a good partner in doing business?:** 8.6/10 (Category avg: 8.7/10) - **Traffic Controls:** 8.7/10 (Category avg: 9.1/10) - **Security Monitoring:** 9.3/10 (Category avg: 9.0/10) - **Issue Tracking:** 8.6/10 (Category avg: 8.7/10) #### Who Is the Company Behind Check Point WAF (formerly CloudGuard WAF)? - **Seller:** [Check Point Software Technologies](https://www.g2.com/sellers/check-point-software-technologies) - **Company Website:** www.checkpoint.com - **Year Founded:** 1993 - **HQ Location:** Redwood City, CA - **Twitter:** @CheckPointSW 70,955 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=d885813f6605ba84238ae4a21d169e0c9ade054cf0c99ff53e72483b54a8b521&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fcheck-point-software-technologies%2F&secure%5Burl_type%5D=linkedin_company_website) 8,554 employees on LinkedIn® #### Who Uses This Product? - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 57% Medium, 29% Small #### What Do G2 Reviewers Say About Check Point WAF (formerly CloudGuard WAF)? _AI-generated summary from verified user reviews_ ##### Pros - Users highlight the **reliable security features** of Check Point WAF, ensuring effective protection against web attacks effortlessly. - Users value the **robust security features** of Check Point CloudGuard WAF, enabling customized protection with minimal management effort. - Users appreciate the **contextual AI** of Check Point CloudGuard WAF, offering effective protection with minimal false positives. - Users value the **robust DDoS protection** of Check Point CloudGuard WAF, ensuring secure cloud applications and API traffic. - Users value Check Point WAF for its **comprehensive protection** against web attacks and seamless integration with cloud environments. ##### Cons - Users find the **complex setup** challenging, particularly for teams new to Check Point's ecosystem. - Users find the Check Point WAF to be **expensive** , especially compared to competitors despite its advanced features. - Users find the **learning difficulty** challenging due to the complex setup and extensive configuration requirements. - Users face a **difficult learning curve** due to extensive features and configurations required for effective use. - Users often find the **user interface overwhelming** , particularly during initial setup and while navigating complex features. #### What Are Recent G2 Reviews of Check Point WAF (formerly CloudGuard WAF)? **["Complex Setup, but Strong Security Features"](https://www.g2.com/survey_responses/check-point-waf-formerly-cloudguard-waf-review-13110824)** **Rating:** 4.5/5.0 stars _— Samiksha C._ [Read full review](https://www.g2.com/survey_responses/check-point-waf-formerly-cloudguard-waf-review-13110824) **["Solid WAF Protection With a Learning Curve"](https://www.g2.com/survey_responses/check-point-waf-formerly-cloudguard-waf-review-13101236)** **Rating:** 4.0/5.0 stars _— Milan D._ [Read full review](https://www.g2.com/survey_responses/check-point-waf-formerly-cloudguard-waf-review-13101236) ### [HAProxy](https://www.g2.com/products/haproxy/reviews) HAProxy is an open-source software load balancer and reverse proxy for TCP, QUIC, and HTTP-based applications. It provides high availability, load balancing, and best-in-class SSL processing. HAProxy One is an application delivery and security platform that combines the HAProxy core with enterprise-grade security layers, management and orchestration, cloud-native integration, and more. Platform components: HAProxy Enterprise: a flexible data plane layer for TCP, UDP, QUIC, and HTTP-based applications that provides high-performance load balancing, high availability, an API/AI gateway, container networking, SSL processing, DDoS protection, bot detection and mitigation, global rate limiting, and a web application firewall (WAF). HAProxy Fusion: a scalable control plane that provides full-lifecycle management, observability, and automation of multi-cluster, multi-cloud, and multi-team HAProxy Enterprise deployments, with infrastructure integration for AWS, Kubernetes, Consul, and Prometheus. HAProxy Edge: a globally distributed application delivery network that provides fully managed application delivery and security services, a secure partition between external traffic and origin networks, and threat intelligence enhanced by machine learning that powers the security layers in HAProxy Fusion and HAProxy Enterprise. Learn more at HAProxy.com **Average Rating:** 4.7/5.0 **Total Reviews:** 897 #### How Do G2 Users Rate HAProxy? - **Has the product been a good partner in doing business?:** 9.1/10 (Category avg: 8.7/10) - **Traffic Controls:** 9.0/10 (Category avg: 9.1/10) - **Security Monitoring:** 8.3/10 (Category avg: 9.0/10) - **Issue Tracking:** 8.2/10 (Category avg: 8.7/10) #### Who Is the Company Behind HAProxy? - **Seller:** [HAProxy](https://www.g2.com/sellers/haproxy) - **Company Website:** www.haproxy.com - **Year Founded:** 2013 - **HQ Location:** Newton, MA - **Twitter:** @HAProxy 21,218 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=242d3af26bcc54eebdb77a8e8d44206cd44c8ee591f0479cf903e79e320a8651&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F1032008%2F&secure%5Burl_type%5D=linkedin_company_website) 125 employees on LinkedIn® #### Who Uses This Product? - **Who Uses This:** DevOps Engineer, Software Engineer - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 42% Medium, 36% Large #### What Do G2 Reviewers Say About HAProxy? _AI-generated summary from verified user reviews_ ##### Pros - Users find HAProxy **incredibly easy to use** , with intuitive configuration and helpful overview stats for services. - Users appreciate the **ease of implementation and effective workload balancing** offered by HAProxy for load management. - Users value HAProxy for its **reliability** and speed, ensuring secure and efficient data transmission for websites. - Users value the **high performance** of HAProxy, enabling secure and efficient data transmission for various applications. - Users appreciate the **easy configuration** of HAProxy, enabling efficient traffic management and seamless operation. ##### Cons - Users find the **difficult configuration** of HAProxy challenging, with complex syntax and hard-to-read files. - Users find the **steep learning curve** of HAProxy challenging, particularly for beginners and complex configurations. - Users find the **complex setup** of HAProxy challenging, particularly for those unfamiliar with advanced configurations. - Users find the **complex configuration** of HAProxy challenging, particularly for newcomers and larger setups. - Users find the **complexity** of HAProxy's configuration challenging, making advanced setups cumbersome and time-consuming to manage. #### What Are Recent G2 Reviews of HAProxy? **["The industry standard for a reason: Unmatched performance and reliability."](https://www.g2.com/survey_responses/haproxy-review-12534904)** **Rating:** 5.0/5.0 stars _— Peter D._ [Read full review](https://www.g2.com/survey_responses/haproxy-review-12534904) **["HAProxy: Bulletproof Reliability and High-Performance Traffic Routing"](https://www.g2.com/survey_responses/haproxy-review-12670178)** **Rating:** 4.0/5.0 stars _— Deepak I._ [Read full review](https://www.g2.com/survey_responses/haproxy-review-12670178) #### What Are G2 Users Discussing About HAProxy? - [Is HAProxy a firewall?](https://www.g2.com/discussions/is-haproxy-a-firewall) - 2 comments - [Is HAProxy a reverse proxy?](https://www.g2.com/discussions/is-haproxy-a-reverse-proxy) - 2 comments - [Is HAProxy an API gateway?](https://www.g2.com/discussions/is-haproxy-an-api-gateway) - 2 comments - [What is HAProxy and why it is used?](https://www.g2.com/discussions/what-is-haproxy-and-why-it-is-used) - 1 comment, 1 upvote ### [AWS WAF](https://www.g2.com/products/aws-waf/reviews) AWS WAF (Web Application Firewall) is a security service designed to protect web applications and APIs from common web exploits and bots that can compromise security, affect availability, or consume excessive resources. By enabling users to define customizable web security rules, AWS WAF allows precise control over which traffic to allow or block, ensuring robust protection tailored to specific application needs. Key Features and Functionality: - Customizable Security Rules: Users can create rules to filter web requests based on conditions such as IP addresses, HTTP headers, HTTP body, or custom URIs, allowing for tailored security measures. - Managed Rule Groups: AWS WAF offers pre-configured rule groups managed by AWS or AWS Marketplace sellers, providing protection against common threats like SQL injection and cross-site scripting (XSS). These rules are regularly updated to address emerging vulnerabilities. - Bot Control: The service includes capabilities to monitor, block, or rate-limit common and pervasive bots, helping to prevent automated attacks such as web scraping and credential stuffing. - Real-Time Monitoring and Logging: AWS WAF integrates with Amazon CloudWatch, offering real-time metrics and capturing detailed information about web requests. This visibility aids in analyzing traffic patterns and fine-tuning security settings. - DDoS Protection: When used in conjunction with AWS Shield, AWS WAF provides automatic protection against Distributed Denial of Service (DDoS) attacks, ensuring application availability during large-scale attack attempts. - Integration with AWS Services: AWS WAF seamlessly integrates with other AWS services such as Amazon CloudFront, Application Load Balancer, and Amazon API Gateway, enabling centralized security management across various applications. Primary Value and Problem Solved: AWS WAF addresses the critical need for robust web application security by providing a scalable and customizable firewall solution. It empowers organizations to protect their web applications and APIs from a wide range of threats, including common exploits and automated attacks, without compromising performance. By offering both managed and custom rule capabilities, AWS WAF enables businesses to implement security measures that align with their specific requirements. Its integration with other AWS services and real-time monitoring features further enhance an organization's ability to maintain a strong security posture, ensuring the availability and integrity of their web applications. **Average Rating:** 4.3/5.0 **Total Reviews:** 65 #### How Do G2 Users Rate AWS WAF? - **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 8.7/10) - **Traffic Controls:** 8.7/10 (Category avg: 9.1/10) - **Security Monitoring:** 8.9/10 (Category avg: 9.0/10) - **Issue Tracking:** 8.1/10 (Category avg: 8.7/10) #### Who Is the Company Behind AWS WAF? - **Seller:** [Amazon Web Services (AWS)](https://www.g2.com/sellers/amazon-web-services-aws-3e93cc28-2e9b-4961-b258-c6ce0feec7dd) - **Year Founded:** 2006 - **HQ Location:** Seattle, WA - **Twitter:** @awscloud 2,232,483 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=072881eee28a2afe24f8d1bda9f20e3e146b9fb4b214f216411ce2ed6898b31e&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Famazon-web-services%2F&secure%5Burl_type%5D=linkedin_company_website) 147,094 employees on LinkedIn® - **Ownership:** NASDAQ: AMZN #### Who Uses This Product? - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 36% Large, 35% Medium #### What Do G2 Reviewers Say About AWS WAF? _AI-generated summary from verified user reviews_ ##### Pros - Users value the **easy protection against common attacks** provided by AWS WAF, streamlining website security management. - Users appreciate the **native cloud integration** of AWS WAF, enhancing security without compatibility hassles. - Users value the **custom rules** of AWS WAF, simplifying protection against common web attacks with minimal manual effort. - Users appreciate the **easy protection against common attacks** provided by AWS WAF, requiring minimal manual setup. - Users value the **automated DDoS protection** of AWS WAF, which offers rapid and effective layer 7 attack mitigation. ##### Cons - Users find the **complex configuration** challenging initially, leading to confusion, especially regarding pricing. - Users find the **pricing confusing** for beginners, making it a challenging experience to get started with AWS WAF. - Users find the **ineffective blocking** of specific regions limits their ability to enforce strict geographic access controls. #### What Are Recent G2 Reviews of AWS WAF? **["Strong Threat Protection with Easy Log Monitoring and Centralized Management"](https://www.g2.com/survey_responses/aws-waf-review-12364199)** **Rating:** 4.5/5.0 stars _— Yogesh G._ [Read full review](https://www.g2.com/survey_responses/aws-waf-review-12364199) **["Strong Web App Protection with AWS WAF’s Managed Rules and Seamless AWS Integrations"](https://www.g2.com/survey_responses/aws-waf-review-12933910)** **Rating:** 4.5/5.0 stars _— Atharva P._ [Read full review](https://www.g2.com/survey_responses/aws-waf-review-12933910) #### What Are G2 Users Discussing About AWS WAF? - [What is AWS WAF used for?](https://www.g2.com/discussions/what-is-aws-waf-used-for) - 1 comment - [What are WAF rules?](https://www.g2.com/discussions/what-are-waf-rules) - [Do I need AWS WAF?](https://www.g2.com/discussions/do-i-need-aws-waf) - [Which two types of protection does the AWS WAF provide?](https://www.g2.com/discussions/which-two-types-of-protection-does-the-aws-waf-provide) - [What does AWS WAF do?](https://www.g2.com/discussions/what-does-aws-waf-do) ### [Radware Cloud WAF](https://www.g2.com/products/radware-cloud-waf/reviews) Radware Cloud WAF is a fully managed Cloud Application Protection Service providing the industry's most comprehensive web application security solution. The service integrates Radware's Cloud WAF, API Protection, Bot management, client-side and application layer DDoS protection in a single portal that provides security analytics, threat detection and real-time security feeds to protect applications against hacking, malicious bots, API exposure, Web DDoS attacks, supply chain attacks and other vulnerabilities. **Average Rating:** 4.6/5.0 **Total Reviews:** 138 #### How Do G2 Users Rate Radware Cloud WAF? - **Has the product been a good partner in doing business?:** 8.9/10 (Category avg: 8.7/10) - **Traffic Controls:** 9.1/10 (Category avg: 9.1/10) - **Security Monitoring:** 9.3/10 (Category avg: 9.0/10) - **Issue Tracking:** 8.8/10 (Category avg: 8.7/10) #### Who Is the Company Behind Radware Cloud WAF? - **Seller:** [Radware](https://www.g2.com/sellers/radware) - **Company Website:** www.radware.com - **Year Founded:** 1997 - **HQ Location:** Tel Aviv, Tel Aviv - **Twitter:** @radware 12,488 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=6b1332c3b53ae32550622cd4c8d6bf9d255e4e5a6e9d717e614872a4ccf5fb04&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F165642%2F&secure%5Burl_type%5D=linkedin_company_website) 1,591 employees on LinkedIn® #### Who Uses This Product? - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 47% Medium, 41% Large #### What Do G2 Reviewers Say About Radware Cloud WAF? _AI-generated summary from verified user reviews_ ##### Pros - Users appreciate the **dynamic protection and security features** of Radware Cloud WAF, ensuring robust safety for web applications. - Users value the **strong AI-driven protection** of Radware Cloud WAF, ensuring reliable security with minimal performance impact. - Users appreciate Radware Cloud WAF for its **advanced cybersecurity features** and impressive automated protection capabilities. - Users commend Radware Cloud WAF for its **effective DDoS protection** , ensuring performance stability during attacks. - Users value the **real-time monitoring** capabilities of Radware Cloud WAF, ensuring effective and prompt threat detection. ##### Cons - Users find **difficult reporting** with Radware Cloud WAF, feeling it lacks clarity and flexibility for effective insights. - Users often find the **learning difficulty** of Radware Cloud WAF to be a significant barrier to effective use. - Users find **complex configuration** requirements challenging, needing extensive understanding and time for effective optimization. - Users feel the **limited customization** options hinder the ability to tailor Radware Cloud WAF to specific needs. - Users find the **user interface complicated** , noting issues with intuitiveness, advanced features, and reporting flexibility. #### What Are Recent G2 Reviews of Radware Cloud WAF? **["Strong, Easy-to-Manage Security with Radware Cloud WAF"](https://www.g2.com/survey_responses/radware-cloud-waf-review-13109967)** **Rating:** 5.0/5.0 stars _— Verified User in Financial Services_ [Read full review](https://www.g2.com/survey_responses/radware-cloud-waf-review-13109967) **["Radware Cloud WAF: Adaptive Real-Time Protection with Integrated DDoS and Bot Defense"](https://www.g2.com/survey_responses/radware-cloud-waf-review-13050151)** **Rating:** 4.5/5.0 stars _— yogesh t._ [Read full review](https://www.g2.com/survey_responses/radware-cloud-waf-review-13050151) #### What Are G2 Users Discussing About Radware Cloud WAF? - [What is Cloud WAF Service used for?](https://www.g2.com/discussions/what-is-cloud-waf-service-used-for) - 2 comments, 1 upvote - [What is Alibaba Cloud WAF?](https://www.g2.com/discussions/what-is-alibaba-cloud-waf) - [What protection does Cloud WAF service provide?](https://www.g2.com/discussions/what-protection-does-cloud-waf-service-provide) - [How does Radware WAF work?](https://www.g2.com/discussions/how-does-radware-waf-work) ### [Azure Application Gateway](https://www.g2.com/products/azure-application-gateway/reviews) Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications. Unlike traditional load balancers that operate at the transport layer (Layer 4), Application Gateway operates at the application layer (Layer 7), allowing it to make routing decisions based on attributes such as URL paths and host headers. This capability provides more control over how traffic is distributed to your applications, enhancing both performance and security. Key Features and Functionality: - Layer 7 Load Balancing: Routes traffic based on HTTP request attributes, enabling more precise control over traffic distribution. - Web Application Firewall (WAF): Protects applications from common web vulnerabilities like SQL injection and cross-site scripting by monitoring and filtering HTTP requests. - SSL/TLS Termination: Offloads SSL/TLS processing to the gateway, reducing the encryption and decryption overhead on backend servers. - Autoscaling: Automatically adjusts the number of gateway instances based on traffic load, ensuring optimal performance and cost efficiency. - Zone Redundancy: Distributes instances across multiple availability zones, enhancing resilience and availability. - URL Path-Based Routing: Directs requests to backend pools based on URL paths, allowing for efficient resource utilization. - Host Header-Based Routing: Routes traffic to different backend pools based on the host header, facilitating multi-site hosting. - Integration with Azure Services: Seamlessly integrates with Azure Traffic Manager for global load balancing and Azure Monitor for centralized monitoring and alerting. Primary Value and User Solutions: Azure Application Gateway provides a scalable and highly available solution for managing web application traffic. By operating at the application layer, it offers intelligent routing capabilities that enhance application performance and reliability. The integrated Web Application Firewall ensures robust security against common web threats, while features like SSL/TLS termination and autoscaling optimize resource utilization and reduce operational overhead. This comprehensive set of features addresses the needs of organizations seeking to build secure, scalable, and efficient web front ends in Azure. **Average Rating:** 4.4/5.0 **Total Reviews:** 140 #### How Do G2 Users Rate Azure Application Gateway? - **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 8.7/10) - **Traffic Controls:** 9.4/10 (Category avg: 9.1/10) - **Security Monitoring:** 9.5/10 (Category avg: 9.0/10) - **Issue Tracking:** 8.5/10 (Category avg: 8.7/10) #### Who Is the Company Behind Azure Application Gateway? - **Seller:** [Microsoft](https://www.g2.com/sellers/microsoft) - **Year Founded:** 1975 - **HQ Location:** Redmond, Washington - **Twitter:** @microsoft 13,091,739 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=9458f51bd6ded48ad432a804f19ad736469f007787569b63827154231c315630&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fmicrosoft%2F&secure%5Burl_type%5D=linkedin_company_website) 231,632 employees on LinkedIn® - **Ownership:** MSFT #### Who Uses This Product? - **Who Uses This:** DevOps Engineer, Software Engineer - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 47% Large, 33% Medium #### What Do G2 Reviewers Say About Azure Application Gateway? _AI-generated summary from verified user reviews_ ##### Pros - Users find Azure Application Gateway to have a **user-friendly interface** , making setup and integration smooth and straightforward. - Users highlight the **perfect scalability** of Azure Application Gateway, enhancing their cloud migration experience and operational efficiency. - Users highlight the **cost efficiency** of Azure Application Gateway, making it a smart choice for cloud migration. - Users value the **high availability and extensive features** of Azure Application Gateway, enhancing stability and efficiency. - Users value the **seamless integrations** of Azure Application Gateway, enhancing connectivity with other Microsoft applications effortlessly. ##### Cons - Users often struggle with the **complexity** of Azure, making it challenging to choose the right tools and services. - Users find the **high costs** of Azure Application Gateway concerning compared to other cloud solutions. - Users find the **learning difficulty** of Azure Application Gateway challenging, requiring technical expertise to navigate its complexities. - Users find Azure Application Gateway **not user-friendly** , citing a complex interface and difficulty navigating settings. - Users find the **complexity issues** of Azure Application Gateway overwhelming, particularly for newcomers navigating its capabilities. #### What Are Recent G2 Reviews of Azure Application Gateway? **["Secure, Scalable Traffic Routing with Azure Application Gateway"](https://www.g2.com/survey_responses/azure-application-gateway-review-12511805)** **Rating:** 4.5/5.0 stars _— Manish M._ [Read full review](https://www.g2.com/survey_responses/azure-application-gateway-review-12511805) **["Easy to Use, Quick to Deploy, and Integrates Smoothly"](https://www.g2.com/survey_responses/azure-application-gateway-review-13173946)** **Rating:** 4.0/5.0 stars _— Verified User in Computer & Network Security_ [Read full review](https://www.g2.com/survey_responses/azure-application-gateway-review-13173946) #### What Are G2 Users Discussing About Azure Application Gateway? - [What is Azure Application Gateway used for?](https://www.g2.com/discussions/what-is-azure-application-gateway-used-for) ### [Google Cloud Armor](https://www.g2.com/products/google-cloud-armor/reviews) Google Cloud Armor is a comprehensive security solution designed to protect applications and websites from a variety of threats, including distributed denial-of-service (DDoS) attacks and common web vulnerabilities. Leveraging Google's global infrastructure, Cloud Armor offers robust defenses to ensure the availability and security of online services. Key Features and Functionality: - Built-in DDoS Defense: Provides automatic protection against Layer 3 and Layer 4 DDoS attacks, benefiting from Google's extensive experience in safeguarding major internet properties. - Adaptive Protection: Utilizes machine learning to detect and mitigate high-volume Layer 7 DDoS attacks, analyzing traffic patterns in real-time to identify and respond to threats. - Pre-configured WAF Rules: Offers out-of-the-box web application firewall rules based on industry standards to defend against common vulnerabilities, such as cross-site scripting (XSS) and SQL injection (SQLi) attacks. - Bot Management: Integrates with reCAPTCHA Enterprise to provide automated protection against malicious bots, helping to prevent fraud and abuse at the edge of the network. - Rate Limiting: Implements rate-based rules to control the volume of incoming requests, protecting applications from being overwhelmed by excessive traffic and ensuring access for legitimate users. Primary Value and User Solutions: Google Cloud Armor delivers enterprise-grade protection by combining DDoS defense and web application firewall capabilities at a predictable monthly price. It addresses critical security challenges by mitigating the OWASP Top 10 risks and providing adaptive, machine learning-based defenses against sophisticated attacks. By integrating seamlessly with Google's global load balancing infrastructure, Cloud Armor ensures that applications remain secure and available, regardless of deployment environment—be it on-premises, in the cloud, or in a hybrid setup. **Average Rating:** 4.0/5.0 **Total Reviews:** 23 #### How Do G2 Users Rate Google Cloud Armor? - **Has the product been a good partner in doing business?:** 8.5/10 (Category avg: 8.7/10) #### Who Is the Company Behind Google Cloud Armor? - **Seller:** [Google](https://www.g2.com/sellers/google) - **Year Founded:** 1998 - **HQ Location:** Mountain View, CA - **Twitter:** @google 31,899,995 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=fe4a5936665c9702418dd53c477fef5a7baea08078bb117ed67e966fc581b9ec&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F1441%2F&secure%5Burl_type%5D=linkedin_company_website) 341,888 employees on LinkedIn® - **Ownership:** NASDAQ:GOOG #### Who Uses This Product? - **Top Industries:** Computer & Network Security - **Company Size:** 52% Small, 39% Large #### What Do G2 Reviewers Say About Google Cloud Armor? _AI-generated summary from verified user reviews_ ##### Pros - Users value the **flexible pricing** of Google Cloud Armor, benefiting from sustained discounts for better cost efficiency. - Users value the **scalability** of Google Cloud Armor, enabling easy adjustment of resources as needed. - Users value the **advanced security** features of Google Cloud Armor that ensure robust protection and compliance. ##### Cons - Users find the **complex pricing** of Google Cloud Armor challenging, impacting their overall experience and decision-making. - Users find **cost issues** with Google Cloud Armor due to complex pricing and expensive support plans. - Users face **limited availability** of Google Cloud Armor compared to competitors, affecting accessibility for some regions. - Users find **limited features** in Google Cloud Armor's enterprise tools, affecting overall utility and satisfaction. - Users find the **time-consumption** of learning GCP to be a significant hurdle in their experience. #### What Are Recent G2 Reviews of Google Cloud Armor? **["High Availability Cloud for Faster Computing"](https://www.g2.com/survey_responses/google-cloud-armor-review-10979721)** **Rating:** 4.0/5.0 stars _— Verified User in Information Technology and Services_ [Read full review](https://www.g2.com/survey_responses/google-cloud-armor-review-10979721) **["Ease of Deployment and Setup versus competitors"](https://www.g2.com/survey_responses/google-cloud-armor-review-6813556)** **Rating:** 4.0/5.0 stars _— Suman M._ [Read full review](https://www.g2.com/survey_responses/google-cloud-armor-review-6813556) #### What Are G2 Users Discussing About Google Cloud Armor? - [What is cloud Armour in GCP?](https://www.g2.com/discussions/google-cloud-armor-what-is-cloud-armour-in-gcp) - [What is cloud Armour in GCP?](https://www.g2.com/discussions/what-is-cloud-armour-in-gcp) - [Which Google Cloud features could help prevent DDoS attacks?](https://www.g2.com/discussions/which-google-cloud-features-could-help-prevent-ddos-attacks) - [How does cloud Armor work?](https://www.g2.com/discussions/how-does-cloud-armor-work) - [What is Google Cloud armor?](https://www.g2.com/discussions/what-is-google-cloud-armor) - 1 comment ### [Imperva Web Application Firewall (WAF)](https://www.g2.com/products/imperva-web-application-firewall-waf/reviews) As organizations increasingly rely on web applications to drive business, ensuring those applications are protected from cyber threats is essential. Imperva Web Application Firewall (WAF) delivers robust, enterprise-class protection for applications and APIs across cloud, on-premises, and hybrid environments. With near-zero false positives and managed rules created and tested by Imperva Threat Research, more than 90% of customers deploy in blocking mode from day one. Imperva WAF effectively stops OWASP Top 10 threats such as SQL injections and XSS, defends against malicious file uploads, and safeguards sensitive data to support compliance with standards including GDPR and PCI DSS. Automated policy creation, daily rule updates, and real-time protection ensure defenses stay ahead of emerging threats without adding operational burden. Machine learning-driven Attack Analytics correlates thousands of alerts into clear incident narratives, reducing alert fatigue and accelerating response. With automated deployment and configuration, flexible deployment environments, and centralized management, Imperva WAF streamlines security operations while delivering consistent protection wherever your applications run. **Average Rating:** 4.7/5.0 **Total Reviews:** 39 #### How Do G2 Users Rate Imperva Web Application Firewall (WAF)? - **Has the product been a good partner in doing business?:** 9.1/10 (Category avg: 8.7/10) - **Traffic Controls:** 9.0/10 (Category avg: 9.1/10) - **Security Monitoring:** 9.3/10 (Category avg: 9.0/10) - **Issue Tracking:** 8.9/10 (Category avg: 8.7/10) #### Who Is the Company Behind Imperva Web Application Firewall (WAF)? - **Seller:** [Thales Group](https://www.g2.com/sellers/thales-group) - **Company Website:** cpl.thalesgroup.com - **HQ Location:** Austin, Texas - **Twitter:** @ThalesCloudSec 6,935 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=6e2851e1a59f8d20bde4bcb61853df023b359c511759b122b0978397a41c6e7e&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fthalessoftwaremonetization%2F&secure%5Burl_type%5D=linkedin_company_website) 46 employees on LinkedIn® - **Ownership:** EPA:HO #### Who Uses This Product? - **Top Industries:** Information Technology and Services, Banking - **Company Size:** 41% Large, 39% Small #### What Do G2 Reviewers Say About Imperva Web Application Firewall (WAF)? _AI-generated summary from verified user reviews_ ##### Pros - Users value the **protection against external attacks** provided by Imperva WAF, ensuring a secure web experience. - Users commend Imperva WAF for its ability to **stop external attacks** , enhancing website security and user experience. - Users appreciate the **robust security** provided by Imperva WAF, effectively safeguarding against various web application threats. - Users value the **exceptional security** of Imperva WAF, effectively safeguarding against a variety of online threats. - Users value the **real-time monitoring** capabilities of Imperva WAF, ensuring proactive protection against evolving threats and attacks. ##### Cons - Users find the **complex configuration** of Imperva WAF challenging, especially without technical expertise or familiarity. - Users often face **ineffective blocking** with Imperva WAF, leading to frustrations with false positives and false negatives. - Users find the **user interface lacking** and suggest improvements for easier management and better security implementation. - Users find the **complex setup** of Imperva WAF challenging, requiring significant time and technical expertise for configuration. - Users find the **licensing costs prohibitively high** , especially with multiple environments and URL entries impacting expenses. #### What Are Recent G2 Reviews of Imperva Web Application Firewall (WAF)? **["Web Application Firewall (WAF) review"](https://www.g2.com/survey_responses/imperva-web-application-firewall-waf-review-8178726)** **Rating:** 5.0/5.0 stars _— Nandini M._ [Read full review](https://www.g2.com/survey_responses/imperva-web-application-firewall-waf-review-8178726) **["A very powerful Technology with lots of potential in securing Applications"](https://www.g2.com/survey_responses/imperva-web-application-firewall-waf-review-8193531)** **Rating:** 4.5/5.0 stars _— Verified User in Information Technology and Services_ [Read full review](https://www.g2.com/survey_responses/imperva-web-application-firewall-waf-review-8193531) #### What Are G2 Users Discussing About Imperva Web Application Firewall (WAF)? - [Is imperva a Web application firewall?](https://www.g2.com/discussions/is-imperva-a-web-application-firewall) - 1 comment - [What does Imperva WAF do?](https://www.g2.com/discussions/what-does-imperva-waf-do) - [What are the features of WAF?](https://www.g2.com/discussions/what-are-the-features-of-waf) ### [Sucuri](https://www.g2.com/products/sucuri/reviews) Sucuri is a managed security service provider for websites. Our cloud-based tools provide complete website security solution, including performance optimization via a CDN, mitigation of external attacks like vulnerability exploits and DDoS attacks, and professional response in the event of security incident. The team provides 24/7/365 customer service with a 97% satisfaction rate, and a median response time of 4 hours. **Average Rating:** 3.3/5.0 **Total Reviews:** 47 #### How Do G2 Users Rate Sucuri? - **Has the product been a good partner in doing business?:** 7.1/10 (Category avg: 8.7/10) - **Traffic Controls:** 6.0/10 (Category avg: 9.1/10) - **Security Monitoring:** 6.7/10 (Category avg: 9.0/10) - **Issue Tracking:** 5.8/10 (Category avg: 8.7/10) #### Who Is the Company Behind Sucuri? - **Seller:** [GoDaddy](https://www.g2.com/sellers/godaddy) - **Year Founded:** 1997 - **HQ Location:** Scottsdale, AZ - **Twitter:** @GoDaddy 274,844 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=109e68fd7fc53f536870728a8e551b397c46ad6384aa38888bd78711f6c4d3cb&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F7846%2F&secure%5Burl_type%5D=linkedin_company_website) 9,011 employees on LinkedIn® - **Ownership:** NYSE:GDDY #### Who Uses This Product? - **Who Uses This:** Owner - **Top Industries:** Information Technology and Services - **Company Size:** 81% Small, 8% Medium #### What Do G2 Reviewers Say About Sucuri? _AI-generated summary from verified user reviews_ ##### Pros - Users highlight Sucuri's **affordable pricing** for a valuable combination of features that enhance website management. - Users value the **comprehensive set of features** in Sucuri, enjoying effective website management at an affordable price. - Users value the **affordable pricing** of Sucuri, appreciating its comprehensive feature set for website management. - Users value the **effective web application firewall** of Sucuri, noting its essential role in website management. - Users value the **comprehensive features** of Sucuri, appreciating the effective combination of security and performance tools. ##### Cons - Users report a **complex setup** process for Sucuri, requiring multiple steps before it can be fully utilized. - Users experience **ineffective blocking** as issues persist despite attempts to secure the site with Sucuri. - Users find **poor customer support** challenging due to limited availability and frustrating timeout issues with the service. - Users report **persistent security issues** with Sucuri, indicating inadequate measures to prevent site vulnerabilities from recurring. - Users experience **server downtime issues** with timeouts and disconnections during prolonged processes, affecting overall usability. #### What Are Recent G2 Reviews of Sucuri? **["Sucuri helps us make our site more secure."](https://www.g2.com/survey_responses/sucuri-review-9482493)** **Rating:** 5.0/5.0 stars _— Greg G._ [Read full review](https://www.g2.com/survey_responses/sucuri-review-9482493) **["Sucuri, WAF for Website protection"](https://www.g2.com/survey_responses/sucuri-review-9940303)** **Rating:** 5.0/5.0 stars _— Diego F._ [Read full review](https://www.g2.com/survey_responses/sucuri-review-9940303) #### What Are G2 Users Discussing About Sucuri? - [What is Sucuri used for?](https://www.g2.com/discussions/what-is-sucuri-used-for) - [Does GoDaddy use sucuri?](https://www.g2.com/discussions/does-godaddy-use-sucuri) - [Is sucuri safe?](https://www.g2.com/discussions/is-sucuri-safe) - [What is Sucuri Security?](https://www.g2.com/discussions/what-is-sucuri-security) - [What does sucuri do?](https://www.g2.com/discussions/what-does-sucuri-do) ### [F5 NGINX](https://www.g2.com/products/f5-nginx/reviews) NGINX, Inc. is the company behind NGINX, the popular open source project trusted by more than 400 million sites. We offer a suite of technologies for developing and delivering modern applications. The NGINX Application Platform enables enterprises undergoing digital transformation to modernize legacy, monolithic applications as well as deliver new, microservices‑based applications. Companies like Netflix, Starbucks, and McDonalds rely on NGINX to reduce costs, improve resiliency, and speed innovation. NGINX investors include Blue Cloud Ventures, e.ventures, Goldman Sachs, Index Ventures, MSD Capital, NEA, Runa Capital, and Telstra Ventures. NGINX, Inc. is headquartered in San Francisco, CA, with an EMEA head office in Cork, Ireland and APAC head office in Singapore. Learn more at https://www.nginx.com/ **Average Rating:** 4.6/5.0 **Total Reviews:** 106 #### How Do G2 Users Rate F5 NGINX? - **Has the product been a good partner in doing business?:** 9.1/10 (Category avg: 8.7/10) - **Traffic Controls:** 9.0/10 (Category avg: 9.1/10) - **Security Monitoring:** 9.1/10 (Category avg: 9.0/10) - **Issue Tracking:** 8.9/10 (Category avg: 8.7/10) #### Who Is the Company Behind F5 NGINX? - **Seller:** [F5](https://www.g2.com/sellers/f5-f6451ada-8c47-43f5-b017-58663a045bc5) - **HQ Location:** Seattle, Washington - **Twitter:** @F5Networks 1,385 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=c7f11d476d00d2f94515d8841a7c9d683a4303902a44318177a444690ba1c225&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F4841%2F&secure%5Burl_type%5D=linkedin_company_website) 6,165 employees on LinkedIn® #### Who Uses This Product? - **Who Uses This:** Software Engineer - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 42% Small, 40% Medium #### What Do G2 Reviewers Say About F5 NGINX? _AI-generated summary from verified user reviews_ ##### Pros - Users appreciate the **ease of configuration** across platforms with F5 NGINX, enhancing their installation experience. #### What Are Recent G2 Reviews of F5 NGINX? **["Nginx is the to go solution for reverse proxy"](https://www.g2.com/survey_responses/f5-nginx-review-10714162)** **Rating:** 5.0/5.0 stars _— Davide B._ [Read full review](https://www.g2.com/survey_responses/f5-nginx-review-10714162) **["Nginx - the reverse proxy, load balancer and caching"](https://www.g2.com/survey_responses/f5-nginx-review-8596972)** **Rating:** 5.0/5.0 stars _— Karthik J._ [Read full review](https://www.g2.com/survey_responses/f5-nginx-review-8596972) #### What Are G2 Users Discussing About F5 NGINX? - [What is your experience regarding pricing and costs for F5 NGINX, and how does it compare to other web server solutions?](https://www.g2.com/discussions/what-is-your-experience-regarding-pricing-and-costs-for-f5-nginx-and-how-does-it-compare-to-other-web-server-solutions) - [What is F5 NGINX used for?](https://www.g2.com/discussions/what-is-f5-nginx-used-for) - [What is F5 NGINX Unit used for?](https://www.g2.com/discussions/what-is-f5-nginx-unit-used-for) - [Can I use nginx for free?](https://www.g2.com/discussions/can-i-use-nginx-for-free) - 1 comment - [What is Nginx and how it works?](https://www.g2.com/discussions/what-is-nginx-and-how-it-works) ### [Wallarm API Security Platform](https://www.g2.com/products/wallarm-api-security-platform/reviews) Protect any API. In any environment. Against any threats. Wallarm is the platform security teams choose to protect cloud-native APIs. The Wallarm platform gives teams the ability to detect and block API attacks. Customers choose Wallarm because it delivers a complete inventory of their APIs, AI apps, and agentic AI, along with patented AI/ML API abuse detection, real-time blocking on day zero, and an API SOC-as-a-service. Whether you protect legacy or brand new cloud-native APIs, Wallarm’s multi-cloud platform delivers the capabilities to secure your business against emerging threats. -\> Robust protection for the entire API and AI portfolio Mitigate the OWASP API Top 10 threats and more; business logic abuse, bad bots, account takeover (ATO), and more. Get the robust API protection that no other tool can provide. -\> Native inline blocking Wallarm is built from the ground up for inline blocking. Why deploy API security that can’t actually defend against API attacks? -\> Unparalleled visibility into malicious traffic Gain full insights about attacks and attackers in the responsive Wallarm Console. Enjoy the Dashboard, search, and reporting capabilities, including visibility into API sessions. -\> Complete API inventory Wallarm API Discovery provides full visibility into all your APIs, AI apps, and AI agents, including sensitive data flows, risk posture, shadow APIs and change detection. -\> Understand Your Attack Surface You can’t protect what you don’t know about. Wallarm provides a comprehensive view of your API attack surface, including assessment of security controls and leaked sensitive API data. -\> Quick integrations Setup cross-team collaboration with seamless integrations to your SIEM/SOAR, messaging applications, and workflow management. **Average Rating:** 4.7/5.0 **Total Reviews:** 93 #### How Do G2 Users Rate Wallarm API Security Platform? - **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 8.7/10) - **Traffic Controls:** 9.1/10 (Category avg: 9.1/10) - **Security Monitoring:** 9.4/10 (Category avg: 9.0/10) - **Issue Tracking:** 8.8/10 (Category avg: 8.7/10) #### Who Is the Company Behind Wallarm API Security Platform? - **Seller:** [Wallarm](https://www.g2.com/sellers/wallarm) - **Company Website:** wallarm.com - **Year Founded:** 2016 - **HQ Location:** San Francisco, California - **Twitter:** @wallarm 3,197 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=3ec4568ddffd7df102f599f91fb7fc724ebde9379b5116f1a6e92a76ae88319b&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F4871419%2F&secure%5Burl_type%5D=linkedin_company_website) 171 employees on LinkedIn® #### Who Uses This Product? - **Who Uses This:** CEO, CTO - **Top Industries:** Mechanical or Industrial Engineering, Information Technology and Services - **Company Size:** 43% Medium, 42% Small #### What Do G2 Reviewers Say About Wallarm API Security Platform? _AI-generated summary from verified user reviews_ ##### Pros - Users value the **accurate real-time API threat detection** of Wallarm, ensuring robust protection with minimal false positives. - Users value the **accurate real-time threat detection** of Wallarm API Security Platform, ensuring robust API protection with minimal false positives. - Users value the **accurate real-time threat detection** of Wallarm API Security Platform, ensuring robust API security with minimal false positives. - Users value the **real-time monitoring** of Wallarm API Security Platform, ensuring accurate threat detection and minimal false positives. - Users value the **accurate real-time API threat detection** of Wallarm, which minimizes false positives effectively. ##### Cons - Users express concerns about **API issues** , specifically regarding undisclosed pricing during the trial period affecting transparency. - Users find the **configuration process complex** , which can be challenging and time-consuming, especially for newcomers. - Users find the **configuration complexity** of Wallarm API Security Platform to be daunting and time-consuming for newcomers. - Users find the **configuration and tuning process complex** , leading to a challenging experience for newcomers. - Users find the **difficult learning** curve challenging, especially during the initial setup and configuration stages. #### What Are Recent G2 Reviews of Wallarm API Security Platform? **["Revolutionized Our API Security, Peace of Mind Restored"](https://www.g2.com/survey_responses/wallarm-api-security-platform-review-13106283)** **Rating:** 5.0/5.0 stars _— Revell B._ [Read full review](https://www.g2.com/survey_responses/wallarm-api-security-platform-review-13106283) **["Accurate Real-Time API Threat Detection with Minimal False Positives"](https://www.g2.com/survey_responses/wallarm-api-security-platform-review-12169348)** **Rating:** 4.5/5.0 stars _— Adesh R._ [Read full review](https://www.g2.com/survey_responses/wallarm-api-security-platform-review-12169348) #### What Are G2 Users Discussing About Wallarm API Security Platform? - [How has Wallarm API Security Platform supported your cybersecurity efforts, and what features do you rely on most?](https://www.g2.com/discussions/how-has-wallarm-api-security-platform-supported-your-cybersecurity-efforts-and-what-features-do-you-rely-on-most) - [What is Wallarm API Security Platform used for?](https://www.g2.com/discussions/what-is-wallarm-api-security-platform-used-for) Spotlight Categories [Digital Experience Platforms (DXP)](https://www.g2.com/categories/digital-experience-platforms-dxp) [Session Replay Software](https://www.g2.com/categories/session-replay) [Enterprise Risk Management (ERM) Software](https://www.g2.com/categories/enterprise-risk-management-erm) [Experience Management Software](https://www.g2.com/categories/experience-management) [Low-Code Development Platforms](https://www.g2.com/categories/low-code-development-platforms) Similar Categories - [Static Code Analysis](/categories/static-code-analysis) - [Container Security](/categories/container-security-tools) - [Dynamic Application Security Testing (DAST)](/categories/dynamic-application-security-testing-dast) - [Interactive Application Security Testing (IAST)](/categories/interactive-application-security-testing-iast) - [Log Analysis](/categories/log-analysis) - [Penetration Testing](/categories/penetration-testing-tools) - [Secure Code Review](/categories/secure-code-review) - [Software Bill of Materials (SBOM)](/categories/software-bill-of-materials-sbom) - [Software Composition Analysis](/categories/software-composition-analysis) - [Static Application Security Testing (SAST)](/categories/static-application-security-testing-sast) - [Vulnerability Scanner](/categories/vulnerability-scanner) [Browse Web Application Firewall (WAF) Themes](/categories/web-application-firewall-waf/themes) ![Lauren Worth](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Lauren Worth") LW Researched and written by [Lauren Worth](https://research.g2.com/insights/author/lauren-worth) Updated Products classified in the overall Web Application Firewall (WAF) category are similar in many regards and help companies of all sizes solve their business problems. However, small business features, pricing, setup, and installation differ from businesses of other sizes, which is why we match buyers to the right Small Business Web Application Firewall (WAF) to fit their needs. Compare product ratings based on reviews from enterprise users or connect with one of G2's buying advisors to find the right solutions within the Small Business Web Application Firewall (WAF) category. In addition to qualifying for inclusion in the Web Application Firewalls (WAF) category, to qualify for inclusion in the Small Business Web Application Firewalls (WAF) category, a product must have at least 10 reviews left by a reviewer from a small business. Show More * * * ## How Do You Choose the Right Web Application Firewalls (WAF)? ### What You Should Know About Web Application Firewall (WAF) Software ### What is Web Application Firewall (WAF) Software? WAF software products are used to protect web applications and websites from threats or attacks. The firewall monitors traffic between users, applications, and other internet sources. They're effective in defending against cross-site forgery, cross-site scripting (XSS attacks), SQL injection, DDoS attacks, and many other kinds of attacks. These software solutions provide automatic defense and allow administrative control over rule sets and customization since some applications may have unique traffic trends, zero-day threats, or web application vulnerabilities. These tools also provide logging features to document and analyze attacks, incidents, and normal application behaviors. Companies with web applications should use WAF tools to ensure all weak spots in the application itself are filled. Without WAF, many threats may go undetected, and data leakage may occur. They have truly become an obligatory component of any business-critical web application containing sensitive information. Key Benefits of Web Application Firewall (WAF) Software - Protection against web-based threats - Historical documentation of incidents and events - Elastic, scalable web application protection ### Why Use Web Application Firewall (WAF) Software? There are a variety of benefits associated with WAF tools and ways they can boost security of applications deployed online. Most of the reasoning behind WAF usage is the generally accepted belief that web-based threats should be a concern for all businesses. Therefore, all businesses deploying web-based applications should be sure they are doing all they can to defend against the myriad cyberthreats that exist today. Some of the numerous threats WAF products can help defend against include: - **Cross-Site Scripting (XSS) —** Cross-site scripting (XSS) is an attack where a malicious script is injected into websites using a web application to send malicious code. Malicious scripts can be used to access information such as cookies, session tokens, and other sensitive data collected by web browsers. - **Injection Flaws —** Injection flaws are vulnerabilities which allow attackers to send code through an application to another system. The most common type is a SQL injection. In this scenario, an attacker finds a point in which the web application passes through a database, executes their code, and can begin querying whatever information they want. - **Malicious File Execution —** Malicious file execution is accomplished when an attacker is able to input malicious files that are uploaded to the web server or application server. These files can be executed upon upload and completely compromise an application server. - **Insecure Direct Object Reference —** Insecure direct object reference occurs when user input can directly access an application's internal components. These vulnerabilities can allow attackers to bypass security protocols and access resources, files, and data directly. - **Cross-Site Request Forgery (CSRF) —** CSRF attacks force users to execute actions on a web application the user has permission to access. These actions can force users to unwillingly submit requests that may damage the web application or change their credentials to something the attacker can reuse to gain access to an application at a future date. - **Information Leakage —** Information leakage can occur when unauthorized parties are able to access databases or visit URLs that are not linked from the site. Attackers may be capable of accessing sensitive files such as password backups or unpublished documents. - **Improper Error Handling —** Error handling refers to preprogrammed measures that allow applications to dismiss unexpected events without exposing sensitive information. Improper error handling leads to a number of various issues, including the release of data, vulnerability exposure, and application failure. - **Broken Authentication —** Broken authentication is the result of improper credential management functions. If authentication measures fail to function, attackers can walk by security measures without the valid identification. This can lead to attackers gaining direct access to entire networks, servers, and applications. - **Session Management —** Session management errors occur when attackers manipulate or capture the tokenized ID provided to authenticated visitors. Attackers can impersonate generic users or target privileged users to gain access control and hijack an application. - **Insecure Cryptographic Storage —** Cryptographic storage is used to authenticate and protect communications online. Attackers may identify and obtain unencrypted or poorly encrypted resources that may contain sensitive information. Proper encryption typically protects against this, but poor key storage, weak algorithms, and flawed key generation may put sensitive data at risk. - **Insecure Communications —** Insecure communications occur when messages exchanged between clients and servers becomes visible. Poor network firewalls and network security policies can lead to easy access for attackers by gaining access to a local network or carrier device or installing malware on a device. Once applications are exploited, individual user information and other sensitive data becomes extremely vulnerable. - **Failure to Restrict URL Access —** Applications may fail to restrict URL access to unauthorized parties who attempt to visit unlinked URLs or files without permission. Attackers may bypass security by directly accessing URLs containing sensitive information or data files. URL restriction can be accomplished by utilizing page tokens or encrypting URLs to restrict access unless they visit restricted pages through approved navigational paths. ### Who Uses Web Application Firewall (WAF) Software? The actual individuals using application firewalls are software developers and security professionals. The developer will typically build and implement the firewall, while it is maintained and monitored by security operations teams. Still, there are a few industries that may be more inclined to use WAF tools for various purposes. **Internet Businesses —** Internet businesses are a natural fit for WAF tools. They often have one or multiple public-facing web applications and various internal web apps for employee use. Both of these kinds of applications should be guarded by some kind of firewall, as well as additional layers of security. While nearly all modern businesses use web applications in some capacity, internet-centric businesses are more susceptible to attacks simply because they likely possess more web apps. **E-Commerce Professionals —** E-commerce professionals and e-commerce businesses that build their own online tools should be using WAF technology. Many e-commerce applications are managed by some kind of SaaS provider, but custom-built tools are incredibly vulnerable without an application firewall. E-commerce businesses who fail to protect their applications put the data of their visitors, customers, and business on the line. **Compliant-Required Industries —** Industries that require a higher level of compliance for data security should use a web application firewall for any application that communicates with a server or network with access to sensitive information. The most common business types with increased compliance requirements include health care, insurance, and energy industries. But many countries and localities have expanded IT compliance requirements across industries to prevent data breaches and the release of sensitive information. ### Web Application Firewall (WAF) Software Features Some WAF products may be geared toward specific applications, but most share a similar set of core security features and capabilities. The following are a handful of common features to look for when considering the adoption of WAF tools. **Logging and Reporting —** Provides required reports to manage the business. Provides adequate logging to troubleshoot and support auditing. **Issue Tracking —** Tracks security issues as they arise and manages various aspects of the mitigation process. **Security Monitoring —** Detects anomalies in functionality, user accessibility, traffic flows, and tampering. **Reporting and Analytics —** Provides documentation and analytical capabilities for data gathered by the WAF product. **Application-Layer Control —** Gives user-configurable WAF rules, such as application control requests, management protocols, and authentication policies, to increase security. **Traffic Control —** Limits access to suspicious visitors and monitors for traffic spikes to prevent overloads like DDoS attacks. **Network Control —** Lets users provision networks, deliver content, balance loads, and manage traffic. ### Software and Services Related to Web Application Firewall (WAF) Software There are a number of security tools that provide similar functionality to web application firewall software but operate in a different capacity. Similar technologies used to protect against web-based threats include: [**Firewall Software**](https://www.g2.com/categories/firewall) **—** Firewalls come in many forms. For example, a network firewall is used to restrict access to a local computer network. Server firewalls restrict access to a physical server. There are a number of firewall varieties designed to protect against various threats, attacks, and vulnerabilities, but WAF software is specifically designed to protect web applications and the various databases, networks, and servers they communicate with. [**DDoS Protection Software**](https://www.g2.com/categories/ddos-protection) **—** DDoS attacks refer to the bombardment of a website with enormous loads of malicious traffic, typically in the form of a botnet. DDoS protection tools monitor traffic for abnormalities and restrict access when malicious traffic is detected. These tools protect websites from a specific kind of attack but do not protect web applications from a number of different attacks. [**Application Shielding Software**](https://www.g2.com/categories/application-shielding) **—** Application shielding technology is used to increase security at an application’s core. Like an application firewall, these tools can help prevent against malicious code injections and data leakage events. But these tools are typically used as an additional layer of application security to protect against threats and keep applications secure if the firewall has been bypassed. [**Bot Detection and Mitigation Software**](https://www.g2.com/categories/bot-detection-and-mitigation) **—** Bot detection and mitigation tools are used to protect against bot-based attacks, similar to DDoS protection tools. But bot detection products typically add a level of detection for fraudulent transactions and other bot activity in addition to DDoS protection.These tools can prevent unauthorized network access and activity, like a firewall, but limit detection to bot-based threats. [**Website Security Software**](https://www.g2.com/categories/website-security) **—** Website security tools often include a web application firewall in addition to a few other security tools meant to protect websites. They are often paired with an application-level antivirus, secure content delivery network, and DDoS protection tools.