# Best Web Application Firewalls (WAF)

## How Many Web Application Firewalls (WAF) Products Does G2 Track?

**Total Products under this Category:** 97

### Category Stats (Sep 2026)

- **Average Rating:** 4.45/5 The average rating of products in this category, based on all submitted ratings
- **Top Trending Product:** F5 NGINX (+0.28%) - Among all products in this category, F5 NGINX recorded the largest rating increase compared to last month

_Last updated: September 01, 2026_

## How Does G2 Rank Web Application Firewalls (WAF) Products?

**Why You Can Trust G2's Software Rankings:**

- 30 Analysts and Data Experts
- 3,400+ Authentic Reviews
- 97+ Products
- Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

## G2 Grid® for Web Application Firewalls (WAF)
 ![G2 Grid® for Web Application Firewalls (WAF) plotting products by satisfaction and market presence](https://www.g2.com/categories/web-application-firewall-waf/grids.png?focus%5B%5D=10700&focus%5B%5D=155229&focus%5B%5D=1339605&focus%5B%5D=55067&focus%5B%5D=105445&focus%5B%5D=32476&focus%5B%5D=1425451&focus%5B%5D=145276)

Highlighted products: Cloudflare Application Security and Performance, Radware Cloud WAF, Check Point WAF (formerly CloudGuard WAF), HAProxy, Fastly's Web Application and API Security, FortiAppSec Cloud, Azion, and Fortinet Managed Rules for AWS WAF.

Underlying data: [Grid® JSON](https://www.g2.com/categories/web-application-firewall-waf/grids.json?focus%5B%5D=cloudflare-application-security-and-performance&focus%5B%5D=radware-cloud-waf&focus%5B%5D=check-point-waf-formerly-cloudguard-waf&focus%5B%5D=haproxy&focus%5B%5D=fastly-s-web-application-and-api-security&focus%5B%5D=fortiappsec-cloud&focus%5B%5D=azion&focus%5B%5D=fortinet-managed-rules-for-aws-waf)

**Sponsored**

### HAProxy

HAProxy is an open-source software load balancer and reverse proxy for TCP, QUIC, and HTTP-based applications. It provides high availability, load balancing, and best-in-class SSL processing. HAProxy One is an application delivery and security platform that combines the HAProxy core with enterprise-grade security layers, management and orchestration, cloud-native integration, and more. Platform components: HAProxy Enterprise: a flexible data plane layer for TCP, UDP, QUIC, and HTTP-based applications that provides high-performance load balancing, high availability, an API/AI gateway, container networking, SSL processing, DDoS protection, bot detection and mitigation, global rate limiting, and a web application firewall (WAF). HAProxy Fusion: a scalable control plane that provides full-lifecycle management, observability, and automation of multi-cluster, multi-cloud, and multi-team HAProxy Enterprise deployments, with infrastructure integration for AWS, Kubernetes, Consul, and Prometheus. HAProxy Edge: a globally distributed application delivery network that provides fully managed application delivery and security services, a secure partition between external traffic and origin networks, and threat intelligence enhanced by machine learning that powers the security layers in HAProxy Fusion and HAProxy Enterprise. Learn more at HAProxy.com

[Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list_llm&secure%5Bcategory_id%5D=1522&secure%5Bchosen_at%5D=2026-09-03T07%3A48%3A28Z&secure%5Bdisplayable_resource_id%5D=1522&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=page_category&secure%5Bplacement_resource_ids%5D%5B%5D=1522&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=55067&secure%5Bresource_id%5D=1522&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fweb-application-firewall-waf&secure%5Btoken%5D=29fc7b29bf5cdb9c9942ff78f9c3b9412124599799d323a3bed13a0b3d3113b6&secure%5Burl%5D=https%3A%2F%2Fwww.haproxy.com%2Fproducts%2Fhaproxy-one%3Futm_source%3DG2clicks%26utm_medium%3DCPC%26utm_campaign%3DG2ClicksTest%26utm_id%3DG2&secure%5Burl_type%5D=custom_url)

### [Cloudflare Application Security and Performance](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews)

Cloudflare is the connectivity cloud for the "everywhere world," on a mission to help build a better Internet. We provide a unified platform of networking, security, and developer services delivered from a single, intelligent global network that spans hundreds of cities in over 125 countries. This empowers organizations of all sizes, from small businesses to the world's largest enterprises, to make their employees, applications, and networks faster and more secure everywhere, while significantly reducing complexity and cost. Our comprehensive platform includes: - Advanced Security: Protect your online presence with industry-leading DDoS protection, a robust Web Application Firewall (WAF), Bot mitigation, and API security. Implement Zero Trust security to secure remote access, data, and applications for your entire workforce. - Superior Performance: Accelerate website and application loading times globally with our Content Delivery Network (CDN), intelligent DNS, and smart routing capabilities. Optimize images and deliver dynamic content with unparalleled speed. - Powerful Developer Tools: Empower your developers to build and deploy full-stack applications at the edge using Cloudflare Workers (serverless functions), R2 Storage (object storage without egress fees), and D1 (serverless SQL database). Cloudflare helps connect and protect millions of customers globally, offering the control, visibility, and reliability businesses need to work, develop, and accelerate their operations in today's hyperconnected landscape. Our global network continuously learns and adapts, ensuring your digital assets are always protected and performing at their best.

**Average Rating:** 4.5/5.0

**Total Reviews:** 731

#### How Do G2 Users Rate Cloudflare Application Security and Performance?

- **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 8.8/10)
- **Traffic Controls:** 9.0/10 (Category avg: 9.2/10)
- **Security Monitoring:** 9.0/10 (Category avg: 9.1/10)
- **Issue Tracking:** 8.5/10 (Category avg: 8.7/10)

#### Who Is the Company Behind Cloudflare Application Security and Performance?

- **Seller:** [Cloudflare, Inc.](https://www.g2.com/sellers/cloudflare-inc)
- **Company Website:** www.cloudflare.com
- **Year Founded:** 2009
- **HQ Location:** San Francisco, California
- **Twitter:** @Cloudflare  
286,254 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=9ff5cfe687bc4033753bbb82d49b4ac651d4582458542d4a881a39a74fc7cad2&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F407222%2F&secure%5Burl_type%5D=linkedin_company_website)  
7,190 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** Web Developer, Software Engineer
- **Top Industries:** Information Technology and Services, Computer Software
- **Company Size:** 62% Small, 27% Medium

#### What Do G2 Reviewers Say About Cloudflare Application Security and Performance?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **robust security features** of Cloudflare, appreciating its effective protection against attacks and fast page loads.
- Users appreciate the **user-friendly interface** of Cloudflare, making management of security and performance settings effortless.
- Users appreciate the **user-friendly interface** of Cloudflare, making security and performance management easy and efficient.
- Users appreciate the **enhanced site performance** provided by Cloudflare, leading to faster page load times and improved security.
- Users value Cloudflare's **DDoS protection** , as it effectively secures websites and significantly improves page load times.

##### Cons

- Users find the **complex user interface** of Cloudflare challenging, often leading to confusion and a steep learning curve.
- Users find the **high pricing for advanced features** to be a significant drawback, restricting access to essential tools.
- Users find the **complex setup** challenging, particularly with advanced configurations that require extra time and support.
- Users find the **complexity of advanced configurations** challenging, impacting user-friendliness for those new to security platforms.
- Users experience a **steep learning curve for advanced features** in Cloudflare Application Security and Performance, complicating user experience.

#### What Are Recent G2 Reviews of Cloudflare Application Security and Performance?

**["Easy Edge Security & Performance with Cloudflare Workers and Global Infrastructure"](https://www.g2.com/survey_responses/cloudflare-application-security-and-performance-review-13374289)**

**Rating:** 4.5/5.0 stars

_— Mohamed S._

[Read full review](https://www.g2.com/survey_responses/cloudflare-application-security-and-performance-review-13374289)

**["Fast, Reliable CDN and Security with a Smooth Setup"](https://www.g2.com/survey_responses/cloudflare-application-security-and-performance-review-13347280)**

**Rating:** 5.0/5.0 stars

_— Ramesh C._

[Read full review](https://www.g2.com/survey_responses/cloudflare-application-security-and-performance-review-13347280)

#### What Are G2 Users Discussing About Cloudflare Application Security and Performance?

- [What is Cloudflare Spectrum used for?](https://www.g2.com/discussions/what-is-cloudflare-spectrum-used-for) - 1 comment
- [What is Cloudflare Bot Management used for?](https://www.g2.com/discussions/what-is-cloudflare-bot-management-used-for) - 1 comment
- [Does Cloudflare provide hosting?](https://www.g2.com/discussions/does-cloudflare-provide-hosting) - 2 comments
- [How good is Cloudflare DNS?](https://www.g2.com/discussions/how-good-is-cloudflare-dns) - 2 comments, 1 upvote
- [What does DDoS protection do?](https://www.g2.com/discussions/what-does-ddos-protection-do)

### [Radware Cloud WAF](https://www.g2.com/de/products/radware-cloud-waf/reviews)

Radware Cloud WAF ist ein vollständig verwalteter Cloud-Anwendungsschutzdienst, der die umfassendste Webanwendungssicherheitslösung der Branche bietet. Der Dienst integriert Radwares Cloud WAF, API-Schutz, Bot-Management, clientseitigen und Anwendungsschicht-DDoS-Schutz in einem einzigen Portal, das Sicherheitsanalysen, Bedrohungserkennung und Echtzeit-Sicherheitsfeeds bereitstellt, um Anwendungen vor Hacking, bösartigen Bots, API-Exposition, Web-DDoS-Angriffen, Lieferkettenangriffen und anderen Schwachstellen zu schützen.

**Average Rating:** 4.6/5.0

**Total Reviews:** 151

#### How Do G2 Users Rate Radware Cloud WAF?

- **War the product ein guter Geschäftspartner?:** 8.9/10 (Category avg: 8.8/10)
- **Verkehrskontrollen:** 9.2/10 (Category avg: 9.2/10)
- **Sicherheitsüberwachung:** 9.3/10 (Category avg: 9.1/10)
- **Problemverfolgung:** 8.8/10 (Category avg: 8.7/10)

#### Who Is the Company Behind Radware Cloud WAF?

- **Verkäufer:** [Radware](https://www.g2.com/de/sellers/radware)
- **Unternehmenswebsite:** www.radware.com
- **Gründungsjahr:** 1997
- **Hauptsitz:** Tel Aviv, Tel Aviv
- **Twitter:** @radware  
12,488 Twitter-Follower
- **LinkedIn®-Seite:** [www.linkedin.com](https://www.g2.com/de/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=6b1332c3b53ae32550622cd4c8d6bf9d255e4e5a6e9d717e614872a4ccf5fb04&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F165642%2F&secure%5Burl_type%5D=linkedin_company_website)  
1,602 Mitarbeiter\*innen auf LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Informationstechnologie und Dienstleistungen, Computer- und Netzwerksicherheit
- **Company Size:** 49% Medium, 40% Large

#### What Do G2 Reviewers Say About Radware Cloud WAF?

_AI-generated summary from verified user reviews_

##### Pros

- Benutzer schätzen den **dynamischen Schutz** und die robusten Sicherheitsfunktionen von Radware Cloud WAF, die für ein beruhigendes Gefühl sorgen.
- Benutzer schätzen den **starken KI-gesteuerten Schutz** von Radware Cloud WAF, der robuste Sicherheit mit minimalen Leistungseinbußen gewährleistet.
- Benutzer schätzen den **dynamischen Schutz und die KI-gestützte Verteidigung** der Radware Cloud WAF, die die allgemeine Cybersicherheit mühelos verbessert.
- Benutzer loben den **effektiven DDoS-Schutz** von Radware Cloud WAF, der Angriffe erfolgreich abwehrt, ohne die Leistung zu beeinträchtigen.
- Benutzer schätzen die **Echtzeitüberwachung** der Radware Cloud WAF, die einen robusten Schutz gegen aufkommende Bedrohungen und Schwachstellen gewährleistet.

##### Cons

- Benutzer finden den Aspekt der **schwierigen Berichterstattung** von Radware Cloud WAF, der die Benutzerfreundlichkeit und Klarheit für die laufende Überwachung einschränkt.
- Benutzer berichten von einer **steilen Lernkurve** bei Radware Cloud WAF, was es neuen Benutzern erschwert, es effektiv zu nutzen.
- Benutzer finden die **komplexe Konfiguration** der Radware Cloud WAF herausfordernd und zeitaufwändig für eine optimale Einrichtung und Abstimmung.
- Benutzer bemerken einen **Mangel an Anpassungsoptionen** bei Radware Cloud WAF, was die Anpassungsfähigkeit an ihre spezifischen Bedürfnisse einschränkt.
- Benutzer finden die **Benutzeroberfläche zu kompliziert** und benötigen Verbesserungen für ein intuitiveres und benutzerfreundlicheres Erlebnis.

#### What Are Recent G2 Reviews of Radware Cloud WAF?

**["Wie man einen Wachpartner hat, der nie müde wird"](https://www.g2.com/de/survey_responses/radware-cloud-waf-review-10937122)**

**Rating:** 4.5/5.0 stars

_— vladimir C._

[Read full review](https://www.g2.com/de/survey_responses/radware-cloud-waf-review-10937122)

**["WAF für starke Webanwendungssicherheit"](https://www.g2.com/de/survey_responses/radware-cloud-waf-review-13250815)**

**Rating:** 4.5/5.0 stars

_— amardeepsinha L._

[Read full review](https://www.g2.com/de/survey_responses/radware-cloud-waf-review-13250815)

#### What Are G2 Users Discussing About Radware Cloud WAF?

- [Wofür wird der Cloud-WAF-Dienst verwendet?](https://www.g2.com/de/discussions/what-is-cloud-waf-service-used-for) - 2 comments, 2 upvotes
- [What is Alibaba Cloud WAF?](https://www.g2.com/de/discussions/what-is-alibaba-cloud-waf)
- [What protection does Cloud WAF service provide?](https://www.g2.com/de/discussions/what-protection-does-cloud-waf-service-provide)
- [How does Radware WAF work?](https://www.g2.com/de/discussions/how-does-radware-waf-work)

### [Check Point WAF (formerly CloudGuard WAF)](https://www.g2.com/products/check-point-waf-formerly-cloudguard-waf/reviews)

CloudGuard WAF is a cloud-native Web and API security solution designed to help users safeguard their applications from both known and unknown threats. By leveraging advanced contextual AI, this solution provides precise threat prevention without the need for traditional signature-based detection methods. This innovative approach allows organizations to maintain a robust security posture while minimizing the risks associated with evolving cyber threats. Targeted primarily at businesses that rely on web applications and APIs, CloudGuard WAF is particularly beneficial for enterprises in sectors such as finance, healthcare, and e-commerce, where data protection is paramount. The solution is designed to address the complex security challenges that arise in modern application environments, especially those utilizing continuous integration and continuous deployment (CI/CD) practices. As organizations increasingly adopt cloud-native architectures, the need for flexible and efficient security solutions becomes critical. One of the standout features of CloudGuard WAF is its preemptive protection capabilities. By employing machine learning-based security measures, the solution can effectively prevent zero-day threats, which are vulnerabilities that have not yet been discovered or patched. This proactive approach eliminates the reliance on frequent signature updates, allowing organizations to stay ahead of potential attacks without the need for constant manual intervention. Moreover, CloudGuard WAF excels in precise detection, enabling it to identify a broader range of attacks while minimizing the need for ongoing fine-tuning and exception creation. This feature not only enhances the accuracy of threat detection but also reduces the operational burden on security teams, allowing them to focus on more strategic initiatives rather than routine adjustments. Designed with cloud-native principles in mind, CloudGuard WAF supports CI/CD-friendly deployment and automation. This means that organizations can easily integrate the solution into their existing workflows, from installation to upgrades and configuration. By utilizing declarative infrastructure-as-code or APIs, users can streamline their security processes, ensuring that their applications remain protected as they evolve. Overall, CloudGuard WAF represents a significant advancement in the realm of web and API security, offering organizations a sophisticated and adaptable solution to combat the ever-changing landscape of cyber threats. Its combination of preemptive protection, precise detection, and cloud-native design makes it a valuable asset for any organization looking to enhance its security posture in today's digital environment.

**Average Rating:** 4.3/5.0

**Total Reviews:** 89

#### How Do G2 Users Rate Check Point WAF (formerly CloudGuard WAF)?

- **Has the product been a good partner in doing business?:** 8.6/10 (Category avg: 8.8/10)
- **Traffic Controls:** 8.6/10 (Category avg: 9.2/10)
- **Security Monitoring:** 9.3/10 (Category avg: 9.1/10)
- **Issue Tracking:** 8.6/10 (Category avg: 8.7/10)

#### Who Is the Company Behind Check Point WAF (formerly CloudGuard WAF)?

- **Seller:** [Check Point Software Technologies](https://www.g2.com/sellers/check-point-software-technologies)
- **Company Website:** www.checkpoint.com
- **Year Founded:** 1993
- **HQ Location:** Redwood City, CA
- **Twitter:** @CheckPointSW  
70,955 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=d885813f6605ba84238ae4a21d169e0c9ade054cf0c99ff53e72483b54a8b521&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fcheck-point-software-technologies%2F&secure%5Burl_type%5D=linkedin_company_website)  
8,554 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** Software Engineer
- **Top Industries:** Computer & Network Security, Information Technology and Services
- **Company Size:** 59% Medium, 28% Small

#### What Do G2 Reviewers Say About Check Point WAF (formerly CloudGuard WAF)?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **strong protection** offered by Check Point WAF, enhancing security against various web application threats.
- Users commend the **top-notch security** of Check Point CloudGuard WAF, ensuring comprehensive protection across diverse environments effortlessly.
- Users value the **proactive AI-driven threat prevention** of Check Point CloudGuard WAF, ensuring robust security effortlessly.
- Users value the **AI-driven threat prevention** of Check Point CloudGuard WAF, offering seamless protection against various cyber threats.
- Users commend Check Point WAF for its **easy management across hybrid environments** , enhancing efficiency and reducing operational burden.

##### Cons

- Users find the **complex setup** challenging, making initial adoption and management of configurations difficult.
- Users find Check Point WAF to be **expensive** , especially smaller teams, impacting their overall value and accessibility.
- Users find the **steep learning curve** of Check Point WAF challenging, complicating the initial setup and usage.
- Users face a **difficult learning curve** with Check Point WAF, making initial setup and navigation challenging for newcomers.
- Users often find the **user interface overwhelming** , particularly during initial setup and while navigating complex features.

#### What Are Recent G2 Reviews of Check Point WAF (formerly CloudGuard WAF)?

**["Complex Setup, but Strong Security Features"](https://www.g2.com/survey_responses/check-point-waf-formerly-cloudguard-waf-review-13110824)**

**Rating:** 4.5/5.0 stars

_— Samiksha C._

[Read full review](https://www.g2.com/survey_responses/check-point-waf-formerly-cloudguard-waf-review-13110824)

**["Strong Security, Centralized Visibility, and Seamless Check Point Ecosystem Integration"](https://www.g2.com/survey_responses/check-point-waf-formerly-cloudguard-waf-review-13235461)**

**Rating:** 5.0/5.0 stars

_— Vasilis K._

[Read full review](https://www.g2.com/survey_responses/check-point-waf-formerly-cloudguard-waf-review-13235461)

### [HAProxy](https://www.g2.com/products/haproxy/reviews)

HAProxy is an open-source software load balancer and reverse proxy for TCP, QUIC, and HTTP-based applications. It provides high availability, load balancing, and best-in-class SSL processing. HAProxy One is an application delivery and security platform that combines the HAProxy core with enterprise-grade security layers, management and orchestration, cloud-native integration, and more. Platform components: HAProxy Enterprise: a flexible data plane layer for TCP, UDP, QUIC, and HTTP-based applications that provides high-performance load balancing, high availability, an API/AI gateway, container networking, SSL processing, DDoS protection, bot detection and mitigation, global rate limiting, and a web application firewall (WAF). HAProxy Fusion: a scalable control plane that provides full-lifecycle management, observability, and automation of multi-cluster, multi-cloud, and multi-team HAProxy Enterprise deployments, with infrastructure integration for AWS, Kubernetes, Consul, and Prometheus. HAProxy Edge: a globally distributed application delivery network that provides fully managed application delivery and security services, a secure partition between external traffic and origin networks, and threat intelligence enhanced by machine learning that powers the security layers in HAProxy Fusion and HAProxy Enterprise. Learn more at HAProxy.com

**Average Rating:** 4.7/5.0

**Total Reviews:** 905

#### How Do G2 Users Rate HAProxy?

- **Has the product been a good partner in doing business?:** 9.1/10 (Category avg: 8.8/10)
- **Traffic Controls:** 9.0/10 (Category avg: 9.2/10)
- **Security Monitoring:** 8.3/10 (Category avg: 9.1/10)
- **Issue Tracking:** 8.2/10 (Category avg: 8.7/10)

#### Who Is the Company Behind HAProxy?

- **Seller:** [HAProxy](https://www.g2.com/sellers/haproxy)
- **Company Website:** www.haproxy.com
- **Year Founded:** 2013
- **HQ Location:** Newton, MA
- **Twitter:** @HAProxy  
21,218 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=242d3af26bcc54eebdb77a8e8d44206cd44c8ee591f0479cf903e79e320a8651&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F1032008%2F&secure%5Burl_type%5D=linkedin_company_website)  
125 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** DevOps Engineer, Software Engineer
- **Top Industries:** Information Technology and Services, Computer Software
- **Company Size:** 42% Medium, 35% Large

#### What Do G2 Reviewers Say About HAProxy?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **ease of use** of HAProxy, finding its intuitive setup and stats page very helpful.
- Users appreciate the **easy implementation and effective workload balancing** capabilities of HAProxy for traffic management.
- Users find HAProxy to be exceptionally **reliable and fast** , enhancing their data security and operational efficiency.
- Users highlight HAProxy's **high performance** , appreciating its robust data transmission and seamless operations for reliable web management.
- Users value the **easy configuration** of HAProxy, enabling seamless management of traffic and services.

##### Cons

- Users face **difficult configuration** challenges with HAProxy, struggling with complex syntax and readability of files.
- Users find HAProxy's **steep learning curve** challenging, particularly for beginners in load balancing or networking.
- Users find the **complex setup** of HAProxy challenging, requiring time and effort to overcome initial difficulties.
- Users find the **complex configuration** of HAProxy to be challenging, particularly for newcomers to load balancing.
- Users find HAProxy's **complexity** daunting, especially regarding configuration and debugging in advanced environments.

#### What Are Recent G2 Reviews of HAProxy?

**["HAProxy: Bulletproof Reliability and High-Performance Traffic Routing"](https://www.g2.com/survey_responses/haproxy-review-12670178)**

**Rating:** 4.0/5.0 stars

_— Deepak I._

[Read full review](https://www.g2.com/survey_responses/haproxy-review-12670178)

**["Easy Upgrade, Professional Support, and a Stable System"](https://www.g2.com/survey_responses/haproxy-review-13397989)**

**Rating:** 4.5/5.0 stars

_— Verified User in Government Administration_

[Read full review](https://www.g2.com/survey_responses/haproxy-review-13397989)

#### What Are G2 Users Discussing About HAProxy?

- [Is HAProxy a firewall?](https://www.g2.com/discussions/is-haproxy-a-firewall) - 2 comments
- [Is HAProxy a reverse proxy?](https://www.g2.com/discussions/is-haproxy-a-reverse-proxy) - 2 comments
- [Is HAProxy an API gateway?](https://www.g2.com/discussions/is-haproxy-an-api-gateway) - 2 comments
- [What is HAProxy and why it is used?](https://www.g2.com/discussions/what-is-haproxy-and-why-it-is-used) - 1 comment, 1 upvote

### [Fastly's Web Application and API Security](https://www.g2.com/de/products/fastly-s-web-application-and-api-security/reviews)

Die AppSec-Lösungen von Fastly befähigen Teams, Bedrohungen zu mindern und Bots zu kontrollieren, während sie dem Unternehmen helfen, schneller und selbstbewusster zu agieren. Schützen Sie Ihre Apps und APIs und beschleunigen Sie das Wachstum mit Fastlys Next-Gen WAF, DDoS-Schutz, Bot-Management, API-Sicherheit und mehr. Unsere Lösungen sind darauf ausgelegt, Ihnen zu helfen, Cyber-Bedrohungen zu stoppen, die Ihre größten Momente gefährden könnten, Innovationen zu beschleunigen und gleichzeitig neue Risiken zu minimieren, und Bots zu steuern, ohne die Benutzerfreundlichkeit zu beeinträchtigen.

**Average Rating:** 4.2/5.0

**Total Reviews:** 29

#### How Do G2 Users Rate Fastly's Web Application and API Security?

- **War the product ein guter Geschäftspartner?:** 9.2/10 (Category avg: 8.8/10)
- **Verkehrskontrollen:** 8.1/10 (Category avg: 9.2/10)
- **Sicherheitsüberwachung:** 9.1/10 (Category avg: 9.1/10)
- **Problemverfolgung:** 8.1/10 (Category avg: 8.7/10)

#### Who Is the Company Behind Fastly's Web Application and API Security?

- **Verkäufer:** [Fastly](https://www.g2.com/de/sellers/fastly)
- **Gründungsjahr:** 2011
- **Hauptsitz:** San Francisco, California, United States
- **Twitter:** @Fastly  
29,199 Twitter-Follower
- **LinkedIn®-Seite:** [www.linkedin.com](https://www.g2.com/de/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=da716dc098edf000806f6697c2eb8ab38c238b5756f763d0fcb50426498935d9&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F2602522%2F&secure%5Burl_type%5D=linkedin_company_website)  
1,398 Mitarbeiter\*innen auf LinkedIn®
- **Eigentum:** NYSE: FSLY

#### Who Uses This Product?

- **Top Industries:** Computersoftware
- **Company Size:** 50% Medium, 37% Large

#### What Do G2 Reviewers Say About Fastly's Web Application and API Security?

_AI-generated summary from verified user reviews_

##### Pros

- Benutzer schätzen die **einfache Einrichtung** von Fastlys Webanwendung und API-Sicherheit, genießen exzellenten Support und eine benutzerfreundliche Oberfläche.
- Benutzer loben Fastlys Webanwendungs- und API-Sicherheit für ihren **robusten Schutz gegen alle Arten von Angriffen**.
- Benutzer loben den **ausgezeichneten Kundensupport** von Fastly, der ihre Erfahrung und den Implementierungsprozess verbessert.
- Benutzer schätzen den **effektiven DDoS-Schutz** von Fastly, der eine robuste Sicherheit gegen verschiedene Bedrohungen für Webanwendungen gewährleistet.
- Benutzer schätzen den **ausgezeichneten Sicherheitsschutz** , den Fastlys Lösung gegen eine Vielzahl von Anwendungsangriffen bietet.

##### Cons

- Benutzer bemerken, dass die **Preisgestaltung ein Hindernis** für kleinere Projekte sein kann, mit zusätzlichen Kosten für Support und mehrere Hostnamen.
- Benutzer berichten von **schlechtem Kundensupport** und heben Probleme mit der Reaktionsfähigkeit und der Schwierigkeit hervor, Unterstützung bei Konfigurationen zu erhalten.
- Benutzer finden die **komplexe Konfiguration** von Fastlys WAF überwältigend und zeitaufwändig, insbesondere bei der Regelverwaltung.
- Benutzer finden die **komplexe Einrichtung** von Fastlys WAF umständlich, was die Regelverwaltung und Konfigurationen zeitaufwändig macht.
- Benutzer finden das **Management komplex** , da die umständliche Benutzeroberfläche und der schlechte Support eine effektive Regelkonfiguration behindern.

#### What Are Recent G2 Reviews of Fastly's Web Application and API Security?

**["Perfekter API-Schutz"](https://www.g2.com/de/survey_responses/fastly-s-web-application-and-api-security-review-12332835)**

**Rating:** 5.0/5.0 stars

_— Vladimir M._

[Read full review](https://www.g2.com/de/survey_responses/fastly-s-web-application-and-api-security-review-12332835)

**["Es ist einfach zu verwenden und bietet eine bessere Sicherheit für Anwendungen, APIs und DevOps-Umgebungen."](https://www.g2.com/de/survey_responses/fastly-s-web-application-and-api-security-review-9336328)**

**Rating:** 5.0/5.0 stars

_— Shakir K._

[Read full review](https://www.g2.com/de/survey_responses/fastly-s-web-application-and-api-security-review-9336328)

### [FortiAppSec Cloud](https://www.g2.com/products/fortiappsec-cloud/reviews)

FortiAppSec Cloud - the next evolution of FortiWeb Cloud - simplifies and strengthens web application security and delivery across your cloud environments. This SaaS platform secures network availability and accelerates application performance while delivering consistent security against web-based threats. The AI-driven engine detects zero-day exploits and unknown threats, maximizing detection accuracy while securing the user experience and minimizing false positives. FortiAppSec Cloud is unified platform that provides comprehensive web application and API protection (WAAP) with a single management interface. It includes: • GenAI-ready protection for known and zero-day threat detection • ML-driven bad bot behavioral analysis to fend off sophisticated bots • Advanced API discovery and security • Built-in DAST allows for vulnerability scanning and patching in advance • Global server load balancing and CDN provide optimized application availability and performance. • Threat analytics helps prioritize security events for operational efficiency.

**Average Rating:** 4.4/5.0

**Total Reviews:** 29

#### How Do G2 Users Rate FortiAppSec Cloud?

- **Has the product been a good partner in doing business?:** 9.3/10 (Category avg: 8.8/10)
- **Traffic Controls:** 8.2/10 (Category avg: 9.2/10)
- **Security Monitoring:** 9.2/10 (Category avg: 9.1/10)
- **Issue Tracking:** 7.9/10 (Category avg: 8.7/10)

#### Who Is the Company Behind FortiAppSec Cloud?

- **Seller:** [Fortinet](https://www.g2.com/sellers/fortinet)
- **Company Website:** www.fortinet.com
- **Year Founded:** 2000
- **HQ Location:** Sunnyvale, CA
- **Twitter:** @Fortinet  
151,422 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=3d5f38bd4746b6501ce1c8f305fccf1b4a457b722a14dc3b74f43b2d5156111e&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F6460%2F&secure%5Burl_type%5D=linkedin_company_website)  
16,279 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Computer & Network Security, Information Technology and Services
- **Company Size:** 61% Medium, 19% Large

#### What Do G2 Reviewers Say About FortiAppSec Cloud?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **comprehensive security** FortiAppSec Cloud provides, enhancing visibility and efficiency in threat management.
- Users value the **automatic security and centralized dashboard** of FortiAppSec Cloud for enhanced protection and efficiency.
- Users appreciate the **automated AI-driven protection** of FortiAppSec Cloud, enhancing web application security with minimal manual effort.
- Users value the **ease of use** of FortiAppSec Cloud, finding it straightforward and highly user-friendly for implementation.
- Users value the **automatic security and centralized dashboard** of FortiAppSec Cloud, enhancing visibility and response efficiency.

##### Cons

- Users find the **user experience challenging** due to complex initial setup and a need for more intuitive design.
- Users experience occasional **slow performance** with FortiAppSec Cloud, particularly under high traffic and complex rule management.
- Users find the **user interface issues** in FortiAppSec Cloud hinder navigation and overall user experience, especially for beginners.
- Users struggle with **complex configuration** , making initial setup challenging and impacting ease of use for newcomers.
- Users find the **complex setup** process challenging, especially for first-time configurations and fine-tuning security policies.

#### What Are Recent G2 Reviews of FortiAppSec Cloud?

**["Easy-to-Implement AppSec with Strong Signature Detection, Bot Protection, and Cloud Integration"](https://www.g2.com/survey_responses/fortiappsec-cloud-review-12389870)**

**Rating:** 5.0/5.0 stars

_— Prasanth K._

[Read full review](https://www.g2.com/survey_responses/fortiappsec-cloud-review-12389870)

**["Centralized Threat Management, Easy Setup"](https://www.g2.com/survey_responses/fortiappsec-cloud-review-12342944)**

**Rating:** 4.0/5.0 stars

_— Manav S._

[Read full review](https://www.g2.com/survey_responses/fortiappsec-cloud-review-12342944)

#### What Are G2 Users Discussing About FortiAppSec Cloud?

- [What is the use of Fortinet?](https://www.g2.com/discussions/what-is-the-use-of-fortinet)
- [How does Fortinet WAF work?](https://www.g2.com/discussions/how-does-fortinet-waf-work)
- [How many layers does the FortiWeb machine learning engine use?](https://www.g2.com/discussions/how-many-layers-does-the-fortiweb-machine-learning-engine-use)
- [How do you use FortiWeb?](https://www.g2.com/discussions/how-do-you-use-fortiweb)

### [Azion](https://www.g2.com/de/products/azion/reviews)

Azion ist die Webplattform, die es Unternehmen ermöglicht, moderne Anwendungen auf einer vollständig verwalteten globalen Infrastruktur zu entwickeln, zu sichern und zu skalieren, mit einer robusten Suite von Lösungen für Anwendungsentwicklung, Cybersicherheit und KI. Azion ermöglicht es Entwicklern, Anwendungen näher an den Benutzern bereitzustellen, um extrem niedrige Latenzzeiten und hohe Verfügbarkeit zu gewährleisten. Mit Functions können Sie verteilten serverlosen Code ausführen, die Leistung verbessern und Kosten senken. Für verbesserte Sicherheit schützt Azions Web Application Firewall (WAF) vor Cyberbedrohungen. Azion bietet auch SQL Storage, Object Storage und KV Storage, die eine schnelle, verteilte Datenspeicherung und -abfrage ermöglichen. Mit Real-Time Metrics und Real-Time Events erhalten Unternehmen umsetzbare Einblicke in ihre Anwendungen und Infrastruktur, um optimale Leistung und Sicherheit zu gewährleisten. Weltweite Marktführer wie Prime Video, Neon, Global Fashion Group und Radware vertrauen Azion, um weltweit leistungsstarke, sichere digitale Erlebnisse zu liefern. Egal, ob Sie KI-gesteuerte Anwendungen entwickeln, Ihre digitalen Vermögenswerte sichern oder global skalieren, Azion bietet den schnellsten Weg zu modernen Anwendungen. Entdecken Sie, wie Azion Ihre digitalen Erlebnisse transformieren und Ihr Unternehmen im digitalen Zeitalter zum Erfolg führen kann. Besuchen Sie www.azion.com, um mehr über unsere innovativen Lösungen zu erfahren.

**Average Rating:** 4.7/5.0

**Total Reviews:** 31

#### How Do G2 Users Rate Azion?

- **War the product ein guter Geschäftspartner?:** 9.4/10 (Category avg: 8.8/10)
- **Verkehrskontrollen:** 9.6/10 (Category avg: 9.2/10)
- **Sicherheitsüberwachung:** 9.3/10 (Category avg: 9.1/10)
- **Problemverfolgung:** 9.1/10 (Category avg: 8.7/10)

#### Who Is the Company Behind Azion?

- **Verkäufer:** [Azion](https://www.g2.com/de/sellers/azion)
- **Gründungsjahr:** 2011
- **Hauptsitz:** Palo Alto, California, United States
- **LinkedIn®-Seite:** [www.linkedin.com](https://www.g2.com/de/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=bc40b3f839b40eea1dddd166224861f33f01dec0d801c04d25e85cf00b41b2a7&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Faziontech&secure%5Burl_type%5D=linkedin_company_website)  
198 Mitarbeiter\*innen auf LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Einzelhandel
- **Company Size:** 34% Large, 28% Medium

#### What Do G2 Reviewers Say About Azion?

_AI-generated summary from verified user reviews_

##### Pros

- Benutzer schätzen Azions **reaktiven und kompetenten Kundensupport** sehr, der reibungslose und effiziente Geschäftsabläufe gewährleistet.
- Benutzer schätzen die **Benutzerfreundlichkeit** von Azion und loben die schnelle Implementierung und nahtlose Integration in den täglichen Betrieb.
- Benutzer schätzen die **einfachen Integrationen** mit Azion und loben die einfache Einrichtung und nahtlose Funktionalität für den täglichen Betrieb.
- Benutzer heben Azions **konstante Zuverlässigkeit** und Leistung hervor, was es zu einem vertrauenswürdigen Partner für kritische Operationen macht.
- Benutzer loben Azion für seine **ausgezeichnete Leistung** , die Latenz erheblich verbessert und das Benutzererlebnis verbessert.

##### Cons

- Benutzer sind besorgt über die **fehlenden Funktionen** in Azion für Web3 und verwandte Dienstintegrationen.
- Benutzer finden die **Komplexität der Verwaltungskonsole** herausfordernd, was erhebliche Zeit zum Lernen und Navigieren erfordert.
- Benutzer finden die **schwierige Lernkurve** in Azions Verwaltungskonsole frustrierend und zeitaufwändig zu navigieren.
- Benutzer finden die **schwierige Lernkurve** der Verwaltungskonsole von Azion frustrierend und zeitaufwändig zu navigieren.
- Benutzer wünschen sich **flexiblere Preisgestaltung** und Produktangebote, da die aktuellen Kosten für viele zu hoch erscheinen.

#### What Are Recent G2 Reviews of Azion?

**["Azion als einer der wichtigsten strategischen Partner für Cybersicherheit."](https://www.g2.com/de/survey_responses/azion-review-12544164)**

**Rating:** 5.0/5.0 stars

_— Luciano K._

[Read full review](https://www.g2.com/de/survey_responses/azion-review-12544164)

**["Azion-Dienste: Hohe Sicherheit und Makelloser Support"](https://www.g2.com/de/survey_responses/azion-review-11910560)**

**Rating:** 5.0/5.0 stars

_— Luciano G._

[Read full review](https://www.g2.com/de/survey_responses/azion-review-11910560)

### [Fortinet Managed Rules for AWS WAF](https://www.g2.com/de/products/fortinet-managed-rules-for-aws-waf/reviews)

Die WAF-Regelsätze von Fortinet sind zusätzliche Sicherheits-Signaturen, die verwendet werden können, um die im Basisprodukt von AWS WAF enthaltenen Schutzmaßnahmen zu verbessern. Sie werden regelmäßig aktualisiert, um die neuesten Bedrohungsinformationen von den preisgekrönten FortiGuard Labs einzubeziehen. Das vollständige OWASP Top 10-Regelset bietet ein umfassendes Paket für den Schutz von Webanwendungen, das von Fortinet angeboten wird, um die OWASP Top 10-Bedrohungen für Webanwendungen anzugehen. Es umfasst Schutzmaßnahmen gegen verschiedene Injektionsangriffe wie SQL- und Befehlsinjektionen, Cross-Site-Scripting, allgemeine und bekannte Exploits, bösartige Bots und allgemeine Schwachstellen und Expositionen (CVE).

**Average Rating:** 4.2/5.0

**Total Reviews:** 23

#### How Do G2 Users Rate Fortinet Managed Rules for AWS WAF?

- **War the product ein guter Geschäftspartner?:** 9.2/10 (Category avg: 8.8/10)
- **Verkehrskontrollen:** 10.0/10 (Category avg: 9.2/10)
- **Sicherheitsüberwachung:** 10.0/10 (Category avg: 9.1/10)
- **Problemverfolgung:** 8.3/10 (Category avg: 8.7/10)

#### Who Is the Company Behind Fortinet Managed Rules for AWS WAF?

- **Verkäufer:** [Fortinet](https://www.g2.com/de/sellers/fortinet)
- **Unternehmenswebsite:** www.fortinet.com
- **Gründungsjahr:** 2000
- **Hauptsitz:** Sunnyvale, CA
- **Twitter:** @Fortinet  
151,422 Twitter-Follower
- **LinkedIn®-Seite:** [www.linkedin.com](https://www.g2.com/de/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=3d5f38bd4746b6501ce1c8f305fccf1b4a457b722a14dc3b74f43b2d5156111e&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F6460%2F&secure%5Burl_type%5D=linkedin_company_website)  
16,279 Mitarbeiter\*innen auf LinkedIn®

#### Who Uses This Product?

- **Company Size:** 63% Small, 29% Medium

#### What Do G2 Reviewers Say About Fortinet Managed Rules for AWS WAF?

_AI-generated summary from verified user reviews_

##### Pros

- Benutzer schätzen die **umfassende und robuste Sicherheit** , die durch Fortinets Managed Rules für AWS WAF bereitgestellt wird, und gewährleisten starken Schutz.
- Benutzer finden die **einfache Implementierung** der Fortinet Managed Rules für AWS WAF unschätzbar wertvoll, um die Sicherheit mühelos zu verbessern.
- Benutzer schätzen den **umfassenden Schutz** der Fortinet Managed Rules, der eine robuste Sicherheit gegen verschiedene sich entwickelnde Bedrohungen gewährleistet.
- Benutzer schätzen die **einfachen Integrationen** der Fortinet Managed Rules für AWS WAF, die die Sicherheit für API Gateway-Bereitstellungen vereinfachen.
- Benutzer loben die **einfache Implementierung** der Fortinet Managed Rules, die den Einrichtungsprozess für AWS WAF vereinfachen.

##### Cons

- Benutzer äußern Bedenken über **Preisprobleme** mit Fortinet Managed Rules, insbesondere für kleinere Organisationen mit begrenztem Budget.
- Benutzer könnten auf einen **schwierigen Einrichtungsprozess** für Fortinets Managed Rules stoßen, insbesondere wenn sie mit AWS WAF nicht vertraut sind.
- Benutzer äußern Bedenken über die **teure Natur** der Fortinet Managed Rules für AWS WAF, was den Gesamtwert beeinträchtigt.
- Benutzer erleben eine **herausfordernde Lernkurve** mit Fortinet Managed Rules, insbesondere wenn sie neu im WAF-Management sind.

#### What Are Recent G2 Reviews of Fortinet Managed Rules for AWS WAF?

**["FortiGuard-Powered Managed Rules That Stop SQLi and XSS with Zero Added Latency"](https://www.g2.com/de/survey_responses/fortinet-managed-rules-for-aws-waf-review-13378996)**

**Rating:** 4.0/5.0 stars

_— 敏熙 ._

[Read full review](https://www.g2.com/de/survey_responses/fortinet-managed-rules-for-aws-waf-review-13378996)

**["OP: AWS WAF | Know the real power"](https://www.g2.com/de/survey_responses/fortinet-managed-rules-for-aws-waf-review-13380945)**

**Rating:** 4.0/5.0 stars

_— Subigya G._

[Read full review](https://www.g2.com/de/survey_responses/fortinet-managed-rules-for-aws-waf-review-13380945)

### [AWS WAF](https://www.g2.com/products/aws-waf/reviews)

AWS WAF (Web Application Firewall) is a security service designed to protect web applications and APIs from common web exploits and bots that can compromise security, affect availability, or consume excessive resources. By enabling users to define customizable web security rules, AWS WAF allows precise control over which traffic to allow or block, ensuring robust protection tailored to specific application needs. Key Features and Functionality: - Customizable Security Rules: Users can create rules to filter web requests based on conditions such as IP addresses, HTTP headers, HTTP body, or custom URIs, allowing for tailored security measures. - Managed Rule Groups: AWS WAF offers pre-configured rule groups managed by AWS or AWS Marketplace sellers, providing protection against common threats like SQL injection and cross-site scripting (XSS). These rules are regularly updated to address emerging vulnerabilities. - Bot Control: The service includes capabilities to monitor, block, or rate-limit common and pervasive bots, helping to prevent automated attacks such as web scraping and credential stuffing. - Real-Time Monitoring and Logging: AWS WAF integrates with Amazon CloudWatch, offering real-time metrics and capturing detailed information about web requests. This visibility aids in analyzing traffic patterns and fine-tuning security settings. - DDoS Protection: When used in conjunction with AWS Shield, AWS WAF provides automatic protection against Distributed Denial of Service (DDoS) attacks, ensuring application availability during large-scale attack attempts. - Integration with AWS Services: AWS WAF seamlessly integrates with other AWS services such as Amazon CloudFront, Application Load Balancer, and Amazon API Gateway, enabling centralized security management across various applications. Primary Value and Problem Solved: AWS WAF addresses the critical need for robust web application security by providing a scalable and customizable firewall solution. It empowers organizations to protect their web applications and APIs from a wide range of threats, including common exploits and automated attacks, without compromising performance. By offering both managed and custom rule capabilities, AWS WAF enables businesses to implement security measures that align with their specific requirements. Its integration with other AWS services and real-time monitoring features further enhance an organization's ability to maintain a strong security posture, ensuring the availability and integrity of their web applications.

**Average Rating:** 4.3/5.0

**Total Reviews:** 65

#### How Do G2 Users Rate AWS WAF?

- **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 8.8/10)
- **Traffic Controls:** 8.7/10 (Category avg: 9.2/10)
- **Security Monitoring:** 8.9/10 (Category avg: 9.1/10)
- **Issue Tracking:** 8.1/10 (Category avg: 8.7/10)

#### Who Is the Company Behind AWS WAF?

- **Seller:** [Amazon Web Services (AWS)](https://www.g2.com/sellers/amazon-web-services-aws-3e93cc28-2e9b-4961-b258-c6ce0feec7dd)
- **Year Founded:** 2006
- **HQ Location:** Seattle, WA
- **Twitter:** @awscloud  
2,232,483 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=072881eee28a2afe24f8d1bda9f20e3e146b9fb4b214f216411ce2ed6898b31e&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Famazon-web-services%2F&secure%5Burl_type%5D=linkedin_company_website)  
147,094 employees on LinkedIn®
- **Ownership:** NASDAQ: AMZN

#### Who Uses This Product?

- **Top Industries:** Information Technology and Services, Computer Software
- **Company Size:** 36% Large, 35% Medium

#### What Do G2 Reviewers Say About AWS WAF?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **easy protection against common attacks** provided by AWS WAF, enhancing website security effortlessly.
- Users value the **seamless cloud integration** of AWS WAF, enhancing security with unified management and visibility.
- Users appreciate the **custom rules** in AWS WAF for simplifying website protection against common attacks.
- Users appreciate the **ease of protecting websites** from attacks like SQL injection and XSS with AWS WAF.
- Users value the **robust DDoS protection** of AWS WAF, ensuring quick and effective mitigation against layer 7 attacks.

##### Cons

- Users find the **complex configuration** challenging initially, along with confusing pricing for beginners.
- Users find the **pricing confusing** for beginners, making AWS WAF feel expensive and complex to configure initially.
- Users find the **ineffective blocking** of specific regions limits their ability for precise geographic access controls.

#### What Are Recent G2 Reviews of AWS WAF?

**["Strong Threat Protection with Easy Log Monitoring and Centralized Management"](https://www.g2.com/survey_responses/aws-waf-review-12364199)**

**Rating:** 4.5/5.0 stars

_— Yogesh G._

[Read full review](https://www.g2.com/survey_responses/aws-waf-review-12364199)

**["Strong Web App Protection with AWS WAF’s Managed Rules and Seamless AWS Integrations"](https://www.g2.com/survey_responses/aws-waf-review-12933910)**

**Rating:** 4.5/5.0 stars

_— Atharva P._

[Read full review](https://www.g2.com/survey_responses/aws-waf-review-12933910)

#### What Are G2 Users Discussing About AWS WAF?

- [What is AWS WAF used for?](https://www.g2.com/discussions/what-is-aws-waf-used-for) - 1 comment
- [What are WAF rules?](https://www.g2.com/discussions/what-are-waf-rules)
- [Do I need AWS WAF?](https://www.g2.com/discussions/do-i-need-aws-waf)
- [Which two types of protection does the AWS WAF provide?](https://www.g2.com/discussions/which-two-types-of-protection-does-the-aws-waf-provide)
- [What does AWS WAF do?](https://www.g2.com/discussions/what-does-aws-waf-do)

### [TR7 ASP](https://www.g2.com/de/products/tr7-asp/reviews)

Eine Anwendungssicherheitsplattform (ASP), die von IT-Nutzern entworfen wurde, die verärgert und frustriert über die Zeit sind, die für die Verwaltung komplexer Legacy-Anwendungsbereitstellungen und WAF-Produkte benötigt wird. Das benutzerfreundliche Design von TR7, das dynamische Fluss-Panel und die umfangreiche Berichterstattung machen es IT-Teams sehr einfach, die Anwendungsleistung zu steigern, die Widerstandsfähigkeit zu verbessern und Cyberangriffe schneller zu verhindern. Die Kernkomponenten der Plattform sind: ⚖️ Load Balancer 🚪 Access Policy Manager 🌐 Global Traffic Manager 🛡️ WebApp Firewall (WAF) Effektive Benutzerzugriffskontrollen machen es einfach, den richtigen Personen den richtigen Zugang und die richtige Sichtbarkeit zu gewähren, sodass IT-Netzwerk-, Anwendungs- und Sicherheitsteams effektiver zusammenarbeiten und sich auf ihre jeweiligen Prioritäten konzentrieren können. Als physische oder virtuelle Appliance bereitstellen, oder beides, je nach Ihrem Umfang und Ihren Anforderungen. Freundliche Cluster-Optionen und attraktive Skaleneffekte sind darauf ausgelegt, dass Sie Widerstandsfähigkeit und Best Practices kostengünstig gestalten können.

**Average Rating:** 4.9/5.0

**Total Reviews:** 27

#### How Do G2 Users Rate TR7 ASP?

- **War the product ein guter Geschäftspartner?:** 10.0/10 (Category avg: 8.8/10)
- **Verkehrskontrollen:** 9.7/10 (Category avg: 9.2/10)
- **Sicherheitsüberwachung:** 9.5/10 (Category avg: 9.1/10)
- **Problemverfolgung:** 9.3/10 (Category avg: 8.7/10)

#### Who Is the Company Behind TR7 ASP?

- **Verkäufer:** [TR7](https://www.g2.com/de/sellers/tr7)
- **Gründungsjahr:** 2023
- **Hauptsitz:** Cheltenham, UK
- **LinkedIn®-Seite:** [www.linkedin.com](https://www.g2.com/de/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=89882c6e77ed63e32dbc742ec01b086b17f843b4f0704f7188b12c95d8cb0815&secure%5Burl%5D=http%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftr7-asp&secure%5Burl_type%5D=linkedin_company_website)  
41 Mitarbeiter\*innen auf LinkedIn®

#### Who Uses This Product?

- **Company Size:** 59% Large, 33% Medium

#### What Do G2 Reviewers Say About TR7 ASP?

_AI-generated summary from verified user reviews_

##### Pros

- Benutzer loben den **außergewöhnlichen Kundensupport** von TR7 ASP und heben dessen Reaktionsfähigkeit und proaktive Unterstützung hervor.
- Benutzer loben TR7 ASP für sein **effizientes Lastenausgleich** , das zuverlässiges Verkehrsmanagement und nahtlose Anwendungsleistung gewährleistet.
- Benutzer finden TR7 ASP bemerkenswert **einfach zu bedienen** und schätzen seine Benutzerfreundlichkeit und den reaktionsschnellen Kundensupport.
- Benutzer loben die **Zuverlässigkeit** von TR7 ASP, das effektiv Verkehrsleitungs- und Sicherheitsprobleme in ihren Anwendungen löst.
- Benutzer heben die **bemerkenswerte Einfachheit der Konfiguration** mit TR7 ASP hervor, was die Implementierung für Teams zum Kinderspiel macht.

##### Cons

- Benutzer finden, dass der **komplexe Betrieb** von TR7 ASP Software-Updates im Vergleich zu ähnlichen Produkten herausfordernder macht.
- Benutzer finden die **komplexe Einrichtung** von TR7 ASP als ein Hindernis, was Software-Updates schwieriger macht.
- Benutzer finden die **schwierige Einrichtung** aufgrund des Fehlens eines In-Place-Upgrades für Updates.
- Benutzer finden, dass die **begrenzte Anpassungsmöglichkeit** der Überwachungsbildschirme des TR7 ASP ihre Fähigkeit einschränkt, das Erlebnis zu personalisieren.
- Benutzer wünschen sich verbesserte **Funktionen wie API-Sicherheit** , was auf einen Bedarf an erhöhter Funktionalität in TR7 ASP hinweist.

#### What Are Recent G2 Reviews of TR7 ASP?

**["Einfach zu bedienen, großartiger Support, Leistung und Preisgestaltung"](https://www.g2.com/de/survey_responses/tr7-asp-review-13212372)**

**Rating:** 5.0/5.0 stars

_— Ufuk ._

[Read full review](https://www.g2.com/de/survey_responses/tr7-asp-review-13212372)

**["Easy to Use and Efficient"](https://www.g2.com/de/survey_responses/tr7-asp-review-13384337)**

**Rating:** 5.0/5.0 stars

_— Ayse O._

[Read full review](https://www.g2.com/de/survey_responses/tr7-asp-review-13384337)

### [Azure Application Gateway](https://www.g2.com/products/azure-application-gateway/reviews)

Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications. Unlike traditional load balancers that operate at the transport layer (Layer 4), Application Gateway operates at the application layer (Layer 7), allowing it to make routing decisions based on attributes such as URL paths and host headers. This capability provides more control over how traffic is distributed to your applications, enhancing both performance and security. Key Features and Functionality: - Layer 7 Load Balancing: Routes traffic based on HTTP request attributes, enabling more precise control over traffic distribution. - Web Application Firewall (WAF): Protects applications from common web vulnerabilities like SQL injection and cross-site scripting by monitoring and filtering HTTP requests. - SSL/TLS Termination: Offloads SSL/TLS processing to the gateway, reducing the encryption and decryption overhead on backend servers. - Autoscaling: Automatically adjusts the number of gateway instances based on traffic load, ensuring optimal performance and cost efficiency. - Zone Redundancy: Distributes instances across multiple availability zones, enhancing resilience and availability. - URL Path-Based Routing: Directs requests to backend pools based on URL paths, allowing for efficient resource utilization. - Host Header-Based Routing: Routes traffic to different backend pools based on the host header, facilitating multi-site hosting. - Integration with Azure Services: Seamlessly integrates with Azure Traffic Manager for global load balancing and Azure Monitor for centralized monitoring and alerting. Primary Value and User Solutions: Azure Application Gateway provides a scalable and highly available solution for managing web application traffic. By operating at the application layer, it offers intelligent routing capabilities that enhance application performance and reliability. The integrated Web Application Firewall ensures robust security against common web threats, while features like SSL/TLS termination and autoscaling optimize resource utilization and reduce operational overhead. This comprehensive set of features addresses the needs of organizations seeking to build secure, scalable, and efficient web front ends in Azure.

**Average Rating:** 4.4/5.0

**Total Reviews:** 140

#### How Do G2 Users Rate Azure Application Gateway?

- **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 8.8/10)
- **Traffic Controls:** 9.4/10 (Category avg: 9.2/10)
- **Security Monitoring:** 9.5/10 (Category avg: 9.1/10)
- **Issue Tracking:** 8.5/10 (Category avg: 8.7/10)

#### Who Is the Company Behind Azure Application Gateway?

- **Seller:** [Microsoft](https://www.g2.com/sellers/microsoft)
- **Year Founded:** 1975
- **HQ Location:** Redmond, Washington
- **Twitter:** @microsoft  
13,091,739 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=9458f51bd6ded48ad432a804f19ad736469f007787569b63827154231c315630&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fmicrosoft%2F&secure%5Burl_type%5D=linkedin_company_website)  
231,632 employees on LinkedIn®
- **Ownership:** MSFT

#### Who Uses This Product?

- **Who Uses This:** DevOps Engineer, Software Engineer
- **Top Industries:** Information Technology and Services, Computer Software
- **Company Size:** 47% Large, 34% Medium

#### What Do G2 Reviewers Say About Azure Application Gateway?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **user-friendly and customizable dashboard** of Azure Application Gateway, enhancing their overall experience effortlessly.
- Users appreciate the **perfect scalability** of Azure Application Gateway, making it easy to adapt to changing needs.
- Users appreciate the **cost efficiency** of Azure Application Gateway, enjoying its pricing model and scalability benefits.
- Users value the **high availability and cost efficiency** of Azure Application Gateway, enhancing stability and supporting business growth.
- Users commend Azure Application Gateway for its **seamless integrations** with Microsoft products, enhancing overall cloud transition and usability.

##### Cons

- Users find the **complexity of Azure** challenging, struggling to choose optimal services and navigate the interface.
- Users find the **cost issues** of Azure Application Gateway to be a significant drawback compared to other providers.
- Users find the **learning difficulty** of Azure Application Gateway challenging, as it requires significant technical expertise to navigate.
- Users find Azure Application Gateway **not user-friendly** , struggling with usability issues and a confusing interface for new users.
- Users find the **complexity issues** of Azure Application Gateway overwhelming, creating challenges for new adopters and scaling services.

#### What Are Recent G2 Reviews of Azure Application Gateway?

**["Easy to Use, Quick to Deploy, and Integrates Smoothly"](https://www.g2.com/survey_responses/azure-application-gateway-review-13173946)**

**Rating:** 4.0/5.0 stars

_— Verified User in Computer & Network Security_

[Read full review](https://www.g2.com/survey_responses/azure-application-gateway-review-13173946)

**["Secure, Scalable Traffic Routing with Azure Application Gateway"](https://www.g2.com/survey_responses/azure-application-gateway-review-12511805)**

**Rating:** 4.5/5.0 stars

_— Manish M._

[Read full review](https://www.g2.com/survey_responses/azure-application-gateway-review-12511805)

#### What Are G2 Users Discussing About Azure Application Gateway?

- [What is Azure Application Gateway used for?](https://www.g2.com/discussions/what-is-azure-application-gateway-used-for)

### [Azure Web Application Firewall](https://www.g2.com/de/products/azure-web-application-firewall/reviews)

Azure Web Application Firewall ist ein cloud-nativer Sicherheitsdienst, der entwickelt wurde, um Webanwendungen und APIs vor häufigen Web-Schwachstellen und Angriffen wie SQL-Injection und Cross-Site-Scripting zu schützen. Durch die nahtlose Integration mit Azure-Diensten wie Application Gateway, Front Door und Content Delivery Network bietet Azure WAF zentralisierten Schutz und gewährleistet die Sicherheit und Verfügbarkeit von Webanwendungen, ohne dass Änderungen am Backend-Code erforderlich sind. Hauptmerkmale und Funktionalität: - Verwaltete Regelsets: Azure WAF bietet vorkonfigurierte Regelsets, die regelmäßig aktualisiert werden, um gegen die neuesten Bedrohungen, einschließlich der OWASP Top 10 Sicherheitsrisiken, zu verteidigen. - Anpassbare Regeln und Richtlinien: Benutzer können benutzerdefinierte Regeln erstellen, die auf spezifische Anwendungsanforderungen zugeschnitten sind, und so eine granulare Kontrolle über Sicherheitsmaßnahmen ermöglichen. - Echtzeitüberwachung und Protokollierung: Integriert mit Azure Monitor bietet Azure WAF detaillierte Protokollierung und Echtzeitüberwachung von Sicherheitsereignissen, was eine schnelle Erkennung und Reaktion auf potenzielle Bedrohungen ermöglicht. - Flexible Bereitstellungsoptionen: Azure WAF kann mit Azure Application Gateway, Azure Front Door und Azure CDN bereitgestellt werden und bietet vielseitige Optionen, um verschiedenen architektonischen Anforderungen gerecht zu werden. - Bot-Schutz und DDoS-Abwehr: Der Dienst umfasst Funktionen zur Erkennung und Blockierung von bösartigem Bot-Verkehr und bietet Schutz gegen Distributed Denial of Service-Angriffe am Netzwerkrand. Primärer Wert und gelöstes Problem: Azure Web Application Firewall adressiert das kritische Bedürfnis nach robuster Webanwendungssicherheit, indem es zentralisierten Schutz gegen eine Vielzahl von webbasierten Angriffen bietet. Durch die Nutzung von verwalteten und benutzerdefinierten Regelsets, Echtzeitüberwachung und nahtlose Integration mit anderen Azure-Diensten vereinfacht Azure WAF das Sicherheitsmanagement, reduziert das Risiko von Datenverletzungen und gewährleistet die kontinuierliche Verfügbarkeit von Webanwendungen. Dieser umfassende Ansatz ermöglicht es Organisationen, sich auf die Bereitstellung ihrer Dienste zu konzentrieren, ohne Kompromisse bei der Sicherheit einzugehen.

**Average Rating:** 4.4/5.0

**Total Reviews:** 31

#### How Do G2 Users Rate Azure Web Application Firewall?

- **War the product ein guter Geschäftspartner?:** 9.1/10 (Category avg: 8.8/10)
- **Verkehrskontrollen:** 8.1/10 (Category avg: 9.2/10)
- **Sicherheitsüberwachung:** 8.5/10 (Category avg: 9.1/10)
- **Problemverfolgung:** 8.1/10 (Category avg: 8.7/10)

#### Who Is the Company Behind Azure Web Application Firewall?

- **Verkäufer:** [Microsoft](https://www.g2.com/de/sellers/microsoft)
- **Gründungsjahr:** 1975
- **Hauptsitz:** Redmond, Washington
- **Twitter:** @microsoft  
13,091,739 Twitter-Follower
- **LinkedIn®-Seite:** [www.linkedin.com](https://www.g2.com/de/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=9458f51bd6ded48ad432a804f19ad736469f007787569b63827154231c315630&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fmicrosoft%2F&secure%5Burl_type%5D=linkedin_company_website)  
231,632 Mitarbeiter\*innen auf LinkedIn®
- **Eigentum:** MSFT

#### Who Uses This Product?

- **Top Industries:** Informationstechnologie und Dienstleistungen
- **Company Size:** 42% Large, 42% Medium

#### What Are Recent G2 Reviews of Azure Web Application Firewall?

**["Azure - WAF (Web Application Firewall)"](https://www.g2.com/de/survey_responses/azure-web-application-firewall-review-6498296)**

**Rating:** 4.5/5.0 stars

_— Verifizierter Benutzer in Informationstechnologie und Dienstleistungen_

[Read full review](https://www.g2.com/de/survey_responses/azure-web-application-firewall-review-6498296)

**["Teuer, aber erstklassig."](https://www.g2.com/de/survey_responses/azure-web-application-firewall-review-7304324)**

**Rating:** 4.5/5.0 stars

_— parth k._

[Read full review](https://www.g2.com/de/survey_responses/azure-web-application-firewall-review-7304324)

#### What Are G2 Users Discussing About Azure Web Application Firewall?

- [What are the features of WAF?](https://www.g2.com/de/discussions/azure-web-application-firewall-what-are-the-features-of-waf)
- [Haben Azure-Web-Apps eine Firewall?](https://www.g2.com/de/discussions/do-azure-web-apps-have-firewall) - 1 comment
- [Which Azure service provides the Web application firewall functionality?](https://www.g2.com/de/discussions/which-azure-service-provides-the-web-application-firewall-functionality) - 1 comment

### [Barracuda Web Application Firewall](https://www.g2.com/de/products/barracuda-web-application-firewall/reviews)

Die Barracuda Web Application Firewall (WAF) ist speziell dafür entwickelt, Ihre Web-, Mobil- und API-Anwendungen vor den fortschrittlichsten Bedrohungen von heute zu schützen. Sie hilft, Datenverletzungen zu verhindern und die Geschäftskontinuität zu gewährleisten, indem sie OWASP Top 10-Angriffe, L4–L7 DDoS, Zero-Day-Exploits und mehr blockiert. Mit dem fortschrittlichen Bot-Schutz, der durch cloudbasiertes maschinelles Lernen unterstützt wird, erkennt und stoppt die Barracuda WAF bösartige Bots, die für Web-Scraping, Credential Stuffing und Kontoübernahmeversuche verantwortlich sind, bevor sie Schaden anrichten können. Flexible Bereitstellungsoptionen umfassen Hardware-Appliances, virtuelle Maschinen, öffentliche Cloud-Plattformen und Container – so können Sie Ihre Anwendungen sichern, wo immer sie sich befinden.

**Average Rating:** 4.3/5.0

**Total Reviews:** 13

#### How Do G2 Users Rate Barracuda Web Application Firewall?

- **War the product ein guter Geschäftspartner?:** 8.7/10 (Category avg: 8.8/10)
- **Verkehrskontrollen:** 8.3/10 (Category avg: 9.2/10)
- **Sicherheitsüberwachung:** 8.8/10 (Category avg: 9.1/10)
- **Problemverfolgung:** 5.8/10 (Category avg: 8.7/10)

#### Who Is the Company Behind Barracuda Web Application Firewall?

- **Verkäufer:** [Barracuda](https://www.g2.com/de/sellers/barracuda)
- **Gründungsjahr:** 2002
- **Hauptsitz:** Campbell, CA
- **Twitter:** @Barracuda  
15,239 Twitter-Follower
- **LinkedIn®-Seite:** [www.linkedin.com](https://www.g2.com/de/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=f781b15d43db259998c089a305a16438e46ef7f458b40ed200cb81a2a683bea5&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fbarracuda-networks%2F&secure%5Burl_type%5D=linkedin_company_website)  
2,248 Mitarbeiter\*innen auf LinkedIn®
- **Eigentum:** Private

#### Who Uses This Product?

- **Company Size:** 64% Medium, 21% Large

#### What Do G2 Reviewers Say About Barracuda Web Application Firewall?

_AI-generated summary from verified user reviews_

##### Pros

- Benutzer schätzen die **einfache Konfiguration** der Barracuda Web Application Firewall, was ihre Einrichtung und Verwaltungserfahrung verbessert.
- Benutzer loben den **mehrschichtigen Schutz** der Barracuda Web Application Firewall, der umfassende Sicherheit für Web-Apps und APIs gewährleistet.
- Benutzer schätzen den **mehrschichtigen Schutz** der Barracuda Web Application Firewall, der die Sicherheit für sensible Daten und die Einhaltung von Vorschriften verbessert.
- Benutzer schätzen die **Verwaltungseffizienz** der Barracuda Web Application Firewall und finden sie einfach zu konfigurieren und zu verwalten.
- Benutzer schätzen die **einfache Einrichtung und Verwaltung** der Barracuda Web Application Firewall, was ihre Gesamterfahrung vereinfacht.

##### Cons

- Benutzer erleben **falsche Positive** mit der Barracuda Web Application Firewall, was zu inkonsistenter Bedrohungserkennung und manuellen Überprüfungen führt.
- Benutzer erleben **schlechten Kundensupport** und sind oft mit Verzögerungen bei der Behebung technischer Probleme mit der Barracuda Web Application Firewall konfrontiert.

#### What Are Recent G2 Reviews of Barracuda Web Application Firewall?

**["Sichere, einfach zu verwaltende Firewall-Lösung"](https://www.g2.com/de/survey_responses/barracuda-web-application-firewall-review-12342462)**

**Rating:** 4.5/5.0 stars

_— Muhammad W._

[Read full review](https://www.g2.com/de/survey_responses/barracuda-web-application-firewall-review-12342462)

**["Eine großartige intelligente Firewall für alle Bedürfnisse"](https://www.g2.com/de/survey_responses/barracuda-web-application-firewall-review-4660563)**

**Rating:** 5.0/5.0 stars

_— Pranav k._

[Read full review](https://www.g2.com/de/survey_responses/barracuda-web-application-firewall-review-4660563)

#### What Are G2 Users Discussing About Barracuda Web Application Firewall?

- [What does Barracuda software do?](https://www.g2.com/de/discussions/barracuda-web-application-firewall-what-does-barracuda-software-do)
- [What is Barracuda WAF as-a-Service is main advantage to customers?](https://www.g2.com/de/discussions/what-is-barracuda-waf-as-a-service-is-main-advantage-to-customers)
- [What is Barracuda Web Application Firewall?](https://www.g2.com/de/discussions/what-is-barracuda-web-application-firewall)
- [What are the features of WAF?](https://www.g2.com/de/discussions/barracuda-web-application-firewall-what-are-the-features-of-waf)

### [Google Cloud Armor](https://www.g2.com/products/google-cloud-armor/reviews)

Google Cloud Armor is a comprehensive security solution designed to protect applications and websites from a variety of threats, including distributed denial-of-service (DDoS) attacks and common web vulnerabilities. Leveraging Google's global infrastructure, Cloud Armor offers robust defenses to ensure the availability and security of online services. Key Features and Functionality: - Built-in DDoS Defense: Provides automatic protection against Layer 3 and Layer 4 DDoS attacks, benefiting from Google's extensive experience in safeguarding major internet properties. - Adaptive Protection: Utilizes machine learning to detect and mitigate high-volume Layer 7 DDoS attacks, analyzing traffic patterns in real-time to identify and respond to threats. - Pre-configured WAF Rules: Offers out-of-the-box web application firewall rules based on industry standards to defend against common vulnerabilities, such as cross-site scripting (XSS) and SQL injection (SQLi) attacks. - Bot Management: Integrates with reCAPTCHA Enterprise to provide automated protection against malicious bots, helping to prevent fraud and abuse at the edge of the network. - Rate Limiting: Implements rate-based rules to control the volume of incoming requests, protecting applications from being overwhelmed by excessive traffic and ensuring access for legitimate users. Primary Value and User Solutions: Google Cloud Armor delivers enterprise-grade protection by combining DDoS defense and web application firewall capabilities at a predictable monthly price. It addresses critical security challenges by mitigating the OWASP Top 10 risks and providing adaptive, machine learning-based defenses against sophisticated attacks. By integrating seamlessly with Google's global load balancing infrastructure, Cloud Armor ensures that applications remain secure and available, regardless of deployment environment—be it on-premises, in the cloud, or in a hybrid setup.

**Average Rating:** 4.0/5.0

**Total Reviews:** 23

#### How Do G2 Users Rate Google Cloud Armor?

- **Has the product been a good partner in doing business?:** 8.5/10 (Category avg: 8.8/10)

#### Who Is the Company Behind Google Cloud Armor?

- **Seller:** [Google](https://www.g2.com/sellers/google)
- **Year Founded:** 1998
- **HQ Location:** Mountain View, CA
- **Twitter:** @google  
31,899,995 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=fe4a5936665c9702418dd53c477fef5a7baea08078bb117ed67e966fc581b9ec&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F1441%2F&secure%5Burl_type%5D=linkedin_company_website)  
341,888 employees on LinkedIn®
- **Ownership:** NASDAQ:GOOG

#### Who Uses This Product?

- **Top Industries:** Computer & Network Security
- **Company Size:** 52% Small, 39% Large

#### What Do G2 Reviewers Say About Google Cloud Armor?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **flexible pricing** of Google Cloud Armor, benefiting from substantial long-term savings.
- Users appreciate the **scalability** of Google Cloud Armor, allowing for easy adjustment of resources as needed.
- Users value the **advanced security and built-in compliance** features of Google Cloud Armor for robust protection.

##### Cons

- Users find the **complexity of pricing** and support plans a barrier to fully utilizing Google Cloud Armor.
- Users find the **cost issues** of Google Cloud Armor complex, with pricey support plans and limited enterprise tools.
- Users find the **limited availability** of Google Cloud Armor frustrating compared to alternatives like AWS.
- Users note the **limited features** of Google Cloud Armor, particularly in enterprise tools compared to competitors.
- Users find the **time-consumption** of learning Google Cloud Armor to be a significant challenge in their experience.

#### What Are Recent G2 Reviews of Google Cloud Armor?

**["High Availability Cloud for Faster Computing"](https://www.g2.com/survey_responses/google-cloud-armor-review-10979721)**

**Rating:** 4.0/5.0 stars

_— Verified User in Information Technology and Services_

[Read full review](https://www.g2.com/survey_responses/google-cloud-armor-review-10979721)

**["Ease of Deployment and Setup versus competitors"](https://www.g2.com/survey_responses/google-cloud-armor-review-6813556)**

**Rating:** 4.0/5.0 stars

_— Suman M._

[Read full review](https://www.g2.com/survey_responses/google-cloud-armor-review-6813556)

#### What Are G2 Users Discussing About Google Cloud Armor?

- [What is cloud Armour in GCP?](https://www.g2.com/discussions/google-cloud-armor-what-is-cloud-armour-in-gcp)
- [What is cloud Armour in GCP?](https://www.g2.com/discussions/what-is-cloud-armour-in-gcp)
- [Which Google Cloud features could help prevent DDoS attacks?](https://www.g2.com/discussions/which-google-cloud-features-could-help-prevent-ddos-attacks)
- [How does cloud Armor work?](https://www.g2.com/discussions/how-does-cloud-armor-work)
- [What is Google Cloud armor?](https://www.g2.com/discussions/what-is-google-cloud-armor) - 1 comment

### [F5 NGINX](https://www.g2.com/de/products/f5-nginx/reviews)

NGINX, Inc. ist das Unternehmen hinter NGINX, dem beliebten Open-Source-Projekt, dem mehr als 400 Millionen Websites vertrauen. Wir bieten eine Reihe von Technologien zur Entwicklung und Bereitstellung moderner Anwendungen. Die NGINX Application Platform ermöglicht es Unternehmen, die sich im digitalen Wandel befinden, veraltete, monolithische Anwendungen zu modernisieren und neue, auf Microservices basierende Anwendungen bereitzustellen. Unternehmen wie Netflix, Starbucks und McDonalds verlassen sich auf NGINX, um Kosten zu senken, die Widerstandsfähigkeit zu verbessern und Innovationen zu beschleunigen. Zu den Investoren von NGINX gehören Blue Cloud Ventures, e.ventures, Goldman Sachs, Index Ventures, MSD Capital, NEA, Runa Capital und Telstra Ventures. NGINX, Inc. hat seinen Hauptsitz in San Francisco, CA, mit einem EMEA-Hauptbüro in Cork, Irland, und einem APAC-Hauptbüro in Singapur. Erfahren Sie mehr unter https://www.nginx.com/

**Average Rating:** 4.6/5.0

**Total Reviews:** 112

#### How Do G2 Users Rate F5 NGINX?

- **War the product ein guter Geschäftspartner?:** 9.1/10 (Category avg: 8.8/10)
- **Verkehrskontrollen:** 9.0/10 (Category avg: 9.2/10)
- **Sicherheitsüberwachung:** 9.1/10 (Category avg: 9.1/10)
- **Problemverfolgung:** 8.9/10 (Category avg: 8.7/10)

#### Who Is the Company Behind F5 NGINX?

- **Verkäufer:** [F5](https://www.g2.com/de/sellers/f5-f6451ada-8c47-43f5-b017-58663a045bc5)
- **Hauptsitz:** Seattle, Washington
- **Twitter:** @F5Networks  
1,385 Twitter-Follower
- **LinkedIn®-Seite:** [www.linkedin.com](https://www.g2.com/de/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=c7f11d476d00d2f94515d8841a7c9d683a4303902a44318177a444690ba1c225&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F4841%2F&secure%5Burl_type%5D=linkedin_company_website)  
6,165 Mitarbeiter\*innen auf LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** Software-Ingenieur
- **Top Industries:** Informationstechnologie und Dienstleistungen, Computersoftware
- **Company Size:** 41% Small, 40% Medium

#### What Do G2 Reviewers Say About F5 NGINX?

_AI-generated summary from verified user reviews_

##### Pros

- Benutzer schätzen die **einfache Konfiguration** von F5 NGINX, da sie von einem reibungslosen plattformübergreifenden Installationsprozess profitieren.

#### What Are Recent G2 Reviews of F5 NGINX?

**["F5 NGINX: Goldstandard-Leistung für Reverse Proxying, Load Balancing und APIs"](https://www.g2.com/de/survey_responses/f5-nginx-review-13194443)**

**Rating:** 4.5/5.0 stars

_— Sanjay M._

[Read full review](https://www.g2.com/de/survey_responses/f5-nginx-review-13194443)

**["Steigert die Leistung mit Verkehrsmanagement"](https://www.g2.com/de/survey_responses/f5-nginx-review-13208434)**

**Rating:** 4.5/5.0 stars

_— Charles O._

[Read full review](https://www.g2.com/de/survey_responses/f5-nginx-review-13208434)

#### What Are G2 Users Discussing About F5 NGINX?

- [What is your experience regarding pricing and costs for F5 NGINX, and how does it compare to other web server solutions?](https://www.g2.com/de/discussions/what-is-your-experience-regarding-pricing-and-costs-for-f5-nginx-and-how-does-it-compare-to-other-web-server-solutions)
- [Wofür wird F5 NGINX verwendet?](https://www.g2.com/de/discussions/what-is-f5-nginx-used-for)
- [Wofür wird F5 NGINX Unit verwendet?](https://www.g2.com/de/discussions/what-is-f5-nginx-unit-used-for)
- [Kann ich nginx kostenlos nutzen?](https://www.g2.com/de/discussions/can-i-use-nginx-for-free) - 1 comment
- [What is Nginx and how it works?](https://www.g2.com/de/discussions/what-is-nginx-and-how-it-works)

- ‹ Prev ‹ Prev
- 1
- [2](/categories/web-application-firewall-waf?order=g2_score&page=2#product-list)
- [3](/categories/web-application-firewall-waf?order=g2_score&page=3#product-list)
- [4](/categories/web-application-firewall-waf?order=g2_score&page=4#product-list)
- [5](/categories/web-application-firewall-waf?order=g2_score&page=5#product-list)
- [6](/categories/web-application-firewall-waf?order=g2_score&page=6#product-list)
- [7](/categories/web-application-firewall-waf?order=g2_score&page=7#product-list)
- [Next › Next ›](/categories/web-application-firewall-waf?order=g2_score&page=2#product-list)

Spotlight Categories

[Cloud Infrastructure Monitoring Tools and Software](https://www.g2.com/categories/cloud-infrastructure-monitoring)

[Social Media Listening Tools](https://www.g2.com/categories/social-media-listening-tools)

[Compensation Management Software](https://www.g2.com/categories/compensation-management)

[Audit Management Software Solutions](https://www.g2.com/categories/audit-management)

[A/B Testing Tools](https://www.g2.com/categories/a-b-testing-tools)

Similar Categories

- [Static Code Analysis](/categories/static-code-analysis)
- [Container Security](/categories/container-security-tools)
- [Dynamic Application Security Testing (DAST)](/categories/dynamic-application-security-testing-dast)
- [Interactive Application Security Testing (IAST)](/categories/interactive-application-security-testing-iast)

- [Log Analysis](/categories/log-analysis)
- [Penetration Testing](/categories/penetration-testing-tools)
- [Secure Code Review](/categories/secure-code-review)
- [Software Bill of Materials (SBOM)](/categories/software-bill-of-materials-sbom)

- [Software Composition Analysis](/categories/software-composition-analysis)
- [Static Application Security Testing (SAST)](/categories/static-application-security-testing-sast)
- [Vulnerability Scanner](/categories/vulnerability-scanner)

[Browse Web Application Firewall (WAF) Themes](/categories/web-application-firewall-waf/themes)

 ![Lauren Worth](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Lauren Worth")
LW

Researched and written by [Lauren Worth](https://research.g2.com/insights/author/lauren-worth)

Updated January 22, 2025

Web application firewalls (WAF) are designed to protect web applications by filtering and monitoring incoming traffic. These tools analyze the hypertext transfer protocol (HTTP) traffic as it comes in, identifying traffic anomalies and blocking potentially malicious traffic.

Companies use these tools in conjunction with additional [application security software](https://www.g2.com/categories/application-security) to protect operational web applications better. These tools differ from traditional [firewall software](https://www.g2.com/categories/firewall-software), which controls traffic between servers by filtering traffic and content attempting to access a specific web-based application.

To qualify for inclusion in the Web Application Firewalls (WAF) category, a product must:

- Inspect traffic flow at the application level
- Filter HTTP traffic for web-based applications
- Block attacks such as SQL injections and cross-site scripting (XSS)

Show More

### Web Application Firewall (WAF) Topics

- [What is Web Application Firewall (WAF) Software?](#what-is-web-application-firewall-waf-software)
- [Why Use Web Application Firewall (WAF) Software?](#why-use-web-application-firewall-waf-software)
- [Who Uses Web Application Firewall (WAF) Software?](#who-uses-web-application-firewall-waf-software)
- [Web Application Firewall (WAF) Software Features](#web-application-firewall-waf-software-features)
- [Software and Services Related to Web Application Firewall (WAF) Software](#software-and-services-related-to-web-application-firewall-waf-software)

[
### Web Application Firewall (WAF) Topics
 Expand/Collapse ](#)
- [What is Web Application Firewall (WAF) Software?](#what-is-web-application-firewall-waf-software)
- [Why Use Web Application Firewall (WAF) Software?](#why-use-web-application-firewall-waf-software)
- [Who Uses Web Application Firewall (WAF) Software?](#who-uses-web-application-firewall-waf-software)
- [Web Application Firewall (WAF) Software Features](#web-application-firewall-waf-software-features)
- [Software and Services Related to Web Application Firewall (WAF) Software](#software-and-services-related-to-web-application-firewall-waf-software)

## Learn More About Web Application Firewalls (WAF)

### What is Web Application Firewall (WAF) Software?
 

WAF software products are used to protect web applications and websites from threats or attacks. The firewall monitors traffic between users, applications, and other internet sources. They're effective in defending against cross-site forgery, cross-site scripting (XSS attacks), SQL injection, DDoS attacks, and many other kinds of attacks.

 

These software solutions provide automatic defense and allow administrative control over rule sets and customization since some applications may have unique traffic trends, zero-day threats, or web application vulnerabilities. These tools also provide logging features to document and analyze attacks, incidents, and normal application behaviors.

 

Companies with web applications should use WAF tools to ensure all weak spots in the application itself are filled. Without WAF, many threats may go undetected, and data leakage may occur. They have truly become an obligatory component of any business-critical web application containing sensitive information.

 

Key Benefits of Web Application Firewall (WAF) Software

 
- Protection against web-based threats
- Historical documentation of incidents and events
- Elastic, scalable web application protection

 

 

### Why Use Web Application Firewall (WAF) Software?
 

There are a variety of benefits associated with WAF tools and ways they can boost security of applications deployed online. Most of the reasoning behind WAF usage is the generally accepted belief that web-based threats should be a concern for all businesses. Therefore, all businesses deploying web-based applications should be sure they are doing all they can to defend against the myriad cyberthreats that exist today.

 

Some of the numerous threats WAF products can help defend against include:

 
- **Cross-Site Scripting (XSS) —** Cross-site scripting (XSS) is an attack where a malicious script is injected into websites using a web application to send malicious code. Malicious scripts can be used to access information such as cookies, session tokens, and other sensitive data collected by web browsers.
- **Injection Flaws —** Injection flaws are vulnerabilities which allow attackers to send code through an application to another system. The most common type is a SQL injection. In this scenario, an attacker finds a point in which the web application passes through a database, executes their code, and can begin querying whatever information they want.
- **Malicious File Execution —** Malicious file execution is accomplished when an attacker is able to input malicious files that are uploaded to the web server or application server. These files can be executed upon upload and completely compromise an application server.
- **Insecure Direct Object Reference —** Insecure direct object reference occurs when user input can directly access an application's internal components. These vulnerabilities can allow attackers to bypass security protocols and access resources, files, and data directly.
- **Cross-Site Request Forgery (CSRF) —** CSRF attacks force users to execute actions on a web application the user has permission to access. These actions can force users to unwillingly submit requests that may damage the web application or change their credentials to something the attacker can reuse to gain access to an application at a future date.
- **Information Leakage —** Information leakage can occur when unauthorized parties are able to access databases or visit URLs that are not linked from the site. Attackers may be capable of accessing sensitive files such as password backups or unpublished documents.
- **Improper Error Handling —** Error handling refers to preprogrammed measures that allow applications to dismiss unexpected events without exposing sensitive information. Improper error handling leads to a number of various issues, including the release of data, vulnerability exposure, and application failure.
- **Broken Authentication —** Broken authentication is the result of improper credential management functions. If authentication measures fail to function, attackers can walk by security measures without the valid identification. This can lead to attackers gaining direct access to entire networks, servers, and applications.
- **Session Management —** Session management errors occur when attackers manipulate or capture the tokenized ID provided to authenticated visitors. Attackers can impersonate generic users or target privileged users to gain access control and hijack an application.
- **Insecure Cryptographic Storage —** Cryptographic storage is used to authenticate and protect communications online. Attackers may identify and obtain unencrypted or poorly encrypted resources that may contain sensitive information. Proper encryption typically protects against this, but poor key storage, weak algorithms, and flawed key generation may put sensitive data at risk.
- **Insecure Communications —** Insecure communications occur when messages exchanged between clients and servers becomes visible. Poor network firewalls and network security policies can lead to easy access for attackers by gaining access to a local network or carrier device or installing malware on a device. Once applications are exploited, individual user information and other sensitive data becomes extremely vulnerable.
- **Failure to Restrict URL Access —** Applications may fail to restrict URL access to unauthorized parties who attempt to visit unlinked URLs or files without permission. Attackers may bypass security by directly accessing URLs containing sensitive information or data files. URL restriction can be accomplished by utilizing page tokens or encrypting URLs to restrict access unless they visit restricted pages through approved navigational paths.

 

 

### Who Uses Web Application Firewall (WAF) Software?
 

The actual individuals using application firewalls are software developers and security professionals. The developer will typically build and implement the firewall, while it is maintained and monitored by security operations teams. Still, there are a few industries that may be more inclined to use WAF tools for various purposes.

 

**Internet Businesses —** Internet businesses are a natural fit for WAF tools. They often have one or multiple public-facing web applications and various internal web apps for employee use. Both of these kinds of applications should be guarded by some kind of firewall, as well as additional layers of security. While nearly all modern businesses use web applications in some capacity, internet-centric businesses are more susceptible to attacks simply because they likely possess more web apps.

 

**E-Commerce Professionals —** E-commerce professionals and e-commerce businesses that build their own online tools should be using WAF technology. Many e-commerce applications are managed by some kind of SaaS provider, but custom-built tools are incredibly vulnerable without an application firewall. E-commerce businesses who fail to protect their applications put the data of their visitors, customers, and business on the line.

 

**Compliant-Required Industries —** Industries that require a higher level of compliance for data security should use a web application firewall for any application that communicates with a server or network with access to sensitive information. The most common business types with increased compliance requirements include health care, insurance, and energy industries. But many countries and localities have expanded IT compliance requirements across industries to prevent data breaches and the release of sensitive information.

 

 

### Web Application Firewall (WAF) Software Features

Some WAF products may be geared toward specific applications, but most share a similar set of core security features and capabilities. The following are a handful of common features to look for when considering the adoption of WAF tools.

**Logging and Reporting —** Provides required reports to manage the business. Provides adequate logging to troubleshoot and support auditing.

**Issue Tracking —** Tracks security issues as they arise and manages various aspects of the mitigation process.

**Security Monitoring —** Detects anomalies in functionality, user accessibility, traffic flows, and tampering.

**Reporting and Analytics —** Provides documentation and analytical capabilities for data gathered by the WAF product.

**Application-Layer Control —** Gives user-configurable WAF rules, such as application control requests, management protocols, and authentication policies, to increase security.

**Traffic Control —** Limits access to suspicious visitors and monitors for traffic spikes to prevent overloads like DDoS attacks.

**Network Control —** Lets users provision networks, deliver content, balance loads, and manage traffic.

### Software and Services Related to Web Application Firewall (WAF) Software

There are a number of security tools that provide similar functionality to web application firewall software but operate in a different capacity. Similar technologies used to protect against web-based threats include:

[**Firewall Software**](https://www.g2.com/categories/firewall) **—** Firewalls come in many forms. For example, a network firewall is used to restrict access to a local computer network. Server firewalls restrict access to a physical server. There are a number of firewall varieties designed to protect against various threats, attacks, and vulnerabilities, but WAF software is specifically designed to protect web applications and the various databases, networks, and servers they communicate with.

[**DDoS Protection Software**](https://www.g2.com/categories/ddos-protection) **—** DDoS attacks refer to the bombardment of a website with enormous loads of malicious traffic, typically in the form of a botnet. DDoS protection tools monitor traffic for abnormalities and restrict access when malicious traffic is detected. These tools protect websites from a specific kind of attack but do not protect web applications from a number of different attacks.

[**Application Shielding Software**](https://www.g2.com/categories/application-shielding) **—** Application shielding technology is used to increase security at an application’s core. Like an application firewall, these tools can help prevent against malicious code injections and data leakage events. But these tools are typically used as an additional layer of application security to protect against threats and keep applications secure if the firewall has been bypassed.

[**Bot Detection and Mitigation Software**](https://www.g2.com/categories/bot-detection-and-mitigation) **—** Bot detection and mitigation tools are used to protect against bot-based attacks, similar to DDoS protection tools. But bot detection products typically add a level of detection for fraudulent transactions and other bot activity in addition to DDoS protection.These tools can prevent unauthorized network access and activity, like a firewall, but limit detection to bot-based threats.

[**Website Security Software**](https://www.g2.com/categories/website-security) **—** Website security tools often include a web application firewall in addition to a few other security tools meant to protect websites. They are often paired with an application-level antivirus, secure content delivery network, and DDoS protection tools.