I was looking for a managed rule group to use for my AWS WAF, and Cloudbric Managed Rules - OWASP Top 10 rule set showed the best detection rate. It was very easy to implement, as it only required me to subscribe to the product and associate it with the web ACL. It seems to be covering most of the criteria of OWASP Top 10 web vulnerabilities, and it seems to be working well. When I had a question about the rules, the customer support responded quickly and provided me with thorough information. Review collected by and hosted on G2.com.

I don't have much complaints, other than the fact that it tends to over detect from time to time. However, this could be solved just by overriding the rule or changing the rule action to count, which is much less of a work than having to create a new rule to respond to threats that are not detected. Review collected by and hosted on G2.com.