Cloudflare WAF
Cloudflare WAF
Cloudflare WAF inspects and filters HTTP traffic to protect web applications from common vulnerabilities. It leverages threat intelligence from Cloudflare’s global network to update detection rules in real time.
Cloudflare WAF inspects and filters HTTP traffic to protect web applications from common vulnerabilities. It leverages threat intelligence from Cloudflare’s global network to update detection rules in real time.
Cost considerations
Cost considerations
Functionality
Functionality
Compatibility
Compatibility
User experience
User experience
Customer support
Customer support
Why these ratings?
Cyberse perspective
Cyberse perspective
Solution details
Market segment
Small business
Enterprise
Midmarket
Subcategory
Web Application Firewall
Key features
API access
Platform solution
Point solution
Integrations
Security automation
Vulnerability management
Cloud security
Data security
Deployment
Cloud-native
Pricing
Free trial available
Services support
In-house services
Managed services
Product features
Web Application Firewall (WAF)
Target industry
Technology
Public sector
Industrials
Healthcare
Retail
Manufacturing
Financial services
Cloud ecosystem partners
Amazon Web Services
Microsoft Azure Cloud
Google Cloud Platform
We use the following criteria to evaluate this product:
We use the following criteria to evaluate this product:
Cost considerations
Cloudflare WAF starts at $20 per month per domain with core protection and rule updates included, a fraction of the upfront or throughput fees charged by hardware WAFs and many cloud rivals. Extra fees apply only for specialist capabilities such as bot management, so overall spend stays predictable and lower than industry averages.
Cost considerations
Cloudflare WAF starts at $20 per month per domain with core protection and rule updates included, a fraction of the upfront or throughput fees charged by hardware WAFs and many cloud rivals. Extra fees apply only for specialist capabilities such as bot management, so overall spend stays predictable and lower than industry averages.
Functionality
Cloudflare WAF adds machine-learning anomaly detection to its signature-based rules, but it lacks integrated IPS, sandboxing, SD-WAN or other next-generation firewall functions, placing its feature depth in the middle of the market.
Functionality
Cloudflare WAF adds machine-learning anomaly detection to its signature-based rules, but it lacks integrated IPS, sandboxing, SD-WAN or other next-generation firewall functions, placing its feature depth in the middle of the market.
Compatibility
Cloudflare WAF runs entirely as a cloud reverse-proxy, so it protects apps in any hosting model but cannot be installed as an on-prem appliance or VM. Documented APIs and Logpush stream events into common SIEM tools with minimal setup, and IPv6 traffic is natively supported
Compatibility
Cloudflare WAF runs entirely as a cloud reverse-proxy, so it protects apps in any hosting model but cannot be installed as an on-prem appliance or VM. Documented APIs and Logpush stream events into common SIEM tools with minimal setup, and IPv6 traffic is natively supported
User experience
Cloudflare WAF’s cloud dashboard lets admins turn on protection and build rules in under an hour, as noted by Comparitech reviewers, and live traffic charts simplify ongoing monitoring. Some G2 users mention that finding certain advanced settings requires extra clicks, showing small usability quirks but not roadblocks
User experience
Cloudflare WAF’s cloud dashboard lets admins turn on protection and build rules in under an hour, as noted by Comparitech reviewers, and live traffic charts simplify ongoing monitoring. Some G2 users mention that finding certain advanced settings requires extra clicks, showing small usability quirks but not roadblocks
Customer support
Cloudflare offers 24×7 phone, chat and email help, and the enterprise SLA pledges a sub-hour first response with a 15-minute median for critical cases. A sizable knowledge base and community forum provide round-the-clock self-service support. Forum posts show some lower-tier customers waiting days for answers, so assistance is strong but not uniformly ultra-fast, landing at a 4.
Customer support
Cloudflare offers 24×7 phone, chat and email help, and the enterprise SLA pledges a sub-hour first response with a 15-minute median for critical cases. A sizable knowledge base and community forum provide round-the-clock self-service support. Forum posts show some lower-tier customers waiting days for answers, so assistance is strong but not uniformly ultra-fast, landing at a 4.