Best Web Application Firewalls (WAF) for Small Business

How Many Web Application Firewalls (WAF) Products Does G2 Track?

Total Products under this Category: 99

Category Stats (Oct 2026)

  • Average Rating: 4.45/5 The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: Fortinet Managed Rules for AWS WAF (+1.85%) - Among all products in this category, Fortinet Managed Rules for AWS WAF recorded the largest rating increase compared to last month

Last updated: October 07, 2026

How Does G2 Rank Web Application Firewalls (WAF) Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 3,400+ Authentic Reviews
  • 99+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Web Application Firewalls (WAF)

G2 Grid® for Web Application Firewalls (WAF) plotting products by satisfaction and market presence

Highlighted products: Cloudflare Application Security and Performance, Fortinet Managed Rules for AWS WAF, Check Point WAF (formerly CloudGuard WAF), AWS WAF, Radware Cloud WAF, HAProxy, Azure Application Gateway, and Imperva Web Application Firewall (WAF).

Underlying data: [Grid® JSON](https://www.g2.com/categories/web-application-firewall-waf/grids.json?focus%5B%5D=cloudflare-application-security-and-performance&focus%5B%5D=fortinet-managed-rules-for-aws-waf&focus%5B%5D=check-point-waf-formerly-cloudguard-waf&focus%5B%5D=aws-waf&focus%5B%5D=radware-cloud-waf&focus%5B%5D=haproxy&focus%5B%5D=azure-application-gateway&focus%5B%5D=imperva-web-application-firewall-waf&segment=small-business)

Cloudflare Application Security and Performance

Cloudflare is the connectivity cloud for the "everywhere world," on a mission to help build a better Internet. We provide a unified platform of networking, security, and developer services delivered from a single, intelligent global network that spans hundreds of cities in over 125 countries. This empowers organizations of all sizes, from small businesses to the world's largest enterprises, to make their employees, applications, and networks faster and more secure everywhere, while significantly reducing complexity and cost. Our comprehensive platform includes: - Advanced Security: Protect your online presence with industry-leading DDoS protection, a robust Web Application Firewall (WAF), Bot mitigation, and API security. Implement Zero Trust security to secure remote access, data, and applications for your entire workforce. - Superior Performance: Accelerate website and application loading times globally with our Content Delivery Network (CDN), intelligent DNS, and smart routing capabilities. Optimize images and deliver dynamic content with unparalleled speed. - Powerful Developer Tools: Empower your developers to build and deploy full-stack applications at the edge using Cloudflare Workers (serverless functions), R2 Storage (object storage without egress fees), and D1 (serverless SQL database). Cloudflare helps connect and protect millions of customers globally, offering the control, visibility, and reliability businesses need to work, develop, and accelerate their operations in today's hyperconnected landscape. Our global network continuously learns and adapts, ensuring your digital assets are always protected and performing at their best.

Average Rating: 4.5/5.0

Total Reviews: 754

How Do G2 Users Rate Cloudflare Application Security and Performance?

  • Has the product been a good partner in doing business?: 8.8/10 (Category avg: 8.8/10)
  • Traffic Controls: 9.0/10 (Category avg: 9.2/10)
  • Security Monitoring: 9.0/10 (Category avg: 9.1/10)
  • Issue Tracking: 8.5/10 (Category avg: 8.7/10)

Who Is the Company Behind Cloudflare Application Security and Performance?

  • Seller: Cloudflare, Inc.
  • Company Website:
  • Year Founded: 2009
  • HQ Location: San Francisco, California
  • Twitter: @Cloudflare
    286,254 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    8,094 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Web Developer, Software Engineer
  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 62% Small, 27% Medium

What Do G2 Reviewers Say About Cloudflare Application Security and Performance?

AI-generated summary from verified user reviews

Pros
  • Users value the robust security features of Cloudflare, appreciating its effective protection against attacks and fast page loads.
  • Users appreciate the user-friendly interface of Cloudflare, making management of security and performance settings effortless.
  • Users appreciate the user-friendly interface of Cloudflare, making security and performance management easy and efficient.
  • Users appreciate the enhanced site performance provided by Cloudflare, leading to faster page load times and improved security.
  • Users value Cloudflare's DDoS protection, as it effectively secures websites and significantly improves page load times.
Cons
  • Users find the complex user interface of Cloudflare challenging, often leading to confusion and a steep learning curve.
  • Users find the high pricing for advanced features to be a significant drawback, restricting access to essential tools.
  • Users find the complex setup challenging, particularly with advanced configurations that require extra time and support.
  • Users find the complexity of advanced configurations challenging, impacting user-friendliness for those new to security platforms.
  • Users experience a steep learning curve for advanced features in Cloudflare Application Security and Performance, complicating user experience.

What Are Recent G2 Reviews of Cloudflare Application Security and Performance?

What Are G2 Users Discussing About Cloudflare Application Security and Performance?

Fortinet Managed Rules for AWS WAF

Fortinet’s WAF rulesets are additional security signatures that can be used to enhance the protections included in the base AWS WAF product. They are updated on a regular basis to include the latest threat intelligence from the award-winning FortiGuard Labs. The Complete OWASP Top 10 Ruleset provides a comprehensive package for web application protection offered by Fortinet to help address the OWASP Top 10 web application threats. Includes protection for various Injection attacks such as SQL and command Injection , Cross Site Scripting, General and Known Exploits, Malicious Bots and Common Vulnerabilities and Exposures (CVE).

Average Rating: 4.3/5.0

Total Reviews: 42

How Do G2 Users Rate Fortinet Managed Rules for AWS WAF?

  • Has the product been a good partner in doing business?: 8.9/10 (Category avg: 8.8/10)
  • Traffic Controls: 10.0/10 (Category avg: 9.2/10)
  • Security Monitoring: 9.4/10 (Category avg: 9.1/10)
  • Issue Tracking: 8.3/10 (Category avg: 8.7/10)

Who Is the Company Behind Fortinet Managed Rules for AWS WAF?

  • Seller: Fortinet
  • Company Website:
  • Year Founded: 2000
  • HQ Location: Sunnyvale, CA
  • Twitter: @Fortinet
    151,422 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    16,564 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 48% Small, 30% Medium

What Do G2 Reviewers Say About Fortinet Managed Rules for AWS WAF?

AI-generated summary from verified user reviews

Pros
  • Users value the comprehensive and robust security provided by Fortinet's Managed Rules for AWS WAF, ensuring strong protection.
  • Users find the ease of implementation of Fortinet Managed Rules for AWS WAF invaluable for enhancing security effortlessly.
  • Users value the comprehensive protection of Fortinet Managed Rules, ensuring robust security against various evolving threats.
  • Users appreciate the easy integrations of Fortinet Managed Rules for AWS WAF, simplifying security for API Gateway deployments.
  • Users commend the ease of implementation of Fortinet Managed Rules, simplifying the setup process for AWS WAF.
Cons
  • Users express concerns over pricing issues with Fortinet Managed Rules, especially for smaller organizations with limited budgets.
  • Users may face a difficult setup process for Fortinet's Managed Rules, especially when unfamiliar with AWS WAF.
  • Users express concerns about the expensive nature of Fortinet Managed Rules for AWS WAF, impacting overall value.
  • Users experience a challenging learning curve with Fortinet Managed Rules, particularly if they're new to WAF management.

What Are Recent G2 Reviews of Fortinet Managed Rules for AWS WAF?

Check Point WAF (formerly CloudGuard WAF)

CloudGuard WAF is a cloud-native Web and API security solution designed to help users safeguard their applications from both known and unknown threats. By leveraging advanced contextual AI, this solution provides precise threat prevention without the need for traditional signature-based detection methods. This innovative approach allows organizations to maintain a robust security posture while minimizing the risks associated with evolving cyber threats. Targeted primarily at businesses that rely on web applications and APIs, CloudGuard WAF is particularly beneficial for enterprises in sectors such as finance, healthcare, and e-commerce, where data protection is paramount. The solution is designed to address the complex security challenges that arise in modern application environments, especially those utilizing continuous integration and continuous deployment (CI/CD) practices. As organizations increasingly adopt cloud-native architectures, the need for flexible and efficient security solutions becomes critical. One of the standout features of CloudGuard WAF is its preemptive protection capabilities. By employing machine learning-based security measures, the solution can effectively prevent zero-day threats, which are vulnerabilities that have not yet been discovered or patched. This proactive approach eliminates the reliance on frequent signature updates, allowing organizations to stay ahead of potential attacks without the need for constant manual intervention. Moreover, CloudGuard WAF excels in precise detection, enabling it to identify a broader range of attacks while minimizing the need for ongoing fine-tuning and exception creation. This feature not only enhances the accuracy of threat detection but also reduces the operational burden on security teams, allowing them to focus on more strategic initiatives rather than routine adjustments. Designed with cloud-native principles in mind, CloudGuard WAF supports CI/CD-friendly deployment and automation. This means that organizations can easily integrate the solution into their existing workflows, from installation to upgrades and configuration. By utilizing declarative infrastructure-as-code or APIs, users can streamline their security processes, ensuring that their applications remain protected as they evolve. Overall, CloudGuard WAF represents a significant advancement in the realm of web and API security, offering organizations a sophisticated and adaptable solution to combat the ever-changing landscape of cyber threats. Its combination of preemptive protection, precise detection, and cloud-native design makes it a valuable asset for any organization looking to enhance its security posture in today's digital environment.

Average Rating: 4.3/5.0

Total Reviews: 90

How Do G2 Users Rate Check Point WAF (formerly CloudGuard WAF)?

  • Has the product been a good partner in doing business?: 8.6/10 (Category avg: 8.8/10)
  • Traffic Controls: 8.6/10 (Category avg: 9.2/10)
  • Security Monitoring: 9.3/10 (Category avg: 9.1/10)
  • Issue Tracking: 8.6/10 (Category avg: 8.7/10)

Who Is the Company Behind Check Point WAF (formerly CloudGuard WAF)?

Who Uses This Product?

  • Who Uses This: Software Engineer
  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 58% Medium, 27% Small

What Do G2 Reviewers Say About Check Point WAF (formerly CloudGuard WAF)?

AI-generated summary from verified user reviews

Pros
  • Users value the strong protection offered by Check Point WAF, enhancing security against various web application threats.
  • Users commend the top-notch security of Check Point CloudGuard WAF, ensuring comprehensive protection across diverse environments effortlessly.
  • Users value the proactive AI-driven threat prevention of Check Point CloudGuard WAF, ensuring robust security effortlessly.
  • Users value the AI-driven threat prevention of Check Point CloudGuard WAF, offering seamless protection against various cyber threats.
  • Users commend Check Point WAF for its easy management across hybrid environments, enhancing efficiency and reducing operational burden.
Cons
  • Users find the complex setup challenging, making initial adoption and management of configurations difficult.
  • Users find Check Point WAF to be expensive, especially smaller teams, impacting their overall value and accessibility.
  • Users find the steep learning curve of Check Point WAF challenging, complicating the initial setup and usage.
  • Users face a difficult learning curve with Check Point WAF, making initial setup and navigation challenging for newcomers.
  • Users often find the user interface overwhelming, particularly during initial setup and while navigating complex features.

What Are Recent G2 Reviews of Check Point WAF (formerly CloudGuard WAF)?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works

AWS WAF

AWS WAF (Web Application Firewall) is a security service designed to protect web applications and APIs from common web exploits and bots that can compromise security, affect availability, or consume excessive resources. By enabling users to define customizable web security rules, AWS WAF allows precise control over which traffic to allow or block, ensuring robust protection tailored to specific application needs. Key Features and Functionality: - Customizable Security Rules: Users can create rules to filter web requests based on conditions such as IP addresses, HTTP headers, HTTP body, or custom URIs, allowing for tailored security measures. - Managed Rule Groups: AWS WAF offers pre-configured rule groups managed by AWS or AWS Marketplace sellers, providing protection against common threats like SQL injection and cross-site scripting (XSS). These rules are regularly updated to address emerging vulnerabilities. - Bot Control: The service includes capabilities to monitor, block, or rate-limit common and pervasive bots, helping to prevent automated attacks such as web scraping and credential stuffing. - Real-Time Monitoring and Logging: AWS WAF integrates with Amazon CloudWatch, offering real-time metrics and capturing detailed information about web requests. This visibility aids in analyzing traffic patterns and fine-tuning security settings. - DDoS Protection: When used in conjunction with AWS Shield, AWS WAF provides automatic protection against Distributed Denial of Service (DDoS) attacks, ensuring application availability during large-scale attack attempts. - Integration with AWS Services: AWS WAF seamlessly integrates with other AWS services such as Amazon CloudFront, Application Load Balancer, and Amazon API Gateway, enabling centralized security management across various applications. Primary Value and Problem Solved: AWS WAF addresses the critical need for robust web application security by providing a scalable and customizable firewall solution. It empowers organizations to protect their web applications and APIs from a wide range of threats, including common exploits and automated attacks, without compromising performance. By offering both managed and custom rule capabilities, AWS WAF enables businesses to implement security measures that align with their specific requirements. Its integration with other AWS services and real-time monitoring features further enhance an organization's ability to maintain a strong security posture, ensuring the availability and integrity of their web applications.

Average Rating: 4.3/5.0

Total Reviews: 65

How Do G2 Users Rate AWS WAF?

  • Has the product been a good partner in doing business?: 8.8/10 (Category avg: 8.8/10)
  • Traffic Controls: 8.7/10 (Category avg: 9.2/10)
  • Security Monitoring: 8.9/10 (Category avg: 9.1/10)
  • Issue Tracking: 8.1/10 (Category avg: 8.7/10)

Who Is the Company Behind AWS WAF?

  • Seller: Amazon Web Services (AWS)
  • Year Founded: 2006
  • HQ Location: Seattle, WA
  • Twitter: @awscloud
    2,232,483 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    148,266 employees on LinkedIn®
  • Ownership: NASDAQ: AMZN

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 36% Large, 35% Medium

What Do G2 Reviewers Say About AWS WAF?

AI-generated summary from verified user reviews

Pros
  • Users value the easy protection against common attacks provided by AWS WAF, enhancing website security effortlessly.
  • Users value the seamless cloud integration of AWS WAF, enhancing security with unified management and visibility.
  • Users appreciate the custom rules in AWS WAF for simplifying website protection against common attacks.
  • Users appreciate the ease of protecting websites from attacks like SQL injection and XSS with AWS WAF.
  • Users value the robust DDoS protection of AWS WAF, ensuring quick and effective mitigation against layer 7 attacks.
Cons
  • Users find the complex configuration challenging initially, along with confusing pricing for beginners.
  • Users find the pricing confusing for beginners, making AWS WAF feel expensive and complex to configure initially.
  • Users find the ineffective blocking of specific regions limits their ability for precise geographic access controls.

What Are Recent G2 Reviews of AWS WAF?

What Are G2 Users Discussing About AWS WAF?

Radware Cloud WAF

Radware Cloud WAF is a fully managed Cloud Application Protection Service providing the industry's most comprehensive web application security solution. The service integrates Radware's Cloud WAF, API Protection, Bot management, client-side and application layer DDoS protection in a single portal that provides security analytics, threat detection and real-time security feeds to protect applications against hacking, malicious bots, API exposure, Web DDoS attacks, supply chain attacks and other vulnerabilities.

Average Rating: 4.6/5.0

Total Reviews: 158

How Do G2 Users Rate Radware Cloud WAF?

  • Has the product been a good partner in doing business?: 8.9/10 (Category avg: 8.8/10)
  • Traffic Controls: 9.2/10 (Category avg: 9.2/10)
  • Security Monitoring: 9.3/10 (Category avg: 9.1/10)
  • Issue Tracking: 8.8/10 (Category avg: 8.7/10)

Who Is the Company Behind Radware Cloud WAF?

  • Seller: Radware
  • Company Website:
  • Year Founded: 1997
  • HQ Location: Tel Aviv, Tel Aviv
  • Twitter: @radware
    12,488 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    1,615 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 48% Medium, 41% Large

What Do G2 Reviewers Say About Radware Cloud WAF?

AI-generated summary from verified user reviews

Pros
  • Users value the dynamic protection and robust security features of Radware Cloud WAF, ensuring peace of mind.
  • Users value the strong AI-driven protection of Radware Cloud WAF, ensuring robust security with minimal performance impact.
  • Users appreciate the dynamic protection and AI-powered defense of Radware Cloud WAF, enhancing overall cybersecurity effortlessly.
  • Users praise the effective DDoS protection of Radware Cloud WAF, successfully mitigating attacks without impacting performance.
  • Users value the real-time monitoring of Radware Cloud WAF, ensuring robust protection against emerging threats and vulnerabilities.
Cons
  • Users find the difficult reporting aspect of Radware Cloud WAF limits usability and clarity for ongoing monitoring.
  • Users report a steep learning curve with Radware Cloud WAF, making it challenging for new users to utilize effectively.
  • Users find the complex configuration of Radware Cloud WAF challenging and time-consuming for optimal setup and tuning.
  • Users note a lack of customization options with Radware Cloud WAF, limiting adaptability to their specific needs.
  • Users find the user interface too complicated, requiring improvements for a more intuitive and user-friendly experience.

What Are Recent G2 Reviews of Radware Cloud WAF?

What Are G2 Users Discussing About Radware Cloud WAF?

HAProxy

HAProxy is an open-source software load balancer and reverse proxy for TCP, QUIC, and HTTP-based applications. It provides high availability, load balancing, and best-in-class SSL processing. HAProxy One is an application delivery and security platform that combines the HAProxy core with enterprise-grade security layers, management and orchestration, cloud-native integration, and more. Platform components: HAProxy Enterprise: a flexible data plane layer for TCP, UDP, QUIC, and HTTP-based applications that provides high-performance load balancing, high availability, an API/AI gateway, container networking, SSL processing, DDoS protection, bot detection and mitigation, global rate limiting, and a web application firewall (WAF). HAProxy Fusion: a scalable control plane that provides full-lifecycle management, observability, and automation of multi-cluster, multi-cloud, and multi-team HAProxy Enterprise deployments, with infrastructure integration for AWS, Kubernetes, Consul, and Prometheus. HAProxy Edge: a globally distributed application delivery network that provides fully managed application delivery and security services, a secure partition between external traffic and origin networks, and threat intelligence enhanced by machine learning that powers the security layers in HAProxy Fusion and HAProxy Enterprise. Learn more at HAProxy.com

Average Rating: 4.7/5.0

Total Reviews: 907

How Do G2 Users Rate HAProxy?

  • Has the product been a good partner in doing business?: 9.1/10 (Category avg: 8.8/10)
  • Traffic Controls: 9.0/10 (Category avg: 9.2/10)
  • Security Monitoring: 8.3/10 (Category avg: 9.1/10)
  • Issue Tracking: 8.2/10 (Category avg: 8.7/10)

Who Is the Company Behind HAProxy?

  • Seller: HAProxy
  • Company Website:
  • Year Founded: 2013
  • HQ Location: Newton, MA
  • Twitter: @HAProxy
    21,218 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    125 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: DevOps Engineer, Software Engineer
  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 42% Medium, 35% Large

What Do G2 Reviewers Say About HAProxy?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the easy implementation and effective workload balancing capabilities of HAProxy for traffic management.
  • Users find HAProxy to be exceptionally reliable and fast, enhancing their data security and operational efficiency.
  • Users appreciate the ease of use of HAProxy, finding its intuitive setup and stats page very helpful.
  • Users highlight HAProxy's high performance, appreciating its robust data transmission and seamless operations for reliable web management.
  • Users appreciate HAProxy for its high performance and low latency, making it a reliable choice for load balancing.
Cons
  • Users face difficult configuration challenges with HAProxy, struggling with complex syntax and readability of files.
  • Users find HAProxy's steep learning curve challenging, particularly for beginners in load balancing or networking.
  • Users find the complex setup of HAProxy challenging, requiring time and effort to overcome initial difficulties.
  • Users find the complex configuration of HAProxy to be challenging, particularly for newcomers to load balancing.
  • Users find HAProxy's complexity daunting, especially regarding configuration and debugging in advanced environments.

What Are Recent G2 Reviews of HAProxy?

What Are G2 Users Discussing About HAProxy?

Azure Application Gateway

Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications. Unlike traditional load balancers that operate at the transport layer (Layer 4), Application Gateway operates at the application layer (Layer 7), allowing it to make routing decisions based on attributes such as URL paths and host headers. This capability provides more control over how traffic is distributed to your applications, enhancing both performance and security. Key Features and Functionality: - Layer 7 Load Balancing: Routes traffic based on HTTP request attributes, enabling more precise control over traffic distribution. - Web Application Firewall (WAF): Protects applications from common web vulnerabilities like SQL injection and cross-site scripting by monitoring and filtering HTTP requests. - SSL/TLS Termination: Offloads SSL/TLS processing to the gateway, reducing the encryption and decryption overhead on backend servers. - Autoscaling: Automatically adjusts the number of gateway instances based on traffic load, ensuring optimal performance and cost efficiency. - Zone Redundancy: Distributes instances across multiple availability zones, enhancing resilience and availability. - URL Path-Based Routing: Directs requests to backend pools based on URL paths, allowing for efficient resource utilization. - Host Header-Based Routing: Routes traffic to different backend pools based on the host header, facilitating multi-site hosting. - Integration with Azure Services: Seamlessly integrates with Azure Traffic Manager for global load balancing and Azure Monitor for centralized monitoring and alerting. Primary Value and User Solutions: Azure Application Gateway provides a scalable and highly available solution for managing web application traffic. By operating at the application layer, it offers intelligent routing capabilities that enhance application performance and reliability. The integrated Web Application Firewall ensures robust security against common web threats, while features like SSL/TLS termination and autoscaling optimize resource utilization and reduce operational overhead. This comprehensive set of features addresses the needs of organizations seeking to build secure, scalable, and efficient web front ends in Azure.

Average Rating: 4.4/5.0

Total Reviews: 139

How Do G2 Users Rate Azure Application Gateway?

  • Has the product been a good partner in doing business?: 8.8/10 (Category avg: 8.8/10)
  • Traffic Controls: 9.4/10 (Category avg: 9.2/10)
  • Security Monitoring: 9.5/10 (Category avg: 9.1/10)
  • Issue Tracking: 8.5/10 (Category avg: 8.7/10)

Who Is the Company Behind Azure Application Gateway?

  • Seller: Microsoft
  • Year Founded: 1975
  • HQ Location: Redmond, Washington
  • Twitter: @microsoft
    13,091,739 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    232,750 employees on LinkedIn®
  • Ownership: MSFT

Who Uses This Product?

  • Who Uses This: DevOps Engineer, Software Engineer
  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 47% Large, 34% Medium

What Do G2 Reviewers Say About Azure Application Gateway?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the user-friendly and customizable dashboard of Azure Application Gateway, enhancing their overall experience effortlessly.
  • Users appreciate the perfect scalability of Azure Application Gateway, making it easy to adapt to changing needs.
  • Users appreciate the cost efficiency of Azure Application Gateway, enjoying its pricing model and scalability benefits.
  • Users value the high availability and cost efficiency of Azure Application Gateway, enhancing stability and supporting business growth.
  • Users commend Azure Application Gateway for its seamless integrations with Microsoft products, enhancing overall cloud transition and usability.
Cons
  • Users find the complexity of Azure challenging, struggling to choose optimal services and navigate the interface.
  • Users find the cost issues of Azure Application Gateway to be a significant drawback compared to other providers.
  • Users find the learning difficulty of Azure Application Gateway challenging, as it requires significant technical expertise to navigate.
  • Users find Azure Application Gateway not user-friendly, struggling with usability issues and a confusing interface for new users.
  • Users find the complexity issues of Azure Application Gateway overwhelming, creating challenges for new adopters and scaling services.

What Are Recent G2 Reviews of Azure Application Gateway?

What Are G2 Users Discussing About Azure Application Gateway?

Imperva Web Application Firewall (WAF)

As organizations increasingly rely on web applications to drive business, ensuring those applications are protected from cyber threats is essential. Imperva Web Application Firewall (WAF) delivers robust, enterprise-class protection for applications and APIs across cloud, on-premises, and hybrid environments. With near-zero false positives and managed rules created and tested by Imperva Threat Research, more than 90% of customers deploy in blocking mode from day one. Imperva WAF effectively stops OWASP Top 10 threats such as SQL injections and XSS, defends against malicious file uploads, and safeguards sensitive data to support compliance with standards including GDPR and PCI DSS. Automated policy creation, daily rule updates, and real-time protection ensure defenses stay ahead of emerging threats without adding operational burden. Machine learning-driven Attack Analytics correlates thousands of alerts into clear incident narratives, reducing alert fatigue and accelerating response. With automated deployment and configuration, flexible deployment environments, and centralized management, Imperva WAF streamlines security operations while delivering consistent protection wherever your applications run.

Average Rating: 4.7/5.0

Total Reviews: 39

How Do G2 Users Rate Imperva Web Application Firewall (WAF)?

  • Has the product been a good partner in doing business?: 9.1/10 (Category avg: 8.8/10)
  • Traffic Controls: 9.0/10 (Category avg: 9.2/10)
  • Security Monitoring: 9.3/10 (Category avg: 9.1/10)
  • Issue Tracking: 8.9/10 (Category avg: 8.7/10)

Who Is the Company Behind Imperva Web Application Firewall (WAF)?

  • Seller: Thales Group
  • Company Website:
  • HQ Location: Austin, Texas
  • Twitter: @ThalesCloudSec
    6,935 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    46 employees on LinkedIn®
  • Ownership: EPA:HO

Who Uses This Product?

  • Top Industries: Information Technology and Services, Banking
  • Company Size: 41% Large, 39% Small

What Do G2 Reviewers Say About Imperva Web Application Firewall (WAF)?

AI-generated summary from verified user reviews

Pros
  • Users value the ability of Imperva WAF to stop external attacks and ensure a safe online experience.
  • Users appreciate the robust cybersecurity of Imperva WAF, effectively blocking external attacks and protecting website resources.
  • Users commend the robust security provided by Imperva WAF, effectively shielding applications from various threats.
  • Users praise the robust security of Imperva WAF, effectively protecting against various web application threats and attacks.
  • Users benefit from real-time monitoring that enhances security and proactively protects against various online threats.
Cons
  • Users find the complex configuration challenging, needing technical expertise for effective setup and ongoing maintenance.
  • Users face challenges with ineffective blocking, including false positives and a complex setup process that hinders performance.
  • Users find the user interface lacking, suggesting improvements for better usability and ease of management.
  • Users find the setup process complex, often needing technical expertise and ongoing maintenance for effective WAF performance.
  • Users find the licensing costs of Imperva WAF to be harsh, increasing with multiple environments and URLs.

What Are Recent G2 Reviews of Imperva Web Application Firewall (WAF)?

What Are G2 Users Discussing About Imperva Web Application Firewall (WAF)?

Google Cloud Armor

Google Cloud Armor is a comprehensive security solution designed to protect applications and websites from a variety of threats, including distributed denial-of-service (DDoS) attacks and common web vulnerabilities. Leveraging Google's global infrastructure, Cloud Armor offers robust defenses to ensure the availability and security of online services. Key Features and Functionality: - Built-in DDoS Defense: Provides automatic protection against Layer 3 and Layer 4 DDoS attacks, benefiting from Google's extensive experience in safeguarding major internet properties. - Adaptive Protection: Utilizes machine learning to detect and mitigate high-volume Layer 7 DDoS attacks, analyzing traffic patterns in real-time to identify and respond to threats. - Pre-configured WAF Rules: Offers out-of-the-box web application firewall rules based on industry standards to defend against common vulnerabilities, such as cross-site scripting (XSS) and SQL injection (SQLi) attacks. - Bot Management: Integrates with reCAPTCHA Enterprise to provide automated protection against malicious bots, helping to prevent fraud and abuse at the edge of the network. - Rate Limiting: Implements rate-based rules to control the volume of incoming requests, protecting applications from being overwhelmed by excessive traffic and ensuring access for legitimate users. Primary Value and User Solutions: Google Cloud Armor delivers enterprise-grade protection by combining DDoS defense and web application firewall capabilities at a predictable monthly price. It addresses critical security challenges by mitigating the OWASP Top 10 risks and providing adaptive, machine learning-based defenses against sophisticated attacks. By integrating seamlessly with Google's global load balancing infrastructure, Cloud Armor ensures that applications remain secure and available, regardless of deployment environment—be it on-premises, in the cloud, or in a hybrid setup.

Average Rating: 4.0/5.0

Total Reviews: 23

How Do G2 Users Rate Google Cloud Armor?

  • Has the product been a good partner in doing business?: 8.5/10 (Category avg: 8.8/10)

Who Is the Company Behind Google Cloud Armor?

  • Seller: Google
  • Year Founded: 1998
  • HQ Location: Mountain View, CA
  • Twitter: @google
    31,899,995 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    301,144 employees on LinkedIn®
  • Ownership: NASDAQ:GOOG

Who Uses This Product?

  • Top Industries: Computer & Network Security
  • Company Size: 52% Small, 39% Large

What Do G2 Reviewers Say About Google Cloud Armor?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the flexible pricing of Google Cloud Armor, benefiting from substantial long-term savings.
  • Users appreciate the scalability of Google Cloud Armor, allowing for easy adjustment of resources as needed.
  • Users value the advanced security and built-in compliance features of Google Cloud Armor for robust protection.
Cons
  • Users find the complexity of pricing and support plans a barrier to fully utilizing Google Cloud Armor.
  • Users find the cost issues of Google Cloud Armor complex, with pricey support plans and limited enterprise tools.
  • Users find the limited availability of Google Cloud Armor frustrating compared to alternatives like AWS.
  • Users note the limited features of Google Cloud Armor, particularly in enterprise tools compared to competitors.
  • Users find the time-consumption of learning Google Cloud Armor to be a significant challenge in their experience.

What Are Recent G2 Reviews of Google Cloud Armor?

What Are G2 Users Discussing About Google Cloud Armor?

F5 NGINX

NGINX, Inc. is the company behind NGINX, the popular open source project trusted by more than 400 million sites. We offer a suite of technologies for developing and delivering modern applications. The NGINX Application Platform enables enterprises undergoing digital transformation to modernize legacy, monolithic applications as well as deliver new, microservices‑based applications. Companies like Netflix, Starbucks, and McDonalds rely on NGINX to reduce costs, improve resiliency, and speed innovation. NGINX investors include Blue Cloud Ventures, e.ventures, Goldman Sachs, Index Ventures, MSD Capital, NEA, Runa Capital, and Telstra Ventures. NGINX, Inc. is headquartered in San Francisco, CA, with an EMEA head office in Cork, Ireland and APAC head office in Singapore. Learn more at https://www.nginx.com/

Average Rating: 4.6/5.0

Total Reviews: 112

How Do G2 Users Rate F5 NGINX?

  • Has the product been a good partner in doing business?: 9.1/10 (Category avg: 8.8/10)
  • Traffic Controls: 9.0/10 (Category avg: 9.2/10)
  • Security Monitoring: 9.1/10 (Category avg: 9.1/10)
  • Issue Tracking: 8.9/10 (Category avg: 8.7/10)

Who Is the Company Behind F5 NGINX?

  • Seller: F5
  • HQ Location: Seattle, Washington
  • Twitter: @F5Networks
    1,385 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    6,247 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Software Engineer
  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 41% Small, 40% Medium

What Do G2 Reviewers Say About F5 NGINX?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the configuration ease of F5 NGINX, benefiting from a smooth cross-platform installation process.

What Are Recent G2 Reviews of F5 NGINX?

What Are G2 Users Discussing About F5 NGINX?

Sucuri

Sucuri is a managed security service provider for websites. Our cloud-based tools provide complete website security solution, including performance optimization via a CDN, mitigation of external attacks like vulnerability exploits and DDoS attacks, and professional response in the event of security incident. The team provides 24/7/365 customer service with a 97% satisfaction rate, and a median response time of 4 hours.

Average Rating: 3.3/5.0

Total Reviews: 47

How Do G2 Users Rate Sucuri?

  • Has the product been a good partner in doing business?: 7.1/10 (Category avg: 8.8/10)
  • Traffic Controls: 6.0/10 (Category avg: 9.2/10)
  • Security Monitoring: 6.7/10 (Category avg: 9.1/10)
  • Issue Tracking: 5.8/10 (Category avg: 8.7/10)

Who Is the Company Behind Sucuri?

  • Seller: GoDaddy
  • Year Founded: 1997
  • HQ Location: Scottsdale, AZ
  • Twitter: @GoDaddy
    274,844 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    9,052 employees on LinkedIn®
  • Ownership: NYSE:GDDY

Who Uses This Product?

  • Who Uses This: Owner
  • Top Industries: Information Technology and Services
  • Company Size: 81% Small, 8% Medium

What Do G2 Reviewers Say About Sucuri?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the affordable pricing of Sucuri, especially given its valuable features like backup and CDN.
  • Users value the comprehensive features of Sucuri, particularly its effective backup, CDN, and web application firewall.
  • Users find the affordable pricing of Sucuri very valuable given its comprehensive features and excellent performance.
  • Users value the effective WAF of Sucuri, appreciating its contribution to robust website management and security.
  • Users value the combination of features in Sucuri, particularly the effective CDN, firewall, and backup system.
Cons
  • Users find the complex setup of Sucuri challenging, requiring significant time and effort for initial configuration.
  • Users express frustration with ineffective blocking, as site issues keep reoccurring despite using Sucuri.
  • Users find it challenging to reach customer support, citing long response times and connection timeout issues.
  • Users report persistent security issues with Sucuri, indicating inadequate measures to prevent recurring problems.
  • Users experience server downtime issues with Sucuri, facing timeout errors that disrupt their workflow and efficiency.

What Are Recent G2 Reviews of Sucuri?

What Are G2 Users Discussing About Sucuri?

Wallarm API Security Platform

Protect any API. In any environment. Against any threats. Wallarm is the platform security teams choose to protect cloud-native APIs. The Wallarm platform gives teams the ability to detect and block API attacks. Customers choose Wallarm because it delivers a complete inventory of their APIs, AI apps, and agentic AI, along with patented AI/ML API abuse detection, real-time blocking on day zero, and an API SOC-as-a-service. Whether you protect legacy or brand new cloud-native APIs, Wallarm’s multi-cloud platform delivers the capabilities to secure your business against emerging threats. -> Robust protection for the entire API and AI portfolio Mitigate the OWASP API Top 10 threats and more; business logic abuse, bad bots, account takeover (ATO), and more. Get the robust API protection that no other tool can provide. -> Native inline blocking Wallarm is built from the ground up for inline blocking. Why deploy API security that can’t actually defend against API attacks? -> Unparalleled visibility into malicious traffic Gain full insights about attacks and attackers in the responsive Wallarm Console. Enjoy the Dashboard, search, and reporting capabilities, including visibility into API sessions. -> Complete API inventory Wallarm API Discovery provides full visibility into all your APIs, AI apps, and AI agents, including sensitive data flows, risk posture, shadow APIs and change detection. -> Understand Your Attack Surface You can’t protect what you don’t know about. Wallarm provides a comprehensive view of your API attack surface, including assessment of security controls and leaked sensitive API data. -> Quick integrations Setup cross-team collaboration with seamless integrations to your SIEM/SOAR, messaging applications, and workflow management.

Average Rating: 4.7/5.0

Total Reviews: 93

How Do G2 Users Rate Wallarm API Security Platform?

  • Has the product been a good partner in doing business?: 9.6/10 (Category avg: 8.8/10)
  • Traffic Controls: 9.1/10 (Category avg: 9.2/10)
  • Security Monitoring: 9.4/10 (Category avg: 9.1/10)
  • Issue Tracking: 8.8/10 (Category avg: 8.7/10)

Who Is the Company Behind Wallarm API Security Platform?

  • Seller: Wallarm
  • Company Website:
  • Year Founded: 2016
  • HQ Location: San Francisco, California
  • Twitter: @wallarm
    3,197 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    142 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CEO, CTO
  • Top Industries: Mechanical or Industrial Engineering, Information Technology and Services
  • Company Size: 43% Medium, 42% Small

What Do G2 Reviewers Say About Wallarm API Security Platform?

AI-generated summary from verified user reviews

Pros
  • Users value the accurate real-time threat detection of Wallarm API Security Platform, ensuring robust API protection.
  • Users value the accurate real-time threat detection of Wallarm API Security Platform, ensuring minimal false positives.
  • Users appreciate the simple integration and effective API threat prevention of Wallarm API Security Platform for enhanced security.
  • Users appreciate the simple cloud integration of Wallarm, enhancing API threat prevention effectively.
  • Users value the comprehensive security of Wallarm API Security Platform, ensuring robust protection and minimizing false positives.
Cons
  • Users often face API issues with unclear pricing during the trial, impacting their decision-making process.
  • Users find the configuration process complex, making it a challenge for newcomers to effectively utilize the platform.
  • Users find the configuration and tuning process complex, which can be challenging and time-consuming, especially for newcomers.
  • Users find the complex setup of Wallarm API Security Platform to be time-consuming, particularly for newcomers.
  • Users find the configuration and tuning process difficult, particularly facing challenges as new users of the platform.

What Are Recent G2 Reviews of Wallarm API Security Platform?

What Are G2 Users Discussing About Wallarm API Security Platform?

Lauren Worth
LW
Researched and written by Lauren Worth
Updated