Cloudflare vs. Imperva Web Application Firewall (WAF)

Cloudflare works well as security measure that gives peace of mind without needing to work too hard to get it functioning well. It provides great tools to customize the security experience as well. This is all the same for the caching tools as well. They have a lot of built in tools that make using the caching easy right out of the box, but they provide the customization options to get things just right for your site.

Incentivized

I recommend Imperva specially if you have a big environment with thousand of websites because of its ease to use and availability. Imperva delivers a reliable solution with great capability to contain cyber attacks and even fraud preventions in some cases. The only scenario it's less appropriate is if your focus is anti fraud instead of a solution to block cyber attacks.

Incentivized

• The best part is the content delivery network. Cloudflare has a large network of data centres around the world that helps cache and delivers content quickly to our customers.
• Cloudflare offers us with a fast and reliable DNS service and with the world class features such as Cloudflare workers, SSL verification, certificate management and web application firewall. When all of these are combined together, it provides very strict security for our organization.
• One of the most important feature that we use is the analytics and threat detection. It provides us with the real time insights of all the threats originating from multiple locations and landing on our websites.

Incentivized

• Block some dynamic attacks such as SQL injection.
• Block unfriendly accesses based on geographic source.
• Helps us implement SSL in cases where the original server can't (yet).

• In some cases, using Cloudflare can actually lead to slower website speeds if the network is congested or if the website's traffic is particularly heavy.
• Some website owners may find that the level of customization offered by Cloudflare is limited, especially in comparison to other solutions.
• While Cloudflare is easy to set up and manage, it may be too complex for users who are not familiar with web technologies.

Incentivized

• Attack Correlation Validation - This specific policy produces a lot of false positives as well as the SQL injection policies. Of course it is difficult to tell what a legitimate query is on a public facing web app.
• Profiling - I tend to spend more time than any other feature tuning the Web App Profiles. Plugins are used to help cope with this, but on extremely large web apps we are forced to turn off the profiling feature.

Incentivized

lower cost

Incentivized

Everything is extremely concise and all settings apply immediately and take effect globally. There is no reason to explicitly plan/think in terms of individual regions as one would have to traditional cloud offerings (AWS, OCI, Azure). All Cloudflare products integrate seamless as part of a single pipeline that executes from request to response.

Incentivized

It's easy and works great. The onboarding process, although easy, can sometimes take too long for SSL and domain validation, but its not a big deal.

Incentivized

In 6+ years of relying on Cloudflare, I think we experienced one or two brief outages that were Cloudflare's fault.

Incentivized

Their Argo for the global network is the core feature we love.

Incentivized

Excellent product, Cloudflare is a true pioneer of the modern Internet, providing tools, services, and expertise that vastly improve the performance and security of web services. Any issues are resolved quickly with detailed RCA and follow-ups published publicly. I'm thankful to Cloudflare and use their services both at work and at home.

Incentivized

We haven't needed support from Imperva since implementation. But during that time, their personnel were very quick to respond to questions. Since then, it's been largely doing its thing for us (which is exactly what we'd hoped).

Very well executed implementation where our team was able to handle the implementation with guidance.

Incentivized

They have the most generous free offering, and after the free offering limit is reached - you're still getting plenty of value for the buck.

They have very good reputation.

They have an ever expanding list of tools that can support multiple scenarios under one roof.

Incentivized

I believe there's no comparison as Imperva is a much more reliable and powerfull WAF. AWS WAF lacks of several features Imperva have and is not that simple to configure neither have a clean web console. I consider Imperva WAF a whole superior level of cyber security solution and it's consider to be one of the leader in this segment.

Incentivized

They are built for scale and have the capacity to handle all the traffic we could ever expect to get.

Incentivized

• Immediate ROI on Registrar and DNS hosting while giving a single plane of glass to managing both with domain registrations at cost, and no cost DNS hosting
• WAF helped us move at risk servers/applications into a protected state allowing us to perform remediations at a measured pace and get them done right instead of band aide solutions.
• CDN proxying increase the speed of our website while simultaneously reducing server load.
• DMARC management and report interpretation allow use to identify weak points in our email systems, remediate and move to stricter policies without significantly increasing staff time spent managing it.

Incentivized

• Meet compliance requirements - Check.
• Better Insight into web application - Absolutely great, checks all the traffic against RFC standards and will alert on common development mistakes that duplicate application traffic or provide attack vectors for potential attackers.
• Have had several issues blocking a customer without producing alerts, while it happened only one week out of 2 years of working with the devices, it did produce a lot of headaches.

Incentivized