Web Application Firewalls
Best Web Application Firewalls include:
Web Application Firewalls TrustMap
TrustMaps are two-dimensional charts that compare products based on trScore and research frequency by prospective buyers. Products must have 10 or more ratings to appear on this TrustMap.
Web Application Firewalls Overview
What are Web Application Firewalls (WAFs)?
Web Application Firewall (WAF) Features & Capabilities
WAFs protect web applications against threats such as:
Cross-site scripting
SQL injection
Session hijacking
Denial of service
Buffer overflows
WAFs generally present the following features:
Libraries of attack data based on known attacks to web applications
Monitoring, filtering and blocking of data and access to web applications
Automated attack detection, both identity-based (e.g. dynamic whitelisting, fingerprinting, risk scoring) and behavioral (e.g. risk scoring)
Advanced security techniques (e.g. deception/misdirection, virtual patch deployment, honeypot)
Zero-day attack prevention (related to the above)
A management interface with alert system
Reporting and analytics on threat and application usage
Pricing Information
The cost of web application firewalls depends on deployment. There are three options:
A managed service or cloud-hosted WAF delivered as part of a subscription. This can be relatively low overhead as part of a larger subscription (e.g. part of a CDN). But it also may contain unneeded features.
A network-based appliance. This presents relatively high overhead but reduces latency because it is installed locally and close to the application.
A host-based WAF residing in the application’s code. This is rarer and may present less desirable computing costs and greater maintenance.
Web Application Firewalls Products
(1-25 of 44) Sorted by Most Reviews
Cloudflare
Cloudflare, from the company of the same name in San Francisco, provides DDoS and bot mitigation security for business domains, as well as a content delivery network (CDN) and web application firewall (WAF).
AWS WAF
Amazon Web Services offers AWS WAF (web application firewall) to protect web applications from malicious behavior that might impede the applications functioning and performance, with customizable rules to prevent known harmful behaviors and an API for creating and deploying web security…
Oracle Dyn Web Application Security Platform extends beyond just typical Web Application Firewall (WAF) capabilities to offer Access Control, Bot Management, application DDoS protection and API security.
Barracuda Web Application Firewall, from Barracuda Networks in Campbell, California, protects web applications from bots, DDoS attacks, and other advanced threats to enterprise apps.
The Imperva Web Application Firewall (WAF) is based on technology acquired with Incapsula and the former WebSphere WAF.
Microsoft's Azure Application Gateway is a platform-managed, scalable, and highly available application delivery controller as a service with integrated web application firewall.
Alert Logic's Managed Web Application Firewall, formerly available as Alert Logic Web Security Manager, is presented as a highly tunable, enterprise-grade, web application firewall (WAF) that comes with its own security experts to eliminate management overhead and complexity. The…
German company Rohde & Schwarz offers the R&S Web Application Firewall to protect enterprise apps against data leakage, disablement, identity theft and intrusion.
Radware offers AppWall, a PCI compliant web application firewall (WAF) securing corporate networks and the cloud against web app attacks.
Positive Technologies headquartered in Framingham offers the PT Application Firewall (AF), a web application firewall (WAF) which uses advanced machine learning and correlative techniques to detecting and prevent zero-day attacks on enterprise apps.
Qualys offers their Web Application Firewall (WAF), available on its own or as part of the Qualys Cloud Platform network and application vulnerability management suite.
CenturyLink® Web Application Firewall (WAF) delivers substantial web application protection from attacks and helps prevent costly data breaches and downtime. WAF delivers dynamic ongoing website protection, allowing application transactions only from authorized users and protecting…
Instart Web Security is designed to secure your web apps from the dangers of the public web. All entry points into your application servers, whether it be your website, your APIs, or your web apps can be protected and secured with Instart Web Security. Instart provides protection…
Limelight Cloud Security is a content access and permission management solution with web application firewall and DDoS protection, providing a digital rights management (DRM) solution for video content.
