One of fourteen models named AWS WAF first on the direct prompt; one named Radware Cloud WAF. AWS WAF was named by fourteen of the fourteen models and Radware Cloud WAF by seven and AWS WAF carries 54 labels and Radware Cloud WAF 12, so the shares are not directly comparable.
Named in four categories this edition.
Named in one category this edition.
Share is the count of first choices across the direct, paraphrase, budget and scale prompts over all fourteen models, for a mid-market B2B company; rank is within the category; every quote names the model and the prompt it came from. Both figures come from the web application firewalls page.
Across every category in the October 2026 Edition, AWS WAF and Radware Cloud WAF were named in the same answer twenty-two times, of the 181 answers naming AWS WAF and the 32 naming Radware Cloud WAF. In those answers Radware Cloud WAF took the first choice zero times and AWS WAF zero.
| Model | Direct | Paraphrase | Comparative | Budget-constrained | Scale-constrained | Negative |
|---|---|---|---|---|---|---|
| Claude Haiku 4.5 | ||||||
| GPT-5.4 mini | ||||||
| Gemini 3.5 Flash | ||||||
| Perplexity Sonar | ||||||
| Grok 4.1 Fast | ||||||
| Mistral Small | ||||||
| DeepSeek V4 Flash | ||||||
| Llama 4 Maverick | ||||||
| Qwen 3.7 Flash | ||||||
| Kimi K2 | ||||||
| GLM 4.7 FlashX | ||||||
| MiniMax M2.5 | ||||||
| GPT-6 Luna | ||||||
| Muse Glimmer 30B |
Bold names in an answer are the products the judge labeled a first choice; a model naming several gives each of them that label. The full answer text for every row is in the record.
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Six of eight in this category shown.
“using the provider's native WAF (e.g., AWS WAF) is highly convenient... but may require more manual configuration and rule writing” Gemini 3.5 Flash · scale prompt · soft negative
“AWS WAF, for example, has an 8 KB inspection limit on Application Load Balancers and AppSync; gRPC request bodies aren't inspected” GPT-6 Luna · negative prompt · soft negative
“The WAFFLED results show parsing discrepancies affect AWS, Azure, Cloud Armor, Cloudflare and ModSecurity alike.” Muse Glimmer 30B · negative prompt · soft negative
“Cloudflare or AWS WAF usually give the quickest time-to-value, decent out-of-the-box rules, and scalable bot mitigation” MiniMax M2.5 · paraphrase prompt · first choice
“I'd suggest starting with either Cloudflare WAF ... or AWS WAF (if you're already AWS-based)” Claude Haiku 4.5 · direct prompt · first choice
“Consider managed WAF services (AWS WAF, Azure WAF, Cloudflare) for better maintenance and faster patching” Kimi K2 · negative prompt · alternative
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Five of six in this category shown.
“Be cautious with WAFs that have recent CVEs (Radware Cloud WAF, FortiADC WAF) unless you can apply the vendor's patches immediately.” MiniMax M2.5 · negative prompt · soft negative
“Steep learning curve, complex config, and poor reporting (G2 user complaints).” Grok 4.1 Fast · negative prompt · soft negative
“The best web application firewall for a mid-market B2B company is Radware, as it is best for mid-market teams wanting straightforward app protection” Llama 4 Maverick · direct prompt · first choice
“High marks in reliability and automation” Grok 4.1 Fast · comparative prompt · alternative
“Radware: High G2 (4.6/5, 140+ reviews)” Grok 4.1 Fast · direct prompt · alternative
Comparisons are drawn for the top eight products in each category, each against each. The output is the models' output; nothing here is a recommendation by the index.