Eleven of fourteen models named Cloudflare WAF first on the direct prompt; one named Radware Cloud WAF. Cloudflare WAF was named by fourteen of the fourteen models and Radware Cloud WAF by seven and Cloudflare WAF carries 67 labels and Radware Cloud WAF 12, so the shares are not directly comparable.
Named in one category this edition.
Named in one category this edition.
Share is the count of first choices across the direct, paraphrase, budget and scale prompts over all fourteen models, for a mid-market B2B company; rank is within the category; every quote names the model and the prompt it came from. Both figures come from the web application firewalls page.
Across every category in the October 2026 Edition, Cloudflare WAF and Radware Cloud WAF were named in the same answer twenty-seven times, of the 203 answers naming Cloudflare WAF and the 32 naming Radware Cloud WAF. In those answers Radware Cloud WAF took the first choice zero times and Cloudflare WAF fifteen.
| Model | Direct | Paraphrase | Comparative | Budget-constrained | Scale-constrained | Negative |
|---|---|---|---|---|---|---|
| Claude Haiku 4.5 | ||||||
| GPT-5.4 mini | ||||||
| Gemini 3.5 Flash | ||||||
| Perplexity Sonar | ||||||
| Grok 4.1 Fast | ||||||
| Mistral Small | ||||||
| DeepSeek V4 Flash | ||||||
| Llama 4 Maverick | ||||||
| Qwen 3.7 Flash | ||||||
| Kimi K2 | ||||||
| GLM 4.7 FlashX | ||||||
| MiniMax M2.5 | ||||||
| GPT-6 Luna | ||||||
| Muse Glimmer 30B |
Bold names in an answer are the products the judge labeled a first choice; a model naming several gives each of them that label. The full answer text for every row is in the record.
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Six of eight in this category shown.
“Misconfigured "Big Three" WAFs (Cloudflare, Akamai, Imperva)... you have effectively bypassed the WAF. ... Do not avoid these vendors, but avoid the configuration” GLM 4.7 FlashX · negative prompt · soft negative
“Cloudflare's managed-rule body limit varies by plan, and content beyond it may not be fully analyzed.” GPT-6 Luna · negative prompt · soft negative
“Free tiers of popular cloud WAFs (e.g., Cloudflare Free) offer very limited protection” DeepSeek V4 Flash · negative prompt · soft negative
“Cloudflare WAF (Best All-Rounder & Cloud-First B2B)... widely considered the most accessible and comprehensive WAF for small-to-mid-market businesses” Gemini 3.5 Flash · direct prompt · first choice
“Massive global scale, edge programmability, OWASP Core Rule Set-based rules, and easy self-serve setup. Consistently named a Forrester Wave Leader.” DeepSeek V4 Flash · comparative prompt · first choice
“1. Cloudflare WAF - Strengths: Global threat intelligence, machine learning, and a massive CDN for low latency and high performance.” Mistral Small · comparative prompt · first choice
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Five of six in this category shown.
“Be cautious with WAFs that have recent CVEs (Radware Cloud WAF, FortiADC WAF) unless you can apply the vendor's patches immediately.” MiniMax M2.5 · negative prompt · soft negative
“Steep learning curve, complex config, and poor reporting (G2 user complaints).” Grok 4.1 Fast · negative prompt · soft negative
“The best web application firewall for a mid-market B2B company is Radware, as it is best for mid-market teams wanting straightforward app protection” Llama 4 Maverick · direct prompt · first choice
“High marks in reliability and automation” Grok 4.1 Fast · comparative prompt · alternative
“Radware: High G2 (4.6/5, 140+ reviews)” Grok 4.1 Fast · direct prompt · alternative
Comparisons are drawn for the top eight products in each category, each against each. The output is the models' output; nothing here is a recommendation by the index.