Index › Network and edge › WAF › Enterprise › September 2026 Edition

Web application firewalls for enterprise buyers

Asked as “web application firewall”, and as “WAF and bot protection service”, on behalf of an enterprise B2B company. 44 first choices recorded across the direct, paraphrase, budget and scale prompts, twelve models each.

Standing

Cloudflare

Contested

27% of first choices, contested.

ShowinginAll 67 categories →

By buyer segment

The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.

Small business

Cloudflare73%Clear leaderStanding →Mid-market

Cloudflare55%Clear leaderStanding →Enterprise

Cloudflare27%ContestedThis page

01The standing

Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all twelve models, for an enterprise B2B company. Ordered by share.

ProductFirst-choice shareNegative rateLabelsQuadrant

Cloudflare9%33accepted challenger

Akamai App & API Protector4%23accepted challenger

Akamai4%27accepted challenger

Cloudflare WAF7%15accepted challenger

Imperva15%33accepted challenger

AWS WAF33%46criticized challenger

Fastly Next-Gen WAF8%12accepted challenger

Show the four products at 0%, ordered by negative rate

Azure WAF40%15criticized challenger

Fortinet FortiWeb17%12accepted challenger

F515%13accepted challenger

F5 BIG-IP Advanced WAF10%10accepted challenger

Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its vendor page.

Head to head

Cloudflare vs Cloudflare WAF Cloudflare vs AWS WAF Cloudflare WAF vs AWS WAF

Recommended versus criticized

Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.

Criticized challengerCriticized default

Negative label rate →

Accepted challengerEndorsed leader

0%First-choice share → · lines at 30% share and 25% negative40%

Key

Cloudflare27%

Akamai App & API Protector14%

Akamai9%

Cloudflare WAF9%

Imperva5%

AWS WAF2%

Fastly Next-Gen WAF2%

F50%

F5 BIG-IP Advanced WAF0%

Fortinet FortiWeb0%

Azure WAF0%

02What they warned about

Two of twelve models held their first choice under the paraphrase. Claude Haiku 4.5, GPT-5.4 mini, Gemini 3.5 Flash, Perplexity Sonar, Grok 4.1 Fast, Mistral Small, DeepSeek V4 Flash, Kimi K2, GLM 4.7 FlashX and MiniMax M2.5 changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.

AWS WAF

33%

15 of 46 labels negative · 9 of 12 models · 5 hard negative

“What to Avoid for Predictable Costs: ... AWS WAF | Usage-based | $0.60 per million requests + per-rule fees; costs spike during attacks” Kimi K2, budget prompt

Imperva

15%

5 of 33 labels negative · 5 of 12 models · 1 hard negative

“Independent testing showed only **11.97% true positive rate** — missing ~88% of actual threats” Kimi K2, negative prompt

Azure WAF

40%

6 of 15 labels negative · 4 of 12 models · 3 hard negative

“You should avoid providers that charge strictly "per request" (like standard AWS WAF or Azure WAF setups)” Qwen 3.7 Flash, budget prompt

GCP Cloud Armor

100%

4 of 4 labels negative · 3 of 12 models · 2 hard negative

“GCP Cloud Armor | Usage-based | Per-request pricing creates unpredictable bills” Kimi K2, budget prompt

03What they cite

Citations exist only for the models that return a source list: twelve of the twelve in this edition, and all six flagship models on the expanded tier.

Sites the answers cite

64 of 72 answers in this category came back with a source list, from 12 of 12 models: citations where the model returns them, or the search results it consulted. 6 of those lists are Google grounding redirects that name no site and are left out of the counts. 847 links across 190 sites, every framing counted. Ranked by the number of answers carrying the site or page.

expertinsights.com

vendor site · Expert Insights41 answers · 41 citations · 10 models

imperva.com

vendor site · Imperva35 answers · 44 citations · 11 models

cybersecuritynews.com

34 answers · 53 citations · 10 models

wafplanet.com

30 answers · 46 citations · 10 models

openappsec.io

vendor site · open-appsec25 answers · 31 citations · 10 models

cyberpress.org

25 answers · 27 citations · 9 models

radware.com

vendor site · Radware16 answers · 30 citations · 7 models

g2.com

15 answers · 16 citations · 9 models

guptadeepak.com

14 answers · 14 citations · 4 models

indusface.com

vendor site · Indusface14 answers · 14 citations · 9 models

fortinet.com

vendor site · Fortinet13 answers · 14 citations · 8 models

guideflow.com

vendor site · Guideflow13 answers · 13 citations · 9 models

Pages the answers cite

The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.

expertinsights.com/network-security/the-top-web-application-firewalls

41 answers · 10 models

imperva.com/blog/best-waap-solutions

26 answers · 10 models

cyberpress.org/waf-solutions-by-business-size

25 answers · 9 models

cybersecuritynews.com/best-web-application-firewall-solutions/amp

25 answers · 9 models

wafplanet.com/

21 answers · 9 models

cybersecuritynews.com/best-web-application-firewall-waf

19 answers · 9 models

openappsec.io/post/best-waf-solutions-in-2024-2025-real-world-comparison

16 answers · 7 models

guptadeepak.com/tools/top-5-waf-web-application-firewall-tools-2026

14 answers · 4 models

guideflow.com/blog/web-application-firewall-software

13 answers · 9 models

openappsec.io/post/best-waf-solutions-in-2026-real-world-comparison

12 answers · 9 models

04How they answered

Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.

ModelDirect“What is the best web application firewall for an enterprise B2B company?”Paraphrase“Which WAF and bot protection service would you recommend to a large B2B company with thousands of employees?”Comparative“What are the top enterprise-grade web application firewalls and how do they differ?”Budget-constrained“What is the best web application firewall for a large company that needs predictable total cost across thousands of users?”Scale-constrained“We are a 5,000 person company with SSO, SOC 2 and procurement review requirements evaluating a web application firewall. What should we look at?”Negative“Which web application firewalls should a large enterprise avoid or be cautious about?”

Claude Haiku 4.5no first choiceAkamaiChanged

Three alternatives

AWS WAF, Cloudflare, Imperva

Cloudflare

Three alternatives

AWS WAF, Akamai, Imperva

NetScaler Web Application Firewall

One alternative

Cloudflare

against: AWS WAFno first choiceagainst: Cloudflare, F5 Advanced WAF, Sucuri

GPT-5.4 miniCloudflare WAF/WAAP

Three alternatives

AWS WAF, Azure WAF, F5 Distributed Cloud WAF

Akamai Kona Site Defender + Akamai Bot Manager, Cloudflare WAF + Bot ManagementChanged

Three alternatives

AWS WAF, AWS WAF + Bot Control, F5 Distributed Cloud WAAP + Bot Defense

no first choiceCloudflare WAF/WAAP

One alternative

Imperva WAF

against: AWS WAFno first choicenothing named

Gemini 3.5 FlashCloudflare WAAP, Fastly Next-Gen WAF

Three alternatives

Akamai App & API Protector, F5 Distributed Cloud WAF, Imperva

CloudflareChanged

Three alternatives

Akamai, DataDome, HUMAN Security

Imperva WAF & API Security

Six alternatives

AWS WAF, Akamai App & API Protector, Azure WAF, Cloudflare WAAP, F5 Distributed Cloud WAAP, Fastly Next-Gen WAF

AWS CloudFront Flat-Rate Pricing Plans, Cloudflare

Four alternatives

Cloudflare One, F5 BIG-IP Advanced WAF, Fastly Next-Gen WAF, Zscaler Private Access (ZPA) + Zscaler Internet Access

no first choiceagainst: AWS WAF, Azure WAF, Citrix NetScaler, F5 BIG-IP, GCP Cloud Armor, ModSecurity, Nginx ModSecurity WAF, Radware

Perplexity SonarCloudflare WAF

Five alternatives

AWS WAF, Akamai, Azure WAF, Imperva, Radware Cloud WAF

Akamai App & API ProtectorChanged

Two alternatives

Cloudflare WAF, Imperva

against: AWS WAFno first choiceCloudflare WAF/WAAP

One alternative

Akamai App & API Protector

against: F5 WAFno first choiceagainst: AWS WAF, Barracuda WAF, Cloudflare WAF, F5 BIG-IP Advanced WAF, Fortinet FortiWeb, Prophaze WAF, Sucuri WAF

Grok 4.1 FastImperva Cloud WAF

Two alternatives

Akamai App & API Protector, Cloudflare WAF

Akamai App & API ProtectorChanged

Two alternatives

Cloudflare, Imperva

against: AWS WAFCloudflare WAF

Four alternatives

AWS WAF, Akamai App & API Protector, F5 BIG-IP Advanced WAF / Distributed Cloud WAAP, Imperva

Cloudflare Enterprise WAFagainst: AWS WAF, Akamai App & API Protector, Azure, F5 Advanced WAF, GCP, ImpervaCloudflare

Three alternatives

AWS WAF, Akamai, Imperva

against: AWS WAF, Barracuda WAF, F5, Google Cloud Armor, Microsoft Azure WAF, ModSecurity-based standalone/open-source WAFs

Mistral SmallAkamai, Imperva

One alternative

Cloudflare

Akamai App & API ProtectorChanged

Two alternatives

Cisco Secure WAF, Indusface AppTrana

Imperva

Five alternatives

Akamai, Cloudflare Web Application Firewall, F5 BIG-IP Advanced WAF, Fastly Next-Gen WAF, open-appsec / CloudGuard WAF

AWS WAF, Cloudflare WAF

Two alternatives

F5 BIG-IP Advanced WAF, Imperva WAF

no first choicenothing named

DeepSeek V4 FlashCloudflare

Four alternatives

AWS WAF, Akamai, Azure WAF, Imperva

Akamai App & API Protector, CloudflareChanged

One alternative

Imperva

against: AWS WAFCloudflare WAF

Seven alternatives

AWS WAF, Akamai App & API Protector, F5 BIG-IP Advanced WAF, Fastly Next-Gen WAF, Google Cloud Armor, Imperva Cloud WAF / WAF Gateway, Microsoft Azure WAF

Cloudflare Enterprise WAF

One alternative

Akamai App & API Protector

against: AWS, Azure, Fastly Next-Gen WAF, Google Cloud ArmorCloudflare

Three alternatives

Akamai, F5, Imperva

against: AWS WAFagainst: Barracuda, Cloudflare, F5 NGINX ModSecurity WAF, Imperva, ModSecurity

Llama 4 Maverickno first choiceno first choiceHeldno first choiceCloudflare WAF

Three alternatives

AWS WAF, Azure Web Application Firewall, Imperva Cloud WAF

no first choiceagainst: Imperva

Qwen 3.7 FlashCloudflare

Four alternatives

AWS WAF, Akamai, F5, Imperva

CloudflareHeld

Five alternatives

AWS Shield, AWS WAF, Akamai, Azure Front Door + WAF, Radware

F5, Imperva

Three alternatives

AWS WAF, Akamai, Cloudflare

Cloudflare

Two alternatives

F5, Fortinet

against: AWS WAF, Azure WAFno first choiceagainst: AWS WAF, Azure WAF

Kimi K2Akamai App & API Protector, Cloudflare WAF

Three alternatives

AWS WAF, F5 BIG-IP Advanced WAF, Imperva Cloud WAF

Akamai App & API Protector, CloudflareChanged

Three alternatives

F5 Distributed Cloud, Fastly Next-Gen WAF, Imperva

against: AWS WAF + AWS Bot ControlCloudflare

Seven alternatives

AWS WAF, Akamai, F5, Fastly, Fortinet FortiWeb, Imperva, Radware

Cloudflare

One alternative

Imperva Cloud WAF

against: AWS WAF, Azure WAF, GCP Cloud Armorno first choice

Seven alternatives

AWS WAF, Akamai, Azure WAF, Cloudflare, F5, Fortinet, Imperva

against: AWS WAF, Azure WAF, GCP Cloud Armor, Imperva, ModSecurity

GLM 4.7 FlashXImperva Cloud WAAP

Five alternatives

AWS WAF, Akamai App & API Protector, Cloudflare WAF, F5 BIG-IP Advanced WAF, Fortinet FortiWeb

against: Barracuda WAFAkamaya App & API ProtectorChanged

Two alternatives

F5 Advanced WAF, Imperva

no first choice

Nine alternatives

AWS WAF, Akamai App & API Protector, Barracuda Web Application Firewall, Cloudflare WAF, F5 BIG-IP Advanced WAF, Fastly Next-Gen WAF, Fortinet FortiWeb, Google Cloud Armor, Imperva Cloud WAF

Cloudflare Enterprise WAF

Three alternatives

AWS WAF, F5 BIG-IP Advanced WAF, Imperva WAF

no first choiceagainst: F5 NGINX ModSecurity WAF, Fortinet FortiWeb, Hillstone Networks WAF, Qualys Web Application Firewall, StackPath WAF, Trustwave ModSecurity

MiniMax M2.5Akamai

Four alternatives

Fastly Next-Gen WAF, Imperva, Open-appsec / CloudGuard, Radware Cloud WAF

Akamai, ImpervaChanged

Two alternatives

Cloudflare, F5

Cloudflare WAF

Three alternatives

AWS WAF, Akamai App & API Protector, Imperva WAF

Cloudflare

Two alternatives

Akamai App & API Protector, Imperva WAF

against: AWS WAF, Azure WAF, GCP Cloud Armorno first choiceagainst: Akamai, Cloudflare, F5, Fastly, Fortinet, Imperva, Radware Cloud WAF

Bold is the first choiceAlternatives are counted; the count opens them.What the answer argued against

05The record

One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency. Full answer text is in the free responses file. Download the record

Seventy-two rows: every prompt, every model, every answer.

Prompt	Model	Version string	Time (UTC)	Searched	Sources	Latency
Direct recommendation	Claude Haiku 4.5	`claude-haiku-4-5-20251001`	2026-09-17 12:42	no	0	4 s
Direct recommendation	GPT-5.4 mini	`gpt-5.4-mini-2026-03-17`	2026-09-17 12:08	yes	5	7 s
Direct recommendation	Gemini 3.5 Flash	`gemini-3.5-flash`	2026-09-17 11:05	yes	7	18 s
Direct recommendation	Perplexity Sonar	`sonar`	2026-09-17 12:28	yes	20	4 s
Direct recommendation	Grok 4.1 Fast	`spacexai/grok-4.1-fast-non-reasoning via vertex`	2026-09-17 11:46	yes	28	13 s
Direct recommendation	Mistral Small	`mistral/mistral-small via mistral`	2026-09-17 14:03	yes	5	4 s
Direct recommendation	DeepSeek V4 Flash	`deepseek/deepseek-v4-flash via fireworks`	2026-09-17 10:14	yes	10	13 s
Direct recommendation	Llama 4 Maverick	`meta/llama-4-maverick via bedrock`	2026-09-17 09:41	yes	5	2 s
Direct recommendation	Qwen 3.7 Flash	`alibaba/qwen3.7-flash via alibaba`	2026-09-17 11:54	no	0	36 s
Direct recommendation	Kimi K2	`moonshotai/kimi-k2 via novita`	2026-09-17 13:16	yes	15	26 s
Direct recommendation	GLM 4.7 FlashX	`zai/glm-4.7-flashx via zai`	2026-09-17 09:30	yes	26	151 s
Direct recommendation	MiniMax M2.5	`minimax/minimax-m2.5 via minimax`	2026-09-17 11:12	yes	5	17 s
Paraphrase	Claude Haiku 4.5	`claude-haiku-4-5-20251001`	2026-09-17 11:09	yes	16	12 s
Paraphrase	GPT-5.4 mini	`gpt-5.4-mini-2026-03-17`	2026-09-17 09:57	yes	4	5 s
Paraphrase	Gemini 3.5 Flash	`gemini-3.5-flash`	2026-09-17 12:38	yes	9	20 s
Paraphrase	Perplexity Sonar	`sonar`	2026-09-17 11:59	yes	17	6 s
Paraphrase	Grok 4.1 Fast	`spacexai/grok-4.1-fast-non-reasoning via vertex`	2026-09-17 11:45	yes	34	15 s
Paraphrase	Mistral Small	`mistral/mistral-small via mistral`	2026-09-17 09:36	yes	5	5 s
Paraphrase	DeepSeek V4 Flash	`deepseek/deepseek-v4-flash via fireworks`	2026-09-17 09:30	yes	18	16 s
Paraphrase	Llama 4 Maverick	`meta/llama-4-maverick via bedrock`	2026-09-17 12:52	yes	5	4 s
Paraphrase	Qwen 3.7 Flash	`alibaba/qwen3.7-flash via alibaba`	2026-09-17 13:12	yes	5	33 s
Paraphrase	Kimi K2	`moonshotai/kimi-k2 via novita`	2026-09-17 11:41	yes	15	21 s
Paraphrase	GLM 4.7 FlashX	`zai/glm-4.7-flashx via zai`	2026-09-17 10:36	yes	27	200 s
Paraphrase	MiniMax M2.5	`minimax/minimax-m2.5 via minimax`	2026-09-17 12:30	yes	8	24 s
Comparative	Claude Haiku 4.5	`claude-haiku-4-5-20251001`	2026-09-17 11:32	yes	9	8 s
Comparative	GPT-5.4 mini	`gpt-5.4-mini-2026-03-17`	2026-09-17 13:31	yes	9	10 s
Comparative	Gemini 3.5 Flash	`gemini-3.5-flash`	2026-09-17 09:51	yes	14	34 s
Comparative	Perplexity Sonar	`sonar`	2026-09-17 13:47	yes	15	9 s
Comparative	Grok 4.1 Fast	`spacexai/grok-4.1-fast-non-reasoning via vertex`	2026-09-17 10:22	yes	25	14 s
Comparative	Mistral Small	`mistral/mistral-small via mistral`	2026-09-17 09:32	yes	9	10 s
Comparative	DeepSeek V4 Flash	`deepseek/deepseek-v4-flash via fireworks`	2026-09-17 11:28	yes	16	24 s
Comparative	Llama 4 Maverick	`meta/llama-4-maverick via bedrock`	2026-09-17 11:02	yes	5	3 s
Comparative	Qwen 3.7 Flash	`alibaba/qwen3.7-flash via alibaba`	2026-09-17 11:38	no	0	40 s
Comparative	Kimi K2	`moonshotai/kimi-k2 via novita`	2026-09-17 13:21	yes	8	36 s
Comparative	GLM 4.7 FlashX	`zai/glm-4.7-flashx via zai`	2026-09-17 12:03	yes	10	77 s
Comparative	MiniMax M2.5	`minimax/minimax-m2.5 via minimax`	2026-09-17 11:15	yes	5	18 s
Budget constrained	Claude Haiku 4.5	`claude-haiku-4-5-20251001`	2026-09-17 12:57	yes	18	9 s
Budget constrained	GPT-5.4 mini	`gpt-5.4-mini-2026-03-17`	2026-09-17 10:25	yes	3	4 s
Budget constrained	Gemini 3.5 Flash	`gemini-3.5-flash`	2026-09-17 11:02	yes	18	32 s
Budget constrained	Perplexity Sonar	`sonar`	2026-09-17 11:51	yes	20	6 s
Budget constrained	Grok 4.1 Fast	`spacexai/grok-4.1-fast-non-reasoning via vertex`	2026-09-17 13:53	yes	35	20 s
Budget constrained	Mistral Small	`mistral/mistral-small via mistral`	2026-09-17 12:14	yes	5	6 s
Budget constrained	DeepSeek V4 Flash	`deepseek/deepseek-v4-flash via fireworks`	2026-09-17 09:32	yes	23	21 s
Budget constrained	Llama 4 Maverick	`meta/llama-4-maverick via bedrock`	2026-09-17 10:43	yes	5	3 s
Budget constrained	Qwen 3.7 Flash	`alibaba/qwen3.7-flash via alibaba`	2026-09-17 12:23	yes	17	127 s
Budget constrained	Kimi K2	`moonshotai/kimi-k2 via novita`	2026-09-17 13:38	yes	25	38 s
Budget constrained	GLM 4.7 FlashX	`zai/glm-4.7-flashx via zai`	2026-09-17 10:40	yes	23	82 s
Budget constrained	MiniMax M2.5	`minimax/minimax-m2.5 via minimax`	2026-09-17 14:13	yes	20	63 s
Scale constrained	Claude Haiku 4.5	`claude-haiku-4-5-20251001`	2026-09-17 11:28	no	0	8 s
Scale constrained	GPT-5.4 mini	`gpt-5.4-mini-2026-03-17`	2026-09-17 10:36	no	0	11 s
Scale constrained	Gemini 3.5 Flash	`gemini-3.5-flash`	2026-09-17 10:24	yes	10	30 s
Scale constrained	Perplexity Sonar	`sonar`	2026-09-17 09:52	yes	17	9 s
Scale constrained	Grok 4.1 Fast	`spacexai/grok-4.1-fast-non-reasoning via vertex`	2026-09-17 10:08	yes	17	12 s
Scale constrained	Mistral Small	`mistral/mistral-small via mistral`	2026-09-17 09:58	no	0	9 s
Scale constrained	DeepSeek V4 Flash	`deepseek/deepseek-v4-flash via fireworks`	2026-09-17 09:46	yes	10	16 s
Scale constrained	Llama 4 Maverick	`meta/llama-4-maverick via bedrock`	2026-09-17 11:48	yes	5	3 s
Scale constrained	Qwen 3.7 Flash	`alibaba/qwen3.7-flash via alibaba`	2026-09-17 14:12	no	0	34 s
Scale constrained	Kimi K2	`moonshotai/kimi-k2 via novita`	2026-09-17 11:09	yes	15	61 s
Scale constrained	GLM 4.7 FlashX	`zai/glm-4.7-flashx via zai`	2026-09-17 13:43	yes	14	83 s
Scale constrained	MiniMax M2.5	`minimax/minimax-m2.5 via minimax`	2026-09-17 11:02	no	0	65 s
Negative framing	Claude Haiku 4.5	`claude-haiku-4-5-20251001`	2026-09-17 14:15	yes	15	8 s
Negative framing	GPT-5.4 mini	`gpt-5.4-mini-2026-03-17`	2026-09-17 12:17	yes	4	7 s
Negative framing	Gemini 3.5 Flash	`gemini-3.5-flash`	2026-09-17 14:11	yes	21	27 s
Negative framing	Perplexity Sonar	`sonar`	2026-09-17 13:17	yes	15	9 s
Negative framing	Grok 4.1 Fast	`spacexai/grok-4.1-fast-non-reasoning via vertex`	2026-09-17 10:42	yes	22	18 s
Negative framing	Mistral Small	`mistral/mistral-small via mistral`	2026-09-17 11:38	yes	5	6 s
Negative framing	DeepSeek V4 Flash	`deepseek/deepseek-v4-flash via fireworks`	2026-09-17 09:33	yes	24	21 s
Negative framing	Llama 4 Maverick	`meta/llama-4-maverick via bedrock`	2026-09-17 12:59	yes	5	4 s
Negative framing	Qwen 3.7 Flash	`alibaba/qwen3.7-flash via alibaba`	2026-09-17 14:01	yes	26	119 s
Negative framing	Kimi K2	`moonshotai/kimi-k2 via novita`	2026-09-17 11:45	yes	25	42 s
Negative framing	GLM 4.7 FlashX	`zai/glm-4.7-flashx via zai`	2026-09-17 10:19	yes	29	627 s
Negative framing	MiniMax M2.5	`minimax/minimax-m2.5 via minimax`	2026-09-17 12:24	yes	21	74 s

Normalization in this category

Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.

Category-scoped readings

None. Every name in this category resolved on its own.

Unresolved, counted raw

AWS CloudFront Flat-Rate Pricing Plans

AWS WAF + AWS Bot Control

Akamai Kona Site Defender + Akamai Bot Manager

Akamai WAF / Akamai App & API Protector

Akamai's Bot Manager

Akamaya App & API Protector

Azure Front Door + WAF

Azure Front Door / Application Gateway with WAF

Cisco Secure WAF

Cisco's Advanced WAF and Bot Protection

Citrix NetScaler

Cloudflare WAF + Bot Management

Cloudflare's Web Security Platform

Cyber Security Cloud

F5 / NGINX App Protect

F5 BIG-IP Advanced WAF / Distributed Cloud

F5 BIG-IP Advanced WAF / Distributed Cloud WAAP

F5 Distributed Cloud Bot Defense

F5 Distributed Cloud WAAP + Bot Defense

F5 WAF

F5 WAF / F5 Web App & API Protection

Fastly's Next-Gen WAF

Hillstone Networks WAF

Imperva Cloud WAAP

Imperva Cloud WAF / WAF Gateway

Imperva WAF & API Security (by Thales)

Imperva's Advanced Bot Protection

ModSecurity-based standalone/open-source WAFs

NetScaler Web Application Firewall (Citrix)

Nginx ModSecurity WAF

Prophaze WAF

Qualys Web Application Firewall

StackPath WAF

Trustwave ModSecurity

Discontinued, still offered

No shut-down product was recommended here.

Web application firewalls for enterprise buyers

By buyer segment

01The standing

Recommended versus criticized

02What they warned about

03What they cite

Sites the answers cite

Pages the answers cite

04How they answered

05The record

Normalization in this category

Also in network and edge