Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Alibaba Cloud WAF View product | AWS WAF by AWS View product |
|---|---|---|
| Overview | ||
| What it is | Alibaba Cloud WAF from Alibaba Cloud focuses on website protection. Key capabilities: API security and bot management. Compare it with the leading WAF alternatives. | AWS WAF is a cloud web application firewall service from AWS. Learn how it supports web application layer 7 defense, what features stand out and which WAF tools compete. |
| Product type | Web Application Firewall (WAF) | Cloud Web Application Firewall Service |
| Best for | E-commerce, Financial Services, Government, Media, Internet Services | Cross-industry, E-commerce, Financial Services, Healthcare, Technology, Public Sector |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: no | Free trial: no |
| Deployment | ||
| Deployment options | SaaSCloud | Cloud |
| Deployment details | Cloud (SaaS); Cloud service (cloud-native or CNAME mode) | Cloud; AWS Cloud-native managed edge and regional service |
| Data residency | Alibaba Cloud regions | Regional or global CloudFront edge deployment depending on resource type |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: yes |
| Supported platforms | Alibaba CloudNon-Alibaba Cloud hosted web apps | Amazon CloudFrontApplication Load BalancersAmazon API GatewayAWS AppSyncAWS Verified Access |
| Compliance | Supports PCI DSS and China MLPS 2.0Alibaba Cloud ISO 27001 and SOC 2 portfolio | SOC 1/2/3, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA eligible, FedRAMP High |
| Integrations & coverage | ||
| Integrations | Alibaba Cloud Server Load BalancerECSAlibaba Cloud CDNAnti-DDoSSimple Log Service | Amazon CloudFrontApplication Load BalancerAmazon API GatewayAWS AppSyncAmazon CognitoAWS Firewall ManagerAmazon CloudWatch |
| Industries | E-commerceFinancial ServicesGovernmentMediaInternet Services | Cross-industryE-commerceFinancial ServicesHealthcareTechnologyPublic Sector |
| Regions | GlobalAsia PacificChinese Mainland | Global (all AWS Regions and CloudFront edge locations) |
| Vendor | ||
| Company | Alibaba Cloud | AWS |
| Headquarters | Hangzhou, Zhejiang, China | Seattle, Washington, USA |
| Company size | 10,001+ | 100,000+ |
| Founded | 2009 | 2006 |
Overview
What it is
Alibaba Cloud WAF
Alibaba Cloud WAF from Alibaba Cloud focuses on website protection. Key capabilities: API security and bot management. Compare it with the leading WAF alternatives.AWS WAF
AWS WAF is a cloud web application firewall service from AWS. Learn how it supports web application layer 7 defense, what features stand out and which WAF tools compete.Product type
Alibaba Cloud WAF
Web Application Firewall (WAF)AWS WAF
Cloud Web Application Firewall ServiceBest for
Alibaba Cloud WAF
E-commerce, Financial Services, Government, Media, Internet ServicesAWS WAF
Cross-industry, E-commerce, Financial Services, Healthcare, Technology, Public SectorPricing
Pricing model
Alibaba Cloud WAF
Contact VendorAWS WAF
Contact VendorFree trial
Alibaba Cloud WAF
Free trial: noAWS WAF
Free trial: noDeployment
Deployment options
Alibaba Cloud WAF
SaaSCloud
AWS WAF
Cloud
Deployment details
Alibaba Cloud WAF
Cloud (SaaS); Cloud service (cloud-native or CNAME mode)AWS WAF
Cloud; AWS Cloud-native managed edge and regional serviceData residency
Alibaba Cloud WAF
Alibaba Cloud regionsAWS WAF
Regional or global CloudFront edge deployment depending on resource typeKey features
What it offers
Alibaba Cloud WAF
- OWASP Top 10 protection
- Semantic and ML-based detection
- Bot management
- API security
- HTTP flood protection
- Custom access rules
- Virtual patching
- Log Service integration
AWS WAF
- OWASP Top 10 protection
- AWS Managed Rules
- Bot Control and account fraud prevention
- Custom rate limiting and IP rules
- Real-time web traffic inspection
- CAPTCHA and silent challenge actions
- CloudWatch metrics and full logging
- Web application layer 7 defense
Platform & access
API access
Alibaba Cloud WAF
API access: yesAWS WAF
API access: yesSingle sign-on (SSO)
Alibaba Cloud WAF
SSO: yesAWS WAF
SSO: yesRole-based access (RBAC)
Alibaba Cloud WAF
RBAC: yesAWS WAF
RBAC: yesMulti-tenant
Alibaba Cloud WAF
Multi-tenant: yesAWS WAF
Multi-tenant: yesMobile app
Alibaba Cloud WAF
Mobile app: noAWS WAF
Mobile app: yesSupported platforms
Alibaba Cloud WAF
Alibaba CloudNon-Alibaba Cloud hosted web apps
AWS WAF
Amazon CloudFrontApplication Load BalancersAmazon API GatewayAWS AppSyncAWS Verified Access
Compliance
Alibaba Cloud WAF
Supports PCI DSS and China MLPS 2.0Alibaba Cloud ISO 27001 and SOC 2 portfolio
AWS WAF
SOC 1/2/3, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA eligible, FedRAMP High
Integrations & coverage
Integrations
Alibaba Cloud WAF
Alibaba Cloud Server Load BalancerECSAlibaba Cloud CDNAnti-DDoSSimple Log Service
AWS WAF
Amazon CloudFrontApplication Load BalancerAmazon API GatewayAWS AppSyncAmazon CognitoAWS Firewall ManagerAmazon CloudWatch
Industries
Alibaba Cloud WAF
E-commerceFinancial ServicesGovernmentMediaInternet Services
AWS WAF
Cross-industryE-commerceFinancial ServicesHealthcareTechnologyPublic Sector
Regions
Alibaba Cloud WAF
GlobalAsia PacificChinese Mainland
AWS WAF
Global (all AWS Regions and CloudFront edge locations)
Vendor
Company
Alibaba Cloud WAF
Alibaba CloudAWS WAF
AWSHeadquarters
Alibaba Cloud WAF
Hangzhou, Zhejiang, ChinaAWS WAF
Seattle, Washington, USACompany size
Alibaba Cloud WAF
10,001+AWS WAF
100,000+Founded
Alibaba Cloud WAF
2009AWS WAF
2006