Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | AWS WAF by AWS View product | Alibaba Cloud WAF View product |
|---|---|---|
| Overview | ||
| What it is | AWS WAF is a cloud web application firewall service from AWS. Learn how it supports web application layer 7 defense, what features stand out and which WAF tools compete. | Alibaba Cloud WAF from Alibaba Cloud focuses on website protection. Key capabilities: API security and bot management. Compare it with the leading WAF alternatives. |
| Product type | Cloud Web Application Firewall Service | Web Application Firewall (WAF) |
| Best for | Cross-industry, E-commerce, Financial Services, Healthcare, Technology, Public Sector | E-commerce, Financial Services, Government, Media, Internet Services |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: no | Free trial: no |
| Deployment | ||
| Deployment options | Cloud | SaaSCloud |
| Deployment details | Cloud; AWS Cloud-native managed edge and regional service | Cloud (SaaS); Cloud service (cloud-native or CNAME mode) |
| Data residency | Regional or global CloudFront edge deployment depending on resource type | Alibaba Cloud regions |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: yes | Mobile app: no |
| Supported platforms | Amazon CloudFrontApplication Load BalancersAmazon API GatewayAWS AppSyncAWS Verified Access | Alibaba CloudNon-Alibaba Cloud hosted web apps |
| Compliance | SOC 1/2/3, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA eligible, FedRAMP High | Supports PCI DSS and China MLPS 2.0Alibaba Cloud ISO 27001 and SOC 2 portfolio |
| Integrations & coverage | ||
| Integrations | Amazon CloudFrontApplication Load BalancerAmazon API GatewayAWS AppSyncAmazon CognitoAWS Firewall ManagerAmazon CloudWatch | Alibaba Cloud Server Load BalancerECSAlibaba Cloud CDNAnti-DDoSSimple Log Service |
| Industries | Cross-industryE-commerceFinancial ServicesHealthcareTechnologyPublic Sector | E-commerceFinancial ServicesGovernmentMediaInternet Services |
| Regions | Global (all AWS Regions and CloudFront edge locations) | GlobalAsia PacificChinese Mainland |
| Vendor | ||
| Company | AWS | Alibaba Cloud |
| Headquarters | Seattle, Washington, USA | Hangzhou, Zhejiang, China |
| Company size | 100,000+ | 10,001+ |
| Founded | 2006 | 2009 |
Overview
What it is
AWS WAF
AWS WAF is a cloud web application firewall service from AWS. Learn how it supports web application layer 7 defense, what features stand out and which WAF tools compete.Alibaba Cloud WAF
Alibaba Cloud WAF from Alibaba Cloud focuses on website protection. Key capabilities: API security and bot management. Compare it with the leading WAF alternatives.Product type
AWS WAF
Cloud Web Application Firewall ServiceAlibaba Cloud WAF
Web Application Firewall (WAF)Best for
AWS WAF
Cross-industry, E-commerce, Financial Services, Healthcare, Technology, Public SectorAlibaba Cloud WAF
E-commerce, Financial Services, Government, Media, Internet ServicesPricing
Pricing model
AWS WAF
Contact VendorAlibaba Cloud WAF
Contact VendorFree trial
AWS WAF
Free trial: noAlibaba Cloud WAF
Free trial: noDeployment
Deployment options
AWS WAF
Cloud
Alibaba Cloud WAF
SaaSCloud
Deployment details
AWS WAF
Cloud; AWS Cloud-native managed edge and regional serviceAlibaba Cloud WAF
Cloud (SaaS); Cloud service (cloud-native or CNAME mode)Data residency
AWS WAF
Regional or global CloudFront edge deployment depending on resource typeAlibaba Cloud WAF
Alibaba Cloud regionsKey features
What it offers
AWS WAF
- OWASP Top 10 protection
- AWS Managed Rules
- Bot Control and account fraud prevention
- Custom rate limiting and IP rules
- Real-time web traffic inspection
- CAPTCHA and silent challenge actions
- CloudWatch metrics and full logging
- Web application layer 7 defense
Alibaba Cloud WAF
- OWASP Top 10 protection
- Semantic and ML-based detection
- Bot management
- API security
- HTTP flood protection
- Custom access rules
- Virtual patching
- Log Service integration
Platform & access
API access
AWS WAF
API access: yesAlibaba Cloud WAF
API access: yesSingle sign-on (SSO)
AWS WAF
SSO: yesAlibaba Cloud WAF
SSO: yesRole-based access (RBAC)
AWS WAF
RBAC: yesAlibaba Cloud WAF
RBAC: yesMulti-tenant
AWS WAF
Multi-tenant: yesAlibaba Cloud WAF
Multi-tenant: yesMobile app
AWS WAF
Mobile app: yesAlibaba Cloud WAF
Mobile app: noSupported platforms
AWS WAF
Amazon CloudFrontApplication Load BalancersAmazon API GatewayAWS AppSyncAWS Verified Access
Alibaba Cloud WAF
Alibaba CloudNon-Alibaba Cloud hosted web apps
Compliance
AWS WAF
SOC 1/2/3, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA eligible, FedRAMP High
Alibaba Cloud WAF
Supports PCI DSS and China MLPS 2.0Alibaba Cloud ISO 27001 and SOC 2 portfolio
Integrations & coverage
Integrations
AWS WAF
Amazon CloudFrontApplication Load BalancerAmazon API GatewayAWS AppSyncAmazon CognitoAWS Firewall ManagerAmazon CloudWatch
Alibaba Cloud WAF
Alibaba Cloud Server Load BalancerECSAlibaba Cloud CDNAnti-DDoSSimple Log Service
Industries
AWS WAF
Cross-industryE-commerceFinancial ServicesHealthcareTechnologyPublic Sector
Alibaba Cloud WAF
E-commerceFinancial ServicesGovernmentMediaInternet Services
Regions
AWS WAF
Global (all AWS Regions and CloudFront edge locations)
Alibaba Cloud WAF
GlobalAsia PacificChinese Mainland
Vendor
Company
AWS WAF
AWSAlibaba Cloud WAF
Alibaba CloudHeadquarters
AWS WAF
Seattle, Washington, USAAlibaba Cloud WAF
Hangzhou, Zhejiang, ChinaCompany size
AWS WAF
100,000+Alibaba Cloud WAF
10,001+Founded
AWS WAF
2006Alibaba Cloud WAF
2009