Compare products

Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.

AWS WAFFortiWeb2 of 3 products

Side-by-side comparison of AWS WAF, FortiWeb
Product	AWS WAF by AWS View product	FortiWeb by Fortinet View product
Overview
What it is	AWS WAF is a cloud web application firewall service from AWS. Learn how it supports web application layer 7 defense, what features stand out and which WAF tools compete.	Get the facts on FortiWeb: WAF, API protection and bot management. Built for API security. Compare it with other Application Security options before you decide.
Product type	Cloud Web Application Firewall Service	Web application firewall and API security platform
Best for	Cross-industry, E-commerce, Financial Services, Healthcare, Technology, Public Sector	Enterprise, SMB, Financial services, Healthcare, Government, Education, Manufacturing, Retail, Technology, Service providers
Pricing
Pricing model	Contact Vendor	Contact Vendor
Free trial	Free trial: no	Free trial: no
Deployment
Deployment options	Cloud	Cloud
Deployment details	Cloud; AWS Cloud-native managed edge and regional service	Physical appliance, virtual appliance and cloud deployment options; Physical appliance, virtual appliance and cloud deployment options
Data residency	Regional or global CloudFront edge deployment depending on resource type	Depends on deployment, service region, cloud architecture and customer configuration; verify the applicable Fortinet service/region
Key features
What it offers	OWASP Top 10 protection AWS Managed Rules Bot Control and account fraud prevention Custom rate limiting and IP rules Real-time web traffic inspection CAPTCHA and silent challenge actions CloudWatch metrics and full logging Web application layer 7 defense	WAF API protection Bot management Threat detection SSL inspection Application-layer controls Machine-learning-assisted detection Vulnerability mitigation
Platform & access
API access	API access: yes	API access: yes
Single sign-on (SSO)	SSO: yes	SSO: yes
Role-based access (RBAC)	RBAC: yes	RBAC: yes
Multi-tenant	Multi-tenant: yes	Multi-tenant: yes
Mobile app	Mobile app: yes	Mobile app: no
Supported platforms	Amazon CloudFrontApplication Load BalancersAmazon API GatewayAWS AppSyncAWS Verified Access	Hardware applianceVMware ESXiMicrosoft Hyper-VKVMCitrix XenServerAWSMicrosoft AzureGoogle Cloud+2 more
Compliance	SOC 1/2/3, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA eligible, FedRAMP High	Supports security controls used in common regulated environmentsexact certifications depend on product, model, release and deployment
Integrations & coverage
Integrations	Amazon CloudFrontApplication Load BalancerAmazon API GatewayAWS AppSyncAmazon CognitoAWS Firewall ManagerAmazon CloudWatch	FortiGateFortiManagerFortiAnalyzerFortiSandboxFortiSIEMFortiSOARFortiWeb CloudFortiGuard
Industries	Cross-industryE-commerceFinancial ServicesHealthcareTechnologyPublic Sector	EnterpriseSMBFinancial servicesHealthcareGovernmentEducation+4 more
Regions	Global (all AWS Regions and CloudFront edge locations)	GlobalAvailability varies by product, deployment and service region
Vendor
Company	AWS	Fortinet
Headquarters	Seattle, Washington, USA	Sunnyvale, California, USA
Company size	100,000+	10,000+
Founded	2006	2000

AWS WAF

by AWS

View product

FortiWeb

by Fortinet

View product

Overview

What it is

AWS WAF

AWS WAF is a cloud web application firewall service from AWS. Learn how it supports web application layer 7 defense, what features stand out and which WAF tools compete.

FortiWeb

Get the facts on FortiWeb: WAF, API protection and bot management. Built for API security. Compare it with other Application Security options before you decide.

Product type

AWS WAF

Cloud Web Application Firewall Service

FortiWeb

Web application firewall and API security platform

Best for

AWS WAF

Cross-industry, E-commerce, Financial Services, Healthcare, Technology, Public Sector

FortiWeb

Enterprise, SMB, Financial services, Healthcare, Government, Education, Manufacturing, Retail, Technology, Service providers

Pricing

Pricing model

AWS WAF

Contact Vendor

FortiWeb

Contact Vendor

Free trial

AWS WAF

FortiWeb

Deployment

Deployment options

AWS WAF

Cloud

FortiWeb

Cloud

Deployment details

AWS WAF

Cloud; AWS Cloud-native managed edge and regional service

FortiWeb

Physical appliance, virtual appliance and cloud deployment options; Physical appliance, virtual appliance and cloud deployment options

Data residency

AWS WAF

Regional or global CloudFront edge deployment depending on resource type

FortiWeb

Depends on deployment, service region, cloud architecture and customer configuration; verify the applicable Fortinet service/region

Key features

What it offers

AWS WAF

OWASP Top 10 protection
AWS Managed Rules
Bot Control and account fraud prevention
Custom rate limiting and IP rules
Real-time web traffic inspection
CAPTCHA and silent challenge actions
CloudWatch metrics and full logging
Web application layer 7 defense

FortiWeb

WAF
API protection
Bot management
Threat detection
SSL inspection
Application-layer controls
Machine-learning-assisted detection
Vulnerability mitigation

Platform & access

API access

AWS WAF

FortiWeb

Single sign-on (SSO)

AWS WAF

FortiWeb

Role-based access (RBAC)

AWS WAF

FortiWeb

Multi-tenant

AWS WAF

FortiWeb

Mobile app

AWS WAF

FortiWeb

Supported platforms

AWS WAF

Amazon CloudFrontApplication Load BalancersAmazon API GatewayAWS AppSyncAWS Verified Access

FortiWeb

Hardware applianceVMware ESXiMicrosoft Hyper-VKVMCitrix XenServerAWSMicrosoft AzureGoogle Cloud+2 more

Compliance

AWS WAF

SOC 1/2/3, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA eligible, FedRAMP High

FortiWeb

Supports security controls used in common regulated environmentsexact certifications depend on product, model, release and deployment

Integrations & coverage

Integrations

AWS WAF

Amazon CloudFrontApplication Load BalancerAmazon API GatewayAWS AppSyncAmazon CognitoAWS Firewall ManagerAmazon CloudWatch

FortiWeb

FortiGateFortiManagerFortiAnalyzerFortiSandboxFortiSIEMFortiSOARFortiWeb CloudFortiGuard

Industries

AWS WAF

Cross-industryE-commerceFinancial ServicesHealthcareTechnologyPublic Sector

FortiWeb

EnterpriseSMBFinancial servicesHealthcareGovernmentEducation+4 more

Regions

AWS WAF

Global (all AWS Regions and CloudFront edge locations)

FortiWeb

GlobalAvailability varies by product, deployment and service region

Vendor

Company

AWS WAF

AWS

FortiWeb

Fortinet

Headquarters

AWS WAF

Seattle, Washington, USA

FortiWeb

Sunnyvale, California, USA

Company size

AWS WAF

100,000+

FortiWeb

10,000+

Founded

AWS WAF

2006

FortiWeb

2000