Compare products

Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.

Azure Web Application FirewallAWS WAF2 of 3 products

Side-by-side comparison of Azure Web Application Firewall, AWS WAF
Product	Azure Web Application Firewall by Microsoft View product	AWS WAF by AWS View product
Overview
What it is	Azure Web Application Firewall helps teams with OWASP mitigation. Explore features like OWASP rules and custom rules, cloud deployment and the closest WAF competitors.	AWS WAF is a cloud web application firewall service from AWS. Learn how it supports web application layer 7 defense, what features stand out and which WAF tools compete.
Product type	Web Application Firewall	Cloud Web Application Firewall Service
Best for	Cross-industry	Cross-industry, E-commerce, Financial Services, Healthcare, Technology, Public Sector
Pricing
Pricing model	Contact Vendor	Contact Vendor
Free trial	Free trial: no	Free trial: no
Deployment
Deployment options	Cloud	Cloud
Deployment details	Cloud; Azure	Cloud; AWS Cloud-native managed edge and regional service
Data residency	Selected Azure region	Regional or global CloudFront edge deployment depending on resource type
Key features
What it offers	OWASP rules Custom rules Bot protection options Detection/prevention modes Logging Web application protection OWASP mitigation HTTP threat filtering	OWASP Top 10 protection AWS Managed Rules Bot Control and account fraud prevention Custom rate limiting and IP rules Real-time web traffic inspection CAPTCHA and silent challenge actions CloudWatch metrics and full logging Web application layer 7 defense
Platform & access
API access	API access: yes	API access: yes
Single sign-on (SSO)	SSO: no	SSO: yes
Role-based access (RBAC)	RBAC: yes	RBAC: yes
Multi-tenant	Multi-tenant: yes	Multi-tenant: yes
Mobile app	Mobile app: no	Mobile app: yes
Supported platforms	Azure	Amazon CloudFrontApplication Load BalancersAmazon API GatewayAWS AppSyncAWS Verified Access
Compliance	Azure compliance portfolioregion dependent	SOC 1/2/3, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA eligible, FedRAMP High
Integrations & coverage
Integrations	Azure Application GatewayAzure Front DoorAzure MonitorLog Analytics	Amazon CloudFrontApplication Load BalancerAmazon API GatewayAWS AppSyncAmazon CognitoAWS Firewall ManagerAmazon CloudWatch
Industries	Cross-industry	Cross-industryE-commerceFinancial ServicesHealthcareTechnologyPublic Sector
Regions	Azure regions	Global (all AWS Regions and CloudFront edge locations)
Vendor
Company	Microsoft	AWS
Headquarters	Redmond, Washington, USA	Seattle, Washington, USA
Company size	200,000+	100,000+
Founded	1975	2006

Azure Web Application Firewall

by Microsoft

View product

AWS WAF

by AWS

View product

Overview

What it is

Azure Web Application Firewall

Azure Web Application Firewall helps teams with OWASP mitigation. Explore features like OWASP rules and custom rules, cloud deployment and the closest WAF competitors.

AWS WAF

AWS WAF is a cloud web application firewall service from AWS. Learn how it supports web application layer 7 defense, what features stand out and which WAF tools compete.

Product type

Azure Web Application Firewall

Web Application Firewall

AWS WAF

Cloud Web Application Firewall Service

Best for

Azure Web Application Firewall

Cross-industry

AWS WAF

Cross-industry, E-commerce, Financial Services, Healthcare, Technology, Public Sector

Pricing

Pricing model

Azure Web Application Firewall

Contact Vendor

AWS WAF

Contact Vendor

Free trial

Azure Web Application Firewall

AWS WAF

Deployment

Deployment options

Azure Web Application Firewall

Cloud

AWS WAF

Cloud

Deployment details

Azure Web Application Firewall

Cloud; Azure

AWS WAF

Cloud; AWS Cloud-native managed edge and regional service

Data residency

Azure Web Application Firewall

Selected Azure region

AWS WAF

Regional or global CloudFront edge deployment depending on resource type

Key features

What it offers

Azure Web Application Firewall

OWASP rules
Custom rules
Bot protection options
Detection/prevention modes
Logging
Web application protection
OWASP mitigation
HTTP threat filtering

AWS WAF

OWASP Top 10 protection
AWS Managed Rules
Bot Control and account fraud prevention
Custom rate limiting and IP rules
Real-time web traffic inspection
CAPTCHA and silent challenge actions
CloudWatch metrics and full logging
Web application layer 7 defense

Platform & access

API access

Azure Web Application Firewall

AWS WAF

Single sign-on (SSO)

Azure Web Application Firewall

AWS WAF

Role-based access (RBAC)

Azure Web Application Firewall

AWS WAF

Multi-tenant

Azure Web Application Firewall

AWS WAF

Mobile app

Azure Web Application Firewall

AWS WAF

Supported platforms

Azure Web Application Firewall

Azure

AWS WAF

Amazon CloudFrontApplication Load BalancersAmazon API GatewayAWS AppSyncAWS Verified Access

Compliance

Azure Web Application Firewall

Azure compliance portfolioregion dependent

AWS WAF

SOC 1/2/3, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA eligible, FedRAMP High

Integrations & coverage

Integrations

Azure Web Application Firewall

Azure Application GatewayAzure Front DoorAzure MonitorLog Analytics

AWS WAF

Amazon CloudFrontApplication Load BalancerAmazon API GatewayAWS AppSyncAmazon CognitoAWS Firewall ManagerAmazon CloudWatch

Industries

Azure Web Application Firewall

Cross-industry

AWS WAF

Cross-industryE-commerceFinancial ServicesHealthcareTechnologyPublic Sector

Regions

Azure Web Application Firewall

Azure regions

AWS WAF

Global (all AWS Regions and CloudFront edge locations)

Vendor

Company

Azure Web Application Firewall

Microsoft

AWS WAF

AWS

Headquarters

Azure Web Application Firewall

Redmond, Washington, USA

AWS WAF

Seattle, Washington, USA

Company size

Azure Web Application Firewall

200,000+

AWS WAF

100,000+

Founded

Azure Web Application Firewall

1975

AWS WAF

2006