Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Cloudflare Magic Transit by Cloudflare View product | AWS Shield by AWS View product |
|---|---|---|
| Overview | ||
| What it is | Looking for Network Security software? Cloudflare Magic Transit by Cloudflare provides BGP Anycast routing for ISP subnet protection. Compare features and alternatives. | Get the facts on AWS Shield: real-time attack metrics. Built for volumetric DDoS attack deflection. Compare it with other DDoS Protection options before you decide. |
| Product type | BGP-Routed Network DDoS Mitigation & Acceleration | Managed DDoS Protection Service |
| Best for | Telecommunications, Financial Services, Gaming, Enterprise, SaaS, Online Gaming, Hosting Providers | Cross-industry, Enterprise, Financial Services, Media & Entertainment, Retail, Technology |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: no | Free trial: yes |
| Deployment | ||
| Deployment options | CloudHybrid | Cloud |
| Deployment details | Cloud Anycast Network (BGP Routed); Cloud Anycast Network; Hybrid Scrubbing | Cloud; AWS Cloud edge-integrated managed service |
| Data residency | Global Anycast edge (330+ cities across 120+ countries) | Global edge network protection with regional mitigation telemetry |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: yes |
| Supported platforms | Enterprise IP Subnets (/24 IPv4, /48 IPv6)Data CentersISP uplinks | Amazon CloudFrontAmazon Route 53ALBNLBAWS Global AcceleratorElastic IPs |
| Compliance | PCI-DSSSOC 2 Type IIISO/IEC 27001HIPAAGDPR | SOC 1/2/3, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA eligible, FedRAMP High |
| Integrations & coverage | ||
| Integrations | CiscoJuniperArista routersCloudflare Magic FirewallSplunkDatadog | Amazon CloudFrontAmazon Route 53Elastic Load BalancingAWS Global AcceleratorAWS WAFAWS Firewall ManagerAmazon CloudWatch |
| Industries | TelecommunicationsFinancial ServicesGamingEnterpriseSaaSOnline Gaming+1 more | Cross-industryEnterpriseFinancial ServicesMedia & EntertainmentRetailTechnology |
| Regions | Global (330+ cities, 300+ Tbps capacity) | Global |
| Vendor | ||
| Company | Cloudflare | AWS |
| Headquarters | San Francisco, California, USA | Seattle, Washington, USA |
| Company size | 5,000+ | 100,000+ |
| Founded | 2010 | 2006 |
Overview
What it is
Cloudflare Magic Transit
Looking for Network Security software? Cloudflare Magic Transit by Cloudflare provides BGP Anycast routing for ISP subnet protection. Compare features and alternatives.AWS Shield
Get the facts on AWS Shield: real-time attack metrics. Built for volumetric DDoS attack deflection. Compare it with other DDoS Protection options before you decide.Product type
Cloudflare Magic Transit
BGP-Routed Network DDoS Mitigation & AccelerationAWS Shield
Managed DDoS Protection ServiceBest for
Cloudflare Magic Transit
Telecommunications, Financial Services, Gaming, Enterprise, SaaS, Online Gaming, Hosting ProvidersAWS Shield
Cross-industry, Enterprise, Financial Services, Media & Entertainment, Retail, TechnologyPricing
Pricing model
Cloudflare Magic Transit
Contact VendorAWS Shield
Contact VendorFree trial
Cloudflare Magic Transit
Free trial: noAWS Shield
Free trial: yesDeployment
Deployment options
Cloudflare Magic Transit
AWS Shield
Deployment details
Cloudflare Magic Transit
Cloud Anycast Network (BGP Routed); Cloud Anycast Network; Hybrid ScrubbingAWS Shield
Cloud; AWS Cloud edge-integrated managed serviceData residency
Cloudflare Magic Transit
Global Anycast edge (330+ cities across 120+ countries)AWS Shield
Global edge network protection with regional mitigation telemetryKey features
What it offers
Cloudflare Magic Transit
- BGP Anycast routing
- 300+ Tbps edge DDoS mitigation
- GRE & IPsec tunnel delivery
- Layer 3/4 flood scrubbing
- Anycast latency optimization
- Sub-second response
- Data center DDoS defense
- ISP subnet protection
AWS Shield
- Comprehensive Layer 3/4/7 DDoS mitigation
- Automatic Layer 3/4 defense at edge
- Shield Advanced tailored mitigation and health checks
- 24/7 AWS DDoS Response Team (DRT) access
- Financial DDoS cost protection
- Real-time attack metrics
- Volumetric DDoS attack deflection
- Web application availability defense
Platform & access
API access
Cloudflare Magic Transit
API access: yesAWS Shield
API access: yesSingle sign-on (SSO)
Cloudflare Magic Transit
SSO: yesAWS Shield
SSO: yesRole-based access (RBAC)
Cloudflare Magic Transit
RBAC: yesAWS Shield
RBAC: yesMulti-tenant
Cloudflare Magic Transit
Multi-tenant: yesAWS Shield
Multi-tenant: yesMobile app
Cloudflare Magic Transit
Mobile app: noAWS Shield
Mobile app: yesSupported platforms
Cloudflare Magic Transit
AWS Shield
Compliance
Cloudflare Magic Transit
AWS Shield
Integrations & coverage
Integrations
Cloudflare Magic Transit
AWS Shield
Industries
Cloudflare Magic Transit
AWS Shield
Regions
Cloudflare Magic Transit
AWS Shield
Vendor
Company
Cloudflare Magic Transit
CloudflareAWS Shield
AWSHeadquarters
Cloudflare Magic Transit
San Francisco, California, USAAWS Shield
Seattle, Washington, USACompany size
Cloudflare Magic Transit
5,000+AWS Shield
100,000+Founded
Cloudflare Magic Transit
2010AWS Shield
2006