Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Cloudflare WAF by Cloudflare View product | AWS WAF by AWS View product |
|---|---|---|
| Overview | ||
| What it is | See what Cloudflare WAF offers: edge rate limiting. It is built for OWASP Top 10 vulnerability mitigation, supports cloud deployment and competes with other WAF tools. | AWS WAF is a cloud web application firewall service from AWS. Learn how it supports web application layer 7 defense, what features stand out and which WAF tools compete. |
| Product type | Cloud-Native Web Application Firewall (WAF) | Cloud Web Application Firewall Service |
| Best for | E-commerce, Banking, Healthcare, Government, Technology, Cross-industry, Financial Services | Cross-industry, E-commerce, Financial Services, Healthcare, Technology, Public Sector |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: no |
| Deployment | ||
| Deployment options | Cloud | Cloud |
| Deployment details | Cloud Edge Anycast Network; Cloud Edge Anycast Platform | Cloud; AWS Cloud-native managed edge and regional service |
| Data residency | Global Anycast edge (330+ cities worldwide) | Regional or global CloudFront edge deployment depending on resource type |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: yes |
| Supported platforms | Web ApplicationsREST APIsE-commerce PlatformsContent Management Systems | Amazon CloudFrontApplication Load BalancersAmazon API GatewayAWS AppSyncAWS Verified Access |
| Compliance | PCI-DSS 4.0SOC 2 Type IIISO/IEC 27001HIPAAGDPR | SOC 1/2/3, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA eligible, FedRAMP High |
| Integrations & coverage | ||
| Integrations | Cloudflare Bot ManagementAPI ShieldSplunkDatadogTerraformAWSAzure | Amazon CloudFrontApplication Load BalancerAmazon API GatewayAWS AppSyncAmazon CognitoAWS Firewall ManagerAmazon CloudWatch |
| Industries | E-commerceBankingHealthcareGovernmentTechnologyCross-industry+1 more | Cross-industryE-commerceFinancial ServicesHealthcareTechnologyPublic Sector |
| Regions | Global (330+ cities) | Global (all AWS Regions and CloudFront edge locations) |
| Vendor | ||
| Company | Cloudflare | AWS |
| Headquarters | San Francisco, California, USA | Seattle, Washington, USA |
| Company size | 5,000+ | 100,000+ |
| Founded | 2010 | 2006 |
Overview
What it is
Cloudflare WAF
See what Cloudflare WAF offers: edge rate limiting. It is built for OWASP Top 10 vulnerability mitigation, supports cloud deployment and competes with other WAF tools.AWS WAF
AWS WAF is a cloud web application firewall service from AWS. Learn how it supports web application layer 7 defense, what features stand out and which WAF tools compete.Product type
Cloudflare WAF
Cloud-Native Web Application Firewall (WAF)AWS WAF
Cloud Web Application Firewall ServiceBest for
Cloudflare WAF
E-commerce, Banking, Healthcare, Government, Technology, Cross-industry, Financial ServicesAWS WAF
Cross-industry, E-commerce, Financial Services, Healthcare, Technology, Public SectorPricing
Pricing model
Cloudflare WAF
Contact VendorAWS WAF
Contact VendorFree trial
Cloudflare WAF
Free trial: yesAWS WAF
Free trial: noDeployment
Deployment options
Cloudflare WAF
Cloud
AWS WAF
Cloud
Deployment details
Cloudflare WAF
Cloud Edge Anycast Network; Cloud Edge Anycast PlatformAWS WAF
Cloud; AWS Cloud-native managed edge and regional serviceData residency
Cloudflare WAF
Global Anycast edge (330+ cities worldwide)AWS WAF
Regional or global CloudFront edge deployment depending on resource typeKey features
What it offers
Cloudflare WAF
- Cloud-native edge WAF
- OWASP Top 10 mitigation
- Cloudflare Managed Rulesets
- Custom Wirefilter rules
- ML zero-day detection
- Edge rate limiting
- Real-time logs
- OWASP Top 10 vulnerability mitigation
AWS WAF
- OWASP Top 10 protection
- AWS Managed Rules
- Bot Control and account fraud prevention
- Custom rate limiting and IP rules
- Real-time web traffic inspection
- CAPTCHA and silent challenge actions
- CloudWatch metrics and full logging
- Web application layer 7 defense
Platform & access
API access
Cloudflare WAF
API access: yesAWS WAF
API access: yesSingle sign-on (SSO)
Cloudflare WAF
SSO: yesAWS WAF
SSO: yesRole-based access (RBAC)
Cloudflare WAF
RBAC: yesAWS WAF
RBAC: yesMulti-tenant
Cloudflare WAF
Multi-tenant: yesAWS WAF
Multi-tenant: yesMobile app
Cloudflare WAF
Mobile app: noAWS WAF
Mobile app: yesSupported platforms
Cloudflare WAF
Web ApplicationsREST APIsE-commerce PlatformsContent Management Systems
AWS WAF
Amazon CloudFrontApplication Load BalancersAmazon API GatewayAWS AppSyncAWS Verified Access
Compliance
Cloudflare WAF
PCI-DSS 4.0SOC 2 Type IIISO/IEC 27001HIPAAGDPR
AWS WAF
SOC 1/2/3, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA eligible, FedRAMP High
Integrations & coverage
Integrations
Cloudflare WAF
Cloudflare Bot ManagementAPI ShieldSplunkDatadogTerraformAWSAzure
AWS WAF
Amazon CloudFrontApplication Load BalancerAmazon API GatewayAWS AppSyncAmazon CognitoAWS Firewall ManagerAmazon CloudWatch
Industries
Cloudflare WAF
E-commerceBankingHealthcareGovernmentTechnologyCross-industry+1 more
AWS WAF
Cross-industryE-commerceFinancial ServicesHealthcareTechnologyPublic Sector
Regions
Cloudflare WAF
Global (330+ cities)
AWS WAF
Global (all AWS Regions and CloudFront edge locations)
Vendor
Company
Cloudflare WAF
CloudflareAWS WAF
AWSHeadquarters
Cloudflare WAF
San Francisco, California, USAAWS WAF
Seattle, Washington, USACompany size
Cloudflare WAF
5,000+AWS WAF
100,000+Founded
Cloudflare WAF
2010AWS WAF
2006