Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Google Cloud Armor by Google Cloud View product | AWS WAF by AWS View product |
|---|---|---|
| Overview | ||
| What it is | Google Cloud Armor covers layer 7 filtering, DDoS mitigation and OWASP Top 10 rules for web application defense and bot mitigation. Compare top Network Security tools. | AWS WAF is a cloud web application firewall service from AWS. Learn how it supports web application layer 7 defense, what features stand out and which WAF tools compete. |
| Product type | Web Application Firewall & DDoS Mitigation | Cloud Web Application Firewall Service |
| Best for | Financial Services, Retail, Healthcare, Media, Cross-industry, Public Sector | Cross-industry, E-commerce, Financial Services, Healthcare, Technology, Public Sector |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: no |
| Deployment | ||
| Deployment options | CloudHybrid | Cloud |
| Deployment details | Cloud; Hybrid; Multi-cloud; Google Cloud; Hybrid deployments; Multi-cloud origins | Cloud; AWS Cloud-native managed edge and regional service |
| Data residency | Multi-region; regional endpoints available | Regional or global CloudFront edge deployment depending on resource type |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: yes |
| Supported platforms | Google CloudHybrid web workloadsKubernetes | Amazon CloudFrontApplication Load BalancersAmazon API GatewayAWS AppSyncAWS Verified Access |
| Compliance | SOC 1/2/3ISO/IEC 27001PCI-DSSFedRAMPHIPAA | SOC 1/2/3, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA eligible, FedRAMP High |
| Integrations & coverage | ||
| Integrations | Cloud Load BalancingCompute EngineGKECloud RunSecurity Command CenterCloud Logging | Amazon CloudFrontApplication Load BalancerAmazon API GatewayAWS AppSyncAmazon CognitoAWS Firewall ManagerAmazon CloudWatch |
| Industries | Financial ServicesRetailHealthcareMediaCross-industryPublic Sector | Cross-industryE-commerceFinancial ServicesHealthcareTechnologyPublic Sector |
| Regions | Global | Global (all AWS Regions and CloudFront edge locations) |
| Vendor | ||
| Company | Google Cloud | AWS |
| Headquarters | Mountain View, California, USA | Seattle, Washington, USA |
| Company size | 100,000+ | 100,000+ |
| Founded | 2008 | 2006 |
Overview
What it is
Google Cloud Armor
Google Cloud Armor covers layer 7 filtering, DDoS mitigation and OWASP Top 10 rules for web application defense and bot mitigation. Compare top Network Security tools.AWS WAF
AWS WAF is a cloud web application firewall service from AWS. Learn how it supports web application layer 7 defense, what features stand out and which WAF tools compete.Product type
Google Cloud Armor
Web Application Firewall & DDoS MitigationAWS WAF
Cloud Web Application Firewall ServiceBest for
Google Cloud Armor
Financial Services, Retail, Healthcare, Media, Cross-industry, Public SectorAWS WAF
Cross-industry, E-commerce, Financial Services, Healthcare, Technology, Public SectorPricing
Pricing model
Google Cloud Armor
Contact VendorAWS WAF
Contact VendorFree trial
Google Cloud Armor
Free trial: yesAWS WAF
Free trial: noDeployment
Deployment options
Google Cloud Armor
CloudHybrid
AWS WAF
Cloud
Deployment details
Google Cloud Armor
Cloud; Hybrid; Multi-cloud; Google Cloud; Hybrid deployments; Multi-cloud originsAWS WAF
Cloud; AWS Cloud-native managed edge and regional serviceData residency
Google Cloud Armor
Multi-region; regional endpoints availableAWS WAF
Regional or global CloudFront edge deployment depending on resource typeKey features
What it offers
Google Cloud Armor
- Layer 7 filtering
- DDoS mitigation
- OWASP Top 10 rules
- Adaptive protection
- Rate limiting
- IP allow/denylist
- Bot management
- reCAPTCHA integration
AWS WAF
- OWASP Top 10 protection
- AWS Managed Rules
- Bot Control and account fraud prevention
- Custom rate limiting and IP rules
- Real-time web traffic inspection
- CAPTCHA and silent challenge actions
- CloudWatch metrics and full logging
- Web application layer 7 defense
Platform & access
API access
Google Cloud Armor
API access: yesAWS WAF
API access: yesSingle sign-on (SSO)
Google Cloud Armor
SSO: yesAWS WAF
SSO: yesRole-based access (RBAC)
Google Cloud Armor
RBAC: yesAWS WAF
RBAC: yesMulti-tenant
Google Cloud Armor
Multi-tenant: yesAWS WAF
Multi-tenant: yesMobile app
Google Cloud Armor
Mobile app: noAWS WAF
Mobile app: yesSupported platforms
Google Cloud Armor
Google CloudHybrid web workloadsKubernetes
AWS WAF
Amazon CloudFrontApplication Load BalancersAmazon API GatewayAWS AppSyncAWS Verified Access
Compliance
Google Cloud Armor
SOC 1/2/3ISO/IEC 27001PCI-DSSFedRAMPHIPAA
AWS WAF
SOC 1/2/3, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA eligible, FedRAMP High
Integrations & coverage
Integrations
Google Cloud Armor
Cloud Load BalancingCompute EngineGKECloud RunSecurity Command CenterCloud Logging
AWS WAF
Amazon CloudFrontApplication Load BalancerAmazon API GatewayAWS AppSyncAmazon CognitoAWS Firewall ManagerAmazon CloudWatch
Industries
Google Cloud Armor
Financial ServicesRetailHealthcareMediaCross-industryPublic Sector
AWS WAF
Cross-industryE-commerceFinancial ServicesHealthcareTechnologyPublic Sector
Regions
Google Cloud Armor
Global
AWS WAF
Global (all AWS Regions and CloudFront edge locations)
Vendor
Company
Google Cloud Armor
Google CloudAWS WAF
AWSHeadquarters
Google Cloud Armor
Mountain View, California, USAAWS WAF
Seattle, Washington, USACompany size
Google Cloud Armor
100,000+AWS WAF
100,000+Founded
Google Cloud Armor
2008AWS WAF
2006