Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
You can compare up to 3 products. Remove one to add another.
| Product | Google Cloud Armor by Google Cloud View product | AWS WAF by AWS View product | FortiWeb by Fortinet View product |
|---|---|---|---|
| Overview | |||
| What it is | Google Cloud Armor covers layer 7 filtering, DDoS mitigation and OWASP Top 10 rules for web application defense and bot mitigation. Compare top Network Security tools. | AWS WAF is a cloud web application firewall service from AWS. Learn how it supports web application layer 7 defense, what features stand out and which WAF tools compete. | Get the facts on FortiWeb: WAF, API protection and bot management. Built for API security. Compare it with other Application Security options before you decide. |
| Product type | Web Application Firewall & DDoS Mitigation | Cloud Web Application Firewall Service | Web application firewall and API security platform |
| Best for | Financial Services, Retail, Healthcare, Media, Cross-industry, Public Sector | Cross-industry, E-commerce, Financial Services, Healthcare, Technology, Public Sector | Enterprise, SMB, Financial services, Healthcare, Government, Education, Manufacturing, Retail, Technology, Service providers |
| Pricing | |||
| Pricing model | Contact Vendor | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: no | Free trial: no |
| Deployment | |||
| Deployment options | CloudHybrid | Cloud | Cloud |
| Deployment details | Cloud; Hybrid; Multi-cloud; Google Cloud; Hybrid deployments; Multi-cloud origins | Cloud; AWS Cloud-native managed edge and regional service | Physical appliance, virtual appliance and cloud deployment options; Physical appliance, virtual appliance and cloud deployment options |
| Data residency | Multi-region; regional endpoints available | Regional or global CloudFront edge deployment depending on resource type | Depends on deployment, service region, cloud architecture and customer configuration; verify the applicable Fortinet service/region |
| Key features | |||
| What it offers |
|
|
|
| Platform & access | |||
| API access | API access: yes | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: yes | Mobile app: no |
| Supported platforms | Google CloudHybrid web workloadsKubernetes | Amazon CloudFrontApplication Load BalancersAmazon API GatewayAWS AppSyncAWS Verified Access | Hardware applianceVMware ESXiMicrosoft Hyper-VKVMCitrix XenServerAWSMicrosoft AzureGoogle Cloud+2 more |
| Compliance | SOC 1/2/3ISO/IEC 27001PCI-DSSFedRAMPHIPAA | SOC 1/2/3, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA eligible, FedRAMP High | Supports security controls used in common regulated environmentsexact certifications depend on product, model, release and deployment |
| Integrations & coverage | |||
| Integrations | Cloud Load BalancingCompute EngineGKECloud RunSecurity Command CenterCloud Logging | Amazon CloudFrontApplication Load BalancerAmazon API GatewayAWS AppSyncAmazon CognitoAWS Firewall ManagerAmazon CloudWatch | FortiGateFortiManagerFortiAnalyzerFortiSandboxFortiSIEMFortiSOARFortiWeb CloudFortiGuard |
| Industries | Financial ServicesRetailHealthcareMediaCross-industryPublic Sector | Cross-industryE-commerceFinancial ServicesHealthcareTechnologyPublic Sector | EnterpriseSMBFinancial servicesHealthcareGovernmentEducation+4 more |
| Regions | Global | Global (all AWS Regions and CloudFront edge locations) | GlobalAvailability varies by product, deployment and service region |
| Vendor | |||
| Company | Google Cloud | AWS | Fortinet |
| Headquarters | Mountain View, California, USA | Seattle, Washington, USA | Sunnyvale, California, USA |
| Company size | 100,000+ | 100,000+ | 10,000+ |
| Founded | 2008 | 2006 | 2000 |
Overview
What it is
Google Cloud Armor
Google Cloud Armor covers layer 7 filtering, DDoS mitigation and OWASP Top 10 rules for web application defense and bot mitigation. Compare top Network Security tools.AWS WAF
AWS WAF is a cloud web application firewall service from AWS. Learn how it supports web application layer 7 defense, what features stand out and which WAF tools compete.FortiWeb
Get the facts on FortiWeb: WAF, API protection and bot management. Built for API security. Compare it with other Application Security options before you decide.Product type
Google Cloud Armor
Web Application Firewall & DDoS MitigationAWS WAF
Cloud Web Application Firewall ServiceFortiWeb
Web application firewall and API security platformBest for
Google Cloud Armor
Financial Services, Retail, Healthcare, Media, Cross-industry, Public SectorAWS WAF
Cross-industry, E-commerce, Financial Services, Healthcare, Technology, Public SectorFortiWeb
Enterprise, SMB, Financial services, Healthcare, Government, Education, Manufacturing, Retail, Technology, Service providersPricing
Pricing model
Google Cloud Armor
Contact VendorAWS WAF
Contact VendorFortiWeb
Contact VendorFree trial
Google Cloud Armor
Free trial: yesAWS WAF
Free trial: noFortiWeb
Free trial: noDeployment
Deployment options
Google Cloud Armor
CloudHybrid
AWS WAF
Cloud
FortiWeb
Cloud
Deployment details
Google Cloud Armor
Cloud; Hybrid; Multi-cloud; Google Cloud; Hybrid deployments; Multi-cloud originsAWS WAF
Cloud; AWS Cloud-native managed edge and regional serviceFortiWeb
Physical appliance, virtual appliance and cloud deployment options; Physical appliance, virtual appliance and cloud deployment optionsData residency
Google Cloud Armor
Multi-region; regional endpoints availableAWS WAF
Regional or global CloudFront edge deployment depending on resource typeFortiWeb
Depends on deployment, service region, cloud architecture and customer configuration; verify the applicable Fortinet service/regionKey features
What it offers
Google Cloud Armor
- Layer 7 filtering
- DDoS mitigation
- OWASP Top 10 rules
- Adaptive protection
- Rate limiting
- IP allow/denylist
- Bot management
- reCAPTCHA integration
AWS WAF
- OWASP Top 10 protection
- AWS Managed Rules
- Bot Control and account fraud prevention
- Custom rate limiting and IP rules
- Real-time web traffic inspection
- CAPTCHA and silent challenge actions
- CloudWatch metrics and full logging
- Web application layer 7 defense
FortiWeb
- WAF
- API protection
- Bot management
- Threat detection
- SSL inspection
- Application-layer controls
- Machine-learning-assisted detection
- Vulnerability mitigation
Platform & access
API access
Google Cloud Armor
API access: yesAWS WAF
API access: yesFortiWeb
API access: yesSingle sign-on (SSO)
Google Cloud Armor
SSO: yesAWS WAF
SSO: yesFortiWeb
SSO: yesRole-based access (RBAC)
Google Cloud Armor
RBAC: yesAWS WAF
RBAC: yesFortiWeb
RBAC: yesMulti-tenant
Google Cloud Armor
Multi-tenant: yesAWS WAF
Multi-tenant: yesFortiWeb
Multi-tenant: yesMobile app
Google Cloud Armor
Mobile app: noAWS WAF
Mobile app: yesFortiWeb
Mobile app: noSupported platforms
Google Cloud Armor
Google CloudHybrid web workloadsKubernetes
AWS WAF
Amazon CloudFrontApplication Load BalancersAmazon API GatewayAWS AppSyncAWS Verified Access
FortiWeb
Hardware applianceVMware ESXiMicrosoft Hyper-VKVMCitrix XenServerAWSMicrosoft AzureGoogle Cloud+2 more
Compliance
Google Cloud Armor
SOC 1/2/3ISO/IEC 27001PCI-DSSFedRAMPHIPAA
AWS WAF
SOC 1/2/3, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA eligible, FedRAMP High
FortiWeb
Supports security controls used in common regulated environmentsexact certifications depend on product, model, release and deployment
Integrations & coverage
Integrations
Google Cloud Armor
Cloud Load BalancingCompute EngineGKECloud RunSecurity Command CenterCloud Logging
AWS WAF
Amazon CloudFrontApplication Load BalancerAmazon API GatewayAWS AppSyncAmazon CognitoAWS Firewall ManagerAmazon CloudWatch
FortiWeb
FortiGateFortiManagerFortiAnalyzerFortiSandboxFortiSIEMFortiSOARFortiWeb CloudFortiGuard
Industries
Google Cloud Armor
Financial ServicesRetailHealthcareMediaCross-industryPublic Sector
AWS WAF
Cross-industryE-commerceFinancial ServicesHealthcareTechnologyPublic Sector
FortiWeb
EnterpriseSMBFinancial servicesHealthcareGovernmentEducation+4 more
Regions
Google Cloud Armor
Global
AWS WAF
Global (all AWS Regions and CloudFront edge locations)
FortiWeb
GlobalAvailability varies by product, deployment and service region
Vendor
Company
Google Cloud Armor
Google CloudAWS WAF
AWSFortiWeb
FortinetHeadquarters
Google Cloud Armor
Mountain View, California, USAAWS WAF
Seattle, Washington, USAFortiWeb
Sunnyvale, California, USACompany size
Google Cloud Armor
100,000+AWS WAF
100,000+FortiWeb
10,000+Founded
Google Cloud Armor
2008AWS WAF
2006FortiWeb
2000