Wallarm at a glance: API discovery and runtime protection. Learn what Wallarm API Security and Wallarm WAAP can do and which alternatives fit your needs better.
Web & Browser Security
WAF Software: Web Application Firewall Features & Pricing
Block SQL injection, XSS and OWASP Top 10 attacks on your web apps. Compare web application firewalls (WAF) for rule quality, bot defense, APIs and deployment.
18 vendors37 products
See the Top 18 rankingWAF vendors 18
Companies that offer WAF.
Featured vendors
Based in Seattle, F5 focuses on web application security for enterprises. Review F5 Distributed Cloud WAAP, its key capabilities and the closest API Security competitors.
These vendors are highlighted by Cyber Rank. This does not affect our rankings, reviews or the order of the list below.
AWS
Seattle, Washington, USA
Akamai
Cambridge, Massachusetts, USA
Alibaba Cloud
Hangzhou, Zhejiang, China
Barracuda Networks
Campbell, California, USA
Cloudflare
San Francisco, California, USA
F5
Seattle, Washington, USA
Fastly
San Francisco, California, USA
Fortinet
Sunnyvale, California, USA
Google Cloud
Mountain View, California, USA
IBM
Armonk, New York, USA
Imperva
San Mateo, California, USA
Microsoft
Redmond, Washington, USA
Oracle
Austin, Texas, USA
Palo Alto Networks
Santa Clara, California, USA
Radware
Mahwah, New Jersey, USA
Reblaze
Tel Aviv, Israel
Traceable
San Francisco, California, USA
Wallarm
San Francisco, California, USA
WAF products 37
Open a product to see its features, pricing and reviews, or compare it with others.
AWS WAF
AWS WAF is a cloud web application firewall service from AWS. Learn how it supports web application layer 7 defense, what features stand out and which WAF tools compete.
Akamai API Security
Akamai API Security covers automated API discovery, shadow API detection and OWASP API Top 10 protection for shadow API discovery. Compare top API Security tools.
Akamai App & API Protector
Akamai App & API Protector by Akamai: API discovery. Ideal for API exploit prevention. Deployment: cloud. See how it compares with top DDoS Protection alternatives.
Akamai Bot Manager
What does Akamai Bot Manager do? It covers scrapers mitigation and behavioral biometrics. See typical use cases, cloud deployment and how it compares to rivals.
Alibaba Cloud WAF
Alibaba Cloud WAF from Alibaba Cloud focuses on website protection. Key capabilities: API security and bot management. Compare it with the leading WAF alternatives.
Azure Application Gateway
Shortlisting Application Security tools? Azure Application Gateway by Microsoft brings URL routing and autoscaling, with cloud deployment. See strengths and alternatives.
Azure Web Application Firewall
Azure Web Application Firewall helps teams with OWASP mitigation. Explore features like OWASP rules and custom rules, cloud deployment and the closest WAF competitors.
Barracuda Web Application Firewall
What does Barracuda Web Application Firewall do? It covers enterprise WAF. See typical use cases, appliance or cloud deployment and how it compares to rivals.
Cloudflare API Shield
See what Cloudflare API Shield offers: mutual TLS enforcement. It is built for shadow API discovery, supports cloud deployment and competes with other API Security tools.
Cloudflare Application Security
Cloudflare Application Security: Edge Web Application Firewall and layer 7 DDoS defense. Built for web application protection. Compare Web Security alternatives.
Cloudflare Bot Management
Cloudflare Bot Management from Cloudflare focuses on web scraping prevention. Key capabilities: rate limiting. Compare it with the leading Bot Management alternatives.
Cloudflare WAF
See what Cloudflare WAF offers: edge rate limiting. It is built for OWASP Top 10 vulnerability mitigation, supports cloud deployment and competes with other WAF tools.
F5 BIG-IP Advanced WAF
F5 BIG-IP Advanced WAF is an advanced web application firewall used for Web Security and Bot Defense. Highlights include API security. Compare it with other WAF tools.
F5 Distributed Cloud API Security
F5 built F5 Distributed Cloud API Security for API Threat Protection. Explore OpenAPI import, review cloud deployment and compare similar API Security products.
F5 Distributed Cloud Bot Defense
Looking for Web Security software? F5 Distributed Cloud Bot Defense by F5 provides fraud prevention for Web Application Security. Compare features and alternatives.
F5 Distributed Cloud WAAP
Shortlisting WAAP tools? F5 Distributed Cloud WAAP by F5 brings multi-cloud WAAP, WAF and bot defense, with cloud deployment. See strengths and alternatives.
F5 NGINX App Protect
What does F5 NGINX App Protect do? It covers high-throughput WAF and NGINX native module. See typical use cases, container deployment and how it compares to rivals.
Fastly Bot Management
Fastly Bot Management helps teams with edge bot mitigation. Explore features like real-time analytics, cloud deployment and the closest Bot Management competitors.
Fastly Next-Gen WAF
Fastly Next-Gen WAF from Fastly focuses on Next-Gen WAF. Key capabilities: automated production blocking. Compare it with the leading WAF alternatives.
FortiWeb
Get the facts on FortiWeb: WAF, API protection and bot management. Built for API security. Compare it with other Application Security options before you decide.
Google Cloud Armor
Google Cloud Armor covers layer 7 filtering, DDoS mitigation and OWASP Top 10 rules for web application defense and bot mitigation. Compare top Network Security tools.
IBM Cloud Internet Services
IBM Cloud Internet Services by IBM: DDoS protection and WAF. Ideal for DDoS mitigation. Deployment: cloud. See how it compares with top DDoS Protection alternatives.
Imperva API Security
What does Imperva API Security do? It covers schema validation and shadow API detection. See typical use cases, cloud or hybrid deployment and how it compares to rivals.
Imperva Advanced Bot Protection
Get the facts on Imperva Advanced Bot Protection: API bot defense. Built for credential stuffing defense. Compare it with other Bot Management options before you decide.