Web & Browser Security

WAF Software: Web Application Firewall Features & Pricing

Block SQL injection, XSS and OWASP Top 10 attacks on your web apps. Compare web application firewalls (WAF) for rule quality, bot defense, APIs and deployment.

18 vendors37 products

See the Top 18 ranking

WAF vendors 18

Companies that offer WAF.

Featured vendors

Wallarm logo

Wallarm

San Francisco, California, USA

Featured

Wallarm at a glance: API discovery and runtime protection. Learn what Wallarm API Security and Wallarm WAAP can do and which alternatives fit your needs better.

F5 logo

F5

Seattle, Washington, USA

Featured

Based in Seattle, F5 focuses on web application security for enterprises. Review F5 Distributed Cloud WAAP, its key capabilities and the closest API Security competitors.

Your company hereReach buyers browsing WAFBecome a sponsor

These vendors are highlighted by Cyber Rank. This does not affect our rankings, reviews or the order of the list below.

AWS logo

AWS

Seattle, Washington, USA

Akamai logo

Akamai

Cambridge, Massachusetts, USA

F5 logo

F5

Seattle, Washington, USA

Fastly logo

Fastly

San Francisco, California, USA

IBM logo

IBM

Armonk, New York, USA

Wallarm logo

Wallarm

San Francisco, California, USA

WAF products 37

Open a product to see its features, pricing and reviews, or compare it with others.

AWS logo

AWS WAF

byAWS

AWS WAF is a cloud web application firewall service from AWS. Learn how it supports web application layer 7 defense, what features stand out and which WAF tools compete.

Web & Browser SecurityView details
Akamai logo

Akamai API Security

Akamai API Security covers automated API discovery, shadow API detection and OWASP API Top 10 protection for shadow API discovery. Compare top API Security tools.

Application SecurityView details
Akamai logo

Akamai App & API Protector

Akamai App & API Protector by Akamai: API discovery. Ideal for API exploit prevention. Deployment: cloud. See how it compares with top DDoS Protection alternatives.

Network SecurityView details
Akamai logo

Akamai Bot Manager

What does Akamai Bot Manager do? It covers scrapers mitigation and behavioral biometrics. See typical use cases, cloud deployment and how it compares to rivals.

Application SecurityView details
Alibaba Cloud logo

Alibaba Cloud WAF

Alibaba Cloud WAF from Alibaba Cloud focuses on website protection. Key capabilities: API security and bot management. Compare it with the leading WAF alternatives.

Application SecurityView details
Microsoft logo

Azure Application Gateway

Shortlisting Application Security tools? Azure Application Gateway by Microsoft brings URL routing and autoscaling, with cloud deployment. See strengths and alternatives.

Application SecurityView details
Cloudflare logo

Cloudflare API Shield

See what Cloudflare API Shield offers: mutual TLS enforcement. It is built for shadow API discovery, supports cloud deployment and competes with other API Security tools.

Application SecurityView details
Cloudflare logo

Cloudflare WAF

See what Cloudflare WAF offers: edge rate limiting. It is built for OWASP Top 10 vulnerability mitigation, supports cloud deployment and competes with other WAF tools.

Web & Browser SecurityView details
F5 logo

F5 BIG-IP Advanced WAF

byF5

F5 BIG-IP Advanced WAF is an advanced web application firewall used for Web Security and Bot Defense. Highlights include API security. Compare it with other WAF tools.

Web & Browser SecurityView details
F5 logo

F5 Distributed Cloud Bot Defense

byF5

Looking for Web Security software? F5 Distributed Cloud Bot Defense by F5 provides fraud prevention for Web Application Security. Compare features and alternatives.

Application SecurityView details
F5 logo

F5 Distributed Cloud WAAP

byF5

Shortlisting WAAP tools? F5 Distributed Cloud WAAP by F5 brings multi-cloud WAAP, WAF and bot defense, with cloud deployment. See strengths and alternatives.

Application SecurityView details
F5 logo

F5 NGINX App Protect

byF5

What does F5 NGINX App Protect do? It covers high-throughput WAF and NGINX native module. See typical use cases, container deployment and how it compares to rivals.

Application SecurityView details
Fastly logo

Fastly Bot Management

Fastly Bot Management helps teams with edge bot mitigation. Explore features like real-time analytics, cloud deployment and the closest Bot Management competitors.

Web & Browser SecurityView details
Fastly logo

Fastly Next-Gen WAF

Fastly Next-Gen WAF from Fastly focuses on Next-Gen WAF. Key capabilities: automated production blocking. Compare it with the leading WAF alternatives.

Application SecurityView details
Fortinet logo

FortiWeb

Get the facts on FortiWeb: WAF, API protection and bot management. Built for API security. Compare it with other Application Security options before you decide.

Application SecurityView details
Google Cloud logo

Google Cloud Armor

Google Cloud Armor covers layer 7 filtering, DDoS mitigation and OWASP Top 10 rules for web application defense and bot mitigation. Compare top Network Security tools.

Network SecurityView details
IBM logo

IBM Cloud Internet Services

byIBM

IBM Cloud Internet Services by IBM: DDoS protection and WAF. Ideal for DDoS mitigation. Deployment: cloud. See how it compares with top DDoS Protection alternatives.

Network SecurityView details
Imperva logo

Imperva API Security

What does Imperva API Security do? It covers schema validation and shadow API detection. See typical use cases, cloud or hybrid deployment and how it compares to rivals.

Application SecurityView details
Showing page 1 of 2 (37 products)
← PreviousNext →

Tell us your company and website, and we'll send the slots and details.

By sending this you agree to our Privacy Policy and Terms.