Advisor
AppSec
Domains Application Security Web Application Firewall (WAF)
Web Application Firewall (WAF)
A Web Application Firewall (WAF) is a security solution designed to monitor, filter, and control HTTP and HTTPS traffic between web applications and the internet.
A Web Application Firewall (WAF) is a security solution designed to monitor, filter, and control HTTP and HTTPS traffic between web applications and the internet. Its primary function is to detect and block malicious traffic targeting web applications, such as injection attacks, cross-site scripting, and other vulnerabilities commonly exploited in the application layer. Core capabilities of WAFs include real-time traffic inspection, customizable rule sets, virtual patching, and protection against common web application threats as defined by frameworks like the OWASP Top Ten. WAFs may operate in either inline or out-of-band modes and can be deployed as hardware appliances, virtual appliances, or cloud-based services. They often provide logging, alerting, and reporting features to support incident response and compliance requirements. WAFs are typically used by organizations that host public-facing web applications, including enterprises, e-commerce platforms, and service providers. Security teams and IT administrators deploy WAFs to reduce the risk of data breaches, service disruptions, and compliance violations associated with web application vulnerabilities. Unlike traditional network firewalls, which focus on network-layer threats, or intrusion prevention systems (IPS), which address a broader range of attack vectors, WAFs specialize in application-layer protection. Cyberin offers a platform for discovering and comparing Web Application Firewall solutions to support informed decision-making.
29
Vendors
36
Products
219
Datapoints
Vendor Landscape how the vendors in this category relate
neutral · data-driven
Arrange bySimilarityThis categoryAppSec DomainThe Cyberin Framework (TCF)SeniorityEmployee countStock price
Related Wiki Articles
Some products are hidden. Sign up for free to see them all.
Filters
Core protections, DevOps integration, Licensing, Management & automation +6 more Show ↓
Vendor
All Fortinet Barracuda F5 Radware Imperva Cloudflare NGINX Trend Micro + 21 more
Core protections
All API protection OWASP Top 10 Bot mitigation DDoS L7 L7 firewall Account takeover WAAS CNAPP context
DevOps integration
All CI/CD integration WAF as code Testing hooks Declarative policies Ingress/K8s
Licensing
All Subscription Consumption-Based BYOL
Management & automation
All Central console REST API Terraform/IaC SaaS console/APIs (Distributed Cloud) BIG-IQ/TMOS (BIG-IP) NGINX Instance Manager APIs
API & microservices
All API discovery OpenAPI import Rate limiting JSON/XML inspection gRPC/GraphQL inspection Schema validation API protection Anti-bot
Rule engine & signatures
All Custom rules Custom policies Managed rules F5 threat intelligence Behavioral signatures OWASP CRS Managed rulesets Reputation feeds
Security models
All Negative model Positive model Behavioral ML Positive/negative models Positive model (policy builder) Anomaly/ML Negative model + heuristics Negative model (managed rules)
Performance profile
All Edge POPs Appliance acceleration Low latency Global POPs TLS offload Anycast global edge ASIC/DPDK acceleration (BIG - IP) Caching
Deployment Models
All Cloud Appliance SaaS Virtual Managed SaaS Cloud WAF (SaaS) Cloud edge (SaaS) Virtual Appliance
CDN & edge
All CDN integration optional CDN agnostic External CDN optional Integrated CDN (CDNetworks) Integrated CDN (Edgio) Cloudflare-powered edge Integrated CDN Integrated CDN (Akamai)
27 products
Sort:
Show:
Reblaze Cloud WAF
Managed SaaS in customer VPCAPI protectionAPI discovery
Sangfor WAF
Sangfor
ApplianceAPI protectionAPI profiles
Edgio WAAP
Edgio
Edge (SaaS)API protectionAPI Gateway
R&S Web Application Firewall
Rohde & Schwarz
API protectionJSON/XML inspectionCustom policies
Nevis Security Gateway
SoftwareAPI protectionAPI protection
PT Application Firewall
Positive Technologies
SaaSAPI protectionAPI discovery
HAProxy Enterprise WAF
HAProxy Technologies
ALOHA applianceAPI protectionCRS for APIs
NSFOCUS Web Application Firewall
NSFOCUS
CloudAPI protectionJSON/XML inspection
CDNetworks Web Application Firewall
CDNetworks
Cloud edge (SaaS)API protectionAPI discovery
Cloudbric WAF
Cloudbric
CDNAPI protectionAPI policies
Prisma Cloud WAAS
Palo Alto Networks
Environment-NativeAPI protectionAPI discovery
Trend Micro Cloud One – Application Security
Trend Micro
In-App AgentAPI protectionAPI protection
Google Cloud Armor with WAF capabilities
Google Cloud
Cloud managed (Google Cloud)API protectionAdaptive protection for L7
Oracle Cloud Infrastructure Web Application Firewall
Oracle Cloud
Cloud managed (OCI)API protectionAPI protection
Alibaba Cloud WAF
Alibaba Cloud
Cloud managed (Alibaba Cloud)API protectionAnti-bot
Fortinet FortiWeb
Fortinet
ApplianceAPI protectiongRPC/GraphQL inspection
FortiWeb Cloud WAF – as – a – Service
Fortinet
Cloud WAF (SaaS)API protectionAuto - discovery
Barracuda WAF
Barracuda
ApplianceAPI protectionJSON/XML inspection
AWS WAF
Amazon Web Services
Cloud managed (AWS)API protectionHeader/JSON match
Azure Web Application Firewall
Microsoft
Cloud managed (Azure)API protectionAnti-bot
Imperva WAF Gateway
Imperva
API protectionOpenAPI importCustom rule engine
Akamai App & API Protector
Akamai
Cloud edge (SaaS)API protectionAkamai API Gateway integration
Cloudflare WAF
Cloudflare
Cloud edge (SaaS)API protectionAPI Gateway
Fastly Next – Gen WAF
Fastly
Edge (SaaS)API protectionAPI discovery
Also in Application Security
Filter by Vendor
Fortinet
2 products
Barracuda
2 products
F5
2 products
Radware
2 products
Imperva
2 products
Cloudflare
1 product
NGINX
1 product
Trend Micro
1 product
Google Cloud
1 product
Sangfor
1 product
Alibaba Cloud
1 product
Rohde & Schwarz
1 product
Sophos
1 product
Amazon Web Services
1 product
HAProxy Technologies
1 product
Palo Alto Networks
1 product
Progress Kemp
1 product
Microsoft
1 product
NSFOCUS
1 product
Cloudbric
1 product
Citrix
1 product
Oracle Cloud
1 product
Akamai
1 product
CDNetworks
1 product
IBM Cloud
1 product
Edgio
1 product
Fastly
1 product
Indusface
1 product
Positive Technologies
1 product
0 selected
Compare
Looking for the best Web Application Firewall (WAF) tool? Our Advisor can help you compare.
Ask the Advisor
CYBERIN ADVISOR