Comparison

Cloudflare WAF vs Coraza

On the evidence we track, Cloudflare WAF leads this comparison with a composite score of 57/100. Scores are only directly comparable because these tools share a category; the full breakdown and every source is below.

Cloudflare WAF full profile →Coraza full profile →

Machine formatsJSON Markdown GraphQLor send Accept: application/json

★Cloudflare WAF57

Coraza46

Attribute comparison across 2 tools
Attribute	Cloudflare WAFLeader	Coraza
Vioscale score	57 / 100medium · 53%updating	46 / 100low · 32%updating
Pricing
Free tierpricing.free_tier	✓	✓
Modelpricing.model	freemium	commercial
Price levelpricing.price_level	mid	free
Starting pricepricing.starting_price	$20	-
Transparentpricing.transparent	✓	-
Integrations
Countintegrations.count	-	3
Security
Gdprsecurity.gdpr	✓	-
Pcisecurity.pci	✓	-
Scorecardsecurity.scorecard	-	9.3
Vulnerabilitiessecurity.vulnerabilities	-	Count: 2 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Fcorazawaf%2Fcoraza%2Fv3&per_page=100 · Last 12m: 0 · Max severity: HIGH
Reliability
Sla pctreliability.sla_pct	100	-
Adoption
Dependent reposadoption.dependent_repos	-	16
Github starsadoption.github_stars	-	3,761
Activity
Commits last 30dactivity.commits_last_30d	-	11
Release
Cadence daysrelease.cadence_days	-	31
Historyrelease.history	-	20 items
License
Spdxlicense.spdx	-	Apache-2.0
Language
Primarylanguage.primary	-	Go
Market
Availabilitymarket.availability	Available worldwide · HQ US	-

Score

Vioscale score

Cloudflare WAF57 / 100medium · 53%updating

Coraza46 / 100low · 32%updating

Pricing

Free tier

Cloudflare WAF✓

Coraza✓

Model

Cloudflare WAFfreemium

Corazacommercial

Price level

Cloudflare WAFmid

Corazafree

Starting price

Cloudflare WAF$20

Coraza–

Transparent

Cloudflare WAF✓

Coraza–

Integrations

Count

Cloudflare WAF–

Coraza3

Security

Gdpr

Cloudflare WAF✓

Coraza–

Pci

Cloudflare WAF✓

Coraza–

Scorecard

Cloudflare WAF–

Coraza9.3

Vulnerabilities

Cloudflare WAF–

CorazaCount: 2 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Fcorazawaf%2Fcoraza%2Fv3&per_page=100 · Last 12m: 0 · Max severity: HIGH

Reliability

Sla pct

Cloudflare WAF100

Coraza–

Adoption

Dependent repos

Cloudflare WAF–

Coraza16

Github stars

Cloudflare WAF–

Coraza3,761

Activity

Commits last 30d

Cloudflare WAF–

Coraza11

Release

Cadence days

Cloudflare WAF–

Coraza31

History

Cloudflare WAF–

Coraza20 items

License

Spdx

Cloudflare WAF–

CorazaApache-2.0

Language

Primary

Cloudflare WAF–

CorazaGo

Market

Availability

Cloudflare WAFAvailable worldwide · HQ US

Coraza–

Capabilities

Feature-by-feature on the axes that matter for waf. “-” means undocumented, not absent.

Capability comparison for WAF
Capability	Cloudflare WAF	Coraza
Capabilities
Deployment model	-	-
Owasp top 10 protection	-	-
Custom rules engine	-	-
Bot management	-	-
API discovery protection	-	-
Ddos l7 protection	-	-
Rate limiting	-	-
Threat intel feeds	-	-
SIEM logging integration	-	-
Kubernetes ingress support	-	-
SOC2 type ii	-	-
PCI DSS compliant	-	-
Fedramp authorized	-	-
Pricing model	-	-

Capabilities

Deployment model

Cloudflare WAF-

Coraza-

Owasp top 10 protection

Cloudflare WAF-

Coraza-

Custom rules engine

Cloudflare WAF-

Coraza-

Bot management

Cloudflare WAF-

Coraza-

API discovery protection

Cloudflare WAF-

Coraza-

Ddos l7 protection

Cloudflare WAF-

Coraza-

Rate limiting

Cloudflare WAF-

Coraza-

Threat intel feeds

Cloudflare WAF-

Coraza-

SIEM logging integration

Cloudflare WAF-

Coraza-

Kubernetes ingress support

Cloudflare WAF-

Coraza-

SOC2 type ii

Cloudflare WAF-

Coraza-

PCI DSS compliant

Cloudflare WAF-

Coraza-

Fedramp authorized

Cloudflare WAF-

Coraza-

Pricing model

Cloudflare WAF-

Coraza-

What each one is

The product in its own terms, so the numbers below have context.

Cloudflare WAF

Leader

A cloud-based firewall that intercepts HTTP/S requests at Cloudflare's distributed network, using automated and customizable rules to block common vulnerabilities like SQL injection and cross-site scripting attacks without adding latency to legitimate user requests.

Independently observed

Coraza

A web application firewall that provides enterprise-grade threat protection for APIs, applications, and legacy systems, with minimal performance overhead and support for custom rules and integrations.

Independently observed

Pricing

List pricing as published by each vendor, with the date we read it. Always verify at the source before you buy.

Cloudflare WAF

Leader

from $20/moSubscriptionFree tier

Free tier available. Paid plans start at $20/month billed annually.

FreeFree
- DNS
- DDoS Protection
- CDN
- SSL Certificate
- Managed Ruleset
Pro$20/mo billed annually or $25/mo billed monthly
- DNS
- DDoS Protection
- CDN
- SSL Certificate
- Managed Ruleset
- +3 more
Business$200/mo billed annually or $250/mo billed monthly
- DNS
- DDoS Protection
- CDN
- SSL Certificate
- Managed Ruleset
- +6 more
EnterpriseContact sales
- All Business plan features
- Priority phone and professional services support
- Extended log retention and SIEM integration
- Role-based access control

as of 2026-08-19verify ↗

Coraza

Open sourceFree tier

Free and open source

as of 2026-08-19verify ↗

Platform & deployment

Where each product runs and how it can be hosted. A dash means undocumented, not unsupported.

Platform and deployment support comparison
Supports	Cloudflare WAF	Coraza
WebPlatforms	✓	-
CLIPlatforms	✓	-
Cloud / SaaSDeployment	✓	✗
Self-hostedDeployment	✗	✓

Platforms

Web

Cloudflare WAF✓

Coraza–

CLI

Cloudflare WAF✓

Coraza–

Deployment

Cloud / SaaS

Cloudflare WAF✓

Coraza✗

Self-hosted

Cloudflare WAF✗

Coraza✓

Integrations

What each product connects to. Counts come from the vendor's own integration directory where one exists.

Cloudflare WAF

Leader

Not documented yet.

Coraza

3 total

NGINX
Envoy
Apache APISIX

Independently observed

Comparison generated from independently-sourced facts. Every value links to its source and retrieval date. See the method.