vioscale
Comparison

Cloudflare WAF vs Imperva WAF

On the evidence we track, Cloudflare WAF leads this comparison with a composite score of 57/100. Scores are only directly comparable because these tools share a category; the full breakdown and every source is below.

Cloudflare WAF full profile →Imperva WAF full profile →
Machine formatsJSONMarkdownGraphQLor send Accept: application/json
★Cloudflare WAF57
Imperva WAF22
Score
Vioscale score
Cloudflare WAF57 / 100medium · 53%
Imperva WAF22 / 100low · 3%
Pricing
Free tier
Cloudflare WAF✓
Imperva WAF–
Model
Cloudflare WAFfreemium
Imperva WAF–
Price level
Cloudflare WAFmid
Imperva WAF–
Starting price
Cloudflare WAF$20
Imperva WAF–
Transparent
Cloudflare WAF✓
Imperva WAF–
Integrations
Count
Cloudflare WAF–
Imperva WAF5
Security
Gdpr
Cloudflare WAF✓
Imperva WAF✓
Pci
Cloudflare WAF✓
Imperva WAF–
Reliability
Sla pct
Cloudflare WAF100
Imperva WAF–
Market
Availability
Cloudflare WAFAvailable worldwide · HQ US
Imperva WAF–

Capabilities

Feature-by-feature on the axes that matter for waf. “-” means undocumented, not absent.

Capabilities
Deployment model
Cloudflare WAF-
Imperva WAF-
Owasp top 10 protection
Cloudflare WAF-
Imperva WAF-
Custom rules engine
Cloudflare WAF-
Imperva WAF-
Bot management
Cloudflare WAF-
Imperva WAF-
API discovery protection
Cloudflare WAF-
Imperva WAF-
Ddos l7 protection
Cloudflare WAF-
Imperva WAF-
Rate limiting
Cloudflare WAF-
Imperva WAF-
Threat intel feeds
Cloudflare WAF-
Imperva WAF-
SIEM logging integration
Cloudflare WAF-
Imperva WAF-
Kubernetes ingress support
Cloudflare WAF-
Imperva WAF-
SOC2 type ii
Cloudflare WAF-
Imperva WAF-
PCI DSS compliant
Cloudflare WAF-
Imperva WAF-
Fedramp authorized
Cloudflare WAF-
Imperva WAF-
Pricing model
Cloudflare WAF-
Imperva WAF-

What each one is

The product in its own terms, so the numbers below have context.

Cloudflare WAF

Leader

A cloud-based firewall that intercepts HTTP/S requests at Cloudflare's distributed network, using automated and customizable rules to block common vulnerabilities like SQL injection and cross-site scripting attacks without adding latency to legitimate user requests.

Independently observed

Imperva WAF

Imperva WAF delivers automated security policy management and attack protection with API discovery capabilities. It supports deployment as a managed cloud service or self-hosted solution using Kubernetes, allowing organizations to integrate protection with existing infrastructure without architectural changes.

Independently observed

Pricing

List pricing as published by each vendor, with the date we read it. Always verify at the source before you buy.

Cloudflare WAF

Leader
from $20/moSubscriptionFree tier

Free tier available. Paid plans start at $20/month billed annually.

  • FreeFree
    • DNS
    • DDoS Protection
    • CDN
    • SSL Certificate
    • Managed Ruleset
  • Pro$20/mo billed annually or $25/mo billed monthly
    • DNS
    • DDoS Protection
    • CDN
    • SSL Certificate
    • Managed Ruleset
    • +3 more
  • Business$200/mo billed annually or $250/mo billed monthly
    • DNS
    • DDoS Protection
    • CDN
    • SSL Certificate
    • Managed Ruleset
    • +6 more
  • EnterpriseContact sales
    • All Business plan features
    • Priority phone and professional services support
    • Extended log retention and SIEM integration
    • Role-based access control
as of verify ↗

Imperva WAF

Pricing not documented yet.

Platform & deployment

Where each product runs and how it can be hosted. A dash means undocumented, not unsupported.

Platforms
Web
Cloudflare WAF✓
Imperva WAF✓
CLI
Cloudflare WAF✓
Imperva WAF✗
Deployment
Cloud / SaaS
Cloudflare WAF✓
Imperva WAF✓
Self-hosted
Cloudflare WAF✗
Imperva WAF✓
Hybrid
Cloudflare WAF✗
Imperva WAF✓

Integrations

What each product connects to. Counts come from the vendor's own integration directory where one exists.

Cloudflare WAF

Leader

Not documented yet.

Imperva WAF

5 total
  • AWS
  • Azure
  • GCP
  • Kong
  • Imperva WAF Gateway
Independently observed

Comparison generated from independently-sourced facts. Every value links to its source and retrieval date. See the method.