# AWS WAF

> A cloud-native web application firewall that protects web applications and APIs from web-based attacks

- **Canonical URI:** https://www.vioscale.ai/software/aws-waf
- **Category:** WAF
- **Homepage:** https://aws.amazon.com/waf/
- **Also known as:** aws-waf
- **Profile claimed by vendor:** no
- **Last updated:** 2026-08-19T22:28:13.963Z

## Vioscale score

**61 / 100**, confidence 61% (medium). Computed 2026-09-01.

Composite of weighted, independently-sourced signals (no user reviews, no vendor payment).

| Signal | Score | Weight | Contribution | Evidence present |
|---|--:|--:|--:|:--:|
| price_level | 80 | 0.052 | 4.2 | ✓ |
| reliability | 50 | 0.073 | 3.7 | ✓ |
| capabilities | 0 | 0.04877777777777778 | 0 | - |
| integrations | 22.4 | 0.04066666666666666 | 0.9 | ✓ |
| security_posture | 35 | 0.073 | 2.6 | ✓ |
| pricing_transparency | 100 | 0.084 | 8.4 | ✓ |

## Pricing

_As of 2026-08-19, [verify at source](https://aws.amazon.com/waf/pricing/). Independently observed._

from $1/mo · Usage-based · Free tier

> Usage-based pricing: $5/web ACL, $1/rule, plus per-request charges. Free tier for bot control.

| Plan | Price | Free | Commitment |
|---|---|:--:|---|
| Standard WAF | $5/web ACL + $1/rule + per-million-request charges | - | monthly |
| Bot Control | Free tier + $1/million requests after free allowance | - | monthly |
| Fraud Control | $10/month per web ACL + per-request charges | - | monthly |

### Standard WAF

Base WAF protection with customizable rules

**Included limits:** cloudwatch_logs_per_million_requests: 500 MB

- Web ACL creation and management
- Custom rule creation
- Allow/Block/Count actions
- Request filtering and inspection
- CloudWatch Logs integration

### Bot Control

Visibility and control over bot traffic

**Included limits:** common_bot_control_free_requests: 10 million/month, targeted_bot_control_free_requests: 1 million/month

- Common bot detection and management
- Targeted bot control
- Bot traffic visibility
- Rate limiting for bot traffic
- Scope-down statements to reduce evaluated traffic

### Fraud Control

Account takeover prevention and account creation fraud prevention

- Account Takeover Prevention
- Account Creation Fraud Prevention
- Compromised credential monitoring
- Fake account creation detection

### Add-ons

- **CAPTCHA and Challenge responses**
- **Managed rule groups from AWS Marketplace**

## About

AWS WAF is a managed web application firewall service that helps protect web applications against common exploits and bots. It uses rules to allow, block, or count web requests, and supports bot management, fraud prevention, and DDoS protection.

_Independently observed._

## Platform & deployment

- **Platforms:** CLI, Web
- **Deployment:** Cloud / SaaS

## Integrations (5)

_Independently observed._

- Amazon CloudFront
- Amazon API Gateway
- AWS CloudWatch
- AWS Shield
- AWS Marketplace (third-party managed rules)

## Facts

Every value below carries its source and our confidence. Facts are re-crawled on a freshness schedule.

### pricing

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| pricing.free_tier | yes | [link](https://aws.amazon.com/waf/pricing/) | 2026-08-19 | 60% (medium) |
| pricing.model | freemium | [link](https://aws.amazon.com/waf/pricing/) | 2026-08-19 | 60% (medium) |
| pricing.price_level | low | [link](https://aws.amazon.com/waf/pricing/) | 2026-08-19 | 60% (medium) |
| pricing.starting_price | `{"amount":1,"currency":"USD"}` | [link](https://aws.amazon.com/waf/pricing/) | 2026-08-19 | 60% (medium) |
| pricing.transparent | yes | [link](https://aws.amazon.com/waf/pricing/) | 2026-08-19 | 60% (medium) |

### integrations

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| integrations.count | 5 | [link](https://aws.amazon.com/waf/pricing/) | 2026-08-19 | 60% (medium) |

### market

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| market.availability | `{"hqCountry":"US","primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | [link](https://aws.amazon.com/waf/pricing/) | 2026-08-19 | 75% (high) |

### reliability

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| reliability.status_page | yes | [link](https://aws.amazon.com/waf/pricing/) | 2026-08-19 | 60% (medium) |

### security

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| security.disclosure_policy | yes | [link](https://aws.amazon.com/waf/pricing/) | 2026-08-19 | 60% (medium) |
| security.fedramp | yes | [link](https://aws.amazon.com/compliance/?nc2=h_dsc_aa_cmp) | 2026-08-19 | 75% (high) |
| security.gdpr | yes | [link](https://aws.amazon.com/compliance/?nc2=h_dsc_aa_cmp) | 2026-08-19 | 75% (high) |
| security.hipaa | yes | [link](https://aws.amazon.com/compliance/?nc2=h_dsc_aa_cmp) | 2026-08-19 | 75% (high) |
| security.pci | yes | [link](https://aws.amazon.com/compliance/?nc2=h_dsc_aa_cmp) | 2026-08-19 | 75% (high) |

---
*Source: Vioscale (https://www.vioscale.ai/software/aws-waf). Independent, evidence-based software intelligence. Cite the canonical URI.*