AWS Web Application Firewall Logo
AWS Web Application Firewall Logo
Amazon

AWS Web Application Firewall

Composite Score
8.6 /10
CX Score
9.0 /10
Category
AWS Web Application Firewall
8.6 /10

What is AWS Web Application Firewall?

AWS WAF helps you protect against common web exploits and bots that can affect availability, compromise security, or consume excessive resources. AWS WAF is a web application firewall that helps protect web applications from attacks by allowing you to configure rules that allow, block, or monitor (count) web requests based on conditions that you define. These conditions include IP addresses, HTTP headers, HTTP body, URI strings, SQL injection and cross-site scripting.

Company Details


Need Assistance?

We're here to help you with understanding our reports and the data inside to help you make decisions.

Get Assistance

AWS Web Application Firewall Ratings

Real user data aggregated to summarize the product performance and customer experience.
Download the entire Product Scorecard to access more information on AWS Web Application Firewall.

Product scores listed below represent current data. This may be different from data contained in reports and awards, which express data as of their publication date.

90 Likeliness to Recommend

97 Plan to Renew

88 Satisfaction of Cost Relative to Value


{y}
{name}

Emotional Footprint Overview

Product scores listed below represent current data. This may be different from data contained in reports and awards, which express data as of their publication date.

+96 Net Emotional Footprint

The emotional sentiment held by end users of the software based on their experience with the vendor. Responses are captured on an eight-point scale.

How much do users love AWS Web Application Firewall?

0% Negative
3% Neutral
97% Positive

Pros

  • Helps Innovate
  • Reliable
  • Performance Enhancing
  • Enables Productivity

Feature Ratings

Average 83

Application Firewall

87

DLP Functionality

86

On-Premise Offering

86

Bot Protection

84

Layer 7 DDoS Support

84

End User Self Serve

82

Analytics and Reporting

81

Custom Rules

81

API Security

80

Base ADC Features

79

Vendor Capability Ratings

Average 81

Breadth of Features

85

Ease of Customization

84

Quality of Features

84

Ease of Data Integration

83

Ease of IT Administration

81

Business Value Created

81

Usability and Intuitiveness

81

Product Strategy and Rate of Improvement

80

Vendor Support

79

Ease of Implementation

79

Availability and Quality of Training

78

AWS Web Application Firewall Reviews

DHARRSAN A.

  • Role: Information Technology
  • Industry: Technology
  • Involvement: IT Development, Integration, and Administration
Validated Review
Verified Reviewer

Submitted Nov 2024

Easy security integration, Could be little pricey

Likeliness to Recommend

8 /10

What differentiates AWS Web Application Firewall from other similar products?

AWS WAF offers customizable security rules and real-time metrics, Apigee excels in extensive analytics, usage monitoring, and managing API traffic with features like rate limiting and OAuth. Additionally, AWS WAF uses a pay-as-you-go pricing model, whereas Apigee typically follows a subscription-based model.

What is your favorite aspect of this product?

One of the standout aspects of AWS WAF is its seamless integration with other AWS services. This integration allows users to easily deploy security measures across their applications hosted on AWS, such as automatically applying security rules to Amazon CloudFront or API Gateway

What do you dislike most about this product?

users may find it challenging to balance security and performance, as overly strict rules can inadvertently block legitimate traffic or degrade application performance

What recommendations would you give to someone considering this product?

the pricing model, while pay-as-you-go, can lead to unpredictable costs if traffic spikes or if many custom rules are created, making budgeting for security expenses difficult.

Pros

  • Enables Productivity
  • Saves Time
  • Reliable
  • Performance Enhancing

Cons

  • Vendor Friendly Policies

Bhavna S.

  • Role: Information Technology
  • Industry: Engineering
  • Involvement: IT Development, Integration, and Administration
Validated Review
Verified Reviewer

Submitted Aug 2026

Customisable ease to use

Likeliness to Recommend

10 /10

What differentiates AWS Web Application Firewall from other similar products?

With the use of aws web application firewall we can customise the security rules.

What is your favorite aspect of this product?

The favourite aspect is that we can filer the traffic like ip address etc

What do you dislike most about this product?

I do not dislike anything coz it is highly efficient product.

What recommendations would you give to someone considering this product?

I would highly recommend this because via this we can customise the security rules according to our needs.

Pros

  • Helps Innovate
  • Reliable
  • Performance Enhancing
  • Enables Productivity

Ankush J.

  • Role: Information Technology
  • Industry: Other
  • Involvement: End User of Application
Validated Review
Verified Reviewer

Submitted Apr 2026

Monitor and Protect Application at Scale

Likeliness to Recommend

10 /10

What differentiates AWS Web Application Firewall from other similar products?

AWS WAF isn't just another web application firewall that is it desgined to scale seamlessly with your cloud infrastructure. Unlike some standalone WAFs that require manager or dedicated appliances, AWS WAF intergates tightly with Amazon CloudFront, Application Load Balancer and API Gateway which means rules applies system works consistently cred your entire application stack which helps me in my work. There Real differentiator is flexibility combined with automation that I can write custo rules using a familiar conditions and action model which helps me to managed leverage rule sets.

What is your favorite aspect of this product?

I like about AWS Web Application Firewall how it's seamlessly it intergates into the AWS ecosystem and there tools that don't just secure my applications it's also fit naturally into the workflow I already use that why it's my favorite and I really like value the combination of custom rules and managed ruleset that why I can quickly block common attack like SQL injection or XSS using prebulit rules.

What do you dislike most about this product?

There is nothing to dislike everything well performed and security my application but it feel a bit complex to set up and fine tune ar first but it's incredibly powerful.

What recommendations would you give to someone considering this product?

If you are considering AWS Web Application Firewall then I recommend to you sart with a clear plan for heat you want to prorect and you should properly know how to you want manage traffic because AWS WAF is very powerful, but that powers comes with complexity. Important things I suggest that you before diving into custom rules you should starting with managed rule . They cover most common threats like SQL, injection XSS and bots , so you get a baseline of protection quickly because if once you comfortable than you can gradually add custom rules tailored to your traffic patterns it's approach reduce the risk of accidentally legitimate.

Pros

  • Unique Features
  • Efficient Service
  • Reliable
  • Performance Enhancing

Cons

  • Less Caring
  • Less Respectful