AWS Web Application Firewall Logo
AWS Web Application Firewall Logo
Amazon

AWS Web Application Firewall

Composite Score
8.6 /10
CX Score
8.9 /10
Category
AWS Web Application Firewall
8.6 /10

What is AWS Web Application Firewall?

AWS WAF helps you protect against common web exploits and bots that can affect availability, compromise security, or consume excessive resources. AWS WAF is a web application firewall that helps protect web applications from attacks by allowing you to configure rules that allow, block, or monitor (count) web requests based on conditions that you define. These conditions include IP addresses, HTTP headers, HTTP body, URI strings, SQL injection and cross-site scripting.

Company Details


Need Assistance?

We're here to help you with understanding our reports and the data inside to help you make decisions.

Get Assistance

AWS Web Application Firewall Ratings

Real user data aggregated to summarize the product performance and customer experience.
Download the entire Product Scorecard to access more information on AWS Web Application Firewall.

Product scores listed below represent current data. This may be different from data contained in reports and awards, which express data as of their publication date.

90 Likeliness to Recommend

97 Plan to Renew

89 Satisfaction of Cost Relative to Value


{y}
{name}

Emotional Footprint Overview

Product scores listed below represent current data. This may be different from data contained in reports and awards, which express data as of their publication date.

+96 Net Emotional Footprint

The emotional sentiment held by end users of the software based on their experience with the vendor. Responses are captured on an eight-point scale.

How much do users love AWS Web Application Firewall?

0% Negative
3% Neutral
97% Positive

Pros

  • Helps Innovate
  • Reliable
  • Performance Enhancing
  • Enables Productivity

Feature Ratings

Average 83

Application Firewall

87

DLP Functionality

86

On-Premise Offering

85

Bot Protection

83

Layer 7 DDoS Support

83

Base ADC Features

81

End User Self Serve

81

API Security

81

Analytics and Reporting

80

Custom Rules

78

Vendor Capability Ratings

Average 81

Breadth of Features

85

Quality of Features

85

Ease of IT Administration

83

Ease of Data Integration

82

Ease of Customization

82

Business Value Created

81

Usability and Intuitiveness

81

Ease of Implementation

80

Product Strategy and Rate of Improvement

80

Availability and Quality of Training

78

Vendor Support

77

AWS Web Application Firewall Reviews

Abhishek M.

  • Role: Information Technology
  • Industry: Technology
  • Involvement: IT Development, Integration, and Administration
Validated Review
Verified Reviewer

Submitted Sep 2024

secure product for your web apps

Likeliness to Recommend

7 /10

What differentiates AWS Web Application Firewall from other similar products?

easy to use, minimal price for small websites

What is your favorite aspect of this product?

lots of rule based options, ability to write your own customised rules

What do you dislike most about this product?

no options to secure 3rd party website or mobile apps

What recommendations would you give to someone considering this product?

easy to integrate for aws apps

Pros

  • Continually Improving Product
  • Enables Productivity
  • Trustworthy
  • Unique Features

Ankush J.

  • Role: Information Technology
  • Industry: Other
  • Involvement: End User of Application
Validated Review
Verified Reviewer

Submitted Apr 2026

Monitor and Protect Application at Scale

Likeliness to Recommend

10 /10

What differentiates AWS Web Application Firewall from other similar products?

AWS WAF isn't just another web application firewall that is it desgined to scale seamlessly with your cloud infrastructure. Unlike some standalone WAFs that require manager or dedicated appliances, AWS WAF intergates tightly with Amazon CloudFront, Application Load Balancer and API Gateway which means rules applies system works consistently cred your entire application stack which helps me in my work. There Real differentiator is flexibility combined with automation that I can write custo rules using a familiar conditions and action model which helps me to managed leverage rule sets.

What is your favorite aspect of this product?

I like about AWS Web Application Firewall how it's seamlessly it intergates into the AWS ecosystem and there tools that don't just secure my applications it's also fit naturally into the workflow I already use that why it's my favorite and I really like value the combination of custom rules and managed ruleset that why I can quickly block common attack like SQL injection or XSS using prebulit rules.

What do you dislike most about this product?

There is nothing to dislike everything well performed and security my application but it feel a bit complex to set up and fine tune ar first but it's incredibly powerful.

What recommendations would you give to someone considering this product?

If you are considering AWS Web Application Firewall then I recommend to you sart with a clear plan for heat you want to prorect and you should properly know how to you want manage traffic because AWS WAF is very powerful, but that powers comes with complexity. Important things I suggest that you before diving into custom rules you should starting with managed rule . They cover most common threats like SQL, injection XSS and bots , so you get a baseline of protection quickly because if once you comfortable than you can gradually add custom rules tailored to your traffic patterns it's approach reduce the risk of accidentally legitimate.

Pros

  • Unique Features
  • Efficient Service
  • Reliable
  • Performance Enhancing

Cons

  • Less Caring
  • Less Respectful

Karen V.

  • Role: Industry Specific Role
  • Industry: Not for Profit
  • Involvement: End User of Application
Validated Review
Verified Reviewer

Submitted Nov 2025

Scalable Shielding of Robust API.

Likeliness to Recommend

8 /10

What differentiates AWS Web Application Firewall from other similar products?

Thing that make it unique than others are very deep integration with AWS eco system and API's fine Grained control.

What is your favorite aspect of this product?

Favorite part of AWS WAF is its flexibility and the automation. Making script for creating rules and integrating it into deployment pipeline becomes very easy.

What do you dislike most about this product?

Setting it up and also tuning rules is little complex, For now, the only drawback i found.

What recommendations would you give to someone considering this product?

Keep cost control in your mind and highly recommended from my side and one thing start with AWS managed ruled group for threats like SQLi, bots etc and after this build specific rules for your API.

Pros

  • Enables Productivity
  • Trustworthy
  • Helps Innovate
  • Reliable