What I like most about the product is the WAF's strong protection against the OWASP Top 10. It offers protection against advanced web attacks. The good visibility of traffic and analysis of the WAF's application behavior provides this advantage. Its mitigation is efficient against bots, scanners, and automated attacks. And, of course, there's the integration with cloud environments, data centers, and hybrid architectures.
May 8, 2026
The main issue tends to be the user interface. This is something they're aware of and have dedicated some amount of work to over the last year; however, a full UI redesign is likely in order. The interface feels clunky and leaves the user guessing as to where certain functions exist. Even experienced users seem unable to divine the location of important functions. Reporting functionality is incredibly limited in the UI, with most of the true value coming from the logs after ingesting into a SIEM or other log aggregation tool. While the company seems dedicated to bringing new functionality to the tool and expanding what the tool does, Imperva should truly focus on redesigning the platform before moving forward with new feature-sets.
July 15, 2025