• HOME
  • CATEGORIES

    • CATEGORIES

    • Application Development

      • Observability Platforms
      • Integrated Development Environment (IDE) Software
      • Enterprise Agile Planning Tools
      • Integration Platform as a Service
      • AI-Augmented Software Testing Tools
      • View All
    • Artificial Intelligence

      • AI Code Assistants (Transitioning to AI Coding Agents)
      • Generative AI Knowledge Management Apps/General Productivity
      • AI Application Development Platforms
      • Artificial Intelligence Applications in IT Service Management (Transitioning to AI Applications in IT Service Management)
      • Conversational AI Platforms
      • View All
    • Cloud Computing

      • Backup and Data Protection Platforms
      • Cloud Database Management Systems
      • Strategic Cloud Platform Services
      • Server Virtualization (Transitioning to Server Virtualization Platforms)
      • Hybrid Cloud Storage
      • View All
    • Customer Relationship Management

      • Contact Center as a Service
      • CRM Customer Engagement Center
      • Digital Experience Platforms
      • Web Content Management
      • Field Service Management
      • View All
    • Data and Analytics

      • Analytics and Business Intelligence Platforms
      • Data Science and Machine Learning Platforms (Transitioning to AI Platforms For Data Science and Machine Learning)
      • Data Integration Tools
      • Process Mining Platforms (Transitioning to Process Intelligence Platforms)
      • Augmented Data Quality Solutions
      • View All
    • Education

      • Manager and Leadership Training
      • Corporate Learning Technologies
      • eLearning Authoring Tools
      • Higher Education Student Information System Software as a Service (Transitioning to Higher Education SaaS Student Information Systems)
      • Digital Learning Content Providers
      • View All
    • Enterprise Networking and Communications

      • Unified Communications as a Service
      • Global WAN Services
      • Intranet Packaged Solutions
      • SD-WAN
      • Edge Distribution Platforms
      • View All
    • Finance

      • Expense Management Software
      • Financial Planning Software
      • Financial Close and Consolidation Solutions
      • Cloud Financial Management Tools
      • Accounts Payable Applications
      • View All
    • Healthcare and Life Sciences

      • Medical Device Security Solutions (Transitioning to Medical Device Risk Management Platforms)
      • Health Navigation Solutions
      • Claim Editor Software
      • Revenue Cycle Management Software (Transitioning to Revenue Cycle Management Solutions)
      • Digital Health Platforms (Transitioning to Healthcare Provider Industry Cloud Platforms)
      • View All
    • Human Resources

      • Employee Recognition and Reward Systems
      • Workforce Management Applications (Transitioning to Workforce Management (WFM) Technology)
      • Digital Employee Experience Management Tools
      • Talent Acquisition (Recruiting) Suites
      • Cloud HCM Suites for Regional and/or Sub-1,000 Employee Enterprises
      • View All
    • IT Infrastructure and IoT

      • Enterprise Wired and Wireless LAN Infrastructure (Transitioning to Enterprise Wired and Wireless LAN)
      • Endpoint Management Tools
      • IT Service Management Platforms
      • Container Management
      • Infrastructure Monitoring Tools
      • View All
    • IT Security

      • Endpoint Protection Platforms
      • Email Security
      • Managed Detection and Response
      • Security Information and Event Management
      • Security Awareness Computer-Based Training
      • View All
    • Legal

      • Contract Life Cycle Management
      • Electronic Signature
      • Governance, Risk and Compliance Tools, Assurance Leaders
      • Compliance Monitoring Solutions
      • Corporate Governance Services
      • View All
    • Manufacturing

      • Enterprise Asset Management Software
      • Manufacturing Execution Systems
      • Global Industrial IoT Platforms
      • PLM Software in Discrete Manufacturing Industries
      • Computer-Aided Design (CAD) Software
      • View All
    • Marketing

      • Video Editing Software
      • Email Marketing
      • Multichannel Marketing Hubs
      • Customer Data Platforms
      • Event Marketing and Management Platforms
      • View All
    • Productivity and Collaboration

      • Document Management
      • Collaborative Work Management
      • Visual Collaboration Applications
      • Knowledge Management (KM) Software
      • Meeting Solutions
      • View All
    • Public Sector and Government

      • Government Budgeting and Planning Solution
      • Cloud-Based ERP for U.S. Local Government
      • Government ERP Solutions
      • Citizen Service Delivery
      • Government Contracting Software
      • View All
    • Retail

      • Digital Commerce
      • Digital Commerce Payment Vendors (Transitioning to Digital Commerce Payment Platforms)
      • Retail Assortment Management Applications: Long Life Cycle Products
      • Retail Workforce Management Applications (Transitioning to Retail Workforce Management Technology)
      • Digital Shelf Analytics
      • View All
    • Sales

      • Revenue Enablement Platforms
      • Sales Force Automation Platforms (Transitioning to CRM Sales Platforms)
      • Revenue Intelligence (Transitioning to Revenue Action Orchestration)
      • Configure, Price and Quote Applications
      • Search and Product Discovery
      • View All
    • Supply Chain Management

      • Supply Chain Planning Solutions
      • Transportation Management Systems
      • Real-Time Transportation Visibility Platforms
      • Warehouse Management Systems
      • Supply Chain Strategy, Planning and Operations Consulting
      • View All
    • Utilities

      • Geospatial Information Systems for Energy and Utilities
      • Mobile Workforce Management Software for Utilities (Transitioning to Mobile Workforce Management Solutions for Power and Utilities)
      • Energy Management and Optimization Systems
      • Energy Trading and Risk Management
      • Advanced Distribution Management Systems
      • View All
    • Browse All Categories
  • FOR VENDORS

    • FOR VENDORS

    • Log In to Vendor Portal
    • Get Started
  • REVIEWS

    • REVIEWS

    • Write a Review
    • Product Reviews
    • Vendor Directory
    • Product Comparisons
  • GARTNER PEER COMMUNITY™
  • GARTNER.COM
  • Community GuidelinesListing GuidelinesBrowse VendorsRules of EngagementFAQPrivacyTerms of Service
    ©2026 Gartner, Inc. and/or its affiliates.
    All rights reserved.
  • Categories

      • Application Development
      • Artificial Intelligence
      • Cloud Computing
      • Customer Relationship Management
      • Data and Analytics
      • Education
      • Enterprise Networking and Communications
      • Finance
      • Healthcare and Life Sciences
      • Human Resources
      • IT Infrastructure and IoT
      • IT Security
      • Legal
      • Manufacturing
      • Marketing
      • Productivity and Collaboration
      • Public Sector and Government
      • Retail
      • Sales
      • Supply Chain Management
      • Utilities
      Browse All Categories

      Application Development

      69 markets
      • Observability Platforms
      • Integrated Development Environment (IDE) Software
      • Enterprise Agile Planning Tools
      • Integration Platform as a Service
      • AI-Augmented Software Testing Tools
      • API Management
      • Enterprise Low-Code Application Platforms
      • Robotic Process Automation
      • DevOps Platforms (Transitioning to DevSecOps Platforms)
      • Business Process Automation Tools
      • Enterprise Architecture Tools
      • Business Orchestration and Automation Technologies
      • Custom Software Development Services
      • Code Review Tools
      • Digital Adoption Platforms
      • Domain Registrars
      • Game Engine Software
      • Public Cloud IT Transformation Services (Transitioning to Public Cloud Optimization and Transformation Services)
      • Website Builders
      • Developer Productivity Insight Platforms
      • AI Agents for Application Developers
      • Application Platforms (Transitioning to Cloud-Native Application Protection Platforms)
      • Feature Management
      • Application Crowdtesting Services
      • Test Data Management
      • API Generation Software
      • Prototyping Software
      • Mobile App Analytics
      • AI-Augmented Code Modernization Tools
      • Virtual Reality Development Software
      • Application Testing Services, Worldwide (Transitioning to Quality Engineering Services)
      • Green Software Engineering
      • Event Brokers
      • Application Integration Platforms
      • Digital Twin of an Organization Platforms
      • Independent Third-Party Software Support of Megavendors
      • Microsoft 365 Implementation and Support Services
      • Application Development Life Cycle Management (Transitioning to DevOps Platforms)
      • BPM-Platform-Based Case Management Frameworks
      • Microsoft Product Support Services
      • Product Roadmapping Tools for Software Engineering
      • Multiexperience Development Platforms
      • AI Agent Development Platforms for Software Engineering
      • Application Portfolio Management Tools
      • Application Composition Platform
      • Internal Developer Portals
      • Cloud Development Environments
      • Mobile Development Frameworks (Transitioning to Web and Mobile Development Frameworks)
      • Load Testing Tools
      • Blockchain Consulting and Proof-of-Concept Development Services
      • B2B Gateway Software
      • Citizen Application Development Platforms
      • Mobile Application Testing Services
      • SAP S/4HANA Application Services, Worldwide (Transitioning to Cloud ERP Services)
      • Oracle Cloud Application Services, Worldwide (Transitioning to Cloud ERP Services)
      • SAP Application Services, Worldwide
      • SAP SuccessFactors Service Providers (Transitioning to Cloud ERP Services)
      • Service Mesh
      • Value Stream Management Platforms
      • Business-Outcome-Driven Enterprise Architecture Consulting (Retired)
      • Oracle Application Services, Worldwide (Transitioning to Cloud ERP Services)
      • Rapid Mobile App Development Tools
      • SAP Selective Test Data Management Tools
      • API and MCP Testing Tools
      • Augmented Reality Development Software
      • Blockchain as a Service
      • Mobile Application Management (Transitioning to Endpoint Management Tools)
      • Mobile Back-End Services
      • R&D Outsourcing Providers
      View More
  • For Vendors

    • Log In to Vendor Portal 

    • Get Started 

  • Write a Review

Join / Sign In
  1. Home
  2. /
  3. AWS WAF
Logo of AWS WAF

AWS WAF

byAmazon Web Services (AWS)
in
4.4
Market Presence: Cloud Web Application and API Protection, DDoS Mitigation Solutions

Overview

Product Information on AWS WAF

Updated 13th October 2025

What is AWS WAF?

AWS WAF is a web application firewall software designed to help organizations protect their web applications from common internet threats. The software enables users to create security rules that allow, block, or monitor web requests based on specific criteria such as IP addresses, HTTP headers, and body data. AWS WAF provides features for filtering traffic, preventing attacks including SQL injection and cross site scripting, and managing bot traffic. It integrates with other AWS services to enhance security posture, offers real time visibility into web traffic, and automates responses to detected threats. The software addresses the challenge of securing web applications against evolving cyber risks and helps organizations maintain compliance with security standards.

AWS WAF Pricing

AWS WAF software uses a pay-as-you-go pricing model where charges are based on usage components such as the number of web access control lists created, the number of rules added per web ACL, and the volume of web requests processed. There is no upfront cost or required long-term commitment, and users are billed monthly based on actual usage.

Overall experience with AWS WAF

IT SERVICES ASSOCIATE
250M - 500M USD, IT Services
FAVORABLE

“Seamless protection with easy integration into the AWS System ”

5.0
Sep 28, 2025
The overall experience with AWS WAF is really good. The integration with other AWS services is smooth and it provides good customization. It offers a strong protection with the managed rules that cover almost all threats.
IT Associate
500M - 1B USD, Banking
CRITICAL

“Limited Features Available Despite Ease of Use for New Tenant Solutions”

3.0
Jul 16, 2025
needed functionality, but limited options compared to other on prem

About Company

Company Description

Updated 6th March 2025

Amazon Web Services (AWS), established in 2006, is focused on providing essential infrastructure services to businesses globally in the form of cloud computing. The key advantage offered through cloud computing, particularly via AWS, is its capacity to shift fixed infrastructure expenses into flexible costs. Businesses have been able to forgo extensive planning and procurement of servers and other Information Technology (IT) resources, owing to AWS. AWS seeks to provide businesses with prompt and cost-effective access to resources using Amazon's expertise and economies of scale, as and when their business requires. Currently, AWS offers a robust, scalable, economic infrastructure platform on the cloud powering an extensive array of businesses worldwide. It operates across numerous industries with data center locations in various parts of the globe including U.S., Europe, Singapore, and Japan.

Company Details

Updated 23rd December 2024
Company type
Public
Year Founded
2006
Head office location
Seattle, United States
Number of employees
10001+
Website
http://aws.amazon.com

Do You Manage Peer Insights at Amazon Web Services (AWS)?

Access Vendor Portal to update and manage your profile.

Key Insights

A Snapshot of What Matters - Based on Validated User Reviews

User Sentiment About AWS WAF
Reviewer Insights for: AWS WAF
Deciding Factors: AWS WAF Vs. Market Average
Performance of AWS WAF Across Market Features

AWS WAF Likes & Dislikes

Like

What I like most about AWS WAF is how smoothly it integrates with the rest of the AWS ecosystem. Managed rules are very effective against common threats, which saves time and effort. Also the flexibility to create custom rules for our applications it gives a strong balance of ease of use and control. Overall, it makes securing applications feel reliable.

Like

easy to use on new tenant solutions

Like

It can be easy to use, at least it includes most basic features without much prior knowledge. Since we are already using Cloudfront the configuration and tuning was easier, the basic pricing structure is also very convenient. The built-in Managed rules are good enough to start and provides a good starting point.

Dislike

The only thing I would mention is about the initial learning of this as setting up the rules can feel complex. Pricing is also on the slightly higher side compared to othe competitors

Dislike

some limitations with their packet inspection tooling

Dislike

To fully benefit from a DDoS mitigation service, you need to subscribe to Shield Advanced, which can be a little expensive in most cases. They should improve UX as well.

Top AWS WAF Alternatives

Logo of Imperva Application Security Platform
1. Imperva Application Security Platform
4.7
(542 Ratings)
Logo of Fastly Next-Gen WAF
2. Fastly Next-Gen WAF
4.8
(535 Ratings)
Logo of Cloudflare Application Services
3. Cloudflare Application Services
4.5
(476 Ratings)
View All Alternatives

Peer Discussions

AWS WAF Reviews and Ratings

4.4

(373 Ratings)

Rating Distribution

5 Star
49%
4 Star
46%
3 Star
4%
2 Star
0%
1 Star
0%
Why ratings and reviews count differ?

Customer Experience

Evaluation & Contracting

4.4

Integration & Deployment

4.6

Service & Support

4.5

Product Capabilities

4.5

Filter Reviews
Sort By:
Most helpful
Last 12 Months
Star Rating
Reviewer Type
Reviewer's Company Size
Reviewer's Industry
Reviewer's Region
Reviewer's Job Function
  • IT SERVICES ASSOCIATE
    50M-1B USD
    IT Services
    Review Source

    Seamless protection with easy integration into the AWS System

    5.0
    Sep 28, 2025
    The overall experience with AWS WAF is really good. The integration with other AWS services is smooth and it provides good customization. It offers a strong protection with the managed rules that cover almost all threats.
  • DC & CLOUD MANAGER
    50M-1B USD
    Consumer Goods
    Review Source

    Cloudfront Integration Simplifies Setup But Advanced Protection Increases Cost

    5.0
    Sep 23, 2025
    The product works well in most cases; there are cases where some extra features or flexibility could be added to be more intuitive. To fully leverage its benefits, it requires more advanced skills or add customized rules. Although they have improved the console, it needs more improvement.
  • MANAGER, IT SERVICES
    50M-1B USD
    Miscellaneous
    Review Source

    Users Value Easy Bot Filtering While WAF Log Reading Remains Difficult

    4.0
    Sep 26, 2025
    We use AWS WAF on four load balancers and some CDNs, the solution controls the bot access and filters malignous access with simple configurations. We use marketplace rules too to match some rules with on-premises delivered rules.
  • Engineer
    50M-1B USD
    Energy and Utilities
    Review Source

    Powerful AWS-native WAF taht rewards infrastructure-as-code discipline

    4.0
    Mar 6, 2026
    AWS WAF delivers reliable, scalable web app protection that integrates well with CloudFront, Load Balancers, and API Gateway. Rule management and managed rule groups reduce operational overhead significantly, a great boon for our DevOps team.
  • SENIOR SECURITY ENGINEER
    50M-1B USD
    IT Services
    Review Source

    Effective Protection for Web Applications With Smooth AWS Integration Experience

    5.0
    Jan 30, 2026
    Overall a good experience. Provides good protection against our inhouse web applications. Plus the integration with other aws services is smooth as well .Works well for small & large applications
...
Showing Result 1-5 of 487

Recommended Gartner Research

  • Market Guide for Cloud Web Application and API Protection

Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose.

This site is protected by hCaptcha and its Privacy Policy and Terms of Use apply.


Software reviews and ratings for EMMS, BI, CRM, MDM, analytics, security and other platforms - Peer Insights by Gartner
Community GuidelinesListing GuidelinesBrowse VendorsRules of EngagementFAQsPrivacyTerms of Use

©2026 Gartner, Inc. and/or its affiliates.

All rights reserved.