• HOME
  • CATEGORIES

    • CATEGORIES

    • Browse All Categories
  • FOR VENDORS

    • FOR VENDORS

    • Log In to Vendor Portal
    • Get Started
  • REVIEWS

    • REVIEWS

    • Write a Review
    • Product Reviews
    • Vendor Directory
    • Product Comparisons
  • GARTNER PEER COMMUNITY™
  • GARTNER.COM
  • Community GuidelinesListing GuidelinesBrowse VendorsRules of EngagementFAQPrivacyTerms of Service
    ©2026 Gartner, Inc. and/or its affiliates.
    All rights reserved.
  • Categories

    • No categories available

      Browse All Categories

      Select a category to view markets

  • For Vendors

    • Log In to Vendor Portal 

    • Get Started 

  • Write a Review

Join / Sign In
  1. Home
  2. /
  3. AWS WAF
Logo of AWS WAF

AWS WAF

byAmazon Web Services (AWS)
in
4.4
Market Presence: Cloud Web Application and API Protection, DDoS Mitigation Solutions

Overview

Product Information on AWS WAF

Updated 13th October 2025

What is AWS WAF?

AWS WAF is a web application firewall software designed to help organizations protect their web applications from common internet threats. The software enables users to create security rules that allow, block, or monitor web requests based on specific criteria such as IP addresses, HTTP headers, and body data. AWS WAF provides features for filtering traffic, preventing attacks including SQL injection and cross site scripting, and managing bot traffic. It integrates with other AWS services to enhance security posture, offers real time visibility into web traffic, and automates responses to detected threats. The software addresses the challenge of securing web applications against evolving cyber risks and helps organizations maintain compliance with security standards.

AWS WAF Pricing

AWS WAF software uses a pay-as-you-go pricing model where charges are based on usage components such as the number of web access control lists created, the number of rules added per web ACL, and the volume of web requests processed. There is no upfront cost or required long-term commitment, and users are billed monthly based on actual usage.

Overall experience with AWS WAF

Software Developer
<50M USD, Software
FAVORABLE

“Smooth integration with AWS services streamlines basic application protection”

5.0
Jun 22, 2026
This text serves as a placeholder and does not reflect the user’s review responses or opinions. This text serves as a placeholder and does not reflect the user’s review responses or opinions. This text serves as a placeholder and does not reflect the user’s review responses or opinions.
Operations Associate
<50M USD, Transportation
CRITICAL

“Product Offers Real-Time Streaming but Struggles with False Positive Detections”

3.0
Apr 21, 2026
This text serves as a placeholder and does not reflect the user’s review responses or opinions. This text serves as a placeholder and does not reflect the user’s review responses or opinions. This text serves as a placeholder and does not reflect the user’s review responses or opinions.

About Company

Company Description

Updated 6th March 2025

Amazon Web Services (AWS), established in 2006, is focused on providing essential infrastructure services to businesses globally in the form of cloud computing. The key advantage offered through cloud computing, particularly via AWS, is its capacity to shift fixed infrastructure expenses into flexible costs. Businesses have been able to forgo extensive planning and procurement of servers and other Information Technology (IT) resources, owing to AWS. AWS seeks to provide businesses with prompt and cost-effective access to resources using Amazon's expertise and economies of scale, as and when their business requires. Currently, AWS offers a robust, scalable, economic infrastructure platform on the cloud powering an extensive array of businesses worldwide. It operates across numerous industries with data center locations in various parts of the globe including U.S., Europe, Singapore, and Japan.

Company Details

Updated 23rd December 2024
Company type
Public
Year Founded
2006
Head office location
Seattle, United States
Number of employees
10001+
Website
http://aws.amazon.com

Do You Manage Peer Insights at Amazon Web Services (AWS)?

Access Vendor Portal to update and manage your profile.

Key Insights

A Snapshot of What Matters - Based on Validated User Reviews

Top AWS WAF Alternatives

Logo of Imperva Application Security Platform
1. Imperva Application Security Platform
4.7
(558 Ratings)
Logo of Fastly Next-Gen WAF
2. Fastly Next-Gen WAF
4.8
(535 Ratings)
Logo of App & API Protector
3. App & API Protector
4.8
(504 Ratings)
View All Alternatives

Peer Discussions

AWS WAF Reviews and Ratings

4.4

(384 Ratings)

Rating Distribution

5 Star
49%
4 Star
46%
3 Star
5%
2 Star
0%
1 Star
0%
Why ratings and reviews count differ?
  • Software Developer
    <50M USD
    Software
    Review Source

    Smooth integration with AWS services streamlines basic application protection

    5.0
    Jun 22, 2026
    So, the overall experience of using this service is very good. It provides an effective way to protect web applications from common security threats without requiring major infrastructure changes. I have used it for API Protection and Web applications. It integrates well with services like CloudFront, Application Load Balancer and API Gateway.
  • Software Developer
    <50M USD
    Software
    Review Source

    Smooth integration with AWS services streamlines basic application protection

    5.0
    Jun 22, 2026
    So, the overall experience of using this service is very good. It provides an effective way to protect web applications from common security threats without requiring major infrastructure changes. I have used it for API Protection and Web applications. It integrates well with services like CloudFront, Application Load Balancer and API Gateway.
  • Read All 498 Reviews

    Get unlimited access to verified peer reviews and insights

    Read unlimited Gartner-vetted product reviews
    View and share valuable product insights
    Download full product profiles
    Review products you use today

Recommended Gartner Insights

  • Market Guide for Cloud Web Application and API Protection
Powered by Google TranslateThis service may contain translations provided by Google. Google disclaims all warranties related to the translations, express or implied, including any warranties of accuracy, reliability, and any implied warranties of merchantability, fitness for a particular purpose and noninfringement. Gartner's use of this provider is for operational purposes and does not constitute an endorsement of its products or services.

Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose.

This site is protected by hCaptcha and its Privacy Policy and Terms of Use apply.


Software reviews and ratings for EMMS, BI, CRM, MDM, analytics, security and other platforms - Peer Insights by Gartner
Community GuidelinesListing GuidelinesBrowse VendorsRules of EngagementFAQsPrivacyTerms of Use

©2026 Gartner, Inc. and/or its affiliates.

All rights reserved.

User Sentiment About AWS WAF
Reviewer Insights for: AWS WAF
Deciding Factors: AWS WAF Vs. Market Average
Performance of AWS WAF Across Market Features

AWS WAF Likes & Dislikes

Like

So, I've set up the Firewall and it makes easy to protect applications from common web attacks such as SQL injection, cross-site scripting, and bot detection. Managed rule groups help improve security without needing to create every rule manually. It also helps with traffic inspection and request filtering while supporting advanced BOT Management capabilities.

Like

So, I've set up the Firewall and it makes easy to protect applications from common web attacks such as SQL injection, cross-site scripting, and bot detection. Managed rule groups help improve security without needing to create every rule manually. It also helps with traffic inspection and request filtering while supporting advanced BOT Management capabilities.

Like

So, I've set up the Firewall and it makes easy to protect applications from common web attacks such as SQL injection, cross-site scripting, and bot detection. Managed rule groups help improve security without needing to create every rule manually. It also helps with traffic inspection and request filtering while supporting advanced BOT Management capabilities.

Dislike

lot of false positive detections and it is not full IDS/IPS so can't detect malware payloads.

Dislike

lot of false positive detections and it is not full IDS/IPS so can't detect malware payloads.

Dislike

lot of false positive detections and it is not full IDS/IPS so can't detect malware payloads.