--- description: Review of AWS WAF Software: system overview, features, price and cost information. Get free demos and compare to similar programs on Software Advice Ireland. image: https://gdm-localsites-assets-gfprod.imgix.net/images/software_advice/og_logo-55146305bbe7b450bea05c18e9be9c9a.png title: AWS WAF | Reviews, Pricing & Demos - SoftwareAdvice IE --- Breadcrumb: [Home](/) > [Website Security Software](/directory/4431/website-security/software) > [AWS WAF](/software/402012/aws-waf) # AWS WAF Canonical: https://www.softwareadvice.ie/software/402012/aws-waf > AWS WAF is a firewall solution that helps businesses streamline processes related to fraud prevention, bot control, web traffic filtering, managed rules creation, and more from within a unified platform. It allows team members to block and rate-limit pervasive bots, scanners, crawl downtime, and other common bots from consuming excess resources, causing downtimes, skewing metrics, and more. AWS WAF enables employees to generate real-time metrics and set custom alarms to receive details of raw requests, such as URIs, IP addresses, referrers, and geo-locations. > > Verdict: Rated **4.5/5** by 4 users. Top-rated for **Likelihood to recommend**. ----- ## Quick Stats & Ratings | Metric | Rating | Detail | | **Overall** | **4.5/5** | 4 Reviews | | Ease of Use | 3.8/5 | Based on overall reviews | | Customer Support | 5.0/5 | Based on overall reviews | | Value for Money | 3.8/5 | Based on overall reviews | | Features | 4.3/5 | Based on overall reviews | | Recommendation percentage | 90% | (9/10 Likelihood to recommend) | ## About the vendor - **Company**: Amazon Web Services - **Location**: Seattle, US - **Founded**: 2006 ## Commercial Context - **Pricing Details**: Please contact Amazon Web Services for pricing details. - **Target Audience**: Self Employed, 2–10, 11–50, 51–200, 201–500, 501–1,000, 1,001–5,000, 5,001–10,000, 10,000+ - **Deployment & Platforms**: Cloud, SaaS, Web-based - **Supported Languages**: English - **Available Countries**: United States ## Features - Filtering - Firewalls - IP Filtering - Network Monitoring - Reporting/Analytics - SQL Injections - Threat Response - Vulnerability Scanning - Web-Application Security ## Support Options - Email/Help Desk - FAQs/Forum - Knowledge Base ## Category - [Website Security Software](https://www.softwareadvice.ie/directory/4431/website-security/software) ## Related Categories - [Website Security Software](https://www.softwareadvice.ie/directory/4431/website-security/software) - [Firewall Software](https://www.softwareadvice.ie/directory/4664/firewall/software) ## Alternatives 1. [WatchGuard Firebox](https://www.softwareadvice.ie/software/163348/watchguard-firebox) — 4.8/5 (446 reviews) 2. [ManageEngine Firewall Analyzer](https://www.softwareadvice.ie/software/435331/manageengine-firewall-analyzer) — 4.5/5 (241 reviews) 3. [ESET Endpoint Security](https://www.softwareadvice.ie/software/134149/eset-endpoint-security) — 4.7/5 (1169 reviews) 4. [FortiGate Next-Generation Firewall](https://www.softwareadvice.ie/software/263108/fortigate-next-generation-firewalls) — 4.7/5 (43 reviews) 5. [Sense Defence AI](https://www.softwareadvice.ie/software/386071/sense-defence-ai) — 4.9/5 (32 reviews) ## Reviews ### "Quite good basic Web Application Firewall in free version" — 4.0/5 > **Gianluigi** | *29 May 2022* | Information Technology & Services | Recommendation rating: 7.0/10 > > **Pros**: Preset rules covers a lot of typical web app critical security issue, like SQL Injection and Wodpress attack. Monitoring is quite good. Set actions in the event of an attack is very simple to setup. > > **Cons**: You have a budget in "points" to spent for free. Using preset rules or set your own rules consumes "points" so you can set only a certain number of rules for free. Using advanced features requires a "pro" version which is very very expensive for us. > > We adopt WAF in front of our single ingress point, our ALB, through which all our requests pass. We deploy a lot of different web apps, including Wordpress sites, API custom apps and so on. With AWF we can setup some default rules which covers typical attacks and we sometime set custom rules based on specific application requirements. When rules become many, you have to pay to add more. ----- ### "AWS WAF: The Defender Our Web Apps Deserve" — 4.0/5 > **Deep** | *25 December 2023* | Information Technology & Services | Recommendation rating: 9.0/10 > > **Pros**: The best about AWS WAF is its pre-built defenses. This WAF acts as a shield for all my web apps and it filters out all malicious traffic and protects against common web attacks for example SQL injection, XSS, or bot attacks. It provides a variety of managed rule groups, including OWASP Top 10, Common Rules, and Bot Control which are super useful. Not only these pre-defined rules , I can create my custom rules to address specific needs for my web applications. And another very useful feature is I can easily integrate WAF with other AWS resources such as AWS Cloudfront, ALB ,Amazon API gateway etc . > > **Cons**: The pay as you go model for AWS WAF is little bit complex for a newbie as the price depends on many factors such as number of Web access control lists created,traffic volume,configuration etc. So you must have prior knowledge to deal with AWS WAF. Except this there is nothing much to dislike about AWS WAF. > > Its been super easy to create and manage all the security rules for all of my Web Applications in a single place using AWS WAF ----- ### "Once you get past that the learning curve is unmatched." — 5.0/5 > **Rafael** | *31 March 2022* | Design | Recommendation rating: 9.0/10 > > **Pros**: The leap from other platforms has been slow but the speed with all the AWS tools is unmatched. Once you move from other services (Google and Azure) the environment is much better and robust. And stop using third party tools as everything is integrated within the AWS environment. > > **Cons**: The learning curve is complicated. And for more detailed projects I need a system administrator, because it is difficult. But of course the investment is well worth it. > > Stop using third party tools. Being able to use all the other AWS tools, IP filtering, Shield and MAP. ----- ### "AWS waf" — 5.0/5 > **Anmol** | *20 February 2023* | Computer & Network Security | Recommendation rating: 10.0/10 > > **Pros**: Easy to setup and create a new ruleease of use of IP sets and regex pattern sets in which we can block IPs and domains > > **Cons**: I am using AWS WAF for 2 years and It is easy to use setup.The dashboard is clear and gives an idea of the rules ## Links - [View on SoftwareAdvice](https://www.softwareadvice.ie/software/402012/aws-waf) ## This page is available in the following languages | Locale | URL | | en | | | en-AU | | | en-GB | | | en-IE | | | en-NZ | | ----- ## Structured Data