Sold by: Radware
Deployed on AWS
Radware Cloud WAF is a fully managed Cloud Application Protection Service providing the industry's most comprehensive web application security solution. It integrates Radware's cloud-delivered WAF technology, API protection, Bot management, application layer DDoS protection, client-side protection, analytics, threat detection and security feeds in a single portal.
4.6
Overview
Radware Cloud WAF is a fully managed Cloud Application Protection Service providing the industry's most comprehensive web application security solution. The service integrates Radware's Cloud WAF, API Protection, Bot management, client-side and application layer DDoS protection in a single portal that provides security analytics, threat detection and real-time security feeds to protect applications against hacking, malicious bots, API exposure, Web DDoS attacks, supply chain attacks and other vulnerabilities. Radware's combination of negative and positive security models provides a complete level of protection against OWASP Top 10 threats and zero-day attacks. API Discovery and Protection - End-to-end API solution from Discovery to protection at a click of a button. Radware auto API discovery maps all of your applications documented and undocumented third-party APIs, automatically generates Open API schema files, generates tailored security policies to detect and block API-focused attacks in real time and enforce protection across all your APIs. Radware's advanced API protection eliminates your documenting and protecting APIs overheads and keeps your organization protected across the board. Bot Management - Integrated Bot Manager provides comprehensive mitigation options, such as Blockchain-based Crypto challenges to counter attacks. It ensures precise bot management for web, mobile, and API traffic by employing behavioral modeling, collective bot intelligence, and fingerprinting. This defense guards against all OWASP 21 automated threats, including account takeover, credential stuffing, DDoS, fraud, and web scraping, fortifying online operations. Web DDoS Protection - Industry leading application-layer L7 protection against DDoS attacks, based on Radware's unique machine-learning-based behavioral detection that distinguishes between legitimate and malicious traffic, and automatically generates granular signatures in real-time to protect against zero-day attacks. Best-in-class security against a wide variety of threats, including HTTP Floods, HTTP bombs, low-and-slow assaults, Brute Force attacks, and disruptive web DDoS Tsunamis. Client-side Protection - Easily block requests to suspicious third-party services in your supply chain and adhere to data security compliance standards. Protect against client-side attacks coming from third party JS services - Formjacking, Skimming,Magecart, automatically and continuously discover all third-party services in your supply chain with detailed activity tracking, as well as get alerts & threat level assessment according to multiple indicators, including script source and destination domain. Pricing We have 3 different pricing packages - Standard, Advanced and Complete. The Standard and Advanced packages come with some of the features while Complete provides full coverage.
Highlights
- Fully Managed Web Application Protection Service - 24x7 Fully managed security service by Radware's expert Emergency Response Team(ERT). Protect Against OWASP Vulnerabilities - Stay protected against 150+ known attack vectors, including the OWASP Top 10 Web Application Security Risks, Top 10 API Security Vulnerabilities, Top 21 Automated Threats To Web Applications, and Top 10 Client-side vulnerabilities
- Detect, Manage and Mitigate Bots - Detect and distinguish between good and bad bots to protect websites, mobile apps and APIs. Easily optimize and customize your bot management policies to provide a better user experience and drive more ROI from your application traffic. End-to-end API Protection - From discovery to enforcement at a click of a button, Radware combines behavioral analysis and policy automation to protect from increasingly sophisticated API assaults.
- Mitigate Application-Level DDoS Assaults - Radware's DDoS protection technologies provide the shortest time to detection and mitigation of most advanced and high volume HTTP-based DDoS assaults by utilizing patented behavioral analysis, machine learning-based engines. Protect Client-Side From Supply Chain Attacks - This solution offers advanced client side protection that ensures the protection of end users data when interacting with any third-party services in the application supply chain.
Details
Sold by
Categories
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/Mbps |
|---|---|---|
Cloud Application Protection Standard,10 Mbps,1 Application - Monthly | Cloud Application Protection Standard,10 Mbps,1 Application - Monthly | $638.00 |
Cloud Application Protection Standard,50 Mbps,1 Application - Monthly | Cloud Application Protection Standard,50 Mbps,1 Application - Monthly | $1,940.00 |
Cloud Application Protection Standard,100 Mbps,1 Application - Monthly | Cloud Application Protection Standard,100 Mbps,1 Application - Monthly | $3,069.00 |
Advanced_10 | Cloud Application Protection Advanced,10 Mbps,1 Application - Monthly | $1,276.00 |
Advanced_Addon | Cloud Application Protection Advanced,1 Application Add-On - Monthly | $127.00 |
Complete_10 | Cloud Application Protection Complete,10 Mbps,1 Application - Montly | $2,233.00 |
Complete_Addon | Cloud Application Protection Complete,1 Application Add-On - Monthly | $193.00 |
CDN_Add_on | Cloud Application Protection CDN Service Enablement - Monthly | $287.00 |
CDDOS_OnDemand | On-Demand Cloud DDoS Protection Service - Legitimate 10Mbps - Monthly | $2,750.00 |
CDDOS_AlwaysOn | Always-On Cloud DDoS Protection Service - Legitimate 10Mbps - Monthly | $4,950.00 |
Dimensions summary
Pricing is usage-based and measured in Mbps of legitimate bandwidth. You start with a base Cloud Application Protection plan in three levels: Standard, Advanced, and Complete. Standard sizes by throughput (10, 50, or 100 Mbps) for one application. Advanced and Complete cover 10 Mbps for one application, with per-application add-ons to expand coverage. On top of any base plan, you can layer independent add-ons billed separately. These include CDN enablement, Cloud DDoS Protection (on-demand or always-on), Web DDoS, Firewall as a Service, Network Analytics, AI SOC Xpert, Access Logs, LLM Firewall, PCI DSS compliance, ERT Premium support, extra protected networks, and the SecurePath connector.
Top-of-mind questions for buyers
Pricing meters legitimate traffic bandwidth, measured in Mbps, not attack or blocked traffic. Your base plan is sized to a bandwidth tier, and many add-ons are also priced against legitimate bandwidth blocks, such as 10Mbps or 200Mbps units. Attack traffic that the service filters out does not count toward your metered bandwidth.
You pick one base Cloud Application Protection plan, then layer optional add-ons that each bill separately. Charges add together, so your total is the base plan plus every add-on you select. Per-application add-ons extend coverage one application at a time. Bandwidth-based add-ons bill in fixed blocks, like 10Mbps or 200Mbps.
Both meter legitimate bandwidth in 10Mbps units. On-Demand DDoS Protection engages only when mitigation is triggered, suited to occasional attack response. Always-On keeps protection active continuously, suited to constant exposure. You choose one model per subscription, and each is billed monthly against your legitimate bandwidth.
www.radware.com
Helpful?
Vendor refund policy
No refund offered
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Online Support Service Portal -Appropriate for non-critical issues, such as general inquiries, requests for technical documentation/ information, schedule support during an upcoming maintenance window, view installed base and manage support cases.24x7, where Internet service is available
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Alteon VA supports the complex functionality requirements of Enterprise applications which go beyond basic availability and quality of experience features. These include: Layer 7 Rewrite, Application Level Traffic Steering, Caching, SSL Offload, compression, acceleration. WAF (AppWall), SecureUR L
Behavioral algorithms to detect and mitigate DDoS attacks on network and application
Radware API Security Service delivers end-to-end API protection through continuous API discovery, runtime posture management, contextual testing, and AI-driven defense. It helps organizations identify exposed or misconfigured APIs, reduce risk, and protect against business logic abuse, automated threats, and DDoS attacks across modern application environments.
Cloud Native Protector provides an agentless, cloud-native solution for comprehensive protection of AWS assets, to protect both the overall security posture of cloud environments, as well as protect individual cloud workloads against cloud-native attack vectors
Customer reviews
Carla Vega
Automated protection has streamlined attack mitigation and now safeguards critical services
Reviewed on Nov 06, 2026
Review provided by PeerSpot
What is our primary use case?
The main use case I have for Radware Cloud WAF Service is protection against attacks, bots, and automated attacks that target our technology infrastructure.
I use this tool as the first line of defense, since it allows me to filter, monitor, and block traffic when it detects these types of automated attacks and bots.
The main use case works very well, and the technical support and alerts are early. If updates are made, they are also reported in a timely manner.
I use the CDN services offered by Radware along with Radware Cloud WAF Service, which help us to deliver the services we have much more efficiently, given their multinational deployment.
I use protection against DDoS attacks at layer 7, HTTP/L7, specifically Radware DefensePro, which is an on-premise solution, and it helps us stop denial-of-service attacks that could be carried out.
How has it helped my organization?
Radware Cloud WAF Service positively impacts my organization by mitigating these attacks, defending sensitive data, and providing us with constant business continuity.
I have a specific example of how business continuity has improved since I implemented this solution: availability has increased by 10%, which helps us with the metrics that the corporate side uses to measure us.
More than operational costs, it has helped me reduce time, since it used to be a manual process and now it is an automated process.
I have managed to save time in the process; a review that used to take us a day has turned into a maximum of two hours.
I have noticed that Radware Cloud WAF Service has helped me reduce false positives to a great extent, and this happens thanks to the behavior analysis it has and the IOCs that are already registered in its knowledge base.
Radware Cloud WAF Service has freed up time for my IT team for other projects, allowing us a 30% time saving thanks to the great number of automations it offers.
BELA's real-time detection and mitigation has positively impacted my organization's threat management by helping us achieve much faster management.
What is most valuable?
I consider the best feature that Radware Cloud WAF Service offers is protection against application layer attacks, layer seven, mainly.
That layer seven protection has benefited me significantly by reducing false positives and guaranteeing service availability for us.
I have positive impressions of the API Discovery feature, since it allows me to discover APIs. The API Discovery feature has helped me register some APIs that I didn't have, and it has also made it easier for me in my integrations with other services. It has seemed a very useful and easy-to-use functionality given its platform.
I would rate Radware Cloud WAF Service's ability to protect against zero-day attacks as very effective, since recently, given the PHP vulnerability, it helped us to mitigate that type of attack until we carried out patching and mitigation.
I use the automatic source blocking feature in Radware's cloud application protection solution, and the experience has been very good, as the functionality helps us in the detection and protection of applications.
The proactive and holistic approach based on correlation between modules has been effective in protecting my applications since, as the modules are from the same vendor, they allow us more native integration and they operate more efficiently.
My opinion of the automated analytics for event review that the platform offers is positive, as sending metrics on a monthly basis in order to optimize our services, and the automated analytics helps us provide that report.
I would rate Radware Cloud WAF Service's ability to block unknown threats and attacks as very good, as it allows us to block unknown threats and attacks thanks to its knowledge base.
I consider the combination of negative and positive security models based on behavior important for my organization's security strategy, since attackers are constantly evolving and modifying IOCs, which challenges us to use this kind of behavioral analysis for more efficient detection.
I consider that Bot Manager would help in my compliance efforts, since the reports we are requested are quarterly, mainly for regulatory compliance that we have.
Regarding Radware Cloud WAF Service's artificial intelligence capabilities, I think its governance and security level seem appropriate.
The accuracy and reliability of the results offered by the platform's artificial intelligence convince me, since the AI helps us automate some processes and searches.
What needs improvement?
I think Radware Cloud WAF Service could be improved by expanding the customized reporting options.
That is the only aspect that keeps me from giving it a higher rating.
For how long have I used the solution?
I have been using Radware Cloud WAF Service for around four years.
What do I think about the stability of the solution?
I consider that Radware Cloud WAF Service is stable.
What do I think about the scalability of the solution?
I rate the scalability of Radware Cloud WAF Service with a 10.
How are customer service and support?
My opinion of Radware Cloud WAF Service's customer support is a 10. The support is very good.
How was the initial setup?
It has been easy for me to integrate the CDN services with Radware Cloud WAF Service, and we did not encounter any challenges during the integration thanks to the documentation it has.
I would rate the integration of Radware Cloud WAF Service with other systems and applications in my environment as easy due to the amount of documentation and support they have.
What was our ROI?
I have seen a clear return on investment; the main return I could mention is the time it has allowed us to save so we can allocate it to other projects.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing, implementation costs, and licensing has been positive.
Which other solutions did I evaluate?
Before choosing Radware Cloud WAF Service, I considered and evaluated it against Cloudflare.
What other advice do I have?
Radware Cloud WAF Service is deployed in my organization in the public cloud.
We use the provider's SaaS service to deploy Radware Cloud WAF Service.
We are currently not using the hardware Bot Manager.
My advice to others who are considering using Radware Cloud WAF Service is to opt for this option, since it has provided us with very positive results.
Abhishek Gurav
Cloud security has strengthened web protections and now blocks most malicious traffic automatically
Reviewed on Oct 15, 2026
Review from a verified AWS customer
What is our primary use case?
Radware Cloud WAF Service protects my internet-facing web applications and APIs from cyber threats such as SQL injection, cross-site scripting, bot attacks, DDoS attacks, and other OWASP vulnerabilities. I use it to continuously monitor and filter malicious traffic, ensure application availability, security, and compliance while reducing the risk of data breaches and service disruptions.
Radware Cloud WAF Service secures my customer-facing web application. For example, I use Radware Cloud WAF Service to secure public-facing applications by blocking SQL injection and XSS attacks and protecting the login API from bot-driven abuse and malicious traffic.
The challenge Radware Cloud WAF Service addresses is its unique ability to mitigate automated bot attacks and malicious scanning while maintaining a seamless user experience. It reduced operational overhead, improved visibility into web threats, and helped ensure uninterrupted access to critical applications and APIs.
How has it helped my organization?
Radware Cloud WAF Service has had a significant positive impact on my organization's web application security posture. Since implementation, I have seen a noticeable reduction in malicious traffic reaching my application servers due to the ability to automatically detect and block threats such as SQL injection, XSS, bot attacks, and vulnerability exploitation attempts. One of the key improvements has been the increase in visibility into web-based threats through centralized monitoring and detailed reporting. This has enabled faster investigation and response to security incidents while reducing the time spent on manual log analysis. Overall, Radware Cloud WAF Service has improved application availability, strengthened my security posture, reduced risk, and provided greater confidence that my critical web applications and APIs remain protected against evolving cyber threats.
While I do not publicly track exact figures, I have observed an estimated 70 to 80% reduction in malicious web requests reaching my application after implementing Radware Cloud WAF Service. The platform's automated detection and blocking capabilities significantly reduced the number of web attacks remaining for manual investigation. I saw that estimated 70 to 80% reduction and a 40 to 50% reduction in investigation time for web-related security incidents. The automated threat mitigation and improved visibility were the biggest contributors to these improvements.
What is most valuable?
The standout features of Radware Cloud WAF Service are automated attack prevention, bot protection, DDoS mitigation, behavioral analytics, and easy cloud-based deployment. These capabilities help strengthen application security while minimizing manual effort and maintaining application performance.
Real-time threat detection and automated protection are the features I rely on most in my day-to-day operations. They proactively block web attacks with minimal manual effort, provide clear visibility into malicious activity, and help ensure applications remain secure and available.
One additional aspect worth highlighting about Radware Cloud WAF Service is the usability and integration capabilities of the platform. The user interface is intuitive and provides a centralized view of attacks, blocked requests, traffic trends, and security events, making day-to-day monitoring straightforward. I also benefit from the integration with SIEM and security monitoring tools, which helps correlate WAF events and other security logs for faster incident investigation and response.
The capabilities of Radware Cloud WAF Service help improve threat detection and reduce false positives by identifying unusual traffic patterns and emerging attacks. From a governance and security perspective, it provides good visibility and control, allowing security teams to review and validate AI-driven decisions. Overall, the AI features enhance security operations while maintaining transparency and oversight.
Radware Cloud WAF Service is generally accurate and reliable in identifying malicious traffic, bot activity, and behavior patterns. In my experience, AI helps reduce false positives and improve detection compared to traditional rule-based approaches alone. While occasional tuning may be required for a specific application, the overall accuracy and consistency of the AI-driven insights have been effective for day-to-day security operations.
Radware Cloud WAF Service is highly effective in blocking unknown threats because it uses behavioral analysis, user learning, and anomaly detection rather than relying solely on predefined signatures. This allows me to identify and mitigate suspicious activity even when the attack pattern has not been seen before. For example, I observed automated traffic targeting a login API from multiple IP addresses using an unusual request pattern. Although the traffic did not match a known signature attack, Radware Cloud WAF Service identified the abnormal behavior, flagged it as suspicious, and automatically applied mitigation controls. This helped prevent potential credential stuffing and bot attacks without impacting legitimate users. Overall, its ability to detect and respond to previously unknown threats has improved my confidence in protecting web applications and APIs against evolving attack techniques.
The automated analytics of Radware Cloud WAF Service are one of the strongest aspects of the solution. They provide clear visibility into attack threats, malicious traffic, and security events in real-time, making it easier to identify threats and prioritize investigation. The dashboards and automated insights help reduce manual analysis effort and enable faster incident response.
I use the API discovery feature, which helps identify and inventory my APIs.
What needs improvement?
For Radware Cloud WAF Service improvements, I suggest more customizable reporting, simpler policy tuning for complex environments, improved dashboard navigation, and broader native integrations with other third-party security tools. However, the platform is reliable and effective for web application protection.
For how long have I used the solution?
I have been using Radware Cloud WAF Service for around two and a half years.
What other advice do I have?
I would rate Radware Cloud WAF Service overall as a nine out of ten. I give it a nine because it delivers strong protection against web application attacks, provides effective bot mitigation, and overall things are handled well. If these enhancements were available, especially more customizable analytics and broader native integrations, it would likely be a ten out of ten solution for my organization. Overall, Radware Cloud WAF Service is a reliable and mature WAF platform that effectively addresses web application security requirements.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Anonymous
Comprehensive protection and high visibility, although the start requires adjustments
Reviewed on Oct 15, 2026
Review provided by G2
What do you like best about the product?
I like that Radware Cloud WAF brings together web application and API protection in a single console, including WAF, bot protection, and web DDoS. The management is simple, and I can see attack attempts, threats, and blocking actions from one platform. It also helps me understand risks and track incidents, and I can explain to clients how to reduce their exposure to common threats.
What do you dislike about the product?
The initial setup requires technical knowledge and time to review traffic behavior and adjust rules to reduce false positives in certain applications. Guided steps or a common deployment flow and guides during onboarding would help make the implementation faster and easier.
What problems is the product solving and how is that benefiting you?
I use Radware Cloud WAF to protect web applications and APIs exposed to the internet against attacks, malicious bots, and application DDoS. We centralize WAF, APIs, bots, and web DDoS on one platform, with visibility into attacks and suspicious traffic to explain how to reduce exposure to threats like SQL injection.
devops2188878
Consistent web protection has secured our applications and blocked malicious attacks
Reviewed on Oct 14, 2026
Review provided by PeerSpot
What is our primary use case?
My main use case for Radware Cloud WAF Service is that I rely on it for protection for at least two years, and before that, for five years.
How has it helped my organization?
Radware Cloud WAF Service has positively impacted my organization, and I consider that its best feature for us.
Specific outcomes that show how Radware Cloud WAF Service positively impacted my organization include the threat detection and API protection.
What is most valuable?
The best features that Radware Cloud WAF Service offers include my involvement in multiple projects; one was four years ago, and one was two years ago, where we successfully implemented Radware Cloud WAF Service for both projects.
The features of Radware Cloud WAF Service that stood out to me the most were suggested by our cyber security division at the start of the project, and we successfully implemented those features.
I would add that we had some security issues in one project where we found our site had been hacked, and some malicious files were injected into our server.
What needs improvement?
Regarding improvements for Radware Cloud WAF Service, overall, we do not have any issues after implementation. I believe it effectively blocks many malicious calls.
For how long have I used the solution?
I was involved in two projects using Radware Cloud WAF Service. Approximately five years ago, we had a project that was public-facing, so I was helping to implement Radware Cloud WAF Service as a WAF and DDoS protection solution, and two years ago, I was working on another project.
I have used Radware Cloud WAF Service in several projects for a number of years, specifically five years ago.
How was the initial setup?
In terms of deployment, we do not have any issues because our cyber security division hosted the service and quickly deployed it for us.
What other advice do I have?
I have played multiple roles while using Radware Cloud WAF Service, sometimes as a developer, sometimes as a designer, and also involved in application architecture. On a scale of one to ten, I rate Radware Cloud WAF Service a ten because I believe it is a perfect tool. Our organization engages with Radware Cloud WAF Service closely while deploying other public-facing applications using Radware Cloud WAF Service.
Hugo Luis I.
Solid and easy-to-implement protection, with room for integration improvements
Reviewed on Oct 13, 2026
Review provided by G2
What do you like best about the product?
I like Radware Cloud WAF's ability to protect web applications and APIs against sophisticated attacks. It allows us to strengthen security without affecting user service. The initial setup was very easy and I believe it meets all necessary aspects.
What do you dislike about the product?
I believe Radware Cloud WAF meets all necessary aspects, although I would like to have greater visibility of threats, more detailed and simplified, and easier integration with SIEM and SOAR.
What problems is the product solving and how is that benefiting you?
I use Radware Cloud WAF to protect my applications from attacks and service outages.