Listing Thumbnail

    Radware Cloud WAF

     Info
    Sold by: Radware 
    Deployed on AWS
    Radware Cloud WAF is a fully managed Cloud Application Protection Service providing the industry's most comprehensive web application security solution. It integrates Radware's cloud-delivered WAF technology, API protection, Bot management, application layer DDoS protection, client-side protection, analytics, threat detection and security feeds in a single portal.
    4.6

    Overview

    Radware Cloud WAF is a fully managed Cloud Application Protection Service providing the industry's most comprehensive web application security solution. The service integrates Radware's Cloud WAF, API Protection, Bot management, client-side and application layer DDoS protection in a single portal that provides security analytics, threat detection and real-time security feeds to protect applications against hacking, malicious bots, API exposure, Web DDoS attacks, supply chain attacks and other vulnerabilities. Radware's combination of negative and positive security models provides a complete level of protection against OWASP Top 10 threats and zero-day attacks. API Discovery and Protection - End-to-end API solution from Discovery to protection at a click of a button. Radware auto API discovery maps all of your applications documented and undocumented third-party APIs, automatically generates Open API schema files, generates tailored security policies to detect and block API-focused attacks in real time and enforce protection across all your APIs. Radware's advanced API protection eliminates your documenting and protecting APIs overheads and keeps your organization protected across the board. Bot Management - Integrated Bot Manager provides comprehensive mitigation options, such as Blockchain-based Crypto challenges to counter attacks. It ensures precise bot management for web, mobile, and API traffic by employing behavioral modeling, collective bot intelligence, and fingerprinting. This defense guards against all OWASP 21 automated threats, including account takeover, credential stuffing, DDoS, fraud, and web scraping, fortifying online operations. Web DDoS Protection - Industry leading application-layer L7 protection against DDoS attacks, based on Radware's unique machine-learning-based behavioral detection that distinguishes between legitimate and malicious traffic, and automatically generates granular signatures in real-time to protect against zero-day attacks. Best-in-class security against a wide variety of threats, including HTTP Floods, HTTP bombs, low-and-slow assaults, Brute Force attacks, and disruptive web DDoS Tsunamis. Client-side Protection - Easily block requests to suspicious third-party services in your supply chain and adhere to data security compliance standards. Protect against client-side attacks coming from third party JS services - Formjacking, Skimming,Magecart, automatically and continuously discover all third-party services in your supply chain with detailed activity tracking, as well as get alerts & threat level assessment according to multiple indicators, including script source and destination domain. Pricing We have 3 different pricing packages - Standard, Advanced and Complete. The Standard and Advanced packages come with some of the features while Complete provides full coverage.

    Highlights

    • Fully Managed Web Application Protection Service - 24x7 Fully managed security service by Radware's expert Emergency Response Team(ERT). Protect Against OWASP Vulnerabilities - Stay protected against 150+ known attack vectors, including the OWASP Top 10 Web Application Security Risks, Top 10 API Security Vulnerabilities, Top 21 Automated Threats To Web Applications, and Top 10 Client-side vulnerabilities
    • Detect, Manage and Mitigate Bots - Detect and distinguish between good and bad bots to protect websites, mobile apps and APIs. Easily optimize and customize your bot management policies to provide a better user experience and drive more ROI from your application traffic. End-to-end API Protection - From discovery to enforcement at a click of a button, Radware combines behavioral analysis and policy automation to protect from increasingly sophisticated API assaults.
    • Mitigate Application-Level DDoS Assaults - Radware's DDoS protection technologies provide the shortest time to detection and mitigation of most advanced and high volume HTTP-based DDoS assaults by utilizing patented behavioral analysis, machine learning-based engines. Protect Client-Side From Supply Chain Attacks - This solution offers advanced client side protection that ensures the protection of end users data when interacting with any third-party services in the application supply chain.

    Details

    Sold by

    Delivery method

    Deployed on AWS
    New

    Introducing multi-product solutions

    You can now purchase comprehensive solutions tailored to use cases and industries.

    Multi-product solutions

    Features and programs

    Buyer guide

    Gain valuable insights from real users who purchased this product, powered by PeerSpot.
    Buyer guide

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    Radware Cloud WAF

     Info
    Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
    Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator  to estimate your infrastructure costs.

    Usage costs (24)

     Info
    Dimension
    Description
    Cost/Mbps
    Cloud Application Protection Standard,10 Mbps,1 Application - Monthly
    Cloud Application Protection Standard,10 Mbps,1 Application - Monthly
    $638.00
    Cloud Application Protection Standard,50 Mbps,1 Application - Monthly
    Cloud Application Protection Standard,50 Mbps,1 Application - Monthly
    $1,940.00
    Cloud Application Protection Standard,100 Mbps,1 Application - Monthly
    Cloud Application Protection Standard,100 Mbps,1 Application - Monthly
    $3,069.00
    Advanced_10
    Cloud Application Protection Advanced,10 Mbps,1 Application - Monthly
    $1,276.00
    Advanced_Addon
    Cloud Application Protection Advanced,1 Application Add-On - Monthly
    $127.00
    Complete_10
    Cloud Application Protection Complete,10 Mbps,1 Application - Montly
    $2,233.00
    Complete_Addon
    Cloud Application Protection Complete,1 Application Add-On - Monthly
    $193.00
    CDN_Add_on
    Cloud Application Protection CDN Service Enablement - Monthly
    $287.00
    CDDOS_OnDemand
    On-Demand Cloud DDoS Protection Service - Legitimate 10Mbps - Monthly
    $2,750.00
    CDDOS_AlwaysOn
    Always-On Cloud DDoS Protection Service - Legitimate 10Mbps - Monthly
    $4,950.00

    AI Insights

     Info

    Dimensions summary

    Pricing is usage-based and measured in Mbps of legitimate bandwidth. You start with a base Cloud Application Protection plan in three levels: Standard, Advanced, and Complete. Standard sizes by throughput (10, 50, or 100 Mbps) for one application. Advanced and Complete cover 10 Mbps for one application, with per-application add-ons to expand coverage. On top of any base plan, you can layer independent add-ons billed separately. These include CDN enablement, Cloud DDoS Protection (on-demand or always-on), Web DDoS, Firewall as a Service, Network Analytics, AI SOC Xpert, Access Logs, LLM Firewall, PCI DSS compliance, ERT Premium support, extra protected networks, and the SecurePath connector.

    Top-of-mind questions for buyers

    Pricing meters legitimate traffic bandwidth, measured in Mbps, not attack or blocked traffic. Your base plan is sized to a bandwidth tier, and many add-ons are also priced against legitimate bandwidth blocks, such as 10Mbps or 200Mbps units. Attack traffic that the service filters out does not count toward your metered bandwidth.
    You pick one base Cloud Application Protection plan, then layer optional add-ons that each bill separately. Charges add together, so your total is the base plan plus every add-on you select. Per-application add-ons extend coverage one application at a time. Bandwidth-based add-ons bill in fixed blocks, like 10Mbps or 200Mbps.
    Both meter legitimate bandwidth in 10Mbps units. On-Demand DDoS Protection engages only when mitigation is triggered, suited to occasional attack response. Always-On keeps protection active continuously, suited to constant exposure. You choose one model per subscription, and each is billed monthly against your legitimate bandwidth.
    www.radware.com
    Helpful?

    Vendor refund policy

    No refund offered

    How can we make this page better?

    Tell us how we can improve this page, or report an issue with this product.
    Tell us how we can improve this page, or report an issue with this product.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    Software as a Service (SaaS)

    SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.

    Resources

    Vendor resources

    Support

    Vendor support

    Online Support Service Portal -Appropriate for non-critical issues, such as general inquiries, requests for technical documentation/ information, schedule support during an upcoming maintenance window, view installed base and manage support cases.24x7, where Internet service is available

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Similar products

    Customer reviews

    Ratings and reviews

     Info
    4.6
    218 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    77%
    22%
    1%
    0%
    0%
    16 AWS reviews
    |
    202 external reviews
    External reviews are from G2  and PeerSpot .
    Abhishek Gurav

    Cloud security has strengthened web protections and now blocks most malicious traffic automatically

    Reviewed on Oct 15, 2026
    Review from a verified AWS customer

    What is our primary use case?

    Radware Cloud WAF Service protects my internet-facing web applications and APIs from cyber threats such as SQL injection, cross-site scripting, bot attacks, DDoS attacks, and other OWASP vulnerabilities. I use it to continuously monitor and filter malicious traffic, ensure application availability, security, and compliance while reducing the risk of data breaches and service disruptions.

    Radware Cloud WAF Service secures my customer-facing web application. For example, I use Radware Cloud WAF Service to secure public-facing applications by blocking SQL injection and XSS attacks and protecting the login API from bot-driven abuse and malicious traffic.

    The challenge Radware Cloud WAF Service addresses is its unique ability to mitigate automated bot attacks and malicious scanning while maintaining a seamless user experience. It reduced operational overhead, improved visibility into web threats, and helped ensure uninterrupted access to critical applications and APIs.

    How has it helped my organization?

    Radware Cloud WAF Service has had a significant positive impact on my organization's web application security posture. Since implementation, I have seen a noticeable reduction in malicious traffic reaching my application servers due to the ability to automatically detect and block threats such as SQL injection, XSS, bot attacks, and vulnerability exploitation attempts. One of the key improvements has been the increase in visibility into web-based threats through centralized monitoring and detailed reporting. This has enabled faster investigation and response to security incidents while reducing the time spent on manual log analysis. Overall, Radware Cloud WAF Service has improved application availability, strengthened my security posture, reduced risk, and provided greater confidence that my critical web applications and APIs remain protected against evolving cyber threats.

    While I do not publicly track exact figures, I have observed an estimated 70 to 80% reduction in malicious web requests reaching my application after implementing Radware Cloud WAF Service. The platform's automated detection and blocking capabilities significantly reduced the number of web attacks remaining for manual investigation. I saw that estimated 70 to 80% reduction and a 40 to 50% reduction in investigation time for web-related security incidents. The automated threat mitigation and improved visibility were the biggest contributors to these improvements.

    What is most valuable?

    The standout features of Radware Cloud WAF Service are automated attack prevention, bot protection, DDoS mitigation, behavioral analytics, and easy cloud-based deployment. These capabilities help strengthen application security while minimizing manual effort and maintaining application performance.

    Real-time threat detection and automated protection are the features I rely on most in my day-to-day operations. They proactively block web attacks with minimal manual effort, provide clear visibility into malicious activity, and help ensure applications remain secure and available.

    One additional aspect worth highlighting about Radware Cloud WAF Service is the usability and integration capabilities of the platform. The user interface is intuitive and provides a centralized view of attacks, blocked requests, traffic trends, and security events, making day-to-day monitoring straightforward. I also benefit from the integration with SIEM and security monitoring tools, which helps correlate WAF events and other security logs for faster incident investigation and response.

    The capabilities of Radware Cloud WAF Service help improve threat detection and reduce false positives by identifying unusual traffic patterns and emerging attacks. From a governance and security perspective, it provides good visibility and control, allowing security teams to review and validate AI-driven decisions. Overall, the AI features enhance security operations while maintaining transparency and oversight.

    Radware Cloud WAF Service is generally accurate and reliable in identifying malicious traffic, bot activity, and behavior patterns. In my experience, AI helps reduce false positives and improve detection compared to traditional rule-based approaches alone. While occasional tuning may be required for a specific application, the overall accuracy and consistency of the AI-driven insights have been effective for day-to-day security operations.

    Radware Cloud WAF Service is highly effective in blocking unknown threats because it uses behavioral analysis, user learning, and anomaly detection rather than relying solely on predefined signatures. This allows me to identify and mitigate suspicious activity even when the attack pattern has not been seen before. For example, I observed automated traffic targeting a login API from multiple IP addresses using an unusual request pattern. Although the traffic did not match a known signature attack, Radware Cloud WAF Service identified the abnormal behavior, flagged it as suspicious, and automatically applied mitigation controls. This helped prevent potential credential stuffing and bot attacks without impacting legitimate users. Overall, its ability to detect and respond to previously unknown threats has improved my confidence in protecting web applications and APIs against evolving attack techniques.

    The automated analytics of Radware Cloud WAF Service are one of the strongest aspects of the solution. They provide clear visibility into attack threats, malicious traffic, and security events in real-time, making it easier to identify threats and prioritize investigation. The dashboards and automated insights help reduce manual analysis effort and enable faster incident response.

    I use the API discovery feature, which helps identify and inventory my APIs.

    What needs improvement?

    For Radware Cloud WAF Service improvements, I suggest more customizable reporting, simpler policy tuning for complex environments, improved dashboard navigation, and broader native integrations with other third-party security tools. However, the platform is reliable and effective for web application protection.

    For how long have I used the solution?

    I have been using Radware Cloud WAF Service for around two and a half years.

    What other advice do I have?

    I would rate Radware Cloud WAF Service overall as a nine out of ten. I give it a nine because it delivers strong protection against web application attacks, provides effective bot mitigation, and overall things are handled well. If these enhancements were available, especially more customizable analytics and broader native integrations, it would likely be a ten out of ten solution for my organization. Overall, Radware Cloud WAF Service is a reliable and mature WAF platform that effectively addresses web application security requirements.

    Which deployment model are you using for this solution?

    Public Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Amazon Web Services (AWS)
    Anonymous

    Comprehensive protection and high visibility, although the start requires adjustments

    Reviewed on Oct 15, 2026
    Review provided by G2
    What do you like best about the product?
    I like that Radware Cloud WAF brings together web application and API protection in a single console, including WAF, bot protection, and web DDoS. The management is simple, and I can see attack attempts, threats, and blocking actions from one platform. It also helps me understand risks and track incidents, and I can explain to clients how to reduce their exposure to common threats.
    What do you dislike about the product?
    The initial setup requires technical knowledge and time to review traffic behavior and adjust rules to reduce false positives in certain applications. Guided steps or a common deployment flow and guides during onboarding would help make the implementation faster and easier.
    What problems is the product solving and how is that benefiting you?
    I use Radware Cloud WAF to protect web applications and APIs exposed to the internet against attacks, malicious bots, and application DDoS. We centralize WAF, APIs, bots, and web DDoS on one platform, with visibility into attacks and suspicious traffic to explain how to reduce exposure to threats like SQL injection.
    devops2188878

    Consistent web protection has secured our applications and blocked malicious attacks

    Reviewed on Oct 14, 2026
    Review provided by PeerSpot

    What is our primary use case?

    My main use case for Radware Cloud WAF Service is that I rely on it for protection for at least two years, and before that, for five years.

    How has it helped my organization?

    Radware Cloud WAF Service has positively impacted my organization, and I consider that its best feature for us.

    Specific outcomes that show how Radware Cloud WAF Service positively impacted my organization include the threat detection and API protection.

    What is most valuable?

    The best features that Radware Cloud WAF Service offers include my involvement in multiple projects; one was four years ago, and one was two years ago, where we successfully implemented Radware Cloud WAF Service for both projects.

    The features of Radware Cloud WAF Service that stood out to me the most were suggested by our cyber security division at the start of the project, and we successfully implemented those features.

    I would add that we had some security issues in one project where we found our site had been hacked, and some malicious files were injected into our server.

    What needs improvement?

    Regarding improvements for Radware Cloud WAF Service, overall, we do not have any issues after implementation. I believe it effectively blocks many malicious calls.

    For how long have I used the solution?

    I was involved in two projects using Radware Cloud WAF Service. Approximately five years ago, we had a project that was public-facing, so I was helping to implement Radware Cloud WAF Service as a WAF and DDoS protection solution, and two years ago, I was working on another project.

    I have used Radware Cloud WAF Service in several projects for a number of years, specifically five years ago.

    How was the initial setup?

    In terms of deployment, we do not have any issues because our cyber security division hosted the service and quickly deployed it for us.

    What other advice do I have?

    I have played multiple roles while using Radware Cloud WAF Service, sometimes as a developer, sometimes as a designer, and also involved in application architecture. On a scale of one to ten, I rate Radware Cloud WAF Service a ten because I believe it is a perfect tool. Our organization engages with Radware Cloud WAF Service closely while deploying other public-facing applications using Radware Cloud WAF Service.

    Rohit K.

    Reliable Web Application Protection with Advanced Threat Mitigation

    Reviewed on Oct 13, 2026
    Review provided by G2
    What do you like best about the product?
    Radware Cloud WAF provides robust web application protection with advanced threat detection, DDoS mitigation, bot management, and easy cloud-based scalability, helping organizations secure critical applications with minimal operational effort.
    What do you dislike about the product?
    Radware Cloud WAF is a robust security solution; however, improvements in reporting granularity, ease of policy customization, and simplification of security event analysis would further enhance the overall user experience and operational efficiency.
    What problems is the product solving and how is that benefiting you?
    Radware Cloud WAF helps protect our web applications and APIs from cyber threats, DDoS attacks, bots, and OWASP Top 10 vulnerabilities. This improves application availability, strengthens security, reduces operational overhead, and supports regulatory compliance.
    Gabriele V.

    Easy implementation and impeccable 24/7 technical support

    Reviewed on Oct 08, 2026
    Review provided by G2
    What do you like best about the product?
    The ease of implementation and the 24/7 technical support it offers.
    What do you dislike about the product?
    The installation of certificates is rather cumbersome; I would prefer to be able to upload them directly via a certificate upload.
    What problems is the product solving and how is that benefiting you?
    We enhance the security of our clients' systems by addressing issues related to potential attacks against web apps or exposed applications. Among the modules I prefer are Web DDoS Protection and RFC Violation Protection, as they allow me to manage these situations more effectively.
    View all reviews