Sold by: Radware
Deployed on AWS
Radware Cloud WAF is a fully managed Cloud Application Protection Service providing the industry's most comprehensive web application security solution. It integrates Radware's cloud-delivered WAF technology, API protection, Bot management, application layer DDoS protection, client-side protection, analytics, threat detection and security feeds in a single portal.
4.6
Overview
Radware Cloud WAF is a fully managed Cloud Application Protection Service providing the industry's most comprehensive web application security solution. The service integrates Radware's Cloud WAF, API Protection, Bot management, client-side and application layer DDoS protection in a single portal that provides security analytics, threat detection and real-time security feeds to protect applications against hacking, malicious bots, API exposure, Web DDoS attacks, supply chain attacks and other vulnerabilities. Radware's combination of negative and positive security models provides a complete level of protection against OWASP Top 10 threats and zero-day attacks. API Discovery and Protection - End-to-end API solution from Discovery to protection at a click of a button. Radware auto API discovery maps all of your applications documented and undocumented third-party APIs, automatically generates Open API schema files, generates tailored security policies to detect and block API-focused attacks in real time and enforce protection across all your APIs. Radware's advanced API protection eliminates your documenting and protecting APIs overheads and keeps your organization protected across the board. Bot Management - Integrated Bot Manager provides comprehensive mitigation options, such as Blockchain-based Crypto challenges to counter attacks. It ensures precise bot management for web, mobile, and API traffic by employing behavioral modeling, collective bot intelligence, and fingerprinting. This defense guards against all OWASP 21 automated threats, including account takeover, credential stuffing, DDoS, fraud, and web scraping, fortifying online operations. Web DDoS Protection - Industry leading application-layer L7 protection against DDoS attacks, based on Radware's unique machine-learning-based behavioral detection that distinguishes between legitimate and malicious traffic, and automatically generates granular signatures in real-time to protect against zero-day attacks. Best-in-class security against a wide variety of threats, including HTTP Floods, HTTP bombs, low-and-slow assaults, Brute Force attacks, and disruptive web DDoS Tsunamis. Client-side Protection - Easily block requests to suspicious third-party services in your supply chain and adhere to data security compliance standards. Protect against client-side attacks coming from third party JS services - Formjacking, Skimming,Magecart, automatically and continuously discover all third-party services in your supply chain with detailed activity tracking, as well as get alerts & threat level assessment according to multiple indicators, including script source and destination domain. Pricing We have 3 different pricing packages - Standard, Advanced and Complete. The Standard and Advanced packages come with some of the features while Complete provides full coverage.
Highlights
- Fully Managed Web Application Protection Service - 24x7 Fully managed security service by Radware's expert Emergency Response Team(ERT). Protect Against OWASP Vulnerabilities - Stay protected against 150+ known attack vectors, including the OWASP Top 10 Web Application Security Risks, Top 10 API Security Vulnerabilities, Top 21 Automated Threats To Web Applications, and Top 10 Client-side vulnerabilities
- Detect, Manage and Mitigate Bots - Detect and distinguish between good and bad bots to protect websites, mobile apps and APIs. Easily optimize and customize your bot management policies to provide a better user experience and drive more ROI from your application traffic. End-to-end API Protection - From discovery to enforcement at a click of a button, Radware combines behavioral analysis and policy automation to protect from increasingly sophisticated API assaults.
- Mitigate Application-Level DDoS Assaults - Radware's DDoS protection technologies provide the shortest time to detection and mitigation of most advanced and high volume HTTP-based DDoS assaults by utilizing patented behavioral analysis, machine learning-based engines. Protect Client-Side From Supply Chain Attacks - This solution offers advanced client side protection that ensures the protection of end users data when interacting with any third-party services in the application supply chain.
Details
Sold by
Categories
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/Mbps |
|---|---|---|
Cloud Application Protection Standard,10 Mbps,1 Application - Monthly | Cloud Application Protection Standard,10 Mbps,1 Application - Monthly | $638.00 |
Cloud Application Protection Standard,50 Mbps,1 Application - Monthly | Cloud Application Protection Standard,50 Mbps,1 Application - Monthly | $1,940.00 |
Cloud Application Protection Standard,100 Mbps,1 Application - Monthly | Cloud Application Protection Standard,100 Mbps,1 Application - Monthly | $3,069.00 |
Advanced_10 | Cloud Application Protection Advanced,10 Mbps,1 Application - Monthly | $1,276.00 |
Advanced_Addon | Cloud Application Protection Advanced,1 Application Add-On - Monthly | $127.00 |
Complete_10 | Cloud Application Protection Complete,10 Mbps,1 Application - Montly | $2,233.00 |
Complete_Addon | Cloud Application Protection Complete,1 Application Add-On - Monthly | $193.00 |
CDN_Add_on | Cloud Application Protection CDN Service Enablement - Monthly | $287.00 |
CDDOS_OnDemand | On-Demand Cloud DDoS Protection Service - Legitimate 10Mbps - Monthly | $2,750.00 |
CDDOS_AlwaysOn | Always-On Cloud DDoS Protection Service - Legitimate 10Mbps - Monthly | $4,950.00 |
Dimensions summary
Pricing is usage-based and measured in Mbps of legitimate bandwidth. You start with a base Cloud Application Protection plan in three levels: Standard, Advanced, and Complete. Standard sizes by throughput (10, 50, or 100 Mbps) for one application. Advanced and Complete cover 10 Mbps for one application, with per-application add-ons to expand coverage. On top of any base plan, you can layer independent add-ons billed separately. These include CDN enablement, Cloud DDoS Protection (on-demand or always-on), Web DDoS, Firewall as a Service, Network Analytics, AI SOC Xpert, Access Logs, LLM Firewall, PCI DSS compliance, ERT Premium support, extra protected networks, and the SecurePath connector.
Top-of-mind questions for buyers
Pricing meters legitimate traffic bandwidth, measured in Mbps, not attack or blocked traffic. Your base plan is sized to a bandwidth tier, and many add-ons are also priced against legitimate bandwidth blocks, such as 10Mbps or 200Mbps units. Attack traffic that the service filters out does not count toward your metered bandwidth.
You pick one base Cloud Application Protection plan, then layer optional add-ons that each bill separately. Charges add together, so your total is the base plan plus every add-on you select. Per-application add-ons extend coverage one application at a time. Bandwidth-based add-ons bill in fixed blocks, like 10Mbps or 200Mbps.
Both meter legitimate bandwidth in 10Mbps units. On-Demand DDoS Protection engages only when mitigation is triggered, suited to occasional attack response. Always-On keeps protection active continuously, suited to constant exposure. You choose one model per subscription, and each is billed monthly against your legitimate bandwidth.
www.radware.com
Helpful?
Vendor refund policy
No refund offered
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Online Support Service Portal -Appropriate for non-critical issues, such as general inquiries, requests for technical documentation/ information, schedule support during an upcoming maintenance window, view installed base and manage support cases.24x7, where Internet service is available
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Alteon VA supports the complex functionality requirements of Enterprise applications which go beyond basic availability and quality of experience features. These include:Layer 7 RewriteApplication Level Traffic SteeringCachingSSL OffloadingWAF (AppWall)
Alteon VA supports the complex functionality requirements of Enterprise applications which go beyond basic availability and quality of experience features. These include: Layer 7 Rewrite, Application Level Traffic Steering, Caching, SSL Offload, compression, acceleration. WAF (AppWall), SecureUR L
Radware Bot Manager offers robust defense for web apps, mobile apps, and APIs against automated threats through layered defenses. It guards against various risks like account takeover, DDoS, web scraping, etc. The solution provides multiple mitigation choices, including the innovative Crypto Challenge, granting genuine users CAPTCHA-free access while thwarting bot assaults. It also secures native iOS/Android apps, ensuring swift protection against identity spoofing, tampering, and replay attacks, while blocking unauthorized access from emulators and modified systems.
Behavioral algorithms to detect and mitigate DDoS attacks on network and application
Customer reviews
Carlos A.
Easy to Manage and Low Effort to Implement and Maintain
Reviewed on Aug 11, 2026
Review provided by G2
What do you like best about the product?
Easy to manage, with low man-hours required to implement and maintain.
What do you dislike about the product?
There’s a lack of contact, which makes it hard to do better things with the platform.
What problems is the product solving and how is that benefiting you?
It gives visibility into what kinds of threats are trying to attack the website. It also does a better job and provides more detailed information compared with an IPS.
David R.
Radware CWAF, total protection and visualization of our APIs.
Reviewed on Aug 11, 2026
Review provided by G2
What do you like best about the product?
The ease of use when creating applications and the creation of security policies. It integrates with our SIEM easily and the support we receive from Radware is excellent.
What do you dislike about the product?
I believe that what needs to be improved is the section on event visualization, as it can be a bit confusing at first; it's a matter of understanding it and adapting.
What problems is the product solving and how is that benefiting you?
It has helped us in the protection, visualization, and management of the APIs we have published, as well as the mitigation of various attacks, which benefits us by keeping our APIs protected.
Ariel D.
Easy Integration and seamless to Work in Cloud
Reviewed on Aug 11, 2026
Review provided by G2
What do you like best about the product?
So far, the best thing I've seen is the integration and how easy it is to work with.
What do you dislike about the product?
Sometimes the web version gets stuck and you have to hit F5 for it to load properly.
What problems is the product solving and how is that benefiting you?
Initially, the use of the tool in the Cloud, which has been a contribution to covering zero trust
Amogh C.
Powerful Web Security Platform with Advanced Threat Mitigation
Reviewed on Aug 11, 2026
Review provided by G2
What do you like best about the product?
Radware Cloud WAF offers an excellent balance between security, visibility, and ease of management. The platform provides comprehensive protection against OWASP Top 10 threats, DDoS attacks, and bot traffic while delivering actionable insights through an intuitive dashboard. Its flexible policy tuning helps maintain security without disrupting legitimate business traffic.
What do you dislike about the product?
While Radware Cloud WAF provides excellent protection and reliability, advanced policy tuning and troubleshooting can sometimes be complex for large enterprise environments. More intuitive reporting, enhanced visibility into application traffic, and simplified troubleshooting workflows would further improve the overall administration experience.
What problems is the product solving and how is that benefiting you?
Radware Cloud WAF helps secure our customer-facing and business-critical applications against evolving cyber threats, including OWASP Top 10 attacks, automated bots, and volumetric attacks. The solution improves application availability, enhances customer trust, and reduces operational effort through centralized cloud-based protection and monitoring.
RaynielBadiola
Advanced protection has mitigated ddos and zero-day threats while simplifying app security
Reviewed on Jul 22, 2026
Review provided by PeerSpot
What is our primary use case?
The use case involves protecting applications by redirecting them to Radware Cloud WAF Service. The implementation depends on the number of applications you want to protect.
How has it helped my organization?
There are definitely improvements to the organization.
What is most valuable?
The main feature is to mitigate DDoS attacks. Radware Cloud WAF Service also provides cloud WAF services for applications to be protected, especially web applications, particularly under the OWASP Top 10 vulnerabilities.
Cloud has a behavioral-based feature that can eliminate false positives.
Radware Cloud WAF Service has behavioral-based AI or machine learning capability that minimizes or eliminates zero-day attacks.
It is very important because it can eliminate zero-day using the behavioral-based feature of Radware Cloud WAF Service. It also has negative and positive security models. The positive security model determines those signature-based vulnerabilities and attacks. The negative and behavioral models eliminate zero-day attacks.
What needs improvement?
There is no room for improvement that I can see at this time because it is very straightforward.
I do not think it needs improvement as it already has an AI component. Radware Cloud WAF Service has agentic AI as well, which allows you to chat with them to inquire about current vulnerabilities and resolutions. The AI will eventually provide recommendations. At this time, I do not see anything to improve. They have just added these AI features.
For how long have I used the solution?
I have been using this solution for about 15 plus years.
What do I think about the stability of the solution?
In terms of stability, I rate it as nine out of 10.
What do I think about the scalability of the solution?
I rate it as eight.
How are customer service and support?
In terms of technical support, they are very responsive. The moment you open a case with them, they will respond to your case within a few minutes.
How was the initial setup?
The implementation actually depends on the requirements of the customers and how many applications there are to be protected. It will only take a couple of hours, or maybe an hour, to implement the initial setup. It is up to the customer to add applications that they want to protect.
What about the implementation team?
We assist them to do the implementation together with the Radware Cloud team.
For our team, as we are the integrator or the distributor, we only have one who is assisting the Radware team to do the implementation. Radware has only one technical or support team that does the implementation and configuration of cloud.
What was our ROI?
There is probably a little cost reduction for their cloud WAF or cloud DDoS subscription.
What other advice do I have?
It is very simple to integrate with other third-party products, such as SIEMs, and there are no problems integrating with them.
Radware Cloud WAF Service can immediately determine the cause of problems and easily mitigates the vulnerabilities and attacks that it sees.
I give Radware Cloud WAF Service a support rating of nine out of 10. My overall review rating for this solution is 9 out of 10.