Sold by: Radware
Deployed on AWS
Radware API Security Service delivers end-to-end API protection through continuous API discovery, runtime posture management, contextual testing, and AI-driven defense. It helps organizations identify exposed or misconfigured APIs, reduce risk, and protect against business logic abuse, automated threats, and DDoS attacks across modern application environments.
4.5
Overview
Radware API Security provides full lifecycle protection for modern APIs by combining continuous discovery, runtime posture management, contextual testing, and real-time attack mitigation in a unified SaaS platform.
The service automatically discovers APIs across the environment, including shadow, third-party, and deprecated endpoints, and provides visibility into API usage, configurations, and risk exposure. By analyzing live production traffic, Radware API Security Service helps identify misconfigurations, sensitive data exposure, and business logic vulnerabilities that may be missed by traditional security tools.
Radware helps protect APIs against a broad range of threats, including embedded attacks, business logic abuse, bot activity, automated abuse, and HTTP DDoS attacks. Its AI-driven behavioral analysis and automated policy generation help security teams detect and mitigate threats while adapting to changes in application workflows and reducing false positives.
Key capabilities include:
- Automated API discovery and catalog management
- Runtime posture management with real-time risk insights
- AI-driven detection and mitigation of business logic attacks
- Protection against bots, abuse, and HTTP DDoS attacks
- Contextual API testing integrated into CI/CD pipelines
- Unified visibility for security, compliance, and operations teams
By bringing together discovery, testing, posture management, and attack protection, Radware API Security Service helps organizations reduce API risk, improve operational efficiency, and support secure application innovation. The service can also help organizations align their API security programs with industry standards and frameworks such as OWASP API Top 10, PCI DSS, and NIS2.
Highlights
- Full Lifecycle API Protection: Combines continuous API discovery, runtime posture management, contextual testing, and real-time attack mitigation in one unified Cloud based API Security platform
- AI-Driven Threat Detection and Mitigation: Uses behavioral analysis and automated policy generation to help detect and mitigate business logic abuse, bot attacks, automated threats, and HTTP DDoS attacks
- Visibility, Risk Reduction, and Compliance Support Provides deep visibility into API usage, misconfigurations, sensitive data exposure, and risk posture, helping organizations align with OWASP API Top 10, PCI DSS, and NIS2.
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
API Security | API Security - Total 1M API calls/month and up to 1 Apps, Monthly fee | $7,886.00 |
API Security Plus | API Security Plus - Total 1M API calls/month and up to 1 Apps, Monthly fee | $19,612.00 |
API Testing Add-on | API Testing Add on for 1 App/Project, Monthly fee | $15,086.00 |
Dimensions summary
You buy this service through monthly contract units. Two runtime protection options, API Security and API Security Plus, each cover up to 1 million API calls per month and up to 1 application. They serve as separate protection tiers you select based on the coverage you need. The API Testing Add-on is a separate option priced per application or project. You add it on top of a runtime protection option to include pre-production API testing. Pricing scales as you add units for more API call volume, more applications, or more testing coverage.
Top-of-mind questions for buyers
An App is a single protected application. Each protection unit covers up to 1 million API calls per month and up to 1 application. API calls are the requests exchanged between software components that the service inspects and protects in production traffic.
Each unit covers up to 1 million API calls and up to 1 application. To cover more call volume or more applications, you add more units. Cost scales with the number of units you buy across each option you select.
The two options bill independently and appear together. A runtime protection option (API Security or API Security Plus) covers production traffic per application. The API Testing Add-on is priced per application or project and covers pre-production testing. You add it on top of a runtime option for full-lifecycle coverage.
www.radware.com+2
Helpful?
Vendor refund policy
No Refunds
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
Support description: Radware provides 24x7 Technical Support. Customers can access the cloud services portal to open tickets and the cloud knowledge base. for support please contact us at
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Radware Cloud WAF is a fully managed Cloud Application Protection Service providing the industry's most comprehensive web application security solution. It integrates Radware's cloud-delivered WAF technology, API protection, Bot management, application layer DDoS protection, client-side protection, analytics, threat detection and security feeds in a single portal.
Radware Agentic AI Protection is a purpose built security solution designed to protect autonomous AI agents operating across enterprise environments. It provides real time visibility, behavioral threat detection, and continuous AI security posture management to address risks such as rogue agents, prompt injection, data exfiltration, and agent misuse.
Radware Bot Manager offers robust defense for web apps, mobile apps, and APIs against automated threats through layered defenses. It guards against various risks like account takeover, DDoS, web scraping, etc. The solution provides multiple mitigation choices, including the innovative Crypto Challenge, granting genuine users CAPTCHA-free access while thwarting bot assaults. It also secures native iOS/Android apps, ensuring swift protection against identity spoofing, tampering, and replay attacks, while blocking unauthorized access from emulators and modified systems.
Alteon VA supports the complex functionality requirements of Enterprise applications which go beyond basic availability and quality of experience features. These include: Layer 7 Rewrite, Application Level Traffic Steering, Caching, SSL Offload, compression, acceleration. WAF (AppWall), SecureUR L
Customer reviews
reviewer2908497
Security has improved as I protect banking apps, block bots, and monitor attacks daily
Reviewed on Nov 10, 2026
Review provided by PeerSpot
What is our primary use case?
My main use case for Radware Cloud WAF Service is for cloud security.
I have onboarded approximately 71 applications, and Radware Cloud WAF Service is for app protections and bot and API protections. It is working flawlessly and provides me with a summary report that is very useful for viewing monthly logs, weekly logs, attack information, bot information, and signature-based, attack-based, and malicious-based information.
I use Radware Cloud WAF Service every day to monitor for any sort of spike. I have DDoS services and web DDoS services, and if there is a spike, I collect the IP information and broadcast this IP address to other environments to block it. It is extremely useful for identifying malicious IP addresses. It mostly protects my application, and I am very happy with this product.
I enable Bot Manager across all applications.
How has it helped my organization?
Since using Radware Cloud WAF Service, I have not encountered any business loss or negative impact. It protects against threats and gives me a clear image of application access. For instance, if a user tries to delete a document they are not privileged to access, Radware Cloud WAF Service denies this action based on user-defined policies, and I get detailed event logs for such incidents.
In a single dashboard, I observe information regarding attacks from various countries. I impose strict restrictions to mitigate risks, making it difficult for both novice and experienced hackers. The dashboard presents vital summary data such as attempted attacks and risk assessments, making it an invaluable tool for my security posture.
Radware Cloud WAF Service has indeed freed up my IT team for other projects. The integration with my on-premises solutions reduces manual follow-up work, as notifications of events are directly sent to appropriate component owners for action.
What is most valuable?
Radware Cloud WAF Service offers great features including Bot Manager, path access, RFC-related signatures blocking, ACL, API protection, and load balancing. I can implement a BCDR concept where if production in the data center fails, it automatically switches to the disaster recovery site.
This includes application redirections, access path protections to safeguard against SQL injections, cross-site scripting protections, and blocking malicious IP addresses in my environment.
I find that every feature has its own benefits tailored to each application, such as API protection for API applications and Bot Manager for all applications. Each feature supports the overall security needs of internet-hosted applications.
When onboarding applications, I publish a CNAME over my DNS hosting service and initially put the application in learning mode, allowing specific vendors to access it. I tighten access rules based on this testing. After completing the learning phase, I transition to blocking mode, enabling protections against SQL injections and implementing the Bot Manager and API protections as required.
Every day, my team reviews analytics from Radware Cloud WAF Service to observe anomalies and attack patterns. I compile this information to enhance my other security measures, ensuring comprehensive protection and data integrity across environments.
I have an API key and use on-premises solutions with Amazon S3 for log fetching. I aim to push captured logs from Radware Cloud WAF Service to my on-premises systems using this API integration.
Radware Cloud WAF Service has a robust set of protections against zero-day attacks. Whenever new vulnerabilities arise, I receive timely notifications and forward relevant patch requests to respective OEMs, who respond promptly.
I have discovered that my incoming bot traffic is agent-based.
Radware Bot Manager is compliant with my needs, and I do not foresee any problems with it.
What needs improvement?
Improvements to Radware Cloud WAF Service are in the works, but as a bank in the financial sector, I have specific needs that limit my use of certain features not related to my organization. The features I selected align perfectly with my application protection needs, and I appreciate that.
There is generally no false positive issue, but at times, during VAPT sessions, I must manually whitelist IP addresses in Radware Cloud WAF Service, which can lead to human error. Improving the process with an automated scheduling feature for temporary IP whitelisting would greatly assist me.
For how long have I used the solution?
I have been using Radware Cloud WAF Service for three and a half years.
What do I think about the stability of the solution?
Radware Cloud WAF Service is stable in my experience.
What do I think about the scalability of the solution?
Radware Cloud WAF Service is highly scalable and has been able to meet my growing demands, which is evident as I increase my licenses.
How are customer service and support?
Radware Cloud WAF Service's customer support operates with defined SLAs, responding promptly based on priority levels. They provide thorough guidance, escalating issues as needed and ensuring I am informed of resolutions.
I rate customer support for Radware Cloud WAF Service a perfect 10.
Which solution did I use previously and why did I switch?
I previously used F5, which was good, but Radware Cloud WAF Service surpasses it significantly in detecting and protecting against threats.
What was our ROI?
Initially, I purchased 30 licenses for Radware Cloud WAF Service, expecting to protect only my internet-facing applications. However, impressed by its performance, I have since increased my licenses to 91, reflecting my satisfaction and need for enhanced security.
What's my experience with pricing, setup cost, and licensing?
The pricing, setup cost, and licensing for Radware Cloud WAF Service are on the higher side, but I believe it is worth the investment, especially in the banking sector where data security is critical.
Which other solutions did I evaluate?
Before choosing Radware Cloud WAF Service, I evaluated two other options, IBM and Akamai, but I found that Radware met my expectations best.
What other advice do I have?
I would rate Radware Cloud WAF Service a perfect 10.
I chose 10 because I was initially looking for a product that provides the best security features, and Radware Cloud WAF Service delivers so many options, allowing me to select what is relevant for my needs. They continually update their database to address emerging threats, which is why I rate it so highly.
Radware Cloud WAF Service is deployed in my organization via a public cloud.
Which deployment model are you using for this solution?
I have taken Radware Cloud WAF Service as a tenant-based service, featuring a dedicated portal for application management, and it is deployed in a private cloud.
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Carla Vega
Automated protection has streamlined attack mitigation and now safeguards critical services
Reviewed on Nov 06, 2026
Review provided by PeerSpot
What is our primary use case?
The main use case I have for Radware Cloud WAF Service is protection against attacks, bots, and automated attacks that target our technology infrastructure.
I use this tool as the first line of defense, since it allows me to filter, monitor, and block traffic when it detects these types of automated attacks and bots.
The main use case works very well, and the technical support and alerts are early. If updates are made, they are also reported in a timely manner.
I use the CDN services offered by Radware along with Radware Cloud WAF Service, which help us to deliver the services we have much more efficiently, given their multinational deployment.
I use protection against DDoS attacks at layer 7, HTTP/L7, specifically Radware DefensePro, which is an on-premise solution, and it helps us stop denial-of-service attacks that could be carried out.
How has it helped my organization?
Radware Cloud WAF Service positively impacts my organization by mitigating these attacks, defending sensitive data, and providing us with constant business continuity.
I have a specific example of how business continuity has improved since I implemented this solution: availability has increased by 10%, which helps us with the metrics that the corporate side uses to measure us.
More than operational costs, it has helped me reduce time, since it used to be a manual process and now it is an automated process.
I have managed to save time in the process; a review that used to take us a day has turned into a maximum of two hours.
I have noticed that Radware Cloud WAF Service has helped me reduce false positives to a great extent, and this happens thanks to the behavior analysis it has and the IOCs that are already registered in its knowledge base.
Radware Cloud WAF Service has freed up time for my IT team for other projects, allowing us a 30% time saving thanks to the great number of automations it offers.
BELA's real-time detection and mitigation has positively impacted my organization's threat management by helping us achieve much faster management.
What is most valuable?
I consider the best feature that Radware Cloud WAF Service offers is protection against application layer attacks, layer seven, mainly.
That layer seven protection has benefited me significantly by reducing false positives and guaranteeing service availability for us.
I have positive impressions of the API Discovery feature, since it allows me to discover APIs. The API Discovery feature has helped me register some APIs that I didn't have, and it has also made it easier for me in my integrations with other services. It has seemed a very useful and easy-to-use functionality given its platform.
I would rate Radware Cloud WAF Service's ability to protect against zero-day attacks as very effective, since recently, given the PHP vulnerability, it helped us to mitigate that type of attack until we carried out patching and mitigation.
I use the automatic source blocking feature in Radware's cloud application protection solution, and the experience has been very good, as the functionality helps us in the detection and protection of applications.
The proactive and holistic approach based on correlation between modules has been effective in protecting my applications since, as the modules are from the same vendor, they allow us more native integration and they operate more efficiently.
My opinion of the automated analytics for event review that the platform offers is positive, as sending metrics on a monthly basis in order to optimize our services, and the automated analytics helps us provide that report.
I would rate Radware Cloud WAF Service's ability to block unknown threats and attacks as very good, as it allows us to block unknown threats and attacks thanks to its knowledge base.
I consider the combination of negative and positive security models based on behavior important for my organization's security strategy, since attackers are constantly evolving and modifying IOCs, which challenges us to use this kind of behavioral analysis for more efficient detection.
I consider that Bot Manager would help in my compliance efforts, since the reports we are requested are quarterly, mainly for regulatory compliance that we have.
Regarding Radware Cloud WAF Service's artificial intelligence capabilities, I think its governance and security level seem appropriate.
The accuracy and reliability of the results offered by the platform's artificial intelligence convince me, since the AI helps us automate some processes and searches.
What needs improvement?
I think Radware Cloud WAF Service could be improved by expanding the customized reporting options.
That is the only aspect that keeps me from giving it a higher rating.
For how long have I used the solution?
I have been using Radware Cloud WAF Service for around four years.
What do I think about the stability of the solution?
I consider that Radware Cloud WAF Service is stable.
What do I think about the scalability of the solution?
I rate the scalability of Radware Cloud WAF Service with a 10.
How are customer service and support?
My opinion of Radware Cloud WAF Service's customer support is a 10. The support is very good.
How was the initial setup?
It has been easy for me to integrate the CDN services with Radware Cloud WAF Service, and we did not encounter any challenges during the integration thanks to the documentation it has.
I would rate the integration of Radware Cloud WAF Service with other systems and applications in my environment as easy due to the amount of documentation and support they have.
What was our ROI?
I have seen a clear return on investment; the main return I could mention is the time it has allowed us to save so we can allocate it to other projects.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing, implementation costs, and licensing has been positive.
Which other solutions did I evaluate?
Before choosing Radware Cloud WAF Service, I considered and evaluated it against Cloudflare.
What other advice do I have?
Radware Cloud WAF Service is deployed in my organization in the public cloud.
We use the provider's SaaS service to deploy Radware Cloud WAF Service.
We are currently not using the hardware Bot Manager.
My advice to others who are considering using Radware Cloud WAF Service is to opt for this option, since it has provided us with very positive results.
Yogesh Dayma
Security has improved as we protect donor data, cut attacks, and gain clearer threat visibility
Reviewed on Nov 05, 2026
Review provided by PeerSpot
What is our primary use case?
My main use case for Radware Cloud WAF Service is securing our applications, as all my applications are public-facing applications, to secure them from the latest and known web threats, since web attacks are a common thing today.
One application I'm protecting with Radware Cloud WAF Service is the Donor Management System, as we deal with donor's data, and we must ensure that all the data in our servers and applications are secured, especially with DPDP being in full force in India, so WAF helps in securing that data and provides bot support for DDoS attacks.
Radware Cloud WAF Service helps us because we are dealing with children's and donor's data, and since the applications are public-facing, we must ensure the safety of both the data and the applications.
How has it helped my organization?
Radware Cloud WAF Service has positively impacted our organization, as we feel much more secure now, being able to diagnose and troubleshoot errors in the applications and understand connectivity sources.
We have noticed a reduction in successful attacks and fewer support tickets since implementing Radware Cloud WAF Service, as it has helped us block insecure TLS connections and eliminate connections that don't originate from India or our designated countries.
Radware Cloud WAF Service helps us block multiple unknown threats that we were not aware of prior to its implementation.
False positives have definitely been reduced, as we have fewer genuine connections flagged after multiple learnings from Radware Cloud WAF Service.
Currently, my team consists of only two members, so while Radware Cloud WAF Service helps us secure applications, it hasn't freed up time for other projects.
What is most valuable?
The best features that Radware Cloud WAF Service offers are DDoS attack and bot mitigations, which stand out as the most significant use cases since we have faced multiple DDoS attacks during and after implementations and also the activities from bots.
The DDoS attack mitigation and bot mitigation have worked well for us, as we implement rate limits to requests and block connections from countries like China where we don't have clients, which has helped us to identify and block these attacks.
I have used the API Discovery feature, which Radware Cloud WAF Service helped us identify multiple APIs that we were not aware of in our legacy applications.
I find API Discovery to be quite easy to use because the Radware Cloud WAF Service support team assisted us in implementing this feature, and it allows for discovery within an hour.
As of now, we haven't encountered any zero-day threats, but I assume Radware Cloud WAF Service would help us block such threats.
We are using the automated source blocking feature, and we've had a good experience blocking connections from places like China with the policies we've created.
The automated source blocking feature has effectively protected our interconnected applications by blocking connections based on identified malicious IPs.
We are using Radware Bot Manager, though I haven't managed it much as the support team enabled the features and policies.
After implementing Radware Bot Manager, we discovered multiple APIs being flagged as bots due to regular database queries, which we identified and resolved over time.
Automated analytics are good features of Radware Cloud WAF Service, enabling us to identify multiple events in a single dashboard and troubleshoot issues effectively.
The real-time BLA detection and mitigation features help us to mitigate threats effectively.
The combination of negative and behavioral-based positive security models is crucial for our security strategy, as they learn connection behaviors to block unusual activities.
What needs improvement?
For the improvement of Radware Cloud WAF Service, I don't have specific improvement points, but I am quite happy with the support team who assists us in every situation, though increasing the bandwidth for the basic price tier would be beneficial for us as an NGO with budget constraints.
Regarding the reporting feature, if there could be options to trace the origins of attacks by identifying generated IPs and locations, that would be helpful if implemented.
For how long have I used the solution?
I have been using Radware Cloud WAF Service for four years.
What do I think about the scalability of the solution?
The scalability of Radware Cloud WAF Service is quite good, although we haven't leveraged that fully yet.
How are customer service and support?
Customer support for Radware Cloud WAF Service is excellent.
Which solution did I use previously and why did I switch?
Radware Cloud WAF Service is our first solution; we are not using any previously established solutions.
How was the initial setup?
Integrating Radware Cloud WAF Service with our applications is quite easy, requiring no significant changes on our end.
What about the implementation team?
Radware Cloud WAF Service is managed directly through Radware.
What was our ROI?
API Discovery has helped us reduce overhead costs by roughly 20 to 30% by identifying data transitions.
By implementing Radware Cloud WAF Service, we are able to reduce the number of employees needed for security, providing indirect savings for the organization.
What's my experience with pricing, setup cost, and licensing?
As an NGO, Radware Cloud WAF Service offers us the best prices in comparison to market competitors, which I appreciate greatly.
Which other solutions did I evaluate?
Before choosing Radware Cloud WAF Service, we evaluated multiple products for comparison.
We evaluated Akamai WAF before choosing Radware Cloud WAF Service, which has proven to be stable in our experience.
What other advice do I have?
I give Radware Cloud WAF Service a rating of nine out of ten.
I give it a nine because the pricing poses a challenge for us.
I would advise others to consider using Radware Cloud WAF Service, as we are quite happy with the services.
Abhishek Gurav
Cloud security has strengthened web protections and now blocks most malicious traffic automatically
Reviewed on Oct 15, 2026
Review from a verified AWS customer
What is our primary use case?
Radware Cloud WAF Service protects my internet-facing web applications and APIs from cyber threats such as SQL injection, cross-site scripting, bot attacks, DDoS attacks, and other OWASP vulnerabilities. I use it to continuously monitor and filter malicious traffic, ensure application availability, security, and compliance while reducing the risk of data breaches and service disruptions.
Radware Cloud WAF Service secures my customer-facing web application. For example, I use Radware Cloud WAF Service to secure public-facing applications by blocking SQL injection and XSS attacks and protecting the login API from bot-driven abuse and malicious traffic.
The challenge Radware Cloud WAF Service addresses is its unique ability to mitigate automated bot attacks and malicious scanning while maintaining a seamless user experience. It reduced operational overhead, improved visibility into web threats, and helped ensure uninterrupted access to critical applications and APIs.
How has it helped my organization?
Radware Cloud WAF Service has had a significant positive impact on my organization's web application security posture. Since implementation, I have seen a noticeable reduction in malicious traffic reaching my application servers due to the ability to automatically detect and block threats such as SQL injection, XSS, bot attacks, and vulnerability exploitation attempts. One of the key improvements has been the increase in visibility into web-based threats through centralized monitoring and detailed reporting. This has enabled faster investigation and response to security incidents while reducing the time spent on manual log analysis. Overall, Radware Cloud WAF Service has improved application availability, strengthened my security posture, reduced risk, and provided greater confidence that my critical web applications and APIs remain protected against evolving cyber threats.
While I do not publicly track exact figures, I have observed an estimated 70 to 80% reduction in malicious web requests reaching my application after implementing Radware Cloud WAF Service. The platform's automated detection and blocking capabilities significantly reduced the number of web attacks remaining for manual investigation. I saw that estimated 70 to 80% reduction and a 40 to 50% reduction in investigation time for web-related security incidents. The automated threat mitigation and improved visibility were the biggest contributors to these improvements.
What is most valuable?
The standout features of Radware Cloud WAF Service are automated attack prevention, bot protection, DDoS mitigation, behavioral analytics, and easy cloud-based deployment. These capabilities help strengthen application security while minimizing manual effort and maintaining application performance.
Real-time threat detection and automated protection are the features I rely on most in my day-to-day operations. They proactively block web attacks with minimal manual effort, provide clear visibility into malicious activity, and help ensure applications remain secure and available.
One additional aspect worth highlighting about Radware Cloud WAF Service is the usability and integration capabilities of the platform. The user interface is intuitive and provides a centralized view of attacks, blocked requests, traffic trends, and security events, making day-to-day monitoring straightforward. I also benefit from the integration with SIEM and security monitoring tools, which helps correlate WAF events and other security logs for faster incident investigation and response.
The capabilities of Radware Cloud WAF Service help improve threat detection and reduce false positives by identifying unusual traffic patterns and emerging attacks. From a governance and security perspective, it provides good visibility and control, allowing security teams to review and validate AI-driven decisions. Overall, the AI features enhance security operations while maintaining transparency and oversight.
Radware Cloud WAF Service is generally accurate and reliable in identifying malicious traffic, bot activity, and behavior patterns. In my experience, AI helps reduce false positives and improve detection compared to traditional rule-based approaches alone. While occasional tuning may be required for a specific application, the overall accuracy and consistency of the AI-driven insights have been effective for day-to-day security operations.
Radware Cloud WAF Service is highly effective in blocking unknown threats because it uses behavioral analysis, user learning, and anomaly detection rather than relying solely on predefined signatures. This allows me to identify and mitigate suspicious activity even when the attack pattern has not been seen before. For example, I observed automated traffic targeting a login API from multiple IP addresses using an unusual request pattern. Although the traffic did not match a known signature attack, Radware Cloud WAF Service identified the abnormal behavior, flagged it as suspicious, and automatically applied mitigation controls. This helped prevent potential credential stuffing and bot attacks without impacting legitimate users. Overall, its ability to detect and respond to previously unknown threats has improved my confidence in protecting web applications and APIs against evolving attack techniques.
The automated analytics of Radware Cloud WAF Service are one of the strongest aspects of the solution. They provide clear visibility into attack threats, malicious traffic, and security events in real-time, making it easier to identify threats and prioritize investigation. The dashboards and automated insights help reduce manual analysis effort and enable faster incident response.
I use the API discovery feature, which helps identify and inventory my APIs.
What needs improvement?
For Radware Cloud WAF Service improvements, I suggest more customizable reporting, simpler policy tuning for complex environments, improved dashboard navigation, and broader native integrations with other third-party security tools. However, the platform is reliable and effective for web application protection.
For how long have I used the solution?
I have been using Radware Cloud WAF Service for around two and a half years.
What other advice do I have?
I would rate Radware Cloud WAF Service overall as a nine out of ten. I give it a nine because it delivers strong protection against web application attacks, provides effective bot mitigation, and overall things are handled well. If these enhancements were available, especially more customizable analytics and broader native integrations, it would likely be a ten out of ten solution for my organization. Overall, Radware Cloud WAF Service is a reliable and mature WAF platform that effectively addresses web application security requirements.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
devops2188878
Consistent web protection has secured our applications and blocked malicious attacks
Reviewed on Oct 14, 2026
Review provided by PeerSpot
What is our primary use case?
My main use case for Radware Cloud WAF Service is that I rely on it for protection for at least two years, and before that, for five years.
How has it helped my organization?
Radware Cloud WAF Service has positively impacted my organization, and I consider that its best feature for us.
Specific outcomes that show how Radware Cloud WAF Service positively impacted my organization include the threat detection and API protection.
What is most valuable?
The best features that Radware Cloud WAF Service offers include my involvement in multiple projects; one was four years ago, and one was two years ago, where we successfully implemented Radware Cloud WAF Service for both projects.
The features of Radware Cloud WAF Service that stood out to me the most were suggested by our cyber security division at the start of the project, and we successfully implemented those features.
I would add that we had some security issues in one project where we found our site had been hacked, and some malicious files were injected into our server.
What needs improvement?
Regarding improvements for Radware Cloud WAF Service, overall, we do not have any issues after implementation. I believe it effectively blocks many malicious calls.
For how long have I used the solution?
I was involved in two projects using Radware Cloud WAF Service. Approximately five years ago, we had a project that was public-facing, so I was helping to implement Radware Cloud WAF Service as a WAF and DDoS protection solution, and two years ago, I was working on another project.
I have used Radware Cloud WAF Service in several projects for a number of years, specifically five years ago.
How was the initial setup?
In terms of deployment, we do not have any issues because our cyber security division hosted the service and quickly deployed it for us.
What other advice do I have?
I have played multiple roles while using Radware Cloud WAF Service, sometimes as a developer, sometimes as a designer, and also involved in application architecture. On a scale of one to ten, I rate Radware Cloud WAF Service a ten because I believe it is a perfect tool. Our organization engages with Radware Cloud WAF Service closely while deploying other public-facing applications using Radware Cloud WAF Service.