Radware Cloud WAF
RadwareExternal reviews
171 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Easy and Effective Securing of Our Applications
What do you like best about the product?
I really appreciate the efficiency of Radware Cloud WAF in protecting applications. Its ease of use is a big advantage, as is the availability of technical support, which makes the onboarding process quite easy.
What do you dislike about the product?
There are certain bugs in the admin console that can be improved. Sometimes, the admin console does not show the settings that are actually applied.
What problems is the product solving and how is that benefiting you?
I use Radware Cloud WAF to protect our online applications against attacks and data exfiltration attempts, as well as for DDOS protection.
Adaptive ML Protection with 24/7 SOC Support in One Cloud Platform
What do you like best about the product?
From a customer perspective, the behavioral-based detection and machine learning capabilities make a clear, noticeable difference. The platform adapts to our application traffic patterns, which has significantly reduced false positives compared with the more static, rule-heavy WAF solutions we’ve used in the past. As a result, we spend less time tuning policies and more time focusing on strategic security initiatives.
Another major advantage is the fully managed service model. The 24/7 SOC support and proactive monitoring give us confidence that threats are being addressed in real time, even outside of business hours. That level of responsiveness is critical for protecting customer-facing applications.
We also appreciate the integrated approach. Having WAF, API protection, bot mitigation, and L7 DDoS protection consolidated into a single cloud platform simplifies our architecture and vendor management. It has improved visibility and reduced complexity across our security stack.
Overall, Radware Cloud WAF delivers effective protection with strong operational efficiency, which is exactly what we were looking for.
Another major advantage is the fully managed service model. The 24/7 SOC support and proactive monitoring give us confidence that threats are being addressed in real time, even outside of business hours. That level of responsiveness is critical for protecting customer-facing applications.
We also appreciate the integrated approach. Having WAF, API protection, bot mitigation, and L7 DDoS protection consolidated into a single cloud platform simplifies our architecture and vendor management. It has improved visibility and reduced complexity across our security stack.
Overall, Radware Cloud WAF delivers effective protection with strong operational efficiency, which is exactly what we were looking for.
What do you dislike about the product?
One challenge is the platform’s learning curve and overall complexity. Configuring fine-tuned policies and fully understanding the feature set takes time and expertise. For teams without dedicated WAF specialists, getting the most out of advanced controls (such as customized behavioral policies or bot-mitigation tuning) can be resource-intensive.
Another concern is visibility and the reporting experience. While Radware provides robust telemetry, some users find the dashboards and analytics less intuitive and harder to tailor to business-specific reporting needs than competing tools with more user-friendly UIs. As a result, incident analysis and executive reporting can take longer than expected.
A third point is alert volume and the tuning overhead early in deployment. Even though machine learning can reduce false positives over time, the initial tuning phase may generate a high number of alerts that still require manual review, which can be burdensome for lean teams.
Finally, because this is a managed cloud service, there is less direct control over the underlying infrastructure and rule engines than with self-hosted or appliance-based options. For customers who want tight control over every aspect of policy deployment and performance optimization, this service model may feel somewhat restrictive.
Another concern is visibility and the reporting experience. While Radware provides robust telemetry, some users find the dashboards and analytics less intuitive and harder to tailor to business-specific reporting needs than competing tools with more user-friendly UIs. As a result, incident analysis and executive reporting can take longer than expected.
A third point is alert volume and the tuning overhead early in deployment. Even though machine learning can reduce false positives over time, the initial tuning phase may generate a high number of alerts that still require manual review, which can be burdensome for lean teams.
Finally, because this is a managed cloud service, there is less direct control over the underlying infrastructure and rule engines than with self-hosted or appliance-based options. For customers who want tight control over every aspect of policy deployment and performance optimization, this service model may feel somewhat restrictive.
What problems is the product solving and how is that benefiting you?
Ease of Use:
The platform delivers comprehensive protection, but the interface can feel complex at first. If you’re already familiar with web application security concepts, it’s manageable. For less experienced users, some menus and options take time to understand and navigate confidently. Usability improves noticeably once you’ve spent time in the platform, but it isn’t immediately intuitive.
Ease of Implementation:
Implementation was straightforward for the basics, such as pointing DNS and enabling protection. That said, fine-tuning policies to match our application’s normal behavior took more effort than we initially expected. The initial setup phase also ran longer than planned because we focused on minimizing false positives.
Customer Support:
Radware’s customer support and managed service responsiveness have been strong. The 24/7 support model, along with proactive monitoring, helps ensure issues are addressed quickly. When we had questions about specific attack types or needed policy recommendations, their team provided timely, practical guidance.
Frequency of Use:
We use the platform regularly, mainly to review alerts, adjust policies, and check reports. Our security team accesses the dashboard daily, and the alerting cadence has become more reasonable as the system has adapted to our traffic patterns.
Number of Features:
Radware Cloud WAF includes a broad feature set, including core WAF protections, API security, bot mitigation, L7 DDoS protection, and behavioral analytics. The overall feature list is extensive and aligns well with enterprise security requirements. Some of the more advanced capabilities, such as detailed behavioral policies, become especially valuable once you understand how to use them.
Ease of Integration:
Integration with our DNS, SIEM, and monitoring stack has been solid. We did need to adjust some internal workflows to fit Radware’s event formats, but the available APIs and documentation made that workable. Overall, we didn’t run into any major blockers during integration.
Problems It Is Solving and the Benefit:
Radware Cloud WAF addresses several key challenges for us. It blocks application-layer attacks (e.g., OWASP Top 10) in real time, which reduces risk without requiring constant manual intervention. Its behavioral learning and adaptive policies help reduce false positives over time, increasing confidence in alerts and cutting down on noisy events. The managed service model also means expert support is monitoring and tuning in the background, which reduces the operational burden on our internal team. In addition, the integrated bot mitigation and API security help protect against automated abuse and API-targeted threats that our legacy tools didn’t handle well.
Overall, the solution strengthens our security posture, reduces manual workload, and improves visibility into application threats that we previously lacked. There is a learning curve and some complexity in policy management, but for us the operational and security benefits outweigh those challenges.
The platform delivers comprehensive protection, but the interface can feel complex at first. If you’re already familiar with web application security concepts, it’s manageable. For less experienced users, some menus and options take time to understand and navigate confidently. Usability improves noticeably once you’ve spent time in the platform, but it isn’t immediately intuitive.
Ease of Implementation:
Implementation was straightforward for the basics, such as pointing DNS and enabling protection. That said, fine-tuning policies to match our application’s normal behavior took more effort than we initially expected. The initial setup phase also ran longer than planned because we focused on minimizing false positives.
Customer Support:
Radware’s customer support and managed service responsiveness have been strong. The 24/7 support model, along with proactive monitoring, helps ensure issues are addressed quickly. When we had questions about specific attack types or needed policy recommendations, their team provided timely, practical guidance.
Frequency of Use:
We use the platform regularly, mainly to review alerts, adjust policies, and check reports. Our security team accesses the dashboard daily, and the alerting cadence has become more reasonable as the system has adapted to our traffic patterns.
Number of Features:
Radware Cloud WAF includes a broad feature set, including core WAF protections, API security, bot mitigation, L7 DDoS protection, and behavioral analytics. The overall feature list is extensive and aligns well with enterprise security requirements. Some of the more advanced capabilities, such as detailed behavioral policies, become especially valuable once you understand how to use them.
Ease of Integration:
Integration with our DNS, SIEM, and monitoring stack has been solid. We did need to adjust some internal workflows to fit Radware’s event formats, but the available APIs and documentation made that workable. Overall, we didn’t run into any major blockers during integration.
Problems It Is Solving and the Benefit:
Radware Cloud WAF addresses several key challenges for us. It blocks application-layer attacks (e.g., OWASP Top 10) in real time, which reduces risk without requiring constant manual intervention. Its behavioral learning and adaptive policies help reduce false positives over time, increasing confidence in alerts and cutting down on noisy events. The managed service model also means expert support is monitoring and tuning in the background, which reduces the operational burden on our internal team. In addition, the integrated bot mitigation and API security help protect against automated abuse and API-targeted threats that our legacy tools didn’t handle well.
Overall, the solution strengthens our security posture, reduces manual workload, and improves visibility into application threats that we previously lacked. There is a learning curve and some complexity in policy management, but for us the operational and security benefits outweigh those challenges.
Automatic Threat Detection with Room for Integration Improvement
What do you like best about the product?
I like Radware Cloud WAF for its automatic threat detection and adaptive protection. The initial setup was smooth, making it easy to get started.
What do you dislike about the product?
I think Radware Cloud WAF's integration with DevOps tools and external platforms could be better and can be limited.
What problems is the product solving and how is that benefiting you?
I use Radware Cloud WAF to block cross-site scripting attacks and protect against SQL injection threats, ensuring attackers can't steal, modify, or delete database information.
Reliable and Scalable Protection, Slow Initial Support
What do you like best about the product?
Well, the main thing is that it is stable and reliable in production, that is one of its advantages. Mitigation is quick and automatic. It also helps us have good visibility of the traffic.
What do you dislike about the product?
I think the support is a bit slow, but once they provide the support, it's quite good. The first interaction is a bit slow.
What problems is the product solving and how is that benefiting you?
I use Radware Cloud WAF to protect against DDoS attacks, mitigate automated attacks and malicious bots. It reduces the risk of downtime, improves our security posture, and allows for quick incident responses. Additionally, it is scalable and provides good traffic visibility.
Security Without Infrastructure, Configurable Improvement
What do you like best about the product?
What I like the most is that Radware Cloud WAF provides me with a level of security and is also a solution that does not require infrastructure.
What do you dislike about the product?
I feel that the configurations could be a bit more comprehensive, and not require so much support.
What problems is the product solving and how is that benefiting you?
Radware Cloud WAF protects me against web attacks, offers security, and requires no infrastructure.
Efficient Web Protection
What do you like best about the product?
I like that Radware Cloud WAF protects me and my web portal is not exposed. Additionally, I highly value that it is a cloud solution and does not require infrastructure.
What do you dislike about the product?
I don't like that the licensing is per application so much. I would prefer it to be perhaps by bandwidth, and not only by application. The first one was a bit slow, but the following ones, once you get the hang of it, are extremely fast.
What problems is the product solving and how is that benefiting you?
Radware Cloud WAF protects my main web pages from attacks, ensuring that my portal is not exposed. I like that it is a cloud solution that does not require infrastructure.
Effective Web Protection with Simple Integration
What do you like best about the product?
I like the easy way to integrate Radware Cloud WAF.
What do you dislike about the product?
The number of portals to add. Licensing is expensive.
What problems is the product solving and how is that benefiting you?
It protects me against the main attacks, such as the OWASP top 10.
Robust Security and Flexible Configuration
What do you like best about the product?
I like the tool’s protection and configuration capabilities, especially its security features such as Anti-DDoS, Anti Bot, and API Protection.
What do you dislike about the product?
I like everything about Radware. It’s a very complete tool.
What problems is the product solving and how is that benefiting you?
It helped me mitigate issues with bot attacks that other tools couldn’t handle. In the same way, its Anti-DDoS feature has been a big help in protecting my sites from large-scale attacks.
Reliable Protection and Easy Setup
What do you like best about the product?
I like the easy setup that Radware Cloud WAF has. Also, I appreciate the speed at which my web pages keep opening. So far, I like everything.
What do you dislike about the product?
all good
What problems is the product solving and how is that benefiting you?
I use Radware Cloud WAF to protect my web pages from malicious attacks.
Effective Protection with Solid Configurations
What do you like best about the product?
I like the effectiveness of Radware Cloud WAF in being able to prevent attacks before they are carried out. I also appreciate that the attacks remain in the cloud, which provides an additional layer of security. The initial setup is very easy and takes no more than 15 minutes per application. For these reasons, I would definitely recommend Radware Cloud WAF.
What do you dislike about the product?
More specific configurations can be had.
What problems is the product solving and how is that benefiting you?
I use Radware Cloud WAF to protect my web applications against attacks such as denial of service, injection, and cross scripting, ensuring that the attacks remain in the cloud. It is effective in preventing the attacks from being carried out.
showing 1 - 10