
Radware Cloud WAF
Easy implementation and impeccable 24/7 technical support
Security has improved as we block DDoS and bot attacks and free our team for other work
What is our primary use case?
My main use case for Radware Cloud WAF Service is to prevent attacks. We have web applications for our company, and we need to prevent those web apps from various kinds of attacks such as DDoS or injection attacks.
How has it helped my organization?
We have stronger security now with Radware Cloud WAF Service.
Since using Radware Cloud WAF Service, there are reductions in attacks. Previously, the traffic was too high, so the chances of DDoS were very high. Now we are seeing that traffic is limited and genuine, resulting in a reduction of attack attempts.
I would say the improvement is around 80%, and as I already mentioned, it really reduces unnecessary traffic.
It really frees up the IT team for other projects. Since Radware Cloud WAF Service is monitoring our web apps traffic and mitigating potential attacks, this saves our time.
What is most valuable?
Radware Cloud WAF Service offers blocking and monitoring logs, so if I want to block any kind of traffic, I can block it, and if I want to monitor, then I can monitor. These fields are good.
Automated application mapping is good.
I am accessing Radware Cloud WAF Service for blocking unknown threats and attacks in terms of API DDoS, geo-blocking, data leak prevention, and bot protection.
Bot protection is really helpful for our organization to mitigate bot traffic and identify and block that traffic so that we can prevent unnecessary attacks.
Automated analysis in Radware Cloud WAF Service is good and really helpful for us to identify the events and the traffic in those events to clarify bot traffic or unnecessary traffic and genuine traffic so that we can take the required action accordingly.
With our existing application APIs and SIM monitoring tools, Radware Cloud WAF Service makes it easier to centralize security visibility and correlate the WAF events with other security and application data.
What needs improvement?
There is one thing that needs to be improved in Radware Cloud WAF Service. When I am onboarding any kind of application and while bypassing those applications, it takes too much time. This time needs to be lessened because it may be causing business impact sometimes.
For how long have I used the solution?
I have been using Radware Cloud WAF Service for around one and a half years.
What do I think about the stability of the solution?
Radware Cloud WAF Service is pretty stable.
What do I think about the scalability of the solution?
Radware Cloud WAF Service is pretty scalable. I can access any kind of feature and any kind of application onboarding. There are no limitations or other restrictions.
How are customer service and support?
Customer support is good and punctual. I am rating the customer support a ten.
What was our ROI?
Radware Cloud WAF Service is a time-saving product.
What's my experience with pricing, setup cost, and licensing?
The pricing, setup cost, and licensing of Radware Cloud WAF Service are good. It is pretty costly, but it is worth it.
Which other solutions did I evaluate?
I evaluated other options before choosing Radware Cloud WAF Service, but that information is confidential and cannot be shared.
What other advice do I have?
Overall, I am rating Radware Cloud WAF Service as a nine. It is a good product, but it is not perfect, as I have told you about the improvements needed for this tool. Although it is a good tool, that is why I am giving it a nine.
I have not quite used the AI capabilities of Radware Cloud WAF Service as of now, but I will use it and then provide feedback.
Radware Cloud WAF Service is a good service that can be used with AI upgradation. Customer support is pretty good, and it can mitigate unnecessary traffic and prevent DDoS or bot attacks mostly. It is a pretty good tool to use for web apps.
Security has improved as we filter malicious traffic and protect trading web applications
What is our primary use case?
Radware Cloud WAF Service is primarily used to protect our web applications. We have various kinds of applications related to trading apps and our company web app, so we need to protect them from DoS and DDoS web attacks. For those main applications and managing the traffic for those applications, we are using Radware Cloud WAF Service. With this service, we have successfully mitigated some DoS attacks and some DDoS attacks, and we have prevented some attacks as well by blocking some IPs and implementing country geo-blocking. Geo-blocking is the most helpful feature from Radware Cloud WAF Service.
How has it helped my organization?
Radware Cloud WAF Service has positively impacted my organization by making the traffic manageable, and approximately 90% of the traffic is genuine traffic. It has really helped us find attacks and mitigate or prevent them.
We measure that 90% genuine traffic by observing multiple incidents where we can see how the traffic is functioning. Sometimes the traffic flow is too high, and we can apply our judgment on what kind of traffic and the amount of traffic needed for our applications, helping us prevent much higher traffic and attacks such as DoS attacks.
What is most valuable?
Radware Cloud WAF Service offers excellent features, with geo-blocking being the best. Geo-blocking is a very good feature that helps us block an entire country; for instance, we can block all traffic from Pakistan to prevent access to our web apps.
Geo-blocking is the feature that is mostly helpful, but there is also one more feature which is customized IP blocking. It is helpful for us to block some customized IPs from attackers to prevent zero-day attacks.
Radware Cloud WAF Service's AI capabilities are really good and helpful for us, and I think they are still in the learning phase, so we will monitor how they improve.
What needs improvement?
Sometimes we need to bypass the application from Radware Cloud WAF Service to our LB, and that process takes too much time, which I think Radware needs to improve by reducing the time.
The main point is that it takes too much time to bypass the application.
The accuracy and reliability of the output from Radware Cloud WAF Service meet my expectations, but they still need to be improved properly.
For how long have I used the solution?
I have been using Radware Cloud WAF Service for one and a half years.
What do I think about the stability of the solution?
Radware Cloud WAF Service is 98% stable.
What do I think about the scalability of the solution?
Radware Cloud WAF Service's scalability is good and pretty good.
How are customer service and support?
Customer support is proper and good for us; we get regular responses from Radware, so it is good.
Which solution did I use previously and why did I switch?
This is our first solution as a Cloud WAF.
What was our ROI?
We have saved money and time by using Radware Cloud WAF Service to mitigate DoS attacks and clean up the mess.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing, setup costs, and licensing for Radware Cloud WAF Service is good.
Which other solutions did I evaluate?
We evaluated other options, but it is confidential.
What other advice do I have?
Radware Cloud WAF Service is a good service, and the support is always available; if we have any incidents and require immediate support, we can contact Radware team, and they respond immediately. Other services are also good. I advise others looking into using Radware Cloud WAF Service to go ahead and use it, as it can properly protect web apps. I rate Radware Cloud WAF Service a nine out of ten.
Security policies have protected our cloud applications and reduce false positives for our team
What is our primary use case?
My main use case for Radware Cloud WAF Service is protecting our applications. I did not have a specific example to share about how I use Radware Cloud WAF Service.
How has it helped my organization?
Radware Cloud WAF Service has positively impacted my organization because it protects our different applications from various cyber attacks.
In the dashboard of Radware Cloud WAF Service, it shows me the different attacks, which is a measurable outcome I have noticed.
Radware Cloud WAF Service has helped reduce my false positives because it has positive and negative intelligence and the capability to analyze traffic and build patterns.
Radware Cloud WAF Service has helped free up my IT team for other projects, allowing the engineer to use their time in other activities.
What is most valuable?
The best features Radware Cloud WAF Service offers are AC and increment AC.
The increment AC feature of Radware Cloud WAF Service is important for us because it helps protect the different applications we have in various languages.
I assess Radware Cloud WAF Service for blocking unknown threats and attacks as excellent, as it blocks different threats and attacks, for example, the application.
My impressions of Radware Cloud WAF Service's automated analytics for looking at events is excellent because it reduces the time for identifying attacks.
I do not have the API Discovery feature services offered by Radware Cloud WAF Service.
I assess Radware Cloud WAF Service for integrating with other systems and applications in my environment as excellent because it is very easy.
Radware Cloud WAF Service protects against zero-day attacks because it analyzes the traffic effectively.
What needs improvement?
Radware Cloud WAF Service can improve by enhancing security for the different applications. I do not have any improvements needed for Radware Cloud WAF Service that I have not mentioned yet.
For how long have I used the solution?
I have been using Radware Cloud WAF Service for six months now.
What do I think about the stability of the solution?
My service, Radware Cloud WAF Service, is stable.
What do I think about the scalability of the solution?
At this moment, we have twenty-one applications, and I think Radware Cloud WAF Service is very scalable because I do not have a higher number of applications in the service for my needs.
How are customer service and support?
I find Radware Cloud WAF Service's customer support to be good. I rate the customer support of Radware Cloud WAF Service a ten on a scale of one to ten.
Which solution did I use previously and why did I switch?
I previously used a different solution before choosing Radware Cloud WAF Service.
What was our ROI?
I have seen a return on investment with Radware Cloud WAF Service.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing, setup cost, and licensing for Radware Cloud WAF Service has been very good.
Which other solutions did I evaluate?
I evaluated five options before choosing Radware Cloud WAF Service.
What other advice do I have?
My experience with Radware Cloud WAF Service has been excellent. I rate Radware Cloud WAF Service a ten on a scale from one to ten. I chose ten as my rating because of the excellent control and tools that Radware Cloud WAF Service provides for my company. I do not know the AI capacities of Radware Cloud WAF Service regarding its governance and security. I do not know the AI capacity of Radware Cloud WAF Service in terms of its accuracy and reliability of output. My advice to others looking into using Radware Cloud WAF Service is that it is confident, easy to implement, and has very good, excellent tools without false positives. I provided an overall rating of ten for Radware Cloud WAF Service.
Centralized protection has strengthened our web and API security while reducing manual monitoring
What is our primary use case?
Radware Cloud WAF Service is used to protect internet-facing web applications and APIs from application and web attacks. We took WAF services from Radware cloud and evaluated Radware Cloud WAF Service POC for preliminary technical evaluation testing.
A specific scenario where Radware Cloud WAF Service helped protect one of our applications or APIs involved identifying the internet-facing application and API, where we tested malicious web requests, including SQL injections and cross-site scripting detection. Radware Cloud WAF Service identified suspicious requests and blocked them while normal application traffic continued through.
An important difference about Radware Cloud WAF Service for our main use case is the combination of application security and breach prevention in a single cloud-based platform. It includes DDoS protection, bot management, API security, threat intelligence, and detailed security analytics, providing a solution for centralized visibility that integrates with our SIEM for automated use.
How has it helped my organization?
Radware Cloud WAF Service has positively impacted our organization by strengthening the protection of internet-facing applications while improving visibility into application behavior. Our security team now has a centralized approach to monitoring and responding to threats with WAF, DDoS, and API protection together.
Radware Cloud WAF Service helped reduce false positives during the POC, though I did not establish a reliable percentage. This improvement was noticeable, particularly after policy tuning.
While we did not formally measure the time saved by Radware Cloud WAF Service freeing up our IT team for other projects due to constraints, the main benefit is reduced manual monitoring and operational efforts.
What is most valuable?
Radware Cloud WAF Service's standout features are WAF protection, DDoS mitigation, bot management, and API security in a single cloud platform. Their threat intelligence capabilities have proven particularly useful for identifying sophisticated application-layer attacks.
In my day-to-day operations, API security stands out as an especially valuable protection because different types of threats are not picked up by a traditional WAF.
Bot management is a unique feature of Radware Cloud WAF Service that helps to distinguish between legitimate users and malicious or automated traffic, such as credential stuffing, scraping, and excessive automated requests.
Regarding Radware Cloud WAF Service's AI capabilities, I see the governance as valuable, as it should follow the same enterprise security principles, including strong access and auditability, while also improving threat detections and identifying normal behavior.
The accuracy and reliability of Radware Cloud WAF Service's AI capabilities have met our expectations. I would have control around data privacy, with detection being useful for identifying abnormal behaviors and supporting threat intelligence.
In assessing Radware Cloud WAF Service for blocking unknown threats and attacks, we tested unusual application layer request patterns to simulate previously unknown or zero-day attacks. Behavioral detection identified abnormal traffic and allowed us to investigate and block it while normal user traffic continued.
I assess Radware Cloud WAF Service positively for integrating with other systems and applications in our environment. It can integrate with existing applications and security systems through API and logging to SIEM, enabling centralized WAF security events without disrupting existing monitoring and security tools.
We evaluated the API Discovery feature as part of the POC, and it provided useful visibility into API endpoints and traffic. The discovery and monitoring capabilities are valuable for understanding the API attack surface.
What needs improvement?
An area where Radware Cloud WAF Service could improve is in the initial configuration and policy tuning, as it can require technical expertise. More simplified, guided workflows for onboarding policies would be helpful.
For how long have I used the solution?
Radware Cloud WAF Service has been in use for one year since implementation.
What do I think about the stability of the solution?
Radware Cloud WAF Service is stable.
What do I think about the scalability of the solution?
The scalability of Radware Cloud WAF Service is good, as it can scale with application traffic and support multiple applications without requiring significant additional on-premises infrastructure.
Which solution did I use previously and why did I switch?
We did not switch from a different solution, as we previously used F5. During our evaluations for Radware Cloud WAF Service, we found it to be a good solution to augment our existing security with capabilities around application protection, DDoS, bot and API security visibility, SIEM integration, and operational efforts.
What was our ROI?
Since using Radware Cloud WAF Service, we have seen positive value from the solution, particularly through improved security coverage, centralized monitoring, and reduced manual effort.
What other advice do I have?
My advice to others looking into using Radware Cloud WAF Service is to take time and conduct a POC before making a decision. Test it against your real application traffic and security requirements, especially for WAF, DDoS, and API protection, while evaluating policy tuning, false positives, SIEM reporting, and license costs. I rate Radware Cloud WAF Service an eight out of ten because the security capabilities and overall coverage are strong.
I chose an eight out of ten rating because the security capabilities and overall coverage are strong, particularly with WAF and DDoS, but the remaining gap is mainly around simplifying ongoing policy management, increasing automation and customization of reports, and making operational support even easier.
Protection has strengthened trading applications with powerful ddos, bot, and zero-day defenses
What is our primary use case?
My main use case for Radware Cloud WAF Service is to protect the applications. An example of an application where I use Radware Cloud WAF Service for protection is that we have enabled many security protections including SQL injection, path protection, DDoS, API discovery, and many more.
We are using the API discovery feature of Radware Cloud WAF Service. We do not use CDN services offered by Radware in conjunction with Radware Cloud WAF Service. We do not use the automated source blocking feature in Radware's cloud application protection solution because it is a traditional trading environment.
How has it helped my organization?
Due to Radware Cloud WAF Service, we have provided more security to the applications and have protected our applications from attackers with the best service.
Cloud WAF has not helped reduce false positives. Cloud WAF has not helped free up my IT team for other projects. Radware Bot Manager helps us in our compliance efforts. BLA detection and mitigation has certainly improved our organization's threat management capabilities.
What is most valuable?
The best feature Radware Cloud WAF Service offers is DDoS protection. I find the bypass option in a trading environment very good, as it helps us to manage the WAF enable and disable without a DNS entry.
Cloud WAF has a beautiful feature for blocking unknown threats and attacks where we can block the IPs we need to block, and geo-blocking is also a nice feature. Whenever we discover any APIs that are not related to us or that present a loophole, we share this with the developer team and ask them to close the vulnerabilities.
Radware Cloud WAF Service's ability to protect against zero-day attacks has features that can protect our applications without the need for signatures. The combination of negative and behavioral-based positive security models in Radware's approach is important for our organization's security strategy, as it allows us to handle whatever findings or experiences the behaviors present.
We are using Radware Bot Manager, and there is one feature regarding good bots like a Google bot that we can enable while blocking the unnecessary or unrequired bots. By using Radware Bot Manager, I discovered that some users were trying to access our application with an un-upgraded Chrome browser, which led to blocking the traffic as it was considered a bad bot.
We are using Web, HTTP L7, and DDoS protection, and for the RPS traffic, we get notifications and calls whenever the traffic goes beyond the RPS that we have set.
What needs improvement?
Sometimes support persons are not able to understand the issues and they take more time to solve the issues. For the trading application, we require the downtime because it's a trading application, and I wanted to collect the logs from the Radware team; that is the only issue I face.
Radware Cloud WAF Service is already a beautiful tool and I believe there is nothing specific to mention about how it can be improved.
For how long have I used the solution?
I have been using Radware Cloud WAF Service for the last three years.
What do I think about the stability of the solution?
Radware Cloud WAF Service is stable.
What do I think about the scalability of the solution?
Radware Cloud WAF Service's scalability is capable of handling increases in web traffic, application growth, and evolving threat volumes.
How are customer service and support?
Customer support for Radware Cloud WAF Service is good and they are available within a small time limit. I would rate the customer support for Radware Cloud WAF Service an eight.
Which solution did I use previously and why did I switch?
I use Radware and I have worked with Radware only, without using a different solution.
How was the initial setup?
Cloud WAF's ability to integrate with other systems and applications in our environment has a normal onboarding process that presents no difficulties in onboarding any applications onto Radware.
What's my experience with pricing, setup cost, and licensing?
I did not purchase Radware Cloud WAF Service through the AWS Marketplace. My experience with pricing, setup cost, and licensing of Radware Cloud WAF Service is not something I decide, as it comes from our boss or management.
What other advice do I have?
On a scale of 1 to 10, I would rate Radware Cloud WAF Service a 10. I choose 10 out of 10 because it is about the features I have experienced over the three years.
Regarding Radware Cloud WAF Service's AI capabilities, I believe we have not used any AI feature right now and have not used much, so I do not have any impressions. I have not really had an experience with Radware Cloud WAF Service's automated analytics for looking at events.
For PCI DSS for my new extension compliance, I have noticed a greater emphasis on continuous security monitoring, risk-based assessment, and ongoing validation of security controls.
My advice for others looking into using Radware Cloud WAF Service is that the features Radware has, when compared to others, make Radware the best, especially with SQL injection, Bot Manager, DDoS, L1, and L3. My overall review rating for Radware Cloud WAF Service is 10 out of 10.
A reliable Cloud WAF that closed our security gap
Integration with our SaaS applications was straightforward and required minimal effort. Performance has been excellent, and the pricing is very reasonable for what it delivers. Support is also a highlight: they respond quickly and effectively.
The main benefits have been improved protection for critical services, a fast and simple integration with our SaaS applications, and strong performance with no noticeable impact on our users. Combined with reasonable pricing and responsive support, it has allowed our team to raise our security posture efficiently and focus on other priorities.