Radware Cloud WAF

What do you like best about the product?

Overall, it has been a very positive experience. We implemented the Cloud Web Application Firewall on critical infrastructure, and it closed a security gap we had previously identified, adding a key layer to our defense-in-depth architecture.

Integration with our SaaS applications was straightforward and required minimal effort. Performance has been excellent, and the pricing is very reasonable for what it delivers. Support is also a highlight: they respond quickly and effectively.

What do you dislike about the product?

So far, there hasn't been much to dislike. The only limitation we've found is that exceptions can't be scoped by FQDN, which would give us more granular control when fine-tuning rules for specific applications or subdomains.

What problems is the product solving and how is that benefiting you?

Radware Cloud WAF closed a security gap we had previously identified in our critical infrastructure. By adding it as a dedicated protection layer for our web applications, we strengthened our defense-in-depth architecture without adding operational complexity.
The main benefits have been improved protection for critical services, a fast and simple integration with our SaaS applications, and strong performance with no noticeable impact on our users. Combined with reasonable pricing and responsive support, it has allowed our team to raise our security posture efficiently and focus on other priorities.

What do you like best about the product?

It continuously adapts to application updates without disrupting legitimate traffic. Additionally, having direct access to Radware's Emergency Response Team (ERT) gives us complete peace of mind in the face of any critical security incident.

What do you dislike about the product?

Occasionally, updating certain advanced policies across the entire global network can take a couple of minutes.

What problems is the product solving and how is that benefiting you?

Radware's engine analyzes typical traffic behavior and automatically generates adaptive policies. This way, it blocks complex attacks in real-time without disrupting legitimate user traffic or requiring immediate emergency patches in applications.

What do you like best about the product?

Radware Cloud WAF provides strong protection with an intuitive interface and useful security dashboards. Integration with our web applications was straightforward, and we have not experienced a noticeable impact on application performance. Its automated threat detection and protection also reduce the amount of manual work required from our IT team.

What do you dislike about the product?

Some configurations and security events can be complex to troubleshoot, especially when legitimate traffic is blocked. The platform could provide clearer explanations and more actionable information to quickly identify why a request was blocked and what configuration should be adjusted.

What problems is the product solving and how is that benefiting you?

Radware Cloud WAF helps us protect our public-facing web applications and APIs against attacks, malicious traffic, and application vulnerabilities. Its automated protection reduces the need for constant manual monitoring and tuning, allowing our IT team to focus on other priorities while maintaining a strong security posture.

What do you like best about the product?

What I like most about Radware Cloud WAF is the combination of strong security capabilities and ease of management. It provides effective protection against web application attacks while giving us good visibility into traffic and security events. The main upsides for us are the centralized management, the ability to quickly identify and mitigate threats, and the flexibility to fine-tune security policies based on our applications and traffic patterns. The cloud-based approach also makes deployment and scaling easier without having to manage additional on-premises infrastructure. Overall, Radware Cloud WAF gives us good protection while keeping the operational effort relatively low.

What do you dislike about the product?

Some settings and policies can take a bit of time to understand and fine-tune, especially for more complex applications

What problems is the product solving and how is that benefiting you?

protect our web applications and APIs from common web-based attacks better visibility into incoming traffic and security events detect and mitigate suspicious activity more quickly robust capabilities such as Web DDoS Protection, Client-Side Protection, Active Attackers, Bot Manager with AI-based detection, and API Protection. These modules help us protect our applications and APIs against different types of threats, from automated and malicious bot activity to application-layer DDoS attacks and API abuse.

What do you like best about the product?

I really like the effective threat detection and automatic mitigation capabilities of Radware Cloud WAF. The user-friendly dashboard and real-time visibility are fantastic as they reduce operational effort and significantly improve overall security. I also find the initial setup to be simple and quick, with a user-friendly interface that requires minimal configuration effort. These features make managing our web applications' security straightforward, which is exactly what we need.

What do you dislike about the product?

Radware Cloud WAF is highly effective, but reporting customization and detailed log analysis could be improved. Enhanced third-party integrations would also provide a better overall management experience. I would like more customizable dashboard and reporting options. More customizable reports, better log filtering, and faster search capability would make it easier to investigate security events.

What problems is the product solving and how is that benefiting you?

I use Radware Cloud WAF to protect our web applications from cyber threats, improve security, maintain application availability, and reduce operational efforts with its effective threat detection and real-time visibility.

What do you like best about the product?

I like the protection it offers for APIs and API schema discovery, especially when creating GraphQL.

What do you dislike about the product?

When something new comes out, it takes a while to inform the public. It appears on the portal, and until one notices it says 'new', one needs to investigate on their own.

What problems is the product solving and how is that benefiting you?

The attacks targeted at the organization are now much better covered. With the AI module, the solution is further strengthened as it allows detecting potential AI-orchestrated attacks and offers protection for LLM models. Additionally, the reinforcement in API Protection is another plus that adds to the strength of cybersecurity.

What do you like best about the product?

Radware Cloud Application and API Protection provides excellent security for our web assets. The dashboard is intuitive, and it offers clear, easy-to-understand visibility into incoming traffic, which helps us monitor what’s happening at a glance.

What do you dislike about the product?

Tuning the system to minimize false positives requires continuous monitoring and manual adjustments, especially during the initial deployment phase or when launching new API endpoints.

What problems is the product solving and how is that benefiting you?

By using behavior-based intelligence to automate threat detection and policy updates, it helps our organization maintain continuous service uptime, reduce the need for manual security management, and keep performance smooth for legitimate users.

Radware Cloud WAF Service is a tool for controlling the websites of the Municipio de Quito, and I have significant visibility with the tool.

For example, on two principal sites of Quito, I have implemented geo-blocking policies, and I can detect attacks from China, Russia, and other locations. I have visibility for these attacks, and this is a fundamental tool to protect the municipality.

Radware Cloud WAF Service has positively impacted my organization by stopping attacks such as SQL injection attacks and geo-blocking attacks, which appear frequently in the tool logs.

I have experienced a reduction of incidents in my organization since we started using it.

I use a WAF which stands out as one of the best features Radware Cloud WAF Service offers.

It is focused on web services, and the API is a very recent proof of concept; I do not currently have features for web services. With Radware Cloud WAF Service, strong behavior, threat detection, and automated policy synchronization are features that could make it even better. I also observe DDoS protection and visibility of the forwarding and system logs.

I assess Radware Cloud WAF Service for blocking unknown threats and attacks, primarily with threats such as geo-blocking and OWASP compliance, as well as SQL injection. I do not currently see other threats in the logs.

Radware Cloud WAF Service is easy to use, and configuring and monitoring the logs is straightforward.

I do not currently have integration with a SIEM, but I have a SIEM integration planned for the next two months as I implement new tools to complete my cybersecurity area.

To reduce false positives from geo-blocking, I maintain a list of public IPs. I currently experience many false positives with my front-end firewall, as I do not have a geo-blocking solution in this firewall, but I have reduced these false positive issues.

I have been working in my current field for almost three years.

I do not have anything to add about my main use case or how I interact with Radware Cloud WAF Service. I have a proof of concept for APIs in Radware Cloud Services, but it is not yet complete.

I am currently only integrating this and have no other implementation.

I work with a partner; my company does not have a business relationship with this vendor other than being a customer.

I do not have additional thoughts about Radware Cloud WAF Service.

The integration is simple and easy with my sites.

The purchase is not directly through a partner; I work with two partners, and they purchased and passed the licenses to the government entity.

It is easy for my team, and it has reduced incidents.

I have a process to purchase additional features or services for Radware Cloud WAF Service.

I have the configuration for SIEM logs, and I need to complete the proof of concept of the API Discovery Automate.

The advice I would give to others looking into using Radware Cloud WAF Service is that it is a tool for my business.

Radware Cloud WAF Service remains a great solution that shines in high-security, high-throughput environments where behavioral detection and hybrid multi-cloud deployment flexibility are top priorities. My overall rating for this review is ten.

Hybrid Cloud

Amazon Web Services (AWS)

What do you like best about the product?

The completeness of the solution and features such as LLM Firewall, Bot Manager and completeness of the security events

What do you dislike about the product?

The integration with on-prem SIEM should be enhanced

What problems is the product solving and how is that benefiting you?

Protection web apps straight on the edge without worrying of upgrading the product every time