Cloudbric Managed Rules for AWS WAF - OWASP Top 10 Rule Set logo

    Cloudbric Managed Rules for AWS WAF - OWASP Top 10 Rule Set

    Cloudbric Managed Rules for AWS WAF - OWASP Top 10 Protection provides security against threats from OWASP Top 10 Web Application Security Risks such as SQL Injection and Cross-Site Scripting (XSS).

    Ratings and reviews

    4.1
    7 ratings
    3 star
    2 star
    57%
    29%
    0%
    0%
    14%
    5 AWS reviews
    |
    2 external reviews
    External reviews are from G2 .

    Filters

    Review type

    AWS Marketplace reviews
    External reviews
    Reviews (7)
    Kevin Tan

    I’ve been using Cloudbric’s Managed Rules for AWS WAF – OWASP Top 10 Rule Set

    Reviewed on May 21, 2025
    Review from a verified AWS customer

    After testing several AWS WAF rule providers, we selected Cloudbric’s OWASP Top 10 bundle for its balance of coverage and efficiency. Setup through AWS Marketplace was intuitive, and the default rule priorities required only minor adjustment to suit our application. During simulated attack scenarios, the managed rules consistently blocked attempts without breaking legitimate API calls. In comparison, open-source rule sets needed more manual tuning. The Cloudbric solution reduced our security team’s maintenance time by roughly 50%, allowing us to focus on new feature development rather than constant rule tweaking.

    Tony B.

    Simple, strong, well performing

    Reviewed on Apr 15, 2025
    Review provided by G2
    What do you like best about the product?
    I’ve been using one of their rule sets already, and decided to give this one a try as part of a test run before potentially migrating, based on an offer I received.

    Just like the others, it was simple to set up, smoothly integrated, and packed with all the essentials—especially key protections aligned with OWASP standards.

    What really stood out, though, was the support team—quick to respond, incredibly helpful, and genuinely considerate. I really value that kind of human touch and attention to detail. It’s rare, and it makes a difference.

    At this point, I’m seriously leaning toward accepting their offer and migrating permanently. Very satisfying overall. Kudos to them!
    What do you dislike about the product?
    Nothing major.
    Just had to adjust a few initial settings during setup. But with support that solid, it wasn’t a big deal at all.
    What problems is the product solving and how is that benefiting you?
    This product helps protect our web apps from common security threats, like the ones listed by OWASP.
    Maya C.

    Easy to implement, high detection rate.

    Reviewed on Apr 03, 2025
    Review provided by G2
    What do you like best about the product?
    I was looking for a managed rule group to use for my AWS WAF, and Cloudbric Managed Rules - OWASP Top 10 rule set showed the best detection rate. It was very easy to implement, as it only required me to subscribe to the product and associate it with the web ACL. It seems to be covering most of the criteria of OWASP Top 10 web vulnerabilities, and it seems to be working well. When I had a question about the rules, the customer support responded quickly and provided me with thorough information.
    What do you dislike about the product?
    I don't have much complaints, other than the fact that it tends to over detect from time to time. However, this could be solved just by overriding the rule or changing the rule action to count, which is much less of a work than having to create a new rule to respond to threats that are not detected.
    What problems is the product solving and how is that benefiting you?
    It provides easy and cost-effective security. Unlike most security solutions, it is quite affordable, perfect for small to medium sized organizations.
    mgs

    perform well

    Reviewed on Aug 16, 2022
    Review from a verified AWS customer

    I used this product this time. perform well It seems to prevent hacking well.
    It looks better and better than other products.

    Daniel

    It's good at detecting and it's very useful

    Reviewed on Aug 15, 2022
    Review from a verified AWS customer

    It is easy to apply and has a high detection rate.

    It is difficult to organize and use WAF rules directly.
    Cloudbric OWASP is great for easy and affordable use of high-performance AWS Rules.

    security

    Easy to setup and use

    Reviewed on Aug 15, 2022
    Review from a verified AWS customer

    Easy to use.
    Good performance at a low price.
    When I inquired about the user by mail, it was good to receive a very kind reply.

    Causes 403 error for my application

    All POST methods returning with error 403 forbidden

    Reviewed on May 10, 2022
    Review from a verified AWS customer

    I am unsure what the issue was but when cloudbric OWASP top 10 ruleset was turned on all my post methods return with a 403 error.
    I have tried contacting the developer to see if they have a developer guide or some hints, but no response.

    The app has been built to comply with the OWASP ASVS and the AWS provided rules do not affect its function.