Radware API Security Service logo

    Radware API Security Service

    Sold by
    Radware API Security Service delivers end-to-end API protection through continuous API discovery, runtime posture management, contextual testing, and AI-driven defense. It helps organizations identify exposed or misconfigured APIs, reduce risk, and protect against business logic abuse, automated threats, and DDoS attacks across modern application environments.

    Ratings and reviews

    4.5
    74 ratings
    3 star
    2 star
    1 star
    76%
    24%
    0%
    0%
    0%
    16 AWS reviews
    |
    58 external reviews
    External reviews are from G2  and PeerSpot .

    Filters

    Review type

    AWS Marketplace reviews
    External reviews
    Reviews (74)
    reviewer2908497

    Security has improved as I protect banking apps, block bots, and monitor attacks daily

    Reviewed on Nov 10, 2026
    Review provided by PeerSpot

    What is our primary use case?

    My main use case for Radware Cloud WAF Service is for cloud security.

    I have onboarded approximately 71 applications, and Radware Cloud WAF Service is for app protections and bot and API protections. It is working flawlessly and provides me with a summary report that is very useful for viewing monthly logs, weekly logs, attack information, bot information, and signature-based, attack-based, and malicious-based information.

    I use Radware Cloud WAF Service every day to monitor for any sort of spike. I have DDoS services and web DDoS services, and if there is a spike, I collect the IP information and broadcast this IP address to other environments to block it. It is extremely useful for identifying malicious IP addresses. It mostly protects my application, and I am very happy with this product.

    I enable Bot Manager across all applications.

    How has it helped my organization?

    Since using Radware Cloud WAF Service, I have not encountered any business loss or negative impact. It protects against threats and gives me a clear image of application access. For instance, if a user tries to delete a document they are not privileged to access, Radware Cloud WAF Service denies this action based on user-defined policies, and I get detailed event logs for such incidents.

    In a single dashboard, I observe information regarding attacks from various countries. I impose strict restrictions to mitigate risks, making it difficult for both novice and experienced hackers. The dashboard presents vital summary data such as attempted attacks and risk assessments, making it an invaluable tool for my security posture.

    Radware Cloud WAF Service has indeed freed up my IT team for other projects. The integration with my on-premises solutions reduces manual follow-up work, as notifications of events are directly sent to appropriate component owners for action.

    What is most valuable?

    Radware Cloud WAF Service offers great features including Bot Manager, path access, RFC-related signatures blocking, ACL, API protection, and load balancing. I can implement a BCDR concept where if production in the data center fails, it automatically switches to the disaster recovery site.

    This includes application redirections, access path protections to safeguard against SQL injections, cross-site scripting protections, and blocking malicious IP addresses in my environment.

    I find that every feature has its own benefits tailored to each application, such as API protection for API applications and Bot Manager for all applications. Each feature supports the overall security needs of internet-hosted applications.

    When onboarding applications, I publish a CNAME over my DNS hosting service and initially put the application in learning mode, allowing specific vendors to access it. I tighten access rules based on this testing. After completing the learning phase, I transition to blocking mode, enabling protections against SQL injections and implementing the Bot Manager and API protections as required.

    Every day, my team reviews analytics from Radware Cloud WAF Service to observe anomalies and attack patterns. I compile this information to enhance my other security measures, ensuring comprehensive protection and data integrity across environments.

    I have an API key and use on-premises solutions with Amazon S3 for log fetching. I aim to push captured logs from Radware Cloud WAF Service to my on-premises systems using this API integration.

    Radware Cloud WAF Service has a robust set of protections against zero-day attacks. Whenever new vulnerabilities arise, I receive timely notifications and forward relevant patch requests to respective OEMs, who respond promptly.

    I have discovered that my incoming bot traffic is agent-based.

    Radware Bot Manager is compliant with my needs, and I do not foresee any problems with it.

    What needs improvement?

    Improvements to Radware Cloud WAF Service are in the works, but as a bank in the financial sector, I have specific needs that limit my use of certain features not related to my organization. The features I selected align perfectly with my application protection needs, and I appreciate that.

    There is generally no false positive issue, but at times, during VAPT sessions, I must manually whitelist IP addresses in Radware Cloud WAF Service, which can lead to human error. Improving the process with an automated scheduling feature for temporary IP whitelisting would greatly assist me.

    For how long have I used the solution?

    I have been using Radware Cloud WAF Service for three and a half years.

    What do I think about the stability of the solution?

    Radware Cloud WAF Service is stable in my experience.

    What do I think about the scalability of the solution?

    Radware Cloud WAF Service is highly scalable and has been able to meet my growing demands, which is evident as I increase my licenses.

    How are customer service and support?

    Radware Cloud WAF Service's customer support operates with defined SLAs, responding promptly based on priority levels. They provide thorough guidance, escalating issues as needed and ensuring I am informed of resolutions.

    I rate customer support for Radware Cloud WAF Service a perfect 10.

    Which solution did I use previously and why did I switch?

    I previously used F5, which was good, but Radware Cloud WAF Service surpasses it significantly in detecting and protecting against threats.

    What was our ROI?

    Initially, I purchased 30 licenses for Radware Cloud WAF Service, expecting to protect only my internet-facing applications. However, impressed by its performance, I have since increased my licenses to 91, reflecting my satisfaction and need for enhanced security.

    What's my experience with pricing, setup cost, and licensing?

    The pricing, setup cost, and licensing for Radware Cloud WAF Service are on the higher side, but I believe it is worth the investment, especially in the banking sector where data security is critical.

    Which other solutions did I evaluate?

    Before choosing Radware Cloud WAF Service, I evaluated two other options, IBM and Akamai, but I found that Radware met my expectations best.

    What other advice do I have?

    I would rate Radware Cloud WAF Service a perfect 10.

    I chose 10 because I was initially looking for a product that provides the best security features, and Radware Cloud WAF Service delivers so many options, allowing me to select what is relevant for my needs. They continually update their database to address emerging threats, which is why I rate it so highly.

    Radware Cloud WAF Service is deployed in my organization via a public cloud.

    Which deployment model are you using for this solution?

    I have taken Radware Cloud WAF Service as a tenant-based service, featuring a dedicated portal for application management, and it is deployed in a private cloud.

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Amazon Web Services (AWS)
    Carla Vega

    Automated protection has streamlined attack mitigation and now safeguards critical services

    Reviewed on Nov 06, 2026
    Review provided by PeerSpot

    What is our primary use case?

    The main use case I have for Radware Cloud WAF Service is protection against attacks, bots, and automated attacks that target our technology infrastructure.

    I use this tool as the first line of defense, since it allows me to filter, monitor, and block traffic when it detects these types of automated attacks and bots.

    The main use case works very well, and the technical support and alerts are early. If updates are made, they are also reported in a timely manner.

    I use the CDN services offered by Radware along with Radware Cloud WAF Service, which help us to deliver the services we have much more efficiently, given their multinational deployment.

    I use protection against DDoS attacks at layer 7, HTTP/L7, specifically Radware DefensePro, which is an on-premise solution, and it helps us stop denial-of-service attacks that could be carried out.

    How has it helped my organization?

    Radware Cloud WAF Service positively impacts my organization by mitigating these attacks, defending sensitive data, and providing us with constant business continuity.

    I have a specific example of how business continuity has improved since I implemented this solution: availability has increased by 10%, which helps us with the metrics that the corporate side uses to measure us.

    More than operational costs, it has helped me reduce time, since it used to be a manual process and now it is an automated process.

    I have managed to save time in the process; a review that used to take us a day has turned into a maximum of two hours.

    I have noticed that Radware Cloud WAF Service has helped me reduce false positives to a great extent, and this happens thanks to the behavior analysis it has and the IOCs that are already registered in its knowledge base.

    Radware Cloud WAF Service has freed up time for my IT team for other projects, allowing us a 30% time saving thanks to the great number of automations it offers.

    BELA's real-time detection and mitigation has positively impacted my organization's threat management by helping us achieve much faster management.

    What is most valuable?

    I consider the best feature that Radware Cloud WAF Service offers is protection against application layer attacks, layer seven, mainly.

    That layer seven protection has benefited me significantly by reducing false positives and guaranteeing service availability for us.

    I have positive impressions of the API Discovery feature, since it allows me to discover APIs. The API Discovery feature has helped me register some APIs that I didn't have, and it has also made it easier for me in my integrations with other services. It has seemed a very useful and easy-to-use functionality given its platform.

    I would rate Radware Cloud WAF Service's ability to protect against zero-day attacks as very effective, since recently, given the PHP vulnerability, it helped us to mitigate that type of attack until we carried out patching and mitigation.

    I use the automatic source blocking feature in Radware's cloud application protection solution, and the experience has been very good, as the functionality helps us in the detection and protection of applications.

    The proactive and holistic approach based on correlation between modules has been effective in protecting my applications since, as the modules are from the same vendor, they allow us more native integration and they operate more efficiently.

    My opinion of the automated analytics for event review that the platform offers is positive, as sending metrics on a monthly basis in order to optimize our services, and the automated analytics helps us provide that report.

    I would rate Radware Cloud WAF Service's ability to block unknown threats and attacks as very good, as it allows us to block unknown threats and attacks thanks to its knowledge base.

    I consider the combination of negative and positive security models based on behavior important for my organization's security strategy, since attackers are constantly evolving and modifying IOCs, which challenges us to use this kind of behavioral analysis for more efficient detection.

    I consider that Bot Manager would help in my compliance efforts, since the reports we are requested are quarterly, mainly for regulatory compliance that we have.

    Regarding Radware Cloud WAF Service's artificial intelligence capabilities, I think its governance and security level seem appropriate.

    The accuracy and reliability of the results offered by the platform's artificial intelligence convince me, since the AI helps us automate some processes and searches.

    What needs improvement?

    I think Radware Cloud WAF Service could be improved by expanding the customized reporting options.

    That is the only aspect that keeps me from giving it a higher rating.

    For how long have I used the solution?

    I have been using Radware Cloud WAF Service for around four years.

    What do I think about the stability of the solution?

    I consider that Radware Cloud WAF Service is stable.

    What do I think about the scalability of the solution?

    I rate the scalability of Radware Cloud WAF Service with a 10.

    How are customer service and support?

    My opinion of Radware Cloud WAF Service's customer support is a 10. The support is very good.

    How was the initial setup?

    It has been easy for me to integrate the CDN services with Radware Cloud WAF Service, and we did not encounter any challenges during the integration thanks to the documentation it has.

    I would rate the integration of Radware Cloud WAF Service with other systems and applications in my environment as easy due to the amount of documentation and support they have.

    What was our ROI?

    I have seen a clear return on investment; the main return I could mention is the time it has allowed us to save so we can allocate it to other projects.

    What's my experience with pricing, setup cost, and licensing?

    My experience with pricing, implementation costs, and licensing has been positive.

    Which other solutions did I evaluate?

    Before choosing Radware Cloud WAF Service, I considered and evaluated it against Cloudflare.

    What other advice do I have?

    Radware Cloud WAF Service is deployed in my organization in the public cloud.

    We use the provider's SaaS service to deploy Radware Cloud WAF Service.

    We are currently not using the hardware Bot Manager.

    My advice to others who are considering using Radware Cloud WAF Service is to opt for this option, since it has provided us with very positive results.

    Yogesh Dayma

    Security has improved as we protect donor data, cut attacks, and gain clearer threat visibility

    Reviewed on Nov 05, 2026
    Review provided by PeerSpot

    What is our primary use case?

    My main use case for Radware Cloud WAF Service is securing our applications, as all my applications are public-facing applications, to secure them from the latest and known web threats, since web attacks are a common thing today.

    One application I'm protecting with Radware Cloud WAF Service is the Donor Management System, as we deal with donor's data, and we must ensure that all the data in our servers and applications are secured, especially with DPDP being in full force in India, so WAF helps in securing that data and provides bot support for DDoS attacks.

    Radware Cloud WAF Service helps us because we are dealing with children's and donor's data, and since the applications are public-facing, we must ensure the safety of both the data and the applications.

    How has it helped my organization?

    Radware Cloud WAF Service has positively impacted our organization, as we feel much more secure now, being able to diagnose and troubleshoot errors in the applications and understand connectivity sources.

    We have noticed a reduction in successful attacks and fewer support tickets since implementing Radware Cloud WAF Service, as it has helped us block insecure TLS connections and eliminate connections that don't originate from India or our designated countries.

    Radware Cloud WAF Service helps us block multiple unknown threats that we were not aware of prior to its implementation.

    False positives have definitely been reduced, as we have fewer genuine connections flagged after multiple learnings from Radware Cloud WAF Service.

    Currently, my team consists of only two members, so while Radware Cloud WAF Service helps us secure applications, it hasn't freed up time for other projects.

    What is most valuable?

    The best features that Radware Cloud WAF Service offers are DDoS attack and bot mitigations, which stand out as the most significant use cases since we have faced multiple DDoS attacks during and after implementations and also the activities from bots.

    The DDoS attack mitigation and bot mitigation have worked well for us, as we implement rate limits to requests and block connections from countries like China where we don't have clients, which has helped us to identify and block these attacks.

    I have used the API Discovery feature, which Radware Cloud WAF Service helped us identify multiple APIs that we were not aware of in our legacy applications.

    I find API Discovery to be quite easy to use because the Radware Cloud WAF Service support team assisted us in implementing this feature, and it allows for discovery within an hour.

    As of now, we haven't encountered any zero-day threats, but I assume Radware Cloud WAF Service would help us block such threats.

    We are using the automated source blocking feature, and we've had a good experience blocking connections from places like China with the policies we've created.

    The automated source blocking feature has effectively protected our interconnected applications by blocking connections based on identified malicious IPs.

    We are using Radware Bot Manager, though I haven't managed it much as the support team enabled the features and policies.

    After implementing Radware Bot Manager, we discovered multiple APIs being flagged as bots due to regular database queries, which we identified and resolved over time.

    Automated analytics are good features of Radware Cloud WAF Service, enabling us to identify multiple events in a single dashboard and troubleshoot issues effectively.

    The real-time BLA detection and mitigation features help us to mitigate threats effectively.

    The combination of negative and behavioral-based positive security models is crucial for our security strategy, as they learn connection behaviors to block unusual activities.

    What needs improvement?

    For the improvement of Radware Cloud WAF Service, I don't have specific improvement points, but I am quite happy with the support team who assists us in every situation, though increasing the bandwidth for the basic price tier would be beneficial for us as an NGO with budget constraints.

    Regarding the reporting feature, if there could be options to trace the origins of attacks by identifying generated IPs and locations, that would be helpful if implemented.

    For how long have I used the solution?

    I have been using Radware Cloud WAF Service for four years.

    What do I think about the scalability of the solution?

    The scalability of Radware Cloud WAF Service is quite good, although we haven't leveraged that fully yet.

    How are customer service and support?

    Customer support for Radware Cloud WAF Service is excellent.

    Which solution did I use previously and why did I switch?

    Radware Cloud WAF Service is our first solution; we are not using any previously established solutions.

    How was the initial setup?

    Integrating Radware Cloud WAF Service with our applications is quite easy, requiring no significant changes on our end.

    What about the implementation team?

    Radware Cloud WAF Service is managed directly through Radware.

    What was our ROI?

    API Discovery has helped us reduce overhead costs by roughly 20 to 30% by identifying data transitions.

    By implementing Radware Cloud WAF Service, we are able to reduce the number of employees needed for security, providing indirect savings for the organization.

    What's my experience with pricing, setup cost, and licensing?

    As an NGO, Radware Cloud WAF Service offers us the best prices in comparison to market competitors, which I appreciate greatly.

    Which other solutions did I evaluate?

    Before choosing Radware Cloud WAF Service, we evaluated multiple products for comparison.

    We evaluated Akamai WAF before choosing Radware Cloud WAF Service, which has proven to be stable in our experience.

    What other advice do I have?

    I give Radware Cloud WAF Service a rating of nine out of ten.

    I give it a nine because the pricing poses a challenge for us.

    I would advise others to consider using Radware Cloud WAF Service, as we are quite happy with the services.

    Abhishek Gurav

    Cloud security has strengthened web protections and now blocks most malicious traffic automatically

    Reviewed on Oct 15, 2026
    Review from a verified AWS customer

    What is our primary use case?

    Radware Cloud WAF Service protects my internet-facing web applications and APIs from cyber threats such as SQL injection, cross-site scripting, bot attacks, DDoS attacks, and other OWASP vulnerabilities. I use it to continuously monitor and filter malicious traffic, ensure application availability, security, and compliance while reducing the risk of data breaches and service disruptions.

    Radware Cloud WAF Service secures my customer-facing web application. For example, I use Radware Cloud WAF Service to secure public-facing applications by blocking SQL injection and XSS attacks and protecting the login API from bot-driven abuse and malicious traffic.

    The challenge Radware Cloud WAF Service addresses is its unique ability to mitigate automated bot attacks and malicious scanning while maintaining a seamless user experience. It reduced operational overhead, improved visibility into web threats, and helped ensure uninterrupted access to critical applications and APIs.

    How has it helped my organization?

    Radware Cloud WAF Service has had a significant positive impact on my organization's web application security posture. Since implementation, I have seen a noticeable reduction in malicious traffic reaching my application servers due to the ability to automatically detect and block threats such as SQL injection, XSS, bot attacks, and vulnerability exploitation attempts. One of the key improvements has been the increase in visibility into web-based threats through centralized monitoring and detailed reporting. This has enabled faster investigation and response to security incidents while reducing the time spent on manual log analysis. Overall, Radware Cloud WAF Service has improved application availability, strengthened my security posture, reduced risk, and provided greater confidence that my critical web applications and APIs remain protected against evolving cyber threats.

    While I do not publicly track exact figures, I have observed an estimated 70 to 80% reduction in malicious web requests reaching my application after implementing Radware Cloud WAF Service. The platform's automated detection and blocking capabilities significantly reduced the number of web attacks remaining for manual investigation. I saw that estimated 70 to 80% reduction and a 40 to 50% reduction in investigation time for web-related security incidents. The automated threat mitigation and improved visibility were the biggest contributors to these improvements.

    What is most valuable?

    The standout features of Radware Cloud WAF Service are automated attack prevention, bot protection, DDoS mitigation, behavioral analytics, and easy cloud-based deployment. These capabilities help strengthen application security while minimizing manual effort and maintaining application performance.

    Real-time threat detection and automated protection are the features I rely on most in my day-to-day operations. They proactively block web attacks with minimal manual effort, provide clear visibility into malicious activity, and help ensure applications remain secure and available.

    One additional aspect worth highlighting about Radware Cloud WAF Service is the usability and integration capabilities of the platform. The user interface is intuitive and provides a centralized view of attacks, blocked requests, traffic trends, and security events, making day-to-day monitoring straightforward. I also benefit from the integration with SIEM and security monitoring tools, which helps correlate WAF events and other security logs for faster incident investigation and response.

    The capabilities of Radware Cloud WAF Service help improve threat detection and reduce false positives by identifying unusual traffic patterns and emerging attacks. From a governance and security perspective, it provides good visibility and control, allowing security teams to review and validate AI-driven decisions. Overall, the AI features enhance security operations while maintaining transparency and oversight.

    Radware Cloud WAF Service is generally accurate and reliable in identifying malicious traffic, bot activity, and behavior patterns. In my experience, AI helps reduce false positives and improve detection compared to traditional rule-based approaches alone. While occasional tuning may be required for a specific application, the overall accuracy and consistency of the AI-driven insights have been effective for day-to-day security operations.

    Radware Cloud WAF Service is highly effective in blocking unknown threats because it uses behavioral analysis, user learning, and anomaly detection rather than relying solely on predefined signatures. This allows me to identify and mitigate suspicious activity even when the attack pattern has not been seen before. For example, I observed automated traffic targeting a login API from multiple IP addresses using an unusual request pattern. Although the traffic did not match a known signature attack, Radware Cloud WAF Service identified the abnormal behavior, flagged it as suspicious, and automatically applied mitigation controls. This helped prevent potential credential stuffing and bot attacks without impacting legitimate users. Overall, its ability to detect and respond to previously unknown threats has improved my confidence in protecting web applications and APIs against evolving attack techniques.

    The automated analytics of Radware Cloud WAF Service are one of the strongest aspects of the solution. They provide clear visibility into attack threats, malicious traffic, and security events in real-time, making it easier to identify threats and prioritize investigation. The dashboards and automated insights help reduce manual analysis effort and enable faster incident response.

    I use the API discovery feature, which helps identify and inventory my APIs.

    What needs improvement?

    For Radware Cloud WAF Service improvements, I suggest more customizable reporting, simpler policy tuning for complex environments, improved dashboard navigation, and broader native integrations with other third-party security tools. However, the platform is reliable and effective for web application protection.

    For how long have I used the solution?

    I have been using Radware Cloud WAF Service for around two and a half years.

    What other advice do I have?

    I would rate Radware Cloud WAF Service overall as a nine out of ten. I give it a nine because it delivers strong protection against web application attacks, provides effective bot mitigation, and overall things are handled well. If these enhancements were available, especially more customizable analytics and broader native integrations, it would likely be a ten out of ten solution for my organization. Overall, Radware Cloud WAF Service is a reliable and mature WAF platform that effectively addresses web application security requirements.

    Which deployment model are you using for this solution?

    Public Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Amazon Web Services (AWS)
    devops2188878

    Consistent web protection has secured our applications and blocked malicious attacks

    Reviewed on Oct 14, 2026
    Review provided by PeerSpot

    What is our primary use case?

    My main use case for Radware Cloud WAF Service is that I rely on it for protection for at least two years, and before that, for five years.

    How has it helped my organization?

    Radware Cloud WAF Service has positively impacted my organization, and I consider that its best feature for us.

    Specific outcomes that show how Radware Cloud WAF Service positively impacted my organization include the threat detection and API protection.

    What is most valuable?

    The best features that Radware Cloud WAF Service offers include my involvement in multiple projects; one was four years ago, and one was two years ago, where we successfully implemented Radware Cloud WAF Service for both projects.

    The features of Radware Cloud WAF Service that stood out to me the most were suggested by our cyber security division at the start of the project, and we successfully implemented those features.

    I would add that we had some security issues in one project where we found our site had been hacked, and some malicious files were injected into our server.

    What needs improvement?

    Regarding improvements for Radware Cloud WAF Service, overall, we do not have any issues after implementation. I believe it effectively blocks many malicious calls.

    For how long have I used the solution?

    I was involved in two projects using Radware Cloud WAF Service. Approximately five years ago, we had a project that was public-facing, so I was helping to implement Radware Cloud WAF Service as a WAF and DDoS protection solution, and two years ago, I was working on another project.

    I have used Radware Cloud WAF Service in several projects for a number of years, specifically five years ago.

    How was the initial setup?

    In terms of deployment, we do not have any issues because our cyber security division hosted the service and quickly deployed it for us.

    What other advice do I have?

    I have played multiple roles while using Radware Cloud WAF Service, sometimes as a developer, sometimes as a designer, and also involved in application architecture. On a scale of one to ten, I rate Radware Cloud WAF Service a ten because I believe it is a perfect tool. Our organization engages with Radware Cloud WAF Service closely while deploying other public-facing applications using Radware Cloud WAF Service.

    YogeshTalekar

    Security has improved as we block DDoS and bot attacks and free our team for other work

    Reviewed on Oct 07, 2026
    Review provided by PeerSpot

    What is our primary use case?

    My main use case for Radware Cloud WAF Service is to prevent attacks. We have web applications for our company, and we need to prevent those web apps from various kinds of attacks such as DDoS or injection attacks.

    How has it helped my organization?

    We have stronger security now with Radware Cloud WAF Service.

    Since using Radware Cloud WAF Service, there are reductions in attacks. Previously, the traffic was too high, so the chances of DDoS were very high. Now we are seeing that traffic is limited and genuine, resulting in a reduction of attack attempts.

    I would say the improvement is around 80%, and as I already mentioned, it really reduces unnecessary traffic.

    It really frees up the IT team for other projects. Since Radware Cloud WAF Service is monitoring our web apps traffic and mitigating potential attacks, this saves our time.

    What is most valuable?

    Radware Cloud WAF Service offers blocking and monitoring logs, so if I want to block any kind of traffic, I can block it, and if I want to monitor, then I can monitor. These fields are good.

    Automated application mapping is good.

    I am accessing Radware Cloud WAF Service for blocking unknown threats and attacks in terms of API DDoS, geo-blocking, data leak prevention, and bot protection.

    Bot protection is really helpful for our organization to mitigate bot traffic and identify and block that traffic so that we can prevent unnecessary attacks.

    Automated analysis in Radware Cloud WAF Service is good and really helpful for us to identify the events and the traffic in those events to clarify bot traffic or unnecessary traffic and genuine traffic so that we can take the required action accordingly.

    With our existing application APIs and SIM monitoring tools, Radware Cloud WAF Service makes it easier to centralize security visibility and correlate the WAF events with other security and application data.

    What needs improvement?

    There is one thing that needs to be improved in Radware Cloud WAF Service. When I am onboarding any kind of application and while bypassing those applications, it takes too much time. This time needs to be lessened because it may be causing business impact sometimes.

    For how long have I used the solution?

    I have been using Radware Cloud WAF Service for around one and a half years.

    What do I think about the stability of the solution?

    Radware Cloud WAF Service is pretty stable.

    What do I think about the scalability of the solution?

    Radware Cloud WAF Service is pretty scalable. I can access any kind of feature and any kind of application onboarding. There are no limitations or other restrictions.

    How are customer service and support?

    Customer support is good and punctual. I am rating the customer support a ten.

    What was our ROI?

    Radware Cloud WAF Service is a time-saving product.

    What's my experience with pricing, setup cost, and licensing?

    The pricing, setup cost, and licensing of Radware Cloud WAF Service are good. It is pretty costly, but it is worth it.

    Which other solutions did I evaluate?

    I evaluated other options before choosing Radware Cloud WAF Service, but that information is confidential and cannot be shared.

    What other advice do I have?

    Overall, I am rating Radware Cloud WAF Service as a nine. It is a good product, but it is not perfect, as I have told you about the improvements needed for this tool. Although it is a good tool, that is why I am giving it a nine.

    I have not quite used the AI capabilities of Radware Cloud WAF Service as of now, but I will use it and then provide feedback.

    Radware Cloud WAF Service is a good service that can be used with AI upgradation. Customer support is pretty good, and it can mitigate unnecessary traffic and prevent DDoS or bot attacks mostly. It is a pretty good tool to use for web apps.

    ShripadMahurkar

    Security has improved as we filter malicious traffic and protect trading web applications

    Reviewed on Oct 07, 2026
    Review provided by PeerSpot

    What is our primary use case?

    Radware Cloud WAF Service is primarily used to protect our web applications. We have various kinds of applications related to trading apps and our company web app, so we need to protect them from DoS and DDoS web attacks. For those main applications and managing the traffic for those applications, we are using Radware Cloud WAF Service. With this service, we have successfully mitigated some DoS attacks and some DDoS attacks, and we have prevented some attacks as well by blocking some IPs and implementing country geo-blocking. Geo-blocking is the most helpful feature from Radware Cloud WAF Service.

    How has it helped my organization?

    Radware Cloud WAF Service has positively impacted my organization by making the traffic manageable, and approximately 90% of the traffic is genuine traffic. It has really helped us find attacks and mitigate or prevent them.

    We measure that 90% genuine traffic by observing multiple incidents where we can see how the traffic is functioning. Sometimes the traffic flow is too high, and we can apply our judgment on what kind of traffic and the amount of traffic needed for our applications, helping us prevent much higher traffic and attacks such as DoS attacks.

    What is most valuable?

    Radware Cloud WAF Service offers excellent features, with geo-blocking being the best. Geo-blocking is a very good feature that helps us block an entire country; for instance, we can block all traffic from Pakistan to prevent access to our web apps.

    Geo-blocking is the feature that is mostly helpful, but there is also one more feature which is customized IP blocking. It is helpful for us to block some customized IPs from attackers to prevent zero-day attacks.

    Radware Cloud WAF Service's AI capabilities are really good and helpful for us, and I think they are still in the learning phase, so we will monitor how they improve.

    What needs improvement?

    Sometimes we need to bypass the application from Radware Cloud WAF Service to our LB, and that process takes too much time, which I think Radware needs to improve by reducing the time.

    The main point is that it takes too much time to bypass the application.

    The accuracy and reliability of the output from Radware Cloud WAF Service meet my expectations, but they still need to be improved properly.

    For how long have I used the solution?

    I have been using Radware Cloud WAF Service for one and a half years.

    What do I think about the stability of the solution?

    Radware Cloud WAF Service is 98% stable.

    What do I think about the scalability of the solution?

    Radware Cloud WAF Service's scalability is good and pretty good.

    How are customer service and support?

    Customer support is proper and good for us; we get regular responses from Radware, so it is good.

    Which solution did I use previously and why did I switch?

    This is our first solution as a Cloud WAF.

    What was our ROI?

    We have saved money and time by using Radware Cloud WAF Service to mitigate DoS attacks and clean up the mess.

    What's my experience with pricing, setup cost, and licensing?

    My experience with pricing, setup costs, and licensing for Radware Cloud WAF Service is good.

    Which other solutions did I evaluate?

    We evaluated other options, but it is confidential.

    What other advice do I have?

    Radware Cloud WAF Service is a good service, and the support is always available; if we have any incidents and require immediate support, we can contact Radware team, and they respond immediately. Other services are also good. I advise others looking into using Radware Cloud WAF Service to go ahead and use it, as it can properly protect web apps. I rate Radware Cloud WAF Service a nine out of ten.

    reviewer2907591

    Security policies have protected our cloud applications and reduce false positives for our team

    Reviewed on Oct 06, 2026
    Review provided by PeerSpot

    What is our primary use case?

    My main use case for Radware Cloud WAF Service is protecting our applications. I did not have a specific example to share about how I use Radware Cloud WAF Service.

    How has it helped my organization?

    Radware Cloud WAF Service has positively impacted my organization because it protects our different applications from various cyber attacks.

    In the dashboard of Radware Cloud WAF Service, it shows me the different attacks, which is a measurable outcome I have noticed.

    Radware Cloud WAF Service has helped reduce my false positives because it has positive and negative intelligence and the capability to analyze traffic and build patterns.

    Radware Cloud WAF Service has helped free up my IT team for other projects, allowing the engineer to use their time in other activities.

    What is most valuable?

    The best features Radware Cloud WAF Service offers are AC and increment AC.

    The increment AC feature of Radware Cloud WAF Service is important for us because it helps protect the different applications we have in various languages.

    I assess Radware Cloud WAF Service for blocking unknown threats and attacks as excellent, as it blocks different threats and attacks, for example, the application.

    My impressions of Radware Cloud WAF Service's automated analytics for looking at events is excellent because it reduces the time for identifying attacks.

    I do not have the API Discovery feature services offered by Radware Cloud WAF Service.

    I assess Radware Cloud WAF Service for integrating with other systems and applications in my environment as excellent because it is very easy.

    Radware Cloud WAF Service protects against zero-day attacks because it analyzes the traffic effectively.

    What needs improvement?

    Radware Cloud WAF Service can improve by enhancing security for the different applications. I do not have any improvements needed for Radware Cloud WAF Service that I have not mentioned yet.

    For how long have I used the solution?

    I have been using Radware Cloud WAF Service for six months now.

    What do I think about the stability of the solution?

    My service, Radware Cloud WAF Service, is stable.

    What do I think about the scalability of the solution?

    At this moment, we have twenty-one applications, and I think Radware Cloud WAF Service is very scalable because I do not have a higher number of applications in the service for my needs.

    How are customer service and support?

    I find Radware Cloud WAF Service's customer support to be good. I rate the customer support of Radware Cloud WAF Service a ten on a scale of one to ten.

    Which solution did I use previously and why did I switch?

    I previously used a different solution before choosing Radware Cloud WAF Service.

    What was our ROI?

    I have seen a return on investment with Radware Cloud WAF Service.

    What's my experience with pricing, setup cost, and licensing?

    My experience with pricing, setup cost, and licensing for Radware Cloud WAF Service has been very good.

    Which other solutions did I evaluate?

    I evaluated five options before choosing Radware Cloud WAF Service.

    What other advice do I have?

    My experience with Radware Cloud WAF Service has been excellent. I rate Radware Cloud WAF Service a ten on a scale from one to ten. I chose ten as my rating because of the excellent control and tools that Radware Cloud WAF Service provides for my company. I do not know the AI capacities of Radware Cloud WAF Service regarding its governance and security. I do not know the AI capacity of Radware Cloud WAF Service in terms of its accuracy and reliability of output. My advice to others looking into using Radware Cloud WAF Service is that it is confident, easy to implement, and has very good, excellent tools without false positives. I provided an overall rating of ten for Radware Cloud WAF Service.

    reviewer2906925

    Centralized protection has strengthened our web and API security while reducing manual monitoring

    Reviewed on Oct 06, 2026
    Review provided by PeerSpot

    What is our primary use case?

    Radware Cloud WAF Service is used to protect internet-facing web applications and APIs from application and web attacks. We took WAF services from Radware cloud and evaluated Radware Cloud WAF Service POC for preliminary technical evaluation testing.

    A specific scenario where Radware Cloud WAF Service helped protect one of our applications or APIs involved identifying the internet-facing application and API, where we tested malicious web requests, including SQL injections and cross-site scripting detection. Radware Cloud WAF Service identified suspicious requests and blocked them while normal application traffic continued through.

    An important difference about Radware Cloud WAF Service for our main use case is the combination of application security and breach prevention in a single cloud-based platform. It includes DDoS protection, bot management, API security, threat intelligence, and detailed security analytics, providing a solution for centralized visibility that integrates with our SIEM for automated use.

    How has it helped my organization?

    Radware Cloud WAF Service has positively impacted our organization by strengthening the protection of internet-facing applications while improving visibility into application behavior. Our security team now has a centralized approach to monitoring and responding to threats with WAF, DDoS, and API protection together.

    Radware Cloud WAF Service helped reduce false positives during the POC, though I did not establish a reliable percentage. This improvement was noticeable, particularly after policy tuning.

    While we did not formally measure the time saved by Radware Cloud WAF Service freeing up our IT team for other projects due to constraints, the main benefit is reduced manual monitoring and operational efforts.

    What is most valuable?

    Radware Cloud WAF Service's standout features are WAF protection, DDoS mitigation, bot management, and API security in a single cloud platform. Their threat intelligence capabilities have proven particularly useful for identifying sophisticated application-layer attacks.

    In my day-to-day operations, API security stands out as an especially valuable protection because different types of threats are not picked up by a traditional WAF.

    Bot management is a unique feature of Radware Cloud WAF Service that helps to distinguish between legitimate users and malicious or automated traffic, such as credential stuffing, scraping, and excessive automated requests.

    Regarding Radware Cloud WAF Service's AI capabilities, I see the governance as valuable, as it should follow the same enterprise security principles, including strong access and auditability, while also improving threat detections and identifying normal behavior.

    The accuracy and reliability of Radware Cloud WAF Service's AI capabilities have met our expectations. I would have control around data privacy, with detection being useful for identifying abnormal behaviors and supporting threat intelligence.

    In assessing Radware Cloud WAF Service for blocking unknown threats and attacks, we tested unusual application layer request patterns to simulate previously unknown or zero-day attacks. Behavioral detection identified abnormal traffic and allowed us to investigate and block it while normal user traffic continued.

    I assess Radware Cloud WAF Service positively for integrating with other systems and applications in our environment. It can integrate with existing applications and security systems through API and logging to SIEM, enabling centralized WAF security events without disrupting existing monitoring and security tools.

    We evaluated the API Discovery feature as part of the POC, and it provided useful visibility into API endpoints and traffic. The discovery and monitoring capabilities are valuable for understanding the API attack surface.

    What needs improvement?

    An area where Radware Cloud WAF Service could improve is in the initial configuration and policy tuning, as it can require technical expertise. More simplified, guided workflows for onboarding policies would be helpful.

    For how long have I used the solution?

    Radware Cloud WAF Service has been in use for one year since implementation.

    What do I think about the stability of the solution?

    Radware Cloud WAF Service is stable.

    What do I think about the scalability of the solution?

    The scalability of Radware Cloud WAF Service is good, as it can scale with application traffic and support multiple applications without requiring significant additional on-premises infrastructure.

    Which solution did I use previously and why did I switch?

    We did not switch from a different solution, as we previously used F5. During our evaluations for Radware Cloud WAF Service, we found it to be a good solution to augment our existing security with capabilities around application protection, DDoS, bot and API security visibility, SIEM integration, and operational efforts.

    What was our ROI?

    Since using Radware Cloud WAF Service, we have seen positive value from the solution, particularly through improved security coverage, centralized monitoring, and reduced manual effort.

    What other advice do I have?

    My advice to others looking into using Radware Cloud WAF Service is to take time and conduct a POC before making a decision. Test it against your real application traffic and security requirements, especially for WAF, DDoS, and API protection, while evaluating policy tuning, false positives, SIEM reporting, and license costs. I rate Radware Cloud WAF Service an eight out of ten because the security capabilities and overall coverage are strong.

    I chose an eight out of ten rating because the security capabilities and overall coverage are strong, particularly with WAF and DDoS, but the remaining gap is mainly around simplifying ongoing policy management, increasing automation and customization of reports, and making operational support even easier.

    Vishal Salve

    Protection has strengthened trading applications with powerful ddos, bot, and zero-day defenses

    Reviewed on Oct 05, 2026
    Review provided by PeerSpot

    What is our primary use case?

    My main use case for Radware Cloud WAF Service is to protect the applications. An example of an application where I use Radware Cloud WAF Service for protection is that we have enabled many security protections including SQL injection, path protection, DDoS, API discovery, and many more.

    We are using the API discovery feature of Radware Cloud WAF Service. We do not use CDN services offered by Radware in conjunction with Radware Cloud WAF Service. We do not use the automated source blocking feature in Radware's cloud application protection solution because it is a traditional trading environment.

    How has it helped my organization?

    Due to Radware Cloud WAF Service, we have provided more security to the applications and have protected our applications from attackers with the best service.

    Cloud WAF has not helped reduce false positives. Cloud WAF has not helped free up my IT team for other projects. Radware Bot Manager helps us in our compliance efforts. BLA detection and mitigation has certainly improved our organization's threat management capabilities.

    What is most valuable?

    The best feature Radware Cloud WAF Service offers is DDoS protection. I find the bypass option in a trading environment very good, as it helps us to manage the WAF enable and disable without a DNS entry.

    Cloud WAF has a beautiful feature for blocking unknown threats and attacks where we can block the IPs we need to block, and geo-blocking is also a nice feature. Whenever we discover any APIs that are not related to us or that present a loophole, we share this with the developer team and ask them to close the vulnerabilities.

    Radware Cloud WAF Service's ability to protect against zero-day attacks has features that can protect our applications without the need for signatures. The combination of negative and behavioral-based positive security models in Radware's approach is important for our organization's security strategy, as it allows us to handle whatever findings or experiences the behaviors present.

    We are using Radware Bot Manager, and there is one feature regarding good bots like a Google bot that we can enable while blocking the unnecessary or unrequired bots. By using Radware Bot Manager, I discovered that some users were trying to access our application with an un-upgraded Chrome browser, which led to blocking the traffic as it was considered a bad bot.

    We are using Web, HTTP L7, and DDoS protection, and for the RPS traffic, we get notifications and calls whenever the traffic goes beyond the RPS that we have set.

    What needs improvement?

    Sometimes support persons are not able to understand the issues and they take more time to solve the issues. For the trading application, we require the downtime because it's a trading application, and I wanted to collect the logs from the Radware team; that is the only issue I face.

    Radware Cloud WAF Service is already a beautiful tool and I believe there is nothing specific to mention about how it can be improved.

    For how long have I used the solution?

    I have been using Radware Cloud WAF Service for the last three years.

    What do I think about the stability of the solution?

    Radware Cloud WAF Service is stable.

    What do I think about the scalability of the solution?

    Radware Cloud WAF Service's scalability is capable of handling increases in web traffic, application growth, and evolving threat volumes.

    How are customer service and support?

    Customer support for Radware Cloud WAF Service is good and they are available within a small time limit. I would rate the customer support for Radware Cloud WAF Service an eight.

    Which solution did I use previously and why did I switch?

    I use Radware and I have worked with Radware only, without using a different solution.

    How was the initial setup?

    Cloud WAF's ability to integrate with other systems and applications in our environment has a normal onboarding process that presents no difficulties in onboarding any applications onto Radware.

    What's my experience with pricing, setup cost, and licensing?

    I did not purchase Radware Cloud WAF Service through the AWS Marketplace. My experience with pricing, setup cost, and licensing of Radware Cloud WAF Service is not something I decide, as it comes from our boss or management.

    What other advice do I have?

    On a scale of 1 to 10, I would rate Radware Cloud WAF Service a 10. I choose 10 out of 10 because it is about the features I have experienced over the three years.

    Regarding Radware Cloud WAF Service's AI capabilities, I believe we have not used any AI feature right now and have not used much, so I do not have any impressions. I have not really had an experience with Radware Cloud WAF Service's automated analytics for looking at events.

    For PCI DSS for my new extension compliance, I have noticed a greater emphasis on continuous security monitoring, risk-based assessment, and ongoing validation of security controls.

    My advice for others looking into using Radware Cloud WAF Service is that the features Radware has, when compared to others, make Radware the best, especially with SQL injection, Bot Manager, DDoS, L1, and L3. My overall review rating for Radware Cloud WAF Service is 10 out of 10.