whichdevtool?
Menu
StacksDirectory Pricing changes Glossary
VPS and cloud servers App hosting and PaaS Managed databases Transactional email APIs Email marketing and newsletters Domain registrars CDN, DNS and edge security Monitoring, uptime and error tracking Auth and identity Frontend and full-stack frameworks Backend frameworks UI component libraries AI model APIs File and object storage Payments and billing Background jobs, queues and workflows ORMs and database toolkits

Enterprise cloud WAF, DDoS and CDN · by Thales (Imperva)

Imperva Cloud WAF

Thales's enterprise cloud WAF with managed day-zero rules, L3-L7 DDoS protection, bot defence and a built-in CDN, sold by quote or through cloud marketplaces.

Visit imperva.com ↗ Alternatives Paid
Imperva Cloud WAF homepage
§1

Overview

Imperva, now part of Thales, sells Cloud WAF as the core of its Application Security platform. Traffic is routed through Imperva's network, where each request is inspected in a single pass for OWASP Top 10 attacks, API abuse and malicious bots, and volumetric and application-layer DDoS is mitigated before it reaches the origin. The same network provides CDN caching.

The selling point is managed rules: Imperva's research team writes and tests rules in production and pushes them to customers, including day-zero rules for newly disclosed CVEs, so over 90% of customers run in blocking mode. Attack Analytics groups thousands of events into readable incidents, and the platform integrates with SIEMs, webhooks and Terraform.

Pricing is by quote. Smaller teams on AWS can subscribe to FlexProtect Pro through AWS Marketplace, which covers up to 10 sites and bills by monthly traffic volume.

Recent additions listed in Imperva's datasheet include file-upload scanning at the edge, post-quantum TLS on by default, plain-language explanations of blocked requests and an AI assistant for querying security events.

§2

Pricing and plans

Plan Price What you get
Imperva Application Security Custom Cloud WAF, DDoS, bot protection, API security, CDN; by quote
FlexProtect Pro (AWS Marketplace) Usage-based Up to 10 sites, WAF, CDN, SIEM integration, Attack Analytics; billed per GB in 5 tiers via AWS

Imperva does not publish list prices on its site; enterprise plans are quoted by sales. A self-subscribe plan exists on AWS Marketplace, billed on monthly traffic volume in five tiers; the per-GB rates were not shown in Imperva's documentation. Imperva's datasheet calls the WAF PCI-certified; other certifications were not read.

Source: www.imperva.com/products/web-application-firewall-waf/ · prices as published, excluding tax.

§3

What it does

Managed WAF rules
Rules written and tested by Imperva's research team, including day-zero CVE protection.
DDoS protection
L3, L4 and L7 DDoS mitigation at the edge.
Bot protection
Classifies over 1,000 bot types, with AI bots and LLM platforms shown separately.
Attack Analytics
Machine learning groups security events into incidents for analysts.
CDN
Content delivery on the same network as the WAF.
Automation
Terraform integration, webhooks and SIEM export.
§4

Strengths and limitations

Strengths

  • Managed rules allow blocking mode from the start.
  • WAF, DDoS, bot and API protection share one network and console.
  • Protects applications in cloud, on-premises or hybrid setups.
  • 24/7 SOC and support.

Limitations

  • No published prices; enterprise quotes only on imperva.com.
  • No free tier or self-serve plan outside AWS Marketplace.
  • The AWS Marketplace plan cannot add features or be upgraded in place.
  • Not a DNS host.
§5

Who it suits

Good for

  • Enterprises with PCI or regulatory requirements
  • Security teams protecting many applications
  • Organisations facing frequent bot and DDoS attacks

Look elsewhere if

  • Hobby and indie projects
  • Teams wanting self-serve signup with published prices
§6

Alternatives to Imperva Cloud WAF

Tool From Free option Stages
Azure DNS Managed public and private DNS
$0.5/mo Paid
Amazon CloudFront CDN with bundled WAF and DNS plans
$15/mo Free tier
Google Cloud DNS Managed authoritative and private DNS
$0.2/mo Paid
CacheFly Throughput-focused CDN
$300/mo Free tier
IBM NS1 Connect Managed DNS with traffic steering
$99/mo Trial
INWX Domain registrar
$15.72/yr Paid

All CDN, DNS and edge security →

§7

Questions

How much does Imperva Cloud WAF cost?

Imperva does not publish prices; plans are quoted by sales, with a usage-billed FlexProtect Pro plan on AWS Marketplace.

Does Imperva include a CDN?

Yes. The Application Security platform includes CDN on the same network as the WAF.

Who owns Imperva?

Imperva is part of Thales.

Sources read for this page