Independent reference. Not affiliated with any vendor on this site.
Vendor index

Every WAF vendor we cover, grouped by pricing transparency

Fourteen vendors. Six publish a list rate that lets you assemble a real bill. Seven publish nothing and are honestly labelled quote only. StackPath is included as retired because the search query still surfaces.

Last verified June 2026

Each card links to a vendor deep-dive with pricing tiers, source URL, what they are best for, and the hidden cost line items most quote-only vendors do not advertise.

Published pricing

6 vendors
Below median
AWS WAF
Per web-ACL + per rule + per million requests
$5.00 per web-ACL per month
→
Below median
Cheapest
Cloudflare WAF
Flat monthly plan, WAF included on every paid tier
Free plan, WAF rules included
→
Above median
Azure WAF (Front Door)
Bundled into the Front Door Standard/Premium tier price, or per-hour on Application Gateway
$35.00 per month (Front Door Standard, custom WAF rules included)
→
Below median
Google Cloud Armor
Standard (per policy + per rule + per request) or Enterprise subscription
$5.00 per policy per month (Standard)
→
Around median
Sucuri WAF
Annual plan, WAF + CDN bundled
$9.99 per month (Basic Firewall + CDN)
→
Above median
Fortinet FortiWeb Cloud
Cloud Marketplace points model: per app-hour + per-Mbps bandwidth (1 point = $1 PAYG)
$0.14 per app-hour (WAF Standard), approx $102 per app per month before bandwidth
→

Quote only

7 vendors
Quote only
Akamai App & API Protector
Quote only, annual contract
Quote only, contact vendor
→
Quote only
Imperva Cloud WAF
Quote only, per-site or per-application
Quote only, contact vendor
→
Quote only
F5 Distributed Cloud WAAP
Quote only, per-app or per-bandwidth subscription
Quote only, contact vendor
→
Quote only
Fastly Next-Gen WAF
Three security packages, all priced quote-only
Quote only, contact vendor
→
Quote only
Barracuda WAF-as-a-Service
Per-app subscription, quoted via Build and Price
Quote only, use Barracuda Build and Price
→
Quote only
Radware Cloud WAF
Quote only, per-application subscription
Quote only, contact vendor
→
Quote only
Wallarm API & App Security
Quote only, subscription tied to API calls + applications
Quote only, contact vendor
→

Retired

1 vendor
Retired
StackPath WAF
Discontinued, all services shut down June 2024
Not available, product retired
→
Last verified June 2026