Sold by: Radware
Deployed on AWS
Radware Cloud WAF is a fully managed Cloud Application Protection Service providing the industry's most comprehensive web application security solution. It integrates Radware's cloud-delivered WAF technology, API protection, Bot management, application layer DDoS protection, client-side protection, analytics, threat detection and security feeds in a single portal.
4.6
Overview
Radware Cloud WAF is a fully managed Cloud Application Protection Service providing the industry's most comprehensive web application security solution. The service integrates Radware's Cloud WAF, API Protection, Bot management, client-side and application layer DDoS protection in a single portal that provides security analytics, threat detection and real-time security feeds to protect applications against hacking, malicious bots, API exposure, Web DDoS attacks, supply chain attacks and other vulnerabilities. Radware's combination of negative and positive security models provides a complete level of protection against OWASP Top 10 threats and zero-day attacks. API Discovery and Protection - End-to-end API solution from Discovery to protection at a click of a button. Radware auto API discovery maps all of your applications documented and undocumented third-party APIs, automatically generates Open API schema files, generates tailored security policies to detect and block API-focused attacks in real time and enforce protection across all your APIs. Radware's advanced API protection eliminates your documenting and protecting APIs overheads and keeps your organization protected across the board. Bot Management - Integrated Bot Manager provides comprehensive mitigation options, such as Blockchain-based Crypto challenges to counter attacks. It ensures precise bot management for web, mobile, and API traffic by employing behavioral modeling, collective bot intelligence, and fingerprinting. This defense guards against all OWASP 21 automated threats, including account takeover, credential stuffing, DDoS, fraud, and web scraping, fortifying online operations. Web DDoS Protection - Industry leading application-layer L7 protection against DDoS attacks, based on Radware's unique machine-learning-based behavioral detection that distinguishes between legitimate and malicious traffic, and automatically generates granular signatures in real-time to protect against zero-day attacks. Best-in-class security against a wide variety of threats, including HTTP Floods, HTTP bombs, low-and-slow assaults, Brute Force attacks, and disruptive web DDoS Tsunamis. Client-side Protection - Easily block requests to suspicious third-party services in your supply chain and adhere to data security compliance standards. Protect against client-side attacks coming from third party JS services - Formjacking, Skimming,Magecart, automatically and continuously discover all third-party services in your supply chain with detailed activity tracking, as well as get alerts & threat level assessment according to multiple indicators, including script source and destination domain. Pricing We have 3 different pricing packages - Standard, Advanced and Complete. The Standard and Advanced packages come with some of the features while Complete provides full coverage.
Highlights
- Fully Managed Web Application Protection Service - 24x7 Fully managed security service by Radware's expert Emergency Response Team(ERT). Protect Against OWASP Vulnerabilities - Stay protected against 150+ known attack vectors, including the OWASP Top 10 Web Application Security Risks, Top 10 API Security Vulnerabilities, Top 21 Automated Threats To Web Applications, and Top 10 Client-side vulnerabilities
- Detect, Manage and Mitigate Bots - Detect and distinguish between good and bad bots to protect websites, mobile apps and APIs. Easily optimize and customize your bot management policies to provide a better user experience and drive more ROI from your application traffic. End-to-end API Protection - From discovery to enforcement at a click of a button, Radware combines behavioral analysis and policy automation to protect from increasingly sophisticated API assaults.
- Mitigate Application-Level DDoS Assaults - Radware's DDoS protection technologies provide the shortest time to detection and mitigation of most advanced and high volume HTTP-based DDoS assaults by utilizing patented behavioral analysis, machine learning-based engines. Protect Client-Side From Supply Chain Attacks - This solution offers advanced client side protection that ensures the protection of end users data when interacting with any third-party services in the application supply chain.
Details
Sold by
Categories
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/Mbps |
|---|---|---|
Cloud Application Protection Standard,10 Mbps,1 Application - Monthly | Cloud Application Protection Standard,10 Mbps,1 Application - Monthly | $638.00 |
Cloud Application Protection Standard,50 Mbps,1 Application - Monthly | Cloud Application Protection Standard,50 Mbps,1 Application - Monthly | $1,940.00 |
Cloud Application Protection Standard,100 Mbps,1 Application - Monthly | Cloud Application Protection Standard,100 Mbps,1 Application - Monthly | $3,069.00 |
Advanced_10 | Cloud Application Protection Advanced,10 Mbps,1 Application - Monthly | $1,276.00 |
Advanced_Addon | Cloud Application Protection Advanced,1 Application Add-On - Monthly | $127.00 |
Complete_10 | Cloud Application Protection Complete,10 Mbps,1 Application - Montly | $2,233.00 |
Complete_Addon | Cloud Application Protection Complete,1 Application Add-On - Monthly | $193.00 |
CDN_Add_on | Cloud Application Protection CDN Service Enablement - Monthly | $287.00 |
CDDOS_OnDemand | On-Demand Cloud DDoS Protection Service - Legitimate 10Mbps - Monthly | $2,750.00 |
CDDOS_AlwaysOn | Always-On Cloud DDoS Protection Service - Legitimate 10Mbps - Monthly | $4,950.00 |
Dimensions summary
Pricing is usage-based and measured in Mbps of legitimate bandwidth. You start with a base Cloud Application Protection plan in three levels: Standard, Advanced, and Complete. Standard sizes by throughput (10, 50, or 100 Mbps) for one application. Advanced and Complete cover 10 Mbps for one application, with per-application add-ons to expand coverage. On top of any base plan, you can layer independent add-ons billed separately. These include CDN enablement, Cloud DDoS Protection (on-demand or always-on), Web DDoS, Firewall as a Service, Network Analytics, AI SOC Xpert, Access Logs, LLM Firewall, PCI DSS compliance, ERT Premium support, extra protected networks, and the SecurePath connector.
Top-of-mind questions for buyers
Pricing meters legitimate traffic bandwidth, measured in Mbps, not attack or blocked traffic. Your base plan is sized to a bandwidth tier, and many add-ons are also priced against legitimate bandwidth blocks, such as 10Mbps or 200Mbps units. Attack traffic that the service filters out does not count toward your metered bandwidth.
You pick one base Cloud Application Protection plan, then layer optional add-ons that each bill separately. Charges add together, so your total is the base plan plus every add-on you select. Per-application add-ons extend coverage one application at a time. Bandwidth-based add-ons bill in fixed blocks, like 10Mbps or 200Mbps.
Both meter legitimate bandwidth in 10Mbps units. On-Demand DDoS Protection engages only when mitigation is triggered, suited to occasional attack response. Always-On keeps protection active continuously, suited to constant exposure. You choose one model per subscription, and each is billed monthly against your legitimate bandwidth.
www.radware.com
Helpful?
Vendor refund policy
No refund offered
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Online Support Service Portal -Appropriate for non-critical issues, such as general inquiries, requests for technical documentation/ information, schedule support during an upcoming maintenance window, view installed base and manage support cases.24x7, where Internet service is available
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Alteon VA supports the complex functionality requirements of Enterprise applications which go beyond basic availability and quality of experience features. These include: Layer 7 Rewrite, Application Level Traffic Steering, Caching, SSL Offload, compression, acceleration. WAF (AppWall), SecureUR L
Cloud Native Protector provides an agentless, cloud-native solution for comprehensive protection of AWS assets, to protect both the overall security posture of cloud environments, as well as protect individual cloud workloads against cloud-native attack vectors
Behavioral algorithms to detect and mitigate DDoS attacks on network and application
Radware API Security Service delivers end-to-end API protection through continuous API discovery, runtime posture management, contextual testing, and AI-driven defense. It helps organizations identify exposed or misconfigured APIs, reduce risk, and protect against business logic abuse, automated threats, and DDoS attacks across modern application environments.
Customer reviews
reviewer2906838
Cloud security has strengthened web protections and now blocks most malicious traffic automatically
Reviewed on Oct 15, 2026
Review from a verified AWS customer
What is our primary use case?
Radware Cloud WAF Service protects my internet-facing web applications and APIs from cyber threats such as SQL injection, cross-site scripting, bot attacks, DDoS attacks, and other OWASP vulnerabilities. I use it to continuously monitor and filter malicious traffic, ensure application availability, security, and compliance while reducing the risk of data breaches and service disruptions.
Radware Cloud WAF Service secures my customer-facing web application. For example, I use Radware Cloud WAF Service to secure public-facing applications by blocking SQL injection and XSS attacks and protecting the login API from bot-driven abuse and malicious traffic.
The challenge Radware Cloud WAF Service addresses is its unique ability to mitigate automated bot attacks and malicious scanning while maintaining a seamless user experience. It reduced operational overhead, improved visibility into web threats, and helped ensure uninterrupted access to critical applications and APIs.
How has it helped my organization?
Radware Cloud WAF Service has had a significant positive impact on my organization's web application security posture. Since implementation, I have seen a noticeable reduction in malicious traffic reaching my application servers due to the ability to automatically detect and block threats such as SQL injection, XSS, bot attacks, and vulnerability exploitation attempts. One of the key improvements has been the increase in visibility into web-based threats through centralized monitoring and detailed reporting. This has enabled faster investigation and response to security incidents while reducing the time spent on manual log analysis. Overall, Radware Cloud WAF Service has improved application availability, strengthened my security posture, reduced risk, and provided greater confidence that my critical web applications and APIs remain protected against evolving cyber threats.
While I do not publicly track exact figures, I have observed an estimated 70 to 80% reduction in malicious web requests reaching my application after implementing Radware Cloud WAF Service. The platform's automated detection and blocking capabilities significantly reduced the number of web attacks remaining for manual investigation. I saw that estimated 70 to 80% reduction and a 40 to 50% reduction in investigation time for web-related security incidents. The automated threat mitigation and improved visibility were the biggest contributors to these improvements.
What is most valuable?
The standout features of Radware Cloud WAF Service are automated attack prevention, bot protection, DDoS mitigation, behavioral analytics, and easy cloud-based deployment. These capabilities help strengthen application security while minimizing manual effort and maintaining application performance.
Real-time threat detection and automated protection are the features I rely on most in my day-to-day operations. They proactively block web attacks with minimal manual effort, provide clear visibility into malicious activity, and help ensure applications remain secure and available.
One additional aspect worth highlighting about Radware Cloud WAF Service is the usability and integration capabilities of the platform. The user interface is intuitive and provides a centralized view of attacks, blocked requests, traffic trends, and security events, making day-to-day monitoring straightforward. I also benefit from the integration with SIEM and security monitoring tools, which helps correlate WAF events and other security logs for faster incident investigation and response.
The capabilities of Radware Cloud WAF Service help improve threat detection and reduce false positives by identifying unusual traffic patterns and emerging attacks. From a governance and security perspective, it provides good visibility and control, allowing security teams to review and validate AI-driven decisions. Overall, the AI features enhance security operations while maintaining transparency and oversight.
Radware Cloud WAF Service is generally accurate and reliable in identifying malicious traffic, bot activity, and behavior patterns. In my experience, AI helps reduce false positives and improve detection compared to traditional rule-based approaches alone. While occasional tuning may be required for a specific application, the overall accuracy and consistency of the AI-driven insights have been effective for day-to-day security operations.
Radware Cloud WAF Service is highly effective in blocking unknown threats because it uses behavioral analysis, user learning, and anomaly detection rather than relying solely on predefined signatures. This allows me to identify and mitigate suspicious activity even when the attack pattern has not been seen before. For example, I observed automated traffic targeting a login API from multiple IP addresses using an unusual request pattern. Although the traffic did not match a known signature attack, Radware Cloud WAF Service identified the abnormal behavior, flagged it as suspicious, and automatically applied mitigation controls. This helped prevent potential credential stuffing and bot attacks without impacting legitimate users. Overall, its ability to detect and respond to previously unknown threats has improved my confidence in protecting web applications and APIs against evolving attack techniques.
The automated analytics of Radware Cloud WAF Service are one of the strongest aspects of the solution. They provide clear visibility into attack threats, malicious traffic, and security events in real-time, making it easier to identify threats and prioritize investigation. The dashboards and automated insights help reduce manual analysis effort and enable faster incident response.
I use the API discovery feature, which helps identify and inventory my APIs.
What needs improvement?
For Radware Cloud WAF Service improvements, I suggest more customizable reporting, simpler policy tuning for complex environments, improved dashboard navigation, and broader native integrations with other third-party security tools. However, the platform is reliable and effective for web application protection.
For how long have I used the solution?
I have been using Radware Cloud WAF Service for around two and a half years.
What other advice do I have?
I would rate Radware Cloud WAF Service overall as a nine out of ten. I give it a nine because it delivers strong protection against web application attacks, provides effective bot mitigation, and overall things are handled well. If these enhancements were available, especially more customizable analytics and broader native integrations, it would likely be a ten out of ten solution for my organization. Overall, Radware Cloud WAF Service is a reliable and mature WAF platform that effectively addresses web application security requirements.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
devops2188878
Consistent web protection has secured our applications and blocked malicious attacks
Reviewed on Oct 14, 2026
Review provided by PeerSpot
What is our primary use case?
My main use case for Radware Cloud WAF Service is that I rely on it for protection for at least two years, and before that, for five years.
How has it helped my organization?
Radware Cloud WAF Service has positively impacted my organization, and I consider that its best feature for us.
Specific outcomes that show how Radware Cloud WAF Service positively impacted my organization include the threat detection and API protection.
What is most valuable?
The best features that Radware Cloud WAF Service offers include my involvement in multiple projects; one was four years ago, and one was two years ago, where we successfully implemented Radware Cloud WAF Service for both projects.
The features of Radware Cloud WAF Service that stood out to me the most were suggested by our cyber security division at the start of the project, and we successfully implemented those features.
I would add that we had some security issues in one project where we found our site had been hacked, and some malicious files were injected into our server.
What needs improvement?
Regarding improvements for Radware Cloud WAF Service, overall, we do not have any issues after implementation. I believe it effectively blocks many malicious calls.
For how long have I used the solution?
I was involved in two projects using Radware Cloud WAF Service. Approximately five years ago, we had a project that was public-facing, so I was helping to implement Radware Cloud WAF Service as a WAF and DDoS protection solution, and two years ago, I was working on another project.
I have used Radware Cloud WAF Service in several projects for a number of years, specifically five years ago.
How was the initial setup?
In terms of deployment, we do not have any issues because our cyber security division hosted the service and quickly deployed it for us.
What other advice do I have?
I have played multiple roles while using Radware Cloud WAF Service, sometimes as a developer, sometimes as a designer, and also involved in application architecture. On a scale of one to ten, I rate Radware Cloud WAF Service a ten because I believe it is a perfect tool. Our organization engages with Radware Cloud WAF Service closely while deploying other public-facing applications using Radware Cloud WAF Service.
Gabriele V.
Easy implementation and impeccable 24/7 technical support
Reviewed on Oct 08, 2026
Review provided by G2
What do you like best about the product?
The ease of implementation and the 24/7 technical support it offers.
What do you dislike about the product?
The installation of certificates is rather cumbersome; I would prefer to be able to upload them directly via a certificate upload.
What problems is the product solving and how is that benefiting you?
We enhance the security of our clients' systems by addressing issues related to potential attacks against web apps or exposed applications. Among the modules I prefer are Web DDoS Protection and RFC Violation Protection, as they allow me to manage these situations more effectively.
YogeshTalekar
Security has improved as we block DDoS and bot attacks and free our team for other work
Reviewed on Oct 07, 2026
Review provided by PeerSpot
What is our primary use case?
My main use case for Radware Cloud WAF Service is to prevent attacks. We have web applications for our company, and we need to prevent those web apps from various kinds of attacks such as DDoS or injection attacks.
How has it helped my organization?
We have stronger security now with Radware Cloud WAF Service.
Since using Radware Cloud WAF Service, there are reductions in attacks. Previously, the traffic was too high, so the chances of DDoS were very high. Now we are seeing that traffic is limited and genuine, resulting in a reduction of attack attempts.
I would say the improvement is around 80%, and as I already mentioned, it really reduces unnecessary traffic.
It really frees up the IT team for other projects. Since Radware Cloud WAF Service is monitoring our web apps traffic and mitigating potential attacks, this saves our time.
What is most valuable?
Radware Cloud WAF Service offers blocking and monitoring logs, so if I want to block any kind of traffic, I can block it, and if I want to monitor, then I can monitor. These fields are good.
Automated application mapping is good.
I am accessing Radware Cloud WAF Service for blocking unknown threats and attacks in terms of API DDoS, geo-blocking, data leak prevention, and bot protection.
Bot protection is really helpful for our organization to mitigate bot traffic and identify and block that traffic so that we can prevent unnecessary attacks.
Automated analysis in Radware Cloud WAF Service is good and really helpful for us to identify the events and the traffic in those events to clarify bot traffic or unnecessary traffic and genuine traffic so that we can take the required action accordingly.
With our existing application APIs and SIM monitoring tools, Radware Cloud WAF Service makes it easier to centralize security visibility and correlate the WAF events with other security and application data.
What needs improvement?
There is one thing that needs to be improved in Radware Cloud WAF Service. When I am onboarding any kind of application and while bypassing those applications, it takes too much time. This time needs to be lessened because it may be causing business impact sometimes.
For how long have I used the solution?
I have been using Radware Cloud WAF Service for around one and a half years.
What do I think about the stability of the solution?
Radware Cloud WAF Service is pretty stable.
What do I think about the scalability of the solution?
Radware Cloud WAF Service is pretty scalable. I can access any kind of feature and any kind of application onboarding. There are no limitations or other restrictions.
How are customer service and support?
Customer support is good and punctual. I am rating the customer support a ten.
What was our ROI?
Radware Cloud WAF Service is a time-saving product.
What's my experience with pricing, setup cost, and licensing?
The pricing, setup cost, and licensing of Radware Cloud WAF Service are good. It is pretty costly, but it is worth it.
Which other solutions did I evaluate?
I evaluated other options before choosing Radware Cloud WAF Service, but that information is confidential and cannot be shared.
What other advice do I have?
Overall, I am rating Radware Cloud WAF Service as a nine. It is a good product, but it is not perfect, as I have told you about the improvements needed for this tool. Although it is a good tool, that is why I am giving it a nine.
I have not quite used the AI capabilities of Radware Cloud WAF Service as of now, but I will use it and then provide feedback.
Radware Cloud WAF Service is a good service that can be used with AI upgradation. Customer support is pretty good, and it can mitigate unnecessary traffic and prevent DDoS or bot attacks mostly. It is a pretty good tool to use for web apps.
Shripad Mahurkar
Security has improved as we filter malicious traffic and protect trading web applications
Reviewed on Oct 07, 2026
Review provided by PeerSpot
What is our primary use case?
Radware Cloud WAF Service is primarily used to protect our web applications. We have various kinds of applications related to trading apps and our company web app, so we need to protect them from DoS and DDoS web attacks. For those main applications and managing the traffic for those applications, we are using Radware Cloud WAF Service. With this service, we have successfully mitigated some DoS attacks and some DDoS attacks, and we have prevented some attacks as well by blocking some IPs and implementing country geo-blocking. Geo-blocking is the most helpful feature from Radware Cloud WAF Service.
How has it helped my organization?
Radware Cloud WAF Service has positively impacted my organization by making the traffic manageable, and approximately 90% of the traffic is genuine traffic. It has really helped us find attacks and mitigate or prevent them.
We measure that 90% genuine traffic by observing multiple incidents where we can see how the traffic is functioning. Sometimes the traffic flow is too high, and we can apply our judgment on what kind of traffic and the amount of traffic needed for our applications, helping us prevent much higher traffic and attacks such as DoS attacks.
What is most valuable?
Radware Cloud WAF Service offers excellent features, with geo-blocking being the best. Geo-blocking is a very good feature that helps us block an entire country; for instance, we can block all traffic from Pakistan to prevent access to our web apps.
Geo-blocking is the feature that is mostly helpful, but there is also one more feature which is customized IP blocking. It is helpful for us to block some customized IPs from attackers to prevent zero-day attacks.
Radware Cloud WAF Service's AI capabilities are really good and helpful for us, and I think they are still in the learning phase, so we will monitor how they improve.
What needs improvement?
Sometimes we need to bypass the application from Radware Cloud WAF Service to our LB, and that process takes too much time, which I think Radware needs to improve by reducing the time.
The main point is that it takes too much time to bypass the application.
The accuracy and reliability of the output from Radware Cloud WAF Service meet my expectations, but they still need to be improved properly.
For how long have I used the solution?
I have been using Radware Cloud WAF Service for one and a half years.
What do I think about the stability of the solution?
Radware Cloud WAF Service is 98% stable.
What do I think about the scalability of the solution?
Radware Cloud WAF Service's scalability is good and pretty good.
How are customer service and support?
Customer support is proper and good for us; we get regular responses from Radware, so it is good.
Which solution did I use previously and why did I switch?
This is our first solution as a Cloud WAF.
What was our ROI?
We have saved money and time by using Radware Cloud WAF Service to mitigate DoS attacks and clean up the mess.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing, setup costs, and licensing for Radware Cloud WAF Service is good.
Which other solutions did I evaluate?
We evaluated other options, but it is confidential.
What other advice do I have?
Radware Cloud WAF Service is a good service, and the support is always available; if we have any incidents and require immediate support, we can contact Radware team, and they respond immediately. Other services are also good. I advise others looking into using Radware Cloud WAF Service to go ahead and use it, as it can properly protect web apps. I rate Radware Cloud WAF Service a nine out of ten.