AWS WAF

A managed web application firewall for protecting applications hosted on AWS and CloudFront.

Pricing: usage
License: proprietary
Open source: No

Editorial review

AWS WAF has not yet been editorially reviewed. User reviews and published field data below are unaffected — we say so rather than implying an editorial verdict.

Facts & attributes

Every value carries its evidence state. “—” means unknown — never a silent default (P-02).

Identity · Taxonomy

Tags(open-source;cloud-native): waf, web-security, bot-control, owasp, awsVerification pending

Platform · Deployment

Delivery model(SaaS;self-hosted;desktop;mobile;embedded;managed-cloud;appliance): managed-cloudVerification pending

Pricing · Licensing

License model(proprietary;open-source;source-available;dual-license): proprietaryVerification pending
Pricing model(free;subscription;usage;seat;asset;transaction;revenue-share;perpetual;custom): usageVerified
Starting price(29): 5Verified

Features · Product · Fit

Core capabilities(authoring;automation;analytics): Web traffic filtering by IP, HTTP headers and body, or custom URIs, Managed rules blocking common web exploits like SQL injection and cross site scripting, Bot Control managed rule group to block or rate-limit pervasive bots, Account Takeover and Account Creation Fraud Prevention rule groups, Preconfigured protection packs with OWASP Top 10 coverage, Consolidated security dashboard with real-time threat monitoringVerification pending

Api · Integrations · Ecosystem

API available(true/false): trueVerification pending

Audience · Use · Case

Best for(Neutral editorial summary): AWS workloads needing pay-per-use web app and API protection with managed rules, e.g. via Application Load BalancerVerification pending
Company-size fit(individual;SMB;mid-market;enterprise): SMB, mid-market, enterpriseVerification pending
Primary use cases(build;monitor;automate): Protect web applications from common exploits, Monitor, block, or rate-limit bot traffic, Collect payments from AI bots and agents accessing content and APIs, Centralized rule deployment across multiple websitesVerification pending
Skill level(beginner;intermediate;advanced;specialist): advancedVerification pending

Vendor · Maintainer

Vendor type(commercial;foundation;community;government;consortium;individual): commercialVerification pending

User reviews

Review policy

No published reviews yet.