BitNinja is a security tool with quick scans, scheduled scans, threat quarantine, and automatic remediation.
Alternatives to Cloudflare WAF
Cloudbric offers cloud security services across web application and API protection, public cloud security, security apps, and VPN.
Oracle Cloud Infrastructure Secret Management stores, retrieves, rotates and manages credentials used by applications and cloud environments.
- 4
Tencent Cloud WAF
WebAPISelf-hosted6.9From $350 a month - 5

DataDome API Protection
DataDome API Protection monitors API traffic in real time to detect and block automated threats, fraud, and unauthorized access.
AndroidiOSWebAPI6.8From $3,830 a month - 6

Gcore WAAP
Gcore WAAP is a SaaS reverse proxy that protects websites, web applications and APIs from threats such as SQL injection, cross-site scripting and API abuse.
Free planWebAPI6.8From €25 a month - 7
Haltdos
Haltdos provides security and delivery tools for web applications and APIs across on-premise, cloud, and hybrid environments.
Free planWebAPILinuxSelf-hosted6.8From $30 a month - 8
Wordfence Security
Wordfence Security is a WordPress security plugin for self-hosted sites, with a Web Application Firewall, malware scanner, login protection, and live traffic views.
Free planWebSelf-hosted6.8From $149 a year - 9

SafeLine
SafeLine is a self-hosted web application firewall and reverse proxy designed to protect web apps from attacks and exploits.
Free planWebLinuxSelf-hosted6.7From $10 a month - 10

Security Ninja
Security Ninja is a WordPress security plugin for site owners, freelancers, and agencies.
Free planWebSelf-hosted6.7From $119 a year - 11

Hide My WP Ghost
Hide My WP Ghost is a WordPress security plugin that conceals common WordPress paths and helps protect sites from hackers, bots and detectors.
Free planWebSelf-hosted6.6From $29 a year - 12
Google Cloud Secret Manager
Free planWeb6.5From $0.02 a month - 13

Imperva API Security
Imperva API Security manages API discovery, risk assessment, threat detection, and mitigation in a console for cloud, on-premises, and hybrid environments.
WebAPISelf-hosted6.5 - 14

BunkerWeb
BunkerWeb is an open-source web application firewall and NGINX-based web server that sits in front of web services as a reverse proxy.
Free planWebAPILinuxSelf-hosted6.2Free plan - 15

ModSecurity
ModSecurity is a free, open-source web application firewall that inspects incoming HTTP(S) traffic and can block malicious requests before they reach an application.
Free planLinuxmacOSSelf-hostedWindows6.1Free plan - 16

OWASP Coraza WAF
OWASP Coraza WAF is a free, open-source Web Application Firewall for APIs and web applications.
Free planAPILinuxmacOSSelf-hosted6.1Free plan - 17

open-appsec
WebLinuxSelf-hosted6.0From $948 a year - 18
Shield Security
Shield Security is a WordPress plugin for blocking bots, scanning for malware and vulnerabilities, protecting logins, and helping restore sites from backups.
Free planWeb6.0Free plan - 19
Sucuri Website Firewall
Sucuri Website Firewall is a paid edge service that filters website traffic before it reaches a server.
WebAPI6.0From $9.99 a month - 20
5.6From $0.60 a month - 215.5From $140 a month
- 22

AWS WAF
AWS WAF protects web applications from common exploits by filtering requests and applying security rules.
WebAPI5.5 - 23

F5 WAF for NGINX
LinuxSelf-hosted5.4 - 245.2
- 25
Check Point WAF (formerly CloudGuard WAF)
Check Point WAF, formerly CloudGuard WAF, protects web and API assets through a hybrid deployment model.
WebAPI5.1 - 265.0
- 274.9
- 28
Fastly Next-Gen WAF
WebLinux4.9 - 29

FortiWeb
Web4.9 - 304.9


