Cloudflare Gateway
8.3#1 in zero trust network access software$7 usage-basedFree planAndroidiOSWebAPI
VisitCloudflare Gateway vs OWASP Coraza WAF
OWASP Coraza WAF
6.1#9 in web security softwareFree planFree planAPILinuxmacOSSelf-hosted
VisitWhat both publish
| Fact | Cloudflare Gateway | OWASP Coraza WAF |
|---|---|---|
| Integrations | Cloudflare One documentation lists identity-provider integrations including Google, Google Workspace, GitHub, Microsoft Entra ID, Okta, OneLogin, PingOne, Keycloak and custom SAML or OIDC providers. | Official connectors are listed for NGINX, Envoy, Caddy, Apache APISIX, proxy-wasm, HAProxy, Traefik, and libcoraza. |
Cloudflare Gateway plans
- FreeFree
- ContractPriced on request
- Free PlanFree
- Pay-as-you-go$7 a month
- Contract Plan—
OWASP Coraza WAF plans
- Open sourceFree
Pick Cloudflare Gateway if…
Cloudflare Gateway may suit individuals or organizations that need filtering across supported devices, browsers, or network environments. The Free plan covers up to 50 users, while the paid options have no user limit and offer longer standard log retention.
Pick OWASP Coraza WAF if…
Coraza suits teams seeking a free, self-hosted WAF for APIs or web applications, particularly those using compatible connectors or SecLang rulesets. Users should check the Go requirement and the stated v3 persistent-collection limitation.