Skip to content
SPECIFICTION
Get listed

AWS WAF

aws.amazon.com

WebAPI
Visit aws.amazon.com
Spec score 7.6 #8 of 29 in Web Security Software

Spec sheet

Purpose
AWS WAF protects web applications from common exploits.Read 30 Sep 2026 · aws.amazon.com
Integrations
AWS WAF charges are additional to pricing for CloudFront, Cognito, Application Load Balancer, API Gateway, AppSync, and Shield Advanced.Read 30 Sep 2026 · aws.amazon.com
Compliance
AWS states it supports 143 security standards and compliance certifications, including PCI-DSS, HIPAA/HITECH, FedRAMP, GDPR, FIPS 140-3, and NIST 800-171.Read 30 Sep 2026 · aws.amazon.com
Support
AWS offers pricing assistance through specialists who can provide a personalized quote.Read 30 Sep 2026 · aws.amazon.com
Additional costs
Marketplace managed rule groups can incur seller fees in addition to AWS WAF charges.Read 30 Sep 2026 · aws.amazon.com
AI traffic monetization
AWS WAF offers configurable pricing and payment verification for AI bots and agents accessing content and APIs, at no additional AWS WAF charge.Read 30 Sep 2026 · aws.amazon.com
Bot controls
Bot Control can block or rate-limit pervasive bots and allow common bots such as status monitors and search engines.Read 30 Sep 2026 · aws.amazon.com
Fraud prevention
Fraud Control monitors login and signup pages for compromised credentials and fake account creation.Read 30 Sep 2026 · aws.amazon.com
Intended customers
AWS says its customers include startups, enterprises, nonprofits, and governments.Read 30 Sep 2026 · aws.amazon.com
Managed rules
Managed rule groups provide protections including bot control, account takeover prevention, and account creation fraud prevention.Read 30 Sep 2026 · aws.amazon.com
Mobile telemetry
Account takeover and account creation fraud prevention support optional or recommended JavaScript and iOS/Android SDKs for additional device telemetry.Read 30 Sep 2026 · aws.amazon.com
Pricing factors
Charges depend on web ACLs, rules, and processed requests, and pricing may vary across AWS Regions.Read 30 Sep 2026 · aws.amazon.com
Protection setup
Guided setup offers a single-page workflow with preconfigured security defaults tailored to an application type.Read 30 Sep 2026 · aws.amazon.com
Rule reuse
A centralized set of rules can be deployed across multiple websites and applications.Read 30 Sep 2026 · aws.amazon.com
Traffic rules
Rules can filter requests by IP address, HTTP headers and body, and custom URIs, and can block SQL injection and cross-site scripting.Read 30 Sep 2026 · aws.amazon.com

Plans and prices

Usage-based AWS WAF Price not published Monthly fees are prorated hourly; charges depend on web ACLs, rules, and requests. No upfront commitments · Additional charges may apply for Bot Control, Fraud Control, DDoS Protection, CAPTCHA, and Marketplace managed rule groups Read 30 Sep 2026 · aws.amazon.com

Every AWS WAF plan and price →

Where Specifiction places it

Alternatives to AWS WAFAll alternatives →