Tech riderRev. 30 Sept 2026
- 1Runs onAPI, Web
- 2CostsNot stated by the maker
- 3Deployment modelhybrid
- 4Managed rule setsYes
- 5API protectionYes
- 6Bot managementYes
- 7Rate limitingYes
6 lines stated Written from the maker's own pages: aws.amazon.com
Overview
AWS WAF is ranked #15 of 30 in web application firewall software on Specifiction. It runs on API, Web. There is no free plan.
AWS WAF plans and pricing
All plansUsage-based AWS WAF Not published Monthly fees are prorated hourly; charges depend on web ACLs, rules, and requests. No upfront commitments · Additional charges may apply for Bot Control, Fraud Control, DDoS Protection, CAPTCHA, and Marketplace managed rule groups aws.amazon.com · 30 Sept 2026
Compared on web application firewall software
- Free plan
- Noaws.amazon.com
- Paid from
- $5/moaws.amazon.com
- Deployment model
- hybridaws.amazon.com
- Managed rule sets
- Yesaws.amazon.com
- API protection
- Yesaws.amazon.com
- Bot management
- Yesaws.amazon.com
- Rate limiting
- Yesaws.amazon.com
Facts
- Purpose
- AWS WAF protects web applications from common exploits.aws.amazon.com · 30 Sept 2026
- Traffic rules
- Rules can filter requests by IP address, HTTP headers and body, and custom URIs, and can block SQL injection and cross-site scripting.aws.amazon.com · 30 Sept 2026
- Managed rules
- Managed rule groups provide protections including bot control, account takeover prevention, and account creation fraud prevention.aws.amazon.com · 30 Sept 2026
- Bot controls
- Bot Control can block or rate-limit pervasive bots and allow common bots such as status monitors and search engines.aws.amazon.com · 30 Sept 2026
- Fraud prevention
- Fraud Control monitors login and signup pages for compromised credentials and fake account creation.aws.amazon.com · 30 Sept 2026
- Protection setup
- Guided setup offers a single-page workflow with preconfigured security defaults tailored to an application type.aws.amazon.com · 30 Sept 2026
- Rule reuse
- A centralized set of rules can be deployed across multiple websites and applications.aws.amazon.com · 30 Sept 2026
- Integrations
- AWS WAF charges are additional to pricing for CloudFront, Cognito, Application Load Balancer, API Gateway, AppSync, and Shield Advanced.aws.amazon.com · 30 Sept 2026
- Mobile telemetry
- Account takeover and account creation fraud prevention support optional or recommended JavaScript and iOS/Android SDKs for additional device telemetry.aws.amazon.com · 30 Sept 2026
- AI traffic monetization
- AWS WAF offers configurable pricing and payment verification for AI bots and agents accessing content and APIs, at no additional AWS WAF charge.aws.amazon.com · 30 Sept 2026
- Pricing factors
- Charges depend on web ACLs, rules, and processed requests, and pricing may vary across AWS Regions.aws.amazon.com · 30 Sept 2026
- Additional costs
- Marketplace managed rule groups can incur seller fees in addition to AWS WAF charges.aws.amazon.com · 30 Sept 2026
- Support
- AWS offers pricing assistance through specialists who can provide a personalized quote.aws.amazon.com · 30 Sept 2026
- Compliance
- AWS states it supports 143 security standards and compliance certifications, including PCI-DSS, HIPAA/HITECH, FedRAMP, GDPR, FIPS 140-3, and NIST 800-171.aws.amazon.com · 30 Sept 2026
- Intended customers
- AWS says its customers include startups, enterprises, nonprofits, and governments.aws.amazon.com · 30 Sept 2026
Best AWS WAF alternatives
See all 20 All accessCh 01 F5 BIG-IP APM Free trialAndroidAPI 7.7 All accessCh 02 BunkerWeb Free planFree trialAPI Free to start7.3 All accessCh 03 Fastly Image Optimizer Free planAPILinux from $0.01/mo7.3 All accessCh 04 Gcore WAAP Free planFree trialAPI from €25/mo7.2 All accessCh 05 Wallarm API Security Free planAPILinux Free to start7.0 All accessCh 06 ModSecurity Free planLinuxMac Free to start6.8
Where it ranks on Specifiction
Is AWS WAF yours?
Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.
Sources
- aws.amazon.com/waf/· checked 30 Sept 2026
- aws.amazon.com/waf/features/· checked 30 Sept 2026
- aws.amazon.com/waf/pricing/· checked 30 Sept 2026
- aws.amazon.com/compliance/· checked 30 Sept 2026
- aws.amazon.com/about-aws/· checked 30 Sept 2026