Unlike Imperva, Barracuda provides a comprehensive Web Application and API Protection (WAAP) platform that is easy to buy, deploy, and manage.
Secure your apps with a comprehensive WAAP platform
Protect any application environment with ease
Easy-to-choose capabilities and plans
Award-winning support that always has your back
Secure your web applications and APIs
| Capability | Barracuda Application Protection | Imperva Application Protection |
|---|---|---|
| Web Application Protection | ||
|
OWASP Top 10 protection
|
||
|
Single security engine across form factors
|
||
|
Smart signatures to better respond to zero-days
|
||
|
Zero-day attack protection
|
Limited
|
|
|
IP threat intelligence
|
Limited
|
|
|
Data leak protection (DLP)
|
Limited to predefined patterns
|
|
|
Website supply chain protection
|
$
|
|
|
Advanced Threat Protection for file uploads
|
||
| DDoS Protection | ||
|
Unlimited volumetric DDoS attack prevention
|
$
|
|
|
Unlimited application DDoS attack prevention
|
$
|
|
|
Rate limiting
|
||
| API Protection | ||
|
Protect JSON and GraphQL APIs
|
||
|
Schema-based API discovery
|
||
|
Machine learning-powered JSON API discovery
|
||
|
Unlimited API rate limiting rules (Tarpit)
|
||
| Advanced Bot Protection | ||
|
Web scraping
|
||
|
Bot signature database
|
Limited
|
|
|
ML-powered threat intelligence
|
$
|
|
|
CAPTCHA insertion and challenges
|
Limited
|
|
|
Credential stuffing protection
|
||
|
Privileged account protection
|
$
|
|
|
Machine learning-backed bot detection
|
$
|
|
| Secure App Delivery | ||
|
Zero Trust Network Access
|
||
|
Load balancing with server health monitoring
|
$
|
|
|
Content routing
|
$
|
|
|
Containerized deployment
|
||
| Reporting and Analytics | ||
|
Log export to SIEM
|
Limited and requires AWS account
|
|
|
Auto configuration engine
|
||
|
Configuration snapshots
|
Secure your apps with a comprehensive WAAP platform.
Barracuda offers a full suite of integrated capabilities that share a common protection engine and UI, including:
API discovery powered by machine learning (ML)
Unmetered protection against distributed denial of service (DDoS) attacks
ML-powered Advanced Bot Protection
Client-side protection
Zero Trust access for applications
Imperva’s multiple solutions were added via acquisitions, so the lack of cohesive integration into a single console makes life difficult for admins. Features are missing from various models, and forcing older technologies into new architectures causes pain.
Protect any application environment with ease.
Barracuda Application Protection offers protection for your apps everywhere, no matter what form factor you need — appliance, virtual instance, SaaS, or container. You get the same great security engine that you can set up easily and get running quickly. Barracuda also offers our security engine as containers that run in the same pods, controlled by the same UI and APIs as our SaaS web application firewall.
Imperva has not been paying sufficient attention to this diverse range of requirements. This is quite easily seen in their solution for protecting service mesh environments. You must run a cluster of their WAF Gateway instances and proxy traffic to these instances to secure these microservices. If you need complete protection, all traffic must be routed here — a significant anti-pattern because they don’t have a suitable model for these deployments.
Easy-to-choose capabilities and plans.
Barracuda Application Protection has the complete range of capabilities and features required for comprehensive Web Application and API Protection. We offer two simple and easy-to-understand plans that make it straightforward for you to select the right solution. Pick the number of applications, choose the plan, and you are ready to go.
Imperva’s many plans require security teams to spend valuable time choosing and defending. Multiple plans are missing critical features that require additional payment and many hours of negotiating with your procurement teams.
Award-winning support that always has your back.
Barracuda’s support organization has won multiple awards, underscoring our customer-centric approach. Our support team is available to provide Professional Services and Technical Support 24/7 to ensure your applications are always up and protected. Our Professional Services team provides comprehensive onsite and remote services to accelerate implementation and help you maximize the effectiveness of Barracuda Application Protection to better secure your web apps and APIs without the need for additional internal staffing, training, or maintenance.
Compare this with Imperva, whose support has been called out in Gartner's Magic Quadrant as a reason for caution. This concern, combined with the uncertainty of the future of Imperva's product lines, quickly makes it clear Barracuda is the right choice.
Not only was it [Barracuda] easy to deploy, it was faster time to value, which we really appreciated.
