cybersecdirectory

WAF vendors

We list 23 companies active in WAF and bot protection, and 8 of them have it as their main focus. 6 are public, 4 are owned by another company and 13 are private. Most are based in the United States (18). The oldest, Microsoft, was founded in 1975. By revenue from annual reports, the largest company here is Microsoft ($331.8bn in FY2026).

By countryUnited States 18

Companies focused on WAF and bot protection

8 companies
CompanyBased inFoundedSizeOwnershipRevenue
F5

F5 provides application delivery and security solutions for hybrid multicloud environments.

Seattle, United States1996Public, FFIV$3.1bn (FY2025)
Fastly

Fastly provides an edge cloud platform that helps businesses deliver, secure, and deploy applications and AI workloads.

San Francisco, United States2011Public, FSLY$624.0m (FY2025)
Cloudbric

Cloudbric provides cloud-based security services including web application firewalls and VPNs.

Seoul, South Korea2015Private
Imperva

Imperva is a cybersecurity company that provides application security and data security.

San Mateo, United States2002Owned by Thales
Sucuri

Sucuri provides cloud-based website security.

Menifee, United States2010Owned by GoDaddy
Transparent Edge

Transparent Edge is a European content delivery network and edge computing platform that also provides web and application security.

Madrid, Spain2008Private
HUMAN Security

HUMAN Security protects digital interactions from bots, fraud, and abuse across advertising, applications, and accounts.

New York, United StatesPrivate
Penta Security

Penta Security develops web application firewalls, encryption and authentication products for enterprises and government agencies.

South Korea1997Private

Also active in WAF and bot protection

15 companies
CompanyBased inFoundedSizeOwnershipRevenue
Microsoft

Microsoft sells software, cloud services, hardware, and gaming products.

Redmond, United States1975228,000 staffPublic, MSFT$331.8bn (FY2026)
Fortinet

Fortinet provides cybersecurity solutions and services, including networking and security convergence, for enterprises and governments.

Sunnyvale, United States200015,109 staffPublic, FTNT$6.8bn (FY2025)
Cloudflare

Cloudflare provides a global network for security, performance, and full-stack development.

San Francisco, United States20092,440 staffPublic, NET$2.2bn (FY2025)
A10 Networks

A10 Networks provides secure, high-performance networking solutions for applications and AI workloads.

San Jose, United States2004Public, ATEN$290.6m (FY2025)
Amazon Web Services

Amazon Web Services is a cloud computing platform that provides a wide range of services.

Seattle, United States2006Owned by Amazon
Appdome

Appdome provides a no-code platform for building security and anti-fraud defenses into mobile apps.

Redwood City, United StatesPrivate
Arcjet

Arcjet provides runtime security for AI agents, enforcing policies at the action boundary.

San Francisco, United States2023Private
Barracuda Networks

Barracuda Networks provides cybersecurity solutions for email, networks, applications, and data.

Campbell, United States2003Owned by KKR
Cequence Security

Cequence Security protects applications, APIs, and AI agents from attacks and abuse.

Santa Clara, United States2014Private
Comodo Group

Comodo Group sells cybersecurity products and services to businesses and organisations.

Clifton, United States1998Private
Fingerprint

Fingerprint provides device intelligence to identify web and mobile visitors and prevent online fraud.

Chicago, United States2019Private
Link11

Link11 provides DDoS protection and web application security services for companies.

Frankfurt am Main, GermanyPrivate
Report URI

Report URI is a client-side security platform that monitors and controls what runs in users' browsers.

Clitheroe, United Kingdom2017Private
Contrast Security

Contrast Security provides runtime application security that detects and blocks attacks from inside running applications.

Pleasanton, United StatesPrivate
Wallarm

Wallarm provides an AI security and API security platform for enterprises running AI on AWS.

Austin, United StatesPrivate

Recent deals in WAF and bot protection

All WAF and bot protection deals
DateDealAmountSource
18 Aug 2026Fortinet acquired Virtue AISource for Fortinet buying Virtue AI, opens in a new tabUndisclosedSource for Fortinet buying Virtue AI, opens in a new tab
July 2026Barracuda Networks acquired Evo SecuritySource for Barracuda Networks buying Evo Security, opens in a new tabUndisclosedSource for Barracuda Networks buying Evo Security, opens in a new tab
June 2026A10 Networks acquired TrojAISource for A10 Networks buying TrojAI, opens in a new tabUndisclosedSource for A10 Networks buying TrojAI, opens in a new tab
May 2025Fortinet acquired SuridataSource for Fortinet buying Suridata, opens in a new tabUndisclosedSource for Fortinet buying Suridata, opens in a new tab
April 2025Cloudflare acquired OuterbaseSource for Cloudflare buying Outerbase, opens in a new tabUndisclosedSource for Cloudflare buying Outerbase, opens in a new tab
February 2025A10 Networks acquired ThreatXSource for A10 Networks buying ThreatX, opens in a new tabUndisclosedSource for A10 Networks buying ThreatX, opens in a new tab
December 2024Fortinet acquired Perception PointSource for Fortinet buying Perception Point, opens in a new tabUndisclosedSource for Fortinet buying Perception Point, opens in a new tab
October 2024Cloudflare acquired KiveraSource for Cloudflare buying Kivera, opens in a new tabUndisclosedSource for Cloudflare buying Kivera, opens in a new tab
August 2024Fortinet acquired Next DLPSource for Fortinet buying Next DLP, opens in a new tabUndisclosedSource for Fortinet buying Next DLP, opens in a new tab
May 2024Cloudflare acquired BastionZeroSource for Cloudflare buying BastionZero, opens in a new tabUndisclosedSource for Cloudflare buying BastionZero, opens in a new tab

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.

See every category

Often listed alongside WAF and bot protection