WAF vendors in the United States
18 of the 23 WAF vendors we list are based in the United States. 6 are public, 4 are owned by another company and 8 are private. The oldest, Microsoft, was founded in 1975. By revenue from annual reports, the largest company here is Microsoft ($331.8bn in FY2026).
Companies focused on WAF and bot protection in the United States
5 companies| Company | Based in | Founded | Size | Ownership | Revenue |
|---|---|---|---|---|---|
 F5 F5 provides application delivery and security solutions for hybrid multicloud environments. | Seattle, United States | 1996 | Public, FFIV | $3.1bn (FY2025) | |
 Fastly Fastly provides an edge cloud platform that helps businesses deliver, secure, and deploy applications and AI workloads. | San Francisco, United States | 2011 | Public, FSLY | $624.0m (FY2025) | |
 Imperva Imperva is a cybersecurity company that provides application security and data security. | San Mateo, United States | 2002 | Owned by Thales | ||
 Sucuri Sucuri provides cloud-based website security. | Menifee, United States | 2010 | Owned by GoDaddy | ||
 HUMAN Security HUMAN Security protects digital interactions from bots, fraud, and abuse across advertising, applications, and accounts. | New York, United States | Private |
Also active in WAF and bot protection
13 companies| Company | Based in | Founded | Size | Ownership | Revenue |
|---|---|---|---|---|---|
 Microsoft Microsoft sells software, cloud services, hardware, and gaming products. | Redmond, United States | 1975 | 228,000 staff | Public, MSFT | $331.8bn (FY2026) |
 Fortinet Fortinet provides cybersecurity solutions and services, including networking and security convergence, for enterprises and governments. | Sunnyvale, United States | 2000 | 15,109 staff | Public, FTNT | $6.8bn (FY2025) |
 Cloudflare Cloudflare provides a global network for security, performance, and full-stack development. | San Francisco, United States | 2009 | 2,440 staff | Public, NET | $2.2bn (FY2025) |
 A10 Networks A10 Networks provides secure, high-performance networking solutions for applications and AI workloads. | San Jose, United States | 2004 | Public, ATEN | $290.6m (FY2025) | |
 Amazon Web Services Amazon Web Services is a cloud computing platform that provides a wide range of services. | Seattle, United States | 2006 | Owned by Amazon | ||
 Appdome Appdome provides a no-code platform for building security and anti-fraud defenses into mobile apps. | Redwood City, United States | Private | |||
 Arcjet Arcjet provides runtime security for AI agents, enforcing policies at the action boundary. | San Francisco, United States | 2023 | Private | ||
 Barracuda Networks Barracuda Networks provides cybersecurity solutions for email, networks, applications, and data. | Campbell, United States | 2003 | Owned by KKR | ||
 Cequence Security Cequence Security protects applications, APIs, and AI agents from attacks and abuse. | Santa Clara, United States | 2014 | Private | ||
 Comodo Group Comodo Group sells cybersecurity products and services to businesses and organisations. | Clifton, United States | 1998 | Private | ||
 Fingerprint Fingerprint provides device intelligence to identify web and mobile visitors and prevent online fraud. | Chicago, United States | 2019 | Private | ||
 Contrast Security Contrast Security provides runtime application security that detects and blocks attacks from inside running applications. | Pleasanton, United States | Private | |||
 Wallarm Wallarm provides an AI security and API security platform for enterprises running AI on AWS. | Austin, United States | Private |
More WAF vendors
All 23 WAF vendorsEvery cybersecurity company in the United States · See every category