Company snapshot
| Category | Cloudflare | Imperva |
|---|---|---|
| Status | active | active |
| Founded | — | — |
| Headquarters | — | — |
| Website | — | — |
| Docs | — | — |
Overview
Cloudflare, founded in 2009, is a San Francisco-based company offering a global content delivery network (CDN), DDoS mitigation, and web security services. Its network accelerates content delivery and protects websites and applications from cyber threats. Cloudflare serves a wide range of customers, from small businesses to enterprises like Shopify, Medium, and IBM. The platform is known for its developer-friendly tools, including serverless edge computing and comprehensive security features. It provides a free tier alongside paid plans, catering to diverse user needs. Cloudflare’s services sit between end users and origin servers, acting as a reverse proxy to enhance performance and reliability.
Imperva provides a cloud-based CDN integrated with its Web Application and API Protection (WAAP) platform, focusing on security and performance. The service includes content caching, load balancing, and global Points of Presence (PoPs) to deliver low-latency web experiences. It offers robust DDoS protection, a Web Application Firewall (WAF), and bot mitigation, making it suitable for enterprises prioritizing security. Imperva serves industries like finance, healthcare, and e-commerce, with clients such as Mediolanum and Vodafone. The company, founded in 2002 and headquartered in San Mateo, California, was acquired by Thales in 2019. Its CDN is part of a broader cybersecurity suite, emphasizing secure content delivery.
Network & Architecture
Cloudflare operates over 200 points of presence (PoPs) globally, spanning regions like North America, EMEA, APAC, Latin America, Africa, India, China, and the Middle East. Its Anycast network ensures low-latency content delivery by routing traffic to the nearest data center. The company has strong peering agreements, enhancing connectivity and reducing latency. Regional strengths include robust coverage in North America and Europe, with growing presence in APAC and Latin America. However, performance in certain African and Middle Eastern regions may vary due to fewer PoPs or local network constraints. Cloudflare’s architecture supports dynamic content acceleration and integrates with its security and edge computing services.
Imperva operates a global network with PoPs in North America, EMEA, APAC, and LATAM, including data centers in cities like Tokyo, New Delhi, and Miami. The exact number of PoPs is not publicly disclosed, but the network supports traffic rerouting during maintenance to ensure availability. It uses machine learning for dynamic caching and integrates with major peering partners for optimized routing. Regional strengths include North America and EMEA, with ongoing expansions in APAC and LATAM. Maintenance schedules, such as the August 2025 migrations in Hong Kong and Paris, ensure minimal disruption for Cloud WAF customers. Limitations include less transparency on PoP counts compared to competitors like Cloudflare.
Feature comparison
| Feature | Cloudflare | Imperva |
|---|---|---|
waf | ✓ | ✓ |
bot_mitigation | ✓ | ✓ |
ddos | ✓ | ✓ |
rate_limit | ✓ | ✗ |
http3_quic | ✓ | ✓ |
tls13 | ✓ | ✓ |
tiered_cache | ✓ | ✓ |
origin_shield | ✗ | ✓ |
instant_purge | ✓ | ✓ |
stale_while_revalidate | ✓ | ✗ |
stale_if_error | ✓ | ✗ |
image_optimization | ✓ | ✓ |
video_vod | ✓ | ✓ |
video_live | ✓ | ✓ |
drm | ✗ | ✗ |
hls_dash_packaging | ✗ | ✗ |
websockets | ✓ | ✓ |
signed_urls | ✓ | ✓ |
edge_compute | ✓ | ✗ |
functions | ✓ | ✗ |
kv_storage | ✓ | ✗ |
api_first | ✓ | ✓ |
realtime_logs | ✓ | ✓ |
log_push | ✓ | ✓ |
terraform | ✓ | ✗ |
Legend: ✓ = Supported, ✗ = Not supported, — = Not listed
Pricing
Cloudflare offers a pay-as-you-go (PAYG) model, a free tier, and enterprise plans. The free tier includes basic CDN, DDoS protection, and an SSL certificate, suitable for small sites. Paid plans (Pro, Business, Enterprise) add advanced features like WAF, bot mitigation, and analytics, with pricing starting at $20/month for Pro plans. Enterprise pricing is customized, often requiring committed contracts. Data transfer and HTTP/HTTPS requests are included in subscription plans, with additional costs for features like edge computing or advanced WAF rules. Full details are available at https://www.cloudflare.com/plans/.
Imperva uses a pay-as-you-go (PAYG) model with enterprise-focused pricing, typically requiring custom quotes. No free tier or public per-GB pricing is available, as plans are tailored for high-security use cases. Volume-based discounts are offered for committed contracts. Pricing details are available at https://www.imperva.com/pricing/. The model suits large organizations but may be cost-prohibitive for smaller businesses.
Integrations & DevEx
Cloudflare supports Terraform for infrastructure-as-code (IaC), enabling automated configuration management. SDKs and APIs facilitate integration with CI/CD pipelines and custom applications. Real-time logs (Logpush) and analytics (Cloudflare Analytics) provide actionable insights, with RUM support for end-user performance monitoring. Migration tools, like the Cloudflare Dashboard and DNS import features, simplify onboarding from other providers. The developer platform, including Cloudflare Workers and Pages, supports building and deploying serverless applications and static sites, enhancing developer experience.
Imperva provides APIs for configuration and management, supporting an API-first approach. Realtime logs and analytics are accessible via the Imperva Management Portal, with log push for integration into external systems. No public documentation confirms Terraform or specific SDK support, limiting Infrastructure-as-Code (IaC) options. Migration tools are not emphasized, but the platform supports standard CDN configurations. Developers may find the API robust but less flexible for CI/CD pipelines compared to Fastly or Akamai.
When it fits
- Small businesses or developers needing a free or low-cost CDN with basic security and SSL support.
- Enterprises requiring robust DDoS protection, WAF, and global content delivery with strong developer tools.
- Teams leveraging edge computing for serverless applications or dynamic content acceleration.
- Enterprises needing a CDN with strong security features like WAF and DDoS protection.
- Businesses in regulated industries (e.g., finance, healthcare) requiring robust compliance and bot mitigation.
- Organizations with global audiences benefiting from Imperva’s PoP distribution and low-latency delivery.
When it doesn’t
- Organizations needing specialized video features like HLS/DASH packaging, DRM, or RTMP ingest for advanced streaming use cases.
- Users in regions with limited PoPs (e.g., parts of Africa or the Middle East) where latency may be higher.
- Scenarios requiring origin shield for enhanced caching, which Cloudflare does not natively support.
- Small businesses or startups seeking cost-effective, free-tier, or transparent pricing models.
- Developers needing extensive IaC support, such as Terraform or advanced CI/CD integrations.
- Companies focused on edge compute or serverless functions, which Imperva does not currently offer.
History & Notes
—
—