Company snapshot
| Category | Imperva | Incapsula |
|---|---|---|
| Status | active | active |
| Founded | — | — |
| Headquarters | — | — |
| Website | — | — |
| Docs | — | — |
Overview
Imperva provides a cloud-based CDN integrated with its Web Application and API Protection (WAAP) platform, focusing on security and performance. The service includes content caching, load balancing, and global Points of Presence (PoPs) to deliver low-latency web experiences. It offers robust DDoS protection, a Web Application Firewall (WAF), and bot mitigation, making it suitable for enterprises prioritizing security. Imperva serves industries like finance, healthcare, and e-commerce, with clients such as Mediolanum and Vodafone. The company, founded in 2002 and headquartered in San Mateo, California, was acquired by Thales in 2019. Its CDN is part of a broader cybersecurity suite, emphasizing secure content delivery.
Incapsula, now integrated under Imperva, is a cloud-based CDN platform focused on web application security, DDoS mitigation, and performance optimization. Founded in 2009 as a spin-off from Imperva, it provides services like web application firewalls (WAF), bot mitigation, and load balancing. The platform serves businesses of varying sizes, including high-traffic websites and enterprises like Wix and Siemens. Incapsula’s global network enhances site speed and security, leveraging intelligent caching and content optimization. It operates as a full proxy, sitting between the website and its host to deliver robust security and performance features.
Network & Architecture
Imperva operates a global network with PoPs in North America, EMEA, APAC, and LATAM, including data centers in cities like Tokyo, New Delhi, and Miami. The exact number of PoPs is not publicly disclosed, but the network supports traffic rerouting during maintenance to ensure availability. It uses machine learning for dynamic caching and integrates with major peering partners for optimized routing. Regional strengths include North America and EMEA, with ongoing expansions in APAC and LATAM. Maintenance schedules, such as the August 2025 migrations in Hong Kong and Paris, ensure minimal disruption for Cloud WAF customers. Limitations include less transparency on PoP counts compared to competitors like Cloudflare.
Incapsula operates a global CDN with points of presence (PoPs) across the Americas (e.g., Atlanta, Dallas, Los Angeles), Europe (e.g., Amsterdam, London, Frankfurt), and Asia-Pacific (e.g., Hong Kong, Singapore, Tokyo). The network includes recent expansions in India (New Delhi, Mumbai). It uses intelligent caching, TCP optimization, and frequency analysis to prioritize frequently accessed files, reducing latency. Routing and peering details are not fully public, but the platform emphasizes high-capacity scrubbing centers (100+ Gbps per Behemoth scrubber) for DDoS mitigation. It performs well globally but has a stronger presence in North America and EMEA, with growing coverage in APAC and India.
Feature comparison
| Feature | Imperva | Incapsula |
|---|---|---|
waf | ✓ | ✓ |
bot_mitigation | ✓ | ✓ |
ddos | ✓ | ✓ |
rate_limit | ✗ | ✗ |
http3_quic | ✓ | ✓ |
tls13 | ✓ | ✓ |
tiered_cache | ✓ | ✓ |
origin_shield | ✓ | ✓ |
instant_purge | ✓ | ✓ |
stale_while_revalidate | ✗ | ✗ |
stale_if_error | ✗ | ✗ |
image_optimization | ✓ | ✓ |
video_vod | ✓ | ✗ |
video_live | ✓ | ✗ |
drm | ✗ | ✗ |
hls_dash_packaging | ✗ | ✗ |
websockets | ✓ | ✓ |
signed_urls | ✓ | ✗ |
edge_compute | ✗ | ✗ |
functions | ✗ | ✗ |
kv_storage | ✗ | ✗ |
api_first | ✓ | ✓ |
realtime_logs | ✓ | ✓ |
log_push | ✓ | ✓ |
terraform | ✗ | ✗ |
Legend: ✓ = Supported, ✗ = Not supported, — = Not listed
Pricing
Imperva uses a pay-as-you-go (PAYG) model with enterprise-focused pricing, typically requiring custom quotes. No free tier or public per-GB pricing is available, as plans are tailored for high-security use cases. Volume-based discounts are offered for committed contracts. Pricing details are available at https://www.imperva.com/pricing/. The model suits large organizations but may be cost-prohibitive for smaller businesses.
Incapsula offers a free tier for up to 10 pages, including CDN, IPv6 support, and basic bot protection. Paid plans start at $59/month (Pro) and $299/month (Business) per site, with enterprise plans customized. Pricing is pay-as-you-go (PAYG) with committed options for enterprises. DDoS protection significantly increases costs on higher tiers. Full details are at https://www.imperva.com/pricing/.
Integrations & DevEx
Imperva provides APIs for configuration and management, supporting an API-first approach. Realtime logs and analytics are accessible via the Imperva Management Portal, with log push for integration into external systems. No public documentation confirms Terraform or specific SDK support, limiting Infrastructure-as-Code (IaC) options. Migration tools are not emphasized, but the platform supports standard CDN configurations. Developers may find the API robust but less flexible for CI/CD pipelines compared to Fastly or Akamai.
Incapsula supports API-first integrations for configuration and monitoring, with real-time logs and log push for analytics. It lacks Terraform support or dedicated SDKs for CI/CD pipelines. The platform provides a dashboard for bot traffic and WAF alerts, but migration tools are limited, requiring manual configuration or support from Imperva for complex setups.
When it fits
- Enterprises needing a CDN with strong security features like WAF and DDoS protection.
- Businesses in regulated industries (e.g., finance, healthcare) requiring robust compliance and bot mitigation.
- Organizations with global audiences benefiting from Imperva’s PoP distribution and low-latency delivery.
- Businesses needing robust web security with CDN, especially for DDoS and bot mitigation.
- High-traffic sites requiring global performance with strong North American and EMEA presence.
- Enterprises seeking API-driven control and real-time monitoring for security events.
When it doesn’t
- Small businesses or startups seeking cost-effective, free-tier, or transparent pricing models.
- Developers needing extensive IaC support, such as Terraform or advanced CI/CD integrations.
- Companies focused on edge compute or serverless functions, which Imperva does not currently offer.
- Sites focused on video streaming or live content, as video-specific features like VOD or HLS/DASH are absent.
- Small projects needing lightweight, developer-centric CDN without security overhead.
- Budget-conscious users, as premium security features increase costs significantly.
History & Notes
—
—