Company snapshot
| Category | Imperva | NS1 |
|---|---|---|
| Status | active | active |
| Founded | — | — |
| Headquarters | — | — |
| Website | — | — |
| Docs | — | — |
Overview
Imperva provides a cloud-based CDN integrated with its Web Application and API Protection (WAAP) platform, focusing on security and performance. The service includes content caching, load balancing, and global Points of Presence (PoPs) to deliver low-latency web experiences. It offers robust DDoS protection, a Web Application Firewall (WAF), and bot mitigation, making it suitable for enterprises prioritizing security. Imperva serves industries like finance, healthcare, and e-commerce, with clients such as Mediolanum and Vodafone. The company, founded in 2002 and headquartered in San Mateo, California, was acquired by Thales in 2019. Its CDN is part of a broader cybersecurity suite, emphasizing secure content delivery.
NS1, now IBM NS1 Connect, specializes in DNS traffic steering and MultiCDN solutions to optimize application delivery. Founded in 2013 and acquired by IBM in 2023, it serves enterprises needing precise control over traffic routing across multiple CDNs and cloud providers. Its flagship product, NS1 Connect, uses real-time data and automation to enhance performance and resilience. Customers include large-scale organizations in tech, finance, and media sectors. The platform integrates with various CDNs and cloud services to manage global traffic efficiently.
Network & Architecture
Imperva operates a global network with PoPs in North America, EMEA, APAC, and LATAM, including data centers in cities like Tokyo, New Delhi, and Miami. The exact number of PoPs is not publicly disclosed, but the network supports traffic rerouting during maintenance to ensure availability. It uses machine learning for dynamic caching and integrates with major peering partners for optimized routing. Regional strengths include North America and EMEA, with ongoing expansions in APAC and LATAM. Maintenance schedules, such as the August 2025 migrations in Hong Kong and Paris, ensure minimal disruption for Cloud WAF customers. Limitations include less transparency on PoP counts compared to competitors like Cloudflare.
NS1 operates a global network with 26 points of presence (PoPs) across North America, EMEA, APAC, and other regions, ensuring low-latency DNS resolution. Its architecture leverages authoritative DNS and real-time data for traffic steering, with robust peering to major cloud providers and CDNs. The platform supports hybrid deployments, combining on-premise and cloud DNS for flexibility. It excels in global coverage but may have less focus on niche regional markets like Africa or the Middle East compared to telecom CDNs.
Feature comparison
| Feature | Imperva | NS1 |
|---|---|---|
waf | ✓ | ✗ |
bot_mitigation | ✓ | ✗ |
ddos | ✓ | ✓ |
rate_limit | ✗ | ✗ |
http3_quic | ✓ | ✗ |
tls13 | ✓ | ✗ |
tiered_cache | ✓ | ✗ |
origin_shield | ✓ | ✗ |
instant_purge | ✓ | ✗ |
stale_while_revalidate | ✗ | ✗ |
stale_if_error | ✗ | ✗ |
image_optimization | ✓ | ✗ |
video_vod | ✓ | ✗ |
video_live | ✓ | ✗ |
drm | ✗ | ✗ |
hls_dash_packaging | ✗ | ✗ |
websockets | ✓ | ✗ |
signed_urls | ✓ | ✗ |
edge_compute | ✗ | ✗ |
functions | ✗ | ✗ |
kv_storage | ✗ | ✗ |
api_first | ✓ | ✓ |
realtime_logs | ✓ | ✓ |
log_push | ✓ | ✗ |
terraform | ✗ | ✓ |
Legend: ✓ = Supported, ✗ = Not supported, — = Not listed
Pricing
Imperva uses a pay-as-you-go (PAYG) model with enterprise-focused pricing, typically requiring custom quotes. No free tier or public per-GB pricing is available, as plans are tailored for high-security use cases. Volume-based discounts are offered for committed contracts. Pricing details are available at https://www.imperva.com/pricing/. The model suits large organizations but may be cost-prohibitive for smaller businesses.
NS1 operates on an enterprise-only model with custom pricing based on traffic volume and feature sets. No public per-GB pricing is available, and there’s no free tier or pay-as-you-go option. Contact IBM for pricing details.
Integrations & DevEx
Imperva provides APIs for configuration and management, supporting an API-first approach. Realtime logs and analytics are accessible via the Imperva Management Portal, with log push for integration into external systems. No public documentation confirms Terraform or specific SDK support, limiting Infrastructure-as-Code (IaC) options. Migration tools are not emphasized, but the platform supports standard CDN configurations. Developers may find the API robust but less flexible for CI/CD pipelines compared to Fastly or Akamai.
NS1 supports Terraform and Ansible for infrastructure automation, with an API-first design for programmatic control. SDKs and integrations with tools like Catchpoint and ThousandEyes enhance monitoring and analytics. Real-time logs and analytics provide immediate insights, and the platform supports seamless integration with major CDNs and cloud providers. Migration tools are available for transitioning from other DNS providers, with a focus on minimizing downtime.
When it fits
- Enterprises needing a CDN with strong security features like WAF and DDoS protection.
- Businesses in regulated industries (e.g., finance, healthcare) requiring robust compliance and bot mitigation.
- Organizations with global audiences benefiting from Imperva’s PoP distribution and low-latency delivery.
- Enterprises needing precise MultiCDN traffic steering across global regions.
- Organizations requiring robust DDoS protection and real-time analytics.
- Teams using Terraform or API-driven workflows for network automation.
When it doesn’t
- Small businesses or startups seeking cost-effective, free-tier, or transparent pricing models.
- Developers needing extensive IaC support, such as Terraform or advanced CI/CD integrations.
- Companies focused on edge compute or serverless functions, which Imperva does not currently offer.
- Small businesses or startups seeking low-cost, pay-as-you-go CDN solutions.
- Users needing native video streaming features like VOD or live streaming.
- Companies focused on niche regional markets with limited NS1 PoP coverage.
History & Notes
—
—