Company snapshot

CategoryImpervaVercara
Statusactiveactive
Founded
Headquarters
Website
Docs

Overview

Imperva provides a cloud-based CDN integrated with its Web Application and API Protection (WAAP) platform, focusing on security and performance. The service includes content caching, load balancing, and global Points of Presence (PoPs) to deliver low-latency web experiences. It offers robust DDoS protection, a Web Application Firewall (WAF), and bot mitigation, making it suitable for enterprises prioritizing security. Imperva serves industries like finance, healthcare, and e-commerce, with clients such as Mediolanum and Vodafone. The company, founded in 2002 and headquartered in San Mateo, California, was acquired by Thales in 2019. Its CDN is part of a broader cybersecurity suite, emphasizing secure content delivery.
Vercara, formerly Neustar Security Services, is a cloud-based provider of CDN, DNS, and cybersecurity solutions, focusing on enterprise-grade services. It offers UltraDNS for managed authoritative DNS and UltraDDoS Protect, UltraWAF, UltraAPI, and UltraEdge for security and performance. Acquired by DigiCert in September 2024, Vercara serves over 2,000 enterprises, including Fortune 500 companies, across industries like finance, e-commerce, and healthcare. Its solutions emphasize uptime, security, and scalability for complex digital infrastructures. Vercara handles approximately 30% of global internet traffic, processing over 9 trillion DNS queries daily.

Network & Architecture

Imperva operates a global network with PoPs in North America, EMEA, APAC, and LATAM, including data centers in cities like Tokyo, New Delhi, and Miami. The exact number of PoPs is not publicly disclosed, but the network supports traffic rerouting during maintenance to ensure availability. It uses machine learning for dynamic caching and integrates with major peering partners for optimized routing. Regional strengths include North America and EMEA, with ongoing expansions in APAC and LATAM. Maintenance schedules, such as the August 2025 migrations in Hong Kong and Paris, ensure minimal disruption for Cloud WAF customers. Limitations include less transparency on PoP counts compared to competitors like Cloudflare.
Vercara operates a global network with points of presence (POPs) across 16 regions, including a recently added node in Toronto. Its UltraDNS service ensures low-latency DNS resolution, and its DDoS mitigation network has a capacity exceeding 15 Tbps. The platform is designed for high availability, with a reported 100% uptime for DNS services. It has strong regional coverage in North America, EMEA, and APAC, serving global enterprises with hybrid cloud setups. Specific peering and routing details are not publicly disclosed, but Vercara’s infrastructure supports major hyperscalers and high-traffic verticals.

Feature comparison

FeatureImpervaVercara
waf
bot_mitigation
ddos
rate_limit
http3_quic
tls13
tiered_cache
origin_shield
instant_purge
stale_while_revalidate
stale_if_error
image_optimization
video_vod
video_live
drm
hls_dash_packaging
websockets
signed_urls
edge_compute
functions
kv_storage
api_first
realtime_logs
log_push
terraform

Legend: ✓ = Supported, ✗ = Not supported, — = Not listed

Pricing

Imperva uses a pay-as-you-go (PAYG) model with enterprise-focused pricing, typically requiring custom quotes. No free tier or public per-GB pricing is available, as plans are tailored for high-security use cases. Volume-based discounts are offered for committed contracts. Pricing details are available at https://www.imperva.com/pricing/. The model suits large organizations but may be cost-prohibitive for smaller businesses.
Vercara operates on an enterprise-only model, with pricing tailored to customer needs and no public per-GB rates disclosed. It does not offer a free tier or pay-as-you-go options, focusing on committed contracts for large organizations. Specific pricing details are available only through direct sales consultation. No public pricing page is provided.

Integrations & DevEx

Imperva provides APIs for configuration and management, supporting an API-first approach. Realtime logs and analytics are accessible via the Imperva Management Portal, with log push for integration into external systems. No public documentation confirms Terraform or specific SDK support, limiting Infrastructure-as-Code (IaC) options. Migration tools are not emphasized, but the platform supports standard CDN configurations. Developers may find the API robust but less flexible for CI/CD pipelines compared to Fastly or Akamai.
Vercara supports Terraform for infrastructure automation, integrating with DevOps workflows. Its API-first design enables programmatic control of DNS and security services. Real-time logs are available for monitoring, though log push or streaming capabilities are not explicitly documented. Integration with HashiCorp Consul-Terraform-Sync enhances DNS management automation. Migration tools or specific SDKs are not publicly detailed, but Vercara’s enterprise focus suggests customized onboarding support.

When it fits

  • Enterprises needing a CDN with strong security features like WAF and DDoS protection.
  • Businesses in regulated industries (e.g., finance, healthcare) requiring robust compliance and bot mitigation.
  • Organizations with global audiences benefiting from Imperva’s PoP distribution and low-latency delivery.
  • Large enterprises needing robust DNS and DDoS protection with 100% uptime guarantees.
  • Organizations with hybrid cloud setups requiring integrated DNS and certificate management.
  • High-traffic industries like finance or e-commerce needing scalable security solutions.

When it doesn’t

  • Small businesses or startups seeking cost-effective, free-tier, or transparent pricing models.
  • Developers needing extensive IaC support, such as Terraform or advanced CI/CD integrations.
  • Companies focused on edge compute or serverless functions, which Imperva does not currently offer.
  • Small businesses or startups seeking pay-as-you-go or free-tier CDN options.
  • Users needing transparent pricing or self-service onboarding without sales consultation.
  • Applications requiring advanced video streaming features like HLS/DASH packaging or DRM.

History & Notes