Company snapshot
| Category | Incapsula | NS1 |
|---|---|---|
| Status | active | active |
| Founded | — | — |
| Headquarters | — | — |
| Website | — | — |
| Docs | — | — |
Overview
Incapsula, now integrated under Imperva, is a cloud-based CDN platform focused on web application security, DDoS mitigation, and performance optimization. Founded in 2009 as a spin-off from Imperva, it provides services like web application firewalls (WAF), bot mitigation, and load balancing. The platform serves businesses of varying sizes, including high-traffic websites and enterprises like Wix and Siemens. Incapsula’s global network enhances site speed and security, leveraging intelligent caching and content optimization. It operates as a full proxy, sitting between the website and its host to deliver robust security and performance features.
NS1, now IBM NS1 Connect, specializes in DNS traffic steering and MultiCDN solutions to optimize application delivery. Founded in 2013 and acquired by IBM in 2023, it serves enterprises needing precise control over traffic routing across multiple CDNs and cloud providers. Its flagship product, NS1 Connect, uses real-time data and automation to enhance performance and resilience. Customers include large-scale organizations in tech, finance, and media sectors. The platform integrates with various CDNs and cloud services to manage global traffic efficiently.
Network & Architecture
Incapsula operates a global CDN with points of presence (PoPs) across the Americas (e.g., Atlanta, Dallas, Los Angeles), Europe (e.g., Amsterdam, London, Frankfurt), and Asia-Pacific (e.g., Hong Kong, Singapore, Tokyo). The network includes recent expansions in India (New Delhi, Mumbai). It uses intelligent caching, TCP optimization, and frequency analysis to prioritize frequently accessed files, reducing latency. Routing and peering details are not fully public, but the platform emphasizes high-capacity scrubbing centers (100+ Gbps per Behemoth scrubber) for DDoS mitigation. It performs well globally but has a stronger presence in North America and EMEA, with growing coverage in APAC and India.
NS1 operates a global network with 26 points of presence (PoPs) across North America, EMEA, APAC, and other regions, ensuring low-latency DNS resolution. Its architecture leverages authoritative DNS and real-time data for traffic steering, with robust peering to major cloud providers and CDNs. The platform supports hybrid deployments, combining on-premise and cloud DNS for flexibility. It excels in global coverage but may have less focus on niche regional markets like Africa or the Middle East compared to telecom CDNs.
Feature comparison
| Feature | Incapsula | NS1 |
|---|---|---|
waf | ✓ | ✗ |
bot_mitigation | ✓ | ✗ |
ddos | ✓ | ✓ |
rate_limit | ✗ | ✗ |
http3_quic | ✓ | ✗ |
tls13 | ✓ | ✗ |
tiered_cache | ✓ | ✗ |
origin_shield | ✓ | ✗ |
instant_purge | ✓ | ✗ |
stale_while_revalidate | ✗ | ✗ |
stale_if_error | ✗ | ✗ |
image_optimization | ✓ | ✗ |
video_vod | ✗ | ✗ |
video_live | ✗ | ✗ |
drm | ✗ | ✗ |
hls_dash_packaging | ✗ | ✗ |
websockets | ✓ | ✗ |
signed_urls | ✗ | ✗ |
edge_compute | ✗ | ✗ |
functions | ✗ | ✗ |
kv_storage | ✗ | ✗ |
api_first | ✓ | ✓ |
realtime_logs | ✓ | ✓ |
log_push | ✓ | ✗ |
terraform | ✗ | ✓ |
Legend: ✓ = Supported, ✗ = Not supported, — = Not listed
Pricing
Incapsula offers a free tier for up to 10 pages, including CDN, IPv6 support, and basic bot protection. Paid plans start at $59/month (Pro) and $299/month (Business) per site, with enterprise plans customized. Pricing is pay-as-you-go (PAYG) with committed options for enterprises. DDoS protection significantly increases costs on higher tiers. Full details are at https://www.imperva.com/pricing/.
NS1 operates on an enterprise-only model with custom pricing based on traffic volume and feature sets. No public per-GB pricing is available, and there’s no free tier or pay-as-you-go option. Contact IBM for pricing details.
Integrations & DevEx
Incapsula supports API-first integrations for configuration and monitoring, with real-time logs and log push for analytics. It lacks Terraform support or dedicated SDKs for CI/CD pipelines. The platform provides a dashboard for bot traffic and WAF alerts, but migration tools are limited, requiring manual configuration or support from Imperva for complex setups.
NS1 supports Terraform and Ansible for infrastructure automation, with an API-first design for programmatic control. SDKs and integrations with tools like Catchpoint and ThousandEyes enhance monitoring and analytics. Real-time logs and analytics provide immediate insights, and the platform supports seamless integration with major CDNs and cloud providers. Migration tools are available for transitioning from other DNS providers, with a focus on minimizing downtime.
When it fits
- Businesses needing robust web security with CDN, especially for DDoS and bot mitigation.
- High-traffic sites requiring global performance with strong North American and EMEA presence.
- Enterprises seeking API-driven control and real-time monitoring for security events.
- Enterprises needing precise MultiCDN traffic steering across global regions.
- Organizations requiring robust DDoS protection and real-time analytics.
- Teams using Terraform or API-driven workflows for network automation.
When it doesn’t
- Sites focused on video streaming or live content, as video-specific features like VOD or HLS/DASH are absent.
- Small projects needing lightweight, developer-centric CDN without security overhead.
- Budget-conscious users, as premium security features increase costs significantly.
- Small businesses or startups seeking low-cost, pay-as-you-go CDN solutions.
- Users needing native video streaming features like VOD or live streaming.
- Companies focused on niche regional markets with limited NS1 PoP coverage.
History & Notes
—
—