Overview

Incapsula, now integrated under Imperva, is a cloud-based CDN platform focused on web application security, DDoS mitigation, and performance optimization. Founded in 2009 as a spin-off from Imperva, it provides services like web application firewalls (WAF), bot mitigation, and load balancing. The platform serves businesses of varying sizes, including high-traffic websites and enterprises like Wix and Siemens. Incapsula’s global network enhances site speed and security, leveraging intelligent caching and content optimization. It operates as a full proxy, sitting between the website and its host to deliver robust security and performance features.

Network & Architecture

Incapsula operates a global CDN with points of presence (PoPs) across the Americas (e.g., Atlanta, Dallas, Los Angeles), Europe (e.g., Amsterdam, London, Frankfurt), and Asia-Pacific (e.g., Hong Kong, Singapore, Tokyo). The network includes recent expansions in India (New Delhi, Mumbai). It uses intelligent caching, TCP optimization, and frequency analysis to prioritize frequently accessed files, reducing latency. Routing and peering details are not fully public, but the platform emphasizes high-capacity scrubbing centers (100+ Gbps per Behemoth scrubber) for DDoS mitigation. It performs well globally but has a stronger presence in North America and EMEA, with growing coverage in APAC and India.

Features

Incapsula offers a Web Application Firewall (WAF) protecting against SQL injection, cross-site scripting (XSS), and remote file inclusion (RFI). Its DDoS protection includes website, nameserver, and infrastructure-level defenses, handling attacks up to 3.5 Tbps. Bot mitigation leverages BotoPedia, a large bot database, to filter malicious traffic. Image optimization supports lossy/lossless compression, and the CDN uses HTTP/3, TLS 1.3, tiered caching, and origin shielding for performance. Instant cache purging and WebSocket support are available, as are real-time logs and log push via APIs. The platform is API-first, enabling programmatic control, but lacks edge compute, video streaming, or DRM features.

Pricing Snapshot (2025-08-16)

Incapsula offers a free tier for up to 10 pages, including CDN, IPv6 support, and basic bot protection. Paid plans start at $59/month (Pro) and $299/month (Business) per site, with enterprise plans customized. Pricing is pay-as-you-go (PAYG) with committed options for enterprises. DDoS protection significantly increases costs on higher tiers. Full details are at https://www.imperva.com/pricing/.

Integrations & DevEx

Incapsula supports API-first integrations for configuration and monitoring, with real-time logs and log push for analytics. It lacks Terraform support or dedicated SDKs for CI/CD pipelines. The platform provides a dashboard for bot traffic and WAF alerts, but migration tools are limited, requiring manual configuration or support from Imperva for complex setups.

When it fits / When it doesn’t

When it fits:

  • Businesses needing robust web security with CDN, especially for DDoS and bot mitigation.
  • High-traffic sites requiring global performance with strong North American and EMEA presence.
  • Enterprises seeking API-driven control and real-time monitoring for security events.

When it doesn’t:

  • Sites focused on video streaming or live content, as video-specific features like VOD or HLS/DASH are absent.
  • Small projects needing lightweight, developer-centric CDN without security overhead.
  • Budget-conscious users, as premium security features increase costs significantly.