AWS WAF

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

AWS WAF is ranked #7 of 30 in web application firewall software on Inferse. It runs on API, Web. There is no free plan.

Compared on web application firewall software

Free plan: Noaws.amazon.com
Paid from: $5/moaws.amazon.com
Deployment model: hybridaws.amazon.com
Managed rule sets: Yesaws.amazon.com
API protection: Yesaws.amazon.com
Bot management: Yesaws.amazon.com
Rate limiting: Yesaws.amazon.com

Facts

Purpose: AWS WAF protects web applications from common exploits.aws.amazon.com · 30 Sept 2026
Traffic rules: Rules can filter requests by IP address, HTTP headers and body, and custom URIs, and can block SQL injection and cross-site scripting.aws.amazon.com · 30 Sept 2026
Managed rules: Managed rule groups provide protections including bot control, account takeover prevention, and account creation fraud prevention.aws.amazon.com · 30 Sept 2026
Bot controls: Bot Control can block or rate-limit pervasive bots and allow common bots such as status monitors and search engines.aws.amazon.com · 30 Sept 2026
Fraud prevention: Fraud Control monitors login and signup pages for compromised credentials and fake account creation.aws.amazon.com · 30 Sept 2026
Protection setup: Guided setup offers a single-page workflow with preconfigured security defaults tailored to an application type.aws.amazon.com · 30 Sept 2026
Rule reuse: A centralized set of rules can be deployed across multiple websites and applications.aws.amazon.com · 30 Sept 2026
Integrations: AWS WAF charges are additional to pricing for CloudFront, Cognito, Application Load Balancer, API Gateway, AppSync, and Shield Advanced.aws.amazon.com · 30 Sept 2026
Mobile telemetry: Account takeover and account creation fraud prevention support optional or recommended JavaScript and iOS/Android SDKs for additional device telemetry.aws.amazon.com · 30 Sept 2026
AI traffic monetization: AWS WAF offers configurable pricing and payment verification for AI bots and agents accessing content and APIs, at no additional AWS WAF charge.aws.amazon.com · 30 Sept 2026
Pricing factors: Charges depend on web ACLs, rules, and processed requests, and pricing may vary across AWS Regions.aws.amazon.com · 30 Sept 2026
Additional costs: Marketplace managed rule groups can incur seller fees in addition to AWS WAF charges.aws.amazon.com · 30 Sept 2026
Support: AWS offers pricing assistance through specialists who can provide a personalized quote.aws.amazon.com · 30 Sept 2026
Compliance: AWS states it supports 143 security standards and compliance certifications, including PCI-DSS, HIPAA/HITECH, FedRAMP, GDPR, FIPS 140-3, and NIST 800-171.aws.amazon.com · 30 Sept 2026
Intended customers: AWS says its customers include startups, enterprises, nonprofits, and governments.aws.amazon.com · 30 Sept 2026