F5 Big-IP Advanced WAF vs. Salt Security API Protection Platform

F5 Big-IP Advanced WAF

F5 Big-IP Advanced WAF

28 Reviews and Ratings

Salt Security API Protection Platform

Salt Security API Protection Platform

6 Reviews and Ratings

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
F5 Big-IP Advanced WAF	Score 9.3 out of 10	N/A	F5 Networks offers the Advanced Web Application Firewall (WAF) to provide bot defense, advanced application protection, anti-bot SDK, and other features.	N/A
Salt Security API Protection Platform	Score 8.5 out of 10	Enterprise companies (1,001+ employees)	For API-driven organizations, Salt Security is an API security platform that protects internal, external, and third-party APIs. The Salt C-3A Context-based API Analysis Architecture combines coverage and AI-powered big data to discover APIs and exposed sensitive data - continuous and automatic discovery stop attackers in their tracks - block attackers by integrating with inline devices provide remediation insights - for developers to improve API security…	N/A

Pricing

F5 Big-IP Advanced WAF

Salt Security API Protection Platform

Editions & Modules

No answers on this topic

No answers on this topic

Offerings

Pricing Offerings
F5 Big-IP Advanced WAF	Salt Security API Protection Platform
Free Trial
No	No
Free/Freemium Version
No	No
Premium Consulting/Integration Services
No	No

Entry-level Setup Fee

No setup fee

No setup fee

Additional Details

—

—

More Pricing Information

Community Pulse
	F5 Big-IP Advanced WAF	Salt Security API Protection Platform
Considered Both Products	F5 Big-IP Advanced WAF AR Adolfo Rodrguez CIO Chose F5 Big-IP Advanced WAF I believe that in the case of Big-IP F5, it has a lot of power, a lot of features including the VPN features and also the evaluation of security posture of the devices that connect through VPN. That's very solid and that's something that is not found in all the WAF solutions … Incentivized Helpful? GH George Huang Tech Engineer Chose F5 Big-IP Advanced WAF Also in the F5 family, both serve us well. Incentivized Helpful? Verified User Anonymous Chose F5 Big-IP Advanced WAF AWAF provides most complete web application and API protection; including L7 DoS; in custimer's multi cloud deployments whether on-premises, public cloud, private cloud, etc. Incentivized Helpful? Verified User Anonymous Chose F5 Big-IP Advanced WAF F5 Big-IP advanced WAF will provide just enough flexibility to protect areas and services the way others just can't. Incentivized Helpful? EE Eric Evans Security Architect Chose F5 Big-IP Advanced WAF F5 WAF is far superior to other cloud based native apps. Incentivized Helpful? Verified User Anonymous Chose F5 Big-IP Advanced WAF Currently, we are using our IPS tools and IDS tools, but for the applications, we also use endpoint detection and those kinds of tools. But the firewall is actually a very important tool rather than those products. Because it exactly happens at the layer that we really want it … Incentivized Helpful? Josué Ríos Sales Engineer Chose F5 Big-IP Advanced WAF because its integration are very well, making a stronger solutions to cover many more attacks. Incentivized Helpful? Verified User Anonymous Chose F5 Big-IP Advanced WAF F5 APM beats them all, hands down for internally hosted applications. Incentivized Helpful? Ilian Ivanov Security Engineer, WAF Chose F5 Big-IP Advanced WAF F5 WAF provides much more control and has a lot of features that can be used to protect your applications. You can have granular configuration settings per application and disable attack signatures on very specific scenarios whenever is needed. Also, the logs are very detailed … Incentivized Helpful? Verified User Anonymous Chose F5 Big-IP Advanced WAF -Stable data path equals to less crashes -Almost all the features working as expected -Provides more granular controls in allowing false positives Incentivized Helpful? Verified User Anonymous Chose F5 Big-IP Advanced WAF Sure! Here's a made-up but professional response you can use or adapt depending on the context (e.g., a report, RFP, internal justification, etc.): Describe how F5 BIG-IP Advanced WAF stacks up against them and why you selected F5 BIG-IP Advanced WAF. Incentivized Helpful?	Salt Security API Protection Platform TW Tyler Warren Director, IT Security Chose Salt Security API Protection Platform We tried controls offered by the IaaS providers but these were hard to manage and did not provide the visibility we wanted. We also protected APIs with a normal WAF but this was only helpful for assets we knew about and API attacks were not caught by the WAF. Incentivized Helpful?

Best Alternatives
	F5 Big-IP Advanced WAF	Salt Security API Protection Platform
Small Businesses	Cloudflare Score 8.7 out of 10	Cloudflare Score 8.7 out of 10
Medium-sized Companies	Cloudflare Score 8.7 out of 10	F5 Big-IP Advanced WAF Score 9.3 out of 10
Enterprises	NGINX Score 9.2 out of 10	F5 Big-IP Advanced WAF Score 9.3 out of 10
All Alternatives	View all alternatives	View all alternatives

User Ratings
	F5 Big-IP Advanced WAF	Salt Security API Protection Platform
Likelihood to Recommend	9.4 (0 ratings)	8.5 (0 ratings)

User Testimonials
	F5 Big-IP Advanced WAF	Salt Security API Protection Platform
Likelihood to Recommend	Advanced WAF is well suited for protection against account enumeration attacks, protection against known and new increasing attack vectors through out of the box attack signatures and threat campaigns. Also, up to date and accurate IP intelligence database to block based on known IP reputation. Incentivized Verified User Anonymous Read full review	Salt is highly recommended for anyone who wants to discover, monitor and protect their APIs against various types of attacks. Salt should not be used as a SIEM. JH Jose Michael Henrique Security Specialist Read full review
Pros	So the product definitely is helping us for sudden attacks through DDOS, some injection ingestion into UI URLs, and definitely it's capturing those and I definitely see that as an advantage for us. They can stop the hackers from using our endpoints. Incentivized Verified User Anonymous Read full review	PII identification in API traffic. Divergence between API traffic and documentation (swagger files). Potential attacks with information to take counter measures. Verified User Anonymous Read full review
Cons	The UI for events. E.g., clicking the "Accept" button does nothing. Traffic learning suggestions are often very incorrect. We were originally suggested to use "Automatic" learning, and had to completely scrap the policy due to the suggestions. "All in one" dashboard for viewing application URL/parameter overrides per policy. Incentivized Verified User Anonymous Read full review	The platform could have more options for exporting detailed data from attackers' dashboards. The Attackers dashboard could also have more options of filters in order to support the investigations of the attack. The OAS analysis could present a more detailed view of the found issues. MA Marcel Amorim Senior Security Analyst Read full review
Likelihood to Renew	We just love work with f5 Incentivized Verified User Anonymous Read full review	No answers on this topic
Usability	Most* of it is very intuitive and easy to use. The "Help" section is fairly fantastic. See some of my other comments about things like the "Traffic Learning" section being wildly wrong sometimes, and also the event logs with UI buttons that don't do anything. Overall though, it's an excellent product. Incentivized Verified User Anonymous Read full review	No answers on this topic
Alternatives Considered	I believe that in the case of Big-IP F5, it has a lot of power, a lot of features including the VPN features and also the evaluation of security posture of the devices that connect through VPN. That's very solid and that's something that is not found in all the WAF solutions and so I haven't seen that in Azure. Incentivized AR Adolfo Rodrguez CIO Read full review	We tried controls offered by the IaaS providers but these were hard to manage and did not provide the visibility we wanted. We also protected APIs with a normal WAF but this was only helpful for assets we knew about and API attacks were not caught by the WAF. TW Tyler Warren Director, IT Security Read full review
Return on Investment	In our case it has been great because the pricing is just right for all the features that we have on the platform and the flexibility. In fact, we acquired another license last year, so that's something that we're interested in. We are currently moving towards the cloud with our ERP systems and eliminating the IBM platform, so we would like to see that F5 virtual option available on Azure. Incentivized AR Adolfo Rodrguez CIO Read full review	Salt Security API Protection Platform has provided detailed information that is helping us to identify and investigate attacks in our environment MA Marcel Amorim Senior Security Analyst Read full review
ScreenShots