In our 24-criterion evaluation of web application firewall (WAF) providers, we identified the 12 most significant ones — Akamai Technologies, Amazon Web Services (AWS), Barracuda Networks, Cloudflare, Citrix, F5, Fastly, Fortinet, Google, Imperva, Microsoft, and Radware — and researched, analyzed, and scored them. This report shows how each provider measures up and helps security and risk professionals select the right one for their needs.