The Forrester Wave™: Web Application Firewalls, Q2 2006

Forrester evaluated leading Web application firewall vendors across 101 criteria. Improvements in network security mean that attackers are commonly probing Web servers and Web applications for an easy way in, and Web application firewalls have grown along with this kind of attack. In our evaluation, we found that NetContinuum is the Leader, with Citrix Systems and Imperva hot on its heels. All three vendors offer a solid current product, strong market presence, and a good plan for future product features and market leadership. Other Strong Performers include F5 Networks, which has a future road map that positions it to overtake the competition if well-executed; ModSecurity, an open source offering with strong traffic throttling and blocking capabilities and the largest installed base; and Breach Security, which has the best attack detection capabilities of the vendors evaluated. Contenders include relative newcomer Protegrity, with excellent policy creation and management features. However, Protegrity lacks essential Web application security features, such as a customized security model.