Vendor deep-dive

Imperva Cloud WAF Pricing 2026: Quote-Only Vendor Reference

Imperva Cloud WAF sits at the enterprise end of the market with a sales-led motion and no published list pricing. Contracts are typically scoped per-site or per-application with bandwidth tiers, with Advanced Bot Protection, API Security, and DDoS as separate negotiated lines. This page documents the pricing model honestly without inventing a rate.

Last verified June 2026

Enterprise cloud WAAP, quote-only annual contract

Imperva Cloud WAF

Quote only

Why quote only

Imperva Cloud WAF does not publish a list rate as of June 2026.

Imperva does not publish list pricing. Contracts are typically per-site or per-application with bandwidth tiers and a separate Advanced Bot Protection line. Multi-year discounts are common.

Vendor contact page →Verified 2026-06-19

What it costs

Imperva Cloud WAF does not publish a list rate. The pricing model published on the vendor site is "Quote only, per-site or per-application". Below is the tier structure as the vendor describes it. Every numeric figure on this site is sourced; we have nothing to put in the price column except the labels the vendor uses.

Imperva Cloud WAF pricing tiers

Tier 1Cloud WAF
Quote only
Tier 2Advanced Bot Protection
Quote only add-on
Tier 3API Security
Quote only add-on
Tier 4DDoS Protection
Quote only add-on

Source: https://www.imperva.com/products/web-application-firewall-waf/ - retrieved 2026-06-19

What this vendor is best for

Mid-market to enterprise buyers who want a single vendor for WAF, bot, DDoS and attack analytics.

Mid-market to enterprise buyers who want a single vendor for WAF, bot, DDoS, and attack analytics.
Compliance-driven environments (PCI DSS, SOX) where Imperva's reporting suite is already accepted by the auditor.
Buyers who value Attack Analytics and the Imperva research team's threat-intel feed.
Estates with a long Imperva history and existing professional-services relationship.

Hidden costs to watch

The line items most buyers miss

Imperva does not publish list pricing. Contracts are typically per-site or per-application with bandwidth tiers and a separate Advanced Bot Protection line. Multi-year discounts are common.

Advanced Bot Protection (ex-Distil Networks) is a separate quote-only line, frequently the largest after WAF itself.
API Security is a separate add-on, billed by number of APIs or call volume.
DDoS Protection is bundled in higher-tier contracts but priced separately on entry contracts.
Attack Analytics and Cloud Data Security cross-sell readily from the WAF account team.
Multi-year contracts attract discount; renewals after year one frequently see a price step.

Direct answer

Where do I get a price for Imperva Cloud WAF?

Contact the vendor directly at https://www.imperva.com/products/web-application-firewall-waf/. Quote-only vendors typically scope the contract by request volume, number of protected properties or applications, bandwidth tier, contract length, and which add-ons (bot management, API security, DDoS) are included. The quote-only vendor reference page lists the questions the rep will ask in a discovery call.

Source: Verified 2026-06-19

What an Imperva discovery call asks

1Step 1

Site or app count

How many distinct origins need to sit behind Cloud WAF. Drives the base contract size.

2Step 2

Bandwidth

Average and peak Mbps. Bandwidth tier is a primary pricing lever.

3Step 3

Add-ons

Advanced Bot Protection, API Security, DDoS Protection. Each adds a separately quoted line.

4Step 4

Contract length

1 vs 3 year commit drives the headline discount band.

Why no list price

Imperva is a named-account enterprise sale. The reported buyer experience is a discovery call, a custom quote, and a contract that prices per-site or per-application with bandwidth tiers and a separate Advanced Bot Protection line. Publishing a list rate would expose the spread between accounts. We do not invent one.

Closest alternatives

Two published-rate vendors with the most similar pricing model and product fit.

Cloudflare WAF

Flat monthly plan, WAF included on every paid tier

Free plan, WAF rules included

→

Akamai App & API Protector

Quote only, annual contract

Quote only, contact vendor

→

Source

Every number on this page is taken from https://www.imperva.com/products/web-application-firewall-waf/, retrieved 2026-06-19. Re-check before signing a contract; vendors change pricing without notice.

Last verified June 2026