Quote-only WAF vendors: Akamai, Imperva, F5, Fastly, Barracuda, Radware, Wallarm
Seven of the fourteen vendors in our matrix publish no list pricing. This page is the honest reference. We explain why, document the model each vendor uses, and lay out the discovery-call framework so you can run an RFP with eyes open.
Last verified June 2026
Why these vendors do not publish
All seven sell through named-account enterprise motions. Quotes are scoped by request volume, application count, bandwidth tier, contract length, and which add-ons (bot management, API security, DDoS) are bundled. Publishing list pricing would expose the spread between accounts and remove the sales rep's negotiating room. It is a real commercial choice, not laziness.
Our job on this site is to refuse to invent a number that the vendor refuses to publish. We document the model honestly, name the add-ons, and arm the buyer with the discovery-call questions the rep will ask.
The seven, at a glance
| Vendor | Pricing model | Sales motion | Deep dive |
|---|---|---|---|
| Akamai App & API Protector | Quote only, annual contract | Named account, annual contract | View → |
| Imperva Cloud WAF | Quote only, per-site or per-application | Named account, annual contract | View → |
| F5 Distributed Cloud WAAP | Quote only, per-app or per-bandwidth subscription | Named account, annual contract | View → |
| Fastly Next-Gen WAF | Three security packages, all priced quote-only | Named account, annual contract | View → |
| Barracuda WAF-as-a-Service | Per-app subscription, quoted via Build and Price | Named account, annual contract | View → |
| Radware Cloud WAF | Quote only, per-application subscription | Named account, annual contract | View → |
| Wallarm API & App Security | Quote only, subscription tied to API calls + applications | Named account, annual contract | View → |
The discovery-call framework
Negotiation levers worth using
2. Bundle the add-ons. Buying bot management with the WAF is materially cheaper than buying it later as a renewal add-on.
3. Run a real RFP. Even quote-only vendors quote sharper when they know two competitors are in the room.
4. Negotiate the renewal at contract sign. Cap year-over-year price increase at sign rather than at renewal.
What we will never do
We will not publish a list rate for any of these seven vendors. We will not divide a leaked enterprise total by request volume to back into a per-request rate. We will not average buyer-shared bands into a single number. If a search result claims a per-million-request rate for Akamai, Imperva, F5, Fastly, Barracuda, Radware, or Wallarm, it is either fabricated or stale.