AWS WAF vs StackPath
A detailed comparison to help you choose between AWS WAF and StackPath.
Quick Verdict
4.0/5
AWS WAF
0 reviews
1.0/5
StackPath
0 reviews
AWS WAF is rated higher (4.0 vs 1.0). AWS WAF is Amazon's web application firewall that can be attached to CloudFront, ALB, or API Gateway. Pay per rule ($1/rule/month) and per million requests ($0.60). Integrates with AWS Shield. Defunct edge platform. StackPath closed all products and began liquidating assets in June 2024; its CDN line had already ceased in November 2023. Not purchasable.
 AWS WAF Amazon WAF integrated with CloudFront and ALB | StackPath Defunct edge platform (closed 2024) | |
|---|---|---|
| Overview | ||
| Rating | 4.0 (0 reviews)✓ | 1.0 (0 reviews) |
| Pricing model | usage-based | discontinued |
| Starting price | From $5/mo | Free tier available |
| Best for | AWS-invested applications that need a managed, OWASP-focused WAF tightly integrated with CloudFront or ALB, with rules deployed as code | Nobody in 2026 — StackPath was dissolved in June 2024. For the same CDN + WAF + DDoS + edge compute combination, look at Cloudflare, Fastly, or Akamai. |
| Features | ||
| IPv6 | ✓ | |
| DDoS protection | ||
| Automated backups | ||
| Snapshots | ||
| Managed option | ||
| Bare metal | ||
| GPU available | ||
| S3-compatible | ||
| Hourly billing | ✓ | |
| Free tier | ||
| Tags | ||
| Tags | api accessus datacentereu datacenterapac datacenter | free tierddos protectioneu datacenterus datacenterapac datacenter |
| Visit AWS WAF → | Visit StackPath → | |
AWS WAF
Pros
- + Edge-level blocking on CloudFront stops bad traffic before it reaches the origin
- + Transparent metered pricing with AWS's own worked cost examples published
- + AWS managed rule groups (OWASP CRS, SQLi, IP reputation) cost $1 each per month
- + Written SLA: 99.95% monthly uptime per region with defined service credits
- + Full API/CloudFormation coverage and deep CloudWatch and logging integration
Cons
- - Useless outside AWS — only protects CloudFront, ALB, API Gateway and AppSync resources
- - Web ACL Capacity Unit overages and Bot Control per-request fees can multiply the bill
- - Rule authoring is verbose JSON; serious use needs AWS and infrastructure-as-code skills
- - No free tier and no bundled DDoS cost protection without the separate Shield Advanced subscription
StackPath
Pros
- + Historically bundled CDN, WAF, DDoS, and edge compute under one account
- + Large final footprint (73 edge locations across 43 metro markets, company's own count)
- + Edge compute with VMs and containers in the same PoPs as content delivery
- + Backing from Juniper, Cox, and ABRY gave it enterprise credibility while it lasted
Cons
- - Company defunct since June 2024 — all products closed, assets liquidated, support switched off
- - CDN business sold to Akamai in 2023; customers stranded through three platform migrations in five years
- - Conflicting PoP counts across its own marketing pages (45 / 50+ / 73)
- - Any pricing or feature list found online is historical, not purchasable
Stay in the loop
Get weekly updates on the best new hosting and infrastructure providers, deals, and comparisons.
No spam. Unsubscribe anytime.