Side by side
AWS WAF vs Wordfence Security
Both stand on web security software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Paid APIWeb
AWS WAF combines customizable request rules with managed protections for bots, account abuse and fraud. Costs depend on configured web ACLs, rules and traffic, in addition to related service charges.
Visit AWS WAF Free plan Self-hostedWeb
Wordfence combines site scanning, endpoint firewall protection, login controls, and multi-site management. The free plan has delayed threat updates and volunteer forum support; paid plans list real-time updates and additional support options.
Visit Wordfence SecurityThe facts
| AWS WAF | Wordfence Security | |
|---|---|---|
| Free plan | No | Yes |
| Open source | Not published | Not published |
| Runs on | API, Web | Self-hosted, Web |
| Lowest paid plan | Free or on request | Wordfence Premium: $149 a year |
| Plans published | 1 | 4 |
| Maker | Not published | Not published |
| Website | aws.amazon.com | wordfence.com |
| On web security software | #13 of 29 | #9 of 29 |
AWS WAF: what it does well
- Filters common web exploits
- Managed protections for bots and fraud
- Reusable rules across applications
- Guided application-specific setup
- Supports API protection
What to know first
- No free plan
- Usage charges vary by Region
- Connected AWS services cost separately
- Marketplace rules may add seller fees
Wordfence Security: what it does well
- Scans core files, themes, and plugins
- Login protection includes passkeys and two-factor authentication
- Central can launch scans and apply templates across sites
- Central sends event notifications through four listed channels
- Free plan costs nothing
What to know first
- Free firewall and malware updates are delayed 30 days
- Free plan scans every three days
- Each plugin installation needs a unique license key
- Free plugin support is through volunteer forums
Alternatives to AWS WAF Alternatives to Wordfence Security The whole list