SecureIQLab 2026 Cloud WAAP Report: Imperva Ranked No. 1, with Akamai, AWS, and Cloudflare Also Among the Leaders

Independent research laboratory SecureIQLab has published a new comparative report, Cloud WAAP v5.0 CyberRisk Validation Comparative Report (2026). During comprehensive testing, experts evaluated 12 leading enterprise-class solutions for web application and API protection (WAAP). The absolute industry leader was Imperva WAF and API Security (a Thales company) from the Softprom portfolio, demonstrating a 100% score in security efficacy. Strong results were also achieved by other vendors in Softprom's distribution portfolio: Akamai, AWS, and Cloudflare.

Methodology and Expertise of the SecureIQLab Report

The assessment was conducted in full compliance with Anti-Malware Testing Standards Organization standards (AMTSO Test ID: AMTSO-LS1-TP169) using the SOCX® AI-powered platform. To validate the solutions, 1,608 attack scenarios and 1,487 legitimate traffic scenarios were simulated.

Security efficacy was evaluated against key international cybersecurity standards:

• OWASP Top 10 (2025): protection against the most common web application vulnerabilities.
• OWASP API Security Top 10 (2023): API security validation across 5 most popular protocols.
• OWASP Top 10 for LLM Applications (2025): protection for artificial intelligence and generative AI applications.
• Advanced Threats: resilience against L7 DoS/DDoS attacks, advanced bots, and AI bots.
• Compliance & Governance: compliance with PCI DSS, GDPR, HIPAA, ISO/IEC 27001, ISO/IEC 42001, NIST SP 800-53, and NIST AI RMF.

Imperva: 100% Efficacy and Victory in CyberRisk Ripple

Imperva WAF and API Security demonstrated outstanding results across all test categories, confirming its status as an absolute leader in the WAAP domain:

• Overall Security Efficacy: 100% (absolute report record).
• Web Application Protection (OWASP WAF Top 10): 100%.
• API Protection (OWASP API Top 10): 100%.
• Advanced Threat Coverage: 100%.
• AI Application Security (OWASP LLM Top 10): 100%.
• Operational Efficiency: 98.8%.
• False Positive Avoidance: 100%.
• Compliance: 87.0% (highest score in the assessment).

Based on the evaluation results, Imperva was also awarded Secure by Design and Secure by Default badges, highlighting a high level of baseline protection without requiring complex configuration.

Results of Vendors from the Softprom Portfolio

SecureIQLab conducted a detailed evaluation of other key vendors officially distributed by Softprom.

Imperva (Thales) — Leader

• Security Efficacy: 100%
• Operational Efficiency: 98.8%
• Key Features: Absolute leader in security efficacy, API protection, and compliance standards.

Akamai (App and API Protector) — Leader

• Security Efficacy: 90.9%
• Operational Efficiency: 100%
• Key Features: Maximum deployment and management efficiency (100% Operational Efficiency) and 100% OWASP WAF protection.

AWS (AWS WAF & CloudFront) — Visionary

• Security Efficacy: 76.3%
• Operational Efficiency: 86.5%
• Key Features: Outstanding protection against advanced threats (100%), 100% in LLM protection, and 100% in AI Operational Efficiency. Awarded Secure by Design and Default badges.

Cloudflare (Cloudflare WAF & API Shield) — Upcomer

• Security Efficacy: 60.9%
• Operational Efficiency: 93.6%
• Key Features: High operational efficiency (93.6%) and geolocation-based security features (100%).

Selecting and deploying comprehensive web resource protection systems requires deep expertise. Softprom, as an official distributor, provides expert support through a team of certified specialists at all project stages — from proof of concept (PoC) and architecture design to full deployment and technical maintenance.