Comparing Andrisoft Wanguard with other anti-DDoS products from Arbor, Radware, etc.

We are often asked for product comparisons. We have not compiled a feature-comparison chart between Wanguard and the anti-DDoS solutions of vendors such as NETSCOUT (Arbor Sightline and TMS), Radware (DefensePro), Fortinet (FortiDDoS), A10 Networks (Thunder TPS) or Corero (SmartWall), because we do not run tests on competing products — so we are not able to fairly compare and benchmark their performance during real attacks and traffic loads. Andrisoft is open to working with any independent reviewer who can provide such feature comparisons and benchmarks.

The feedback we have received from many of our customers is that we offer an excellent alternative to Arbor (a market leader in the enterprise segment), and that our products share many great features. These are some differentiators between our solution and the competition’s — both technical and commercial:

• We firmly believe that not only large companies but also smaller businesses should be able to afford protection against DDoS attacks. This is why our products are priced 10 to 150 times less than the competition. Our portfolio includes multinational carriers and telecoms, but we equally value our much smaller customers — cloud startups, small web hosting companies, schools and so on — by providing them with an affordable anti-DDoS software solution.
• Unlike the competition, we try to be as open as possible. Our prices are public — not hidden behind a quote form — and do not vary over time or based on your country. The documentation and the software are freely available to anyone.
• Our DDoS detection and mitigation solutions run on the open Linux platform. We do not force our customers into buying expensive appliances from us — although we do sell pre-configured appliances — so our customers keep full control over their hardware, operating system and third-party tools.
• Wanguard is more flexible in many ways: it works equally well with packets and flows; it supports manual and automatic responses to attacks; a single multi-purpose server can run several Sensor and Filter instances; you can see detailed traffic graphs for every IP; BGP blackholing can be triggered for critical attacks; and there are no limits on the number of managed objects, among other things.
• Wanguard was built solely for DDoS attack detection and mitigation. We have learned that trying to replace the functionality of other types of security systems (firewalls, IDS/IPS, SNMP monitoring products) often leads to technical compromises when dealing with large-scale DDoS attacks. The result is usually a product that tries to do everything, but manages to do little with true speed and efficiency.