Vigilbase CVEConnect your agent

Who ships rules, and how fast

481 CVEs named by at least one vendor, published since 2025-01-01. What each vendor's changelog says it ships; the other tab is what our lab measured.

VendorCVEs namedBlock by defaultDated new rulesMedian daysWithin 7 daysSource
Cloudflare
WAF Managed Rules
1861591692431 of 169Cloudflare WAF changelog (RSS)
AWS
AWS WAF Managed Rules
20202 of 2AWS Managed Rules changelog
Microsoft Azure
Front Door and Application Gateway WAF (DRS)
20Undated——Microsoft Learn rule-group tables
Google Cloud
Cloud Armor preconfigured WAF rules
10101 of 1Cloud Armor release notes (Atom) and WAF rules reference
Fastly
Next-Gen WAF virtual patches
50525 of 5Fastly changes feed
Vercel
Vercel WAF (platform rules)
151514014 of 14Vercel changelog (Atom) and security bulletins
F5
Attack signatures (Distributed Cloud WAF)
3970371818 of 371F5 Distributed Cloud attack signatures changelog
Akamai
App & API Protector (Adaptive Security Engine)
n/an/aUndated——None public
OWASP CRS
Core Rule Set (open source, used inside many WAFs)
303330 of 3Core Rule Set CHANGES.md

Days from CVE publication to first rule

Median (bar) and middle half (band). New rules only.

Samples differ. Feeds reach back to different dates and some carry no dates. Small n means we know less, not that a vendor is slower.

Head to head

Same CVE, both vendors dated

PairSharedFirstSame dayFirst
Cloudflare vs Fastly2Cloudflare: 10Fastly: 1
Cloudflare vs Vercel4Cloudflare: 03Vercel: 1
Cloudflare vs F590Cloudflare: 790F5: 11
Cloudflare vs OWASP CRS2Cloudflare: 20OWASP CRS: 0
AWS vs Fastly2AWS: 02Fastly: 0
AWS vs Vercel2AWS: 02Vercel: 0
AWS vs F52AWS: 02F5: 0
Google Cloud vs Vercel1Google Cloud: 01Vercel: 0
Google Cloud vs F51Google Cloud: 10F5: 0
Google Cloud vs OWASP CRS1Google Cloud: 10OWASP CRS: 0
Fastly vs Vercel3Fastly: 02Vercel: 1
Fastly vs F53Fastly: 12F5: 0
Vercel vs F58Vercel: 62F5: 0
Vercel vs OWASP CRS1Vercel: 10OWASP CRS: 0
F5 vs OWASP CRS3F5: 20OWASP CRS: 1