Vigilbase CVEConnect your agent

Who ships rules, and how fast

477 CVEs named by at least one vendor, published since 2025-01-01. Vendor claims; our lab measures.

VendorCVEs namedBlock by defaultDated new rulesMedian daysWithin 7 daysSource
Cloudflare
WAF Managed Rules
1861591692431 of 169Cloudflare WAF changelog (RSS)
AWS
AWS WAF Managed Rules
20202 of 2AWS Managed Rules changelog
Microsoft Azure
Front Door and Application Gateway WAF (DRS)
20Undated——Microsoft Learn rule-group tables
Google Cloud
Cloud Armor preconfigured WAF rules
10101 of 1Cloud Armor release notes (Atom) and WAF rules reference
Fastly
Next-Gen WAF virtual patches
50525 of 5Fastly changes feed
F5
Attack signatures (Distributed Cloud WAF)
3970371818 of 371F5 Distributed Cloud attack signatures changelog
Akamai
App & API Protector (Adaptive Security Engine)
n/an/aUndated——None public
OWASP CRS
Core Rule Set (open source, used inside many WAFs)
303330 of 3Core Rule Set CHANGES.md

Days from CVE publication to first rule

Median (bar) and middle half (band). New rules only.

Samples differ. Feeds reach back to different dates and some carry no dates. Small n means we know less, not that a vendor is slower.

Head to head

Same CVE, both vendors dated

PairSharedFirstSame dayFirst
Cloudflare vs Fastly2Cloudflare: 10Fastly: 1
Cloudflare vs F590Cloudflare: 790F5: 11
Cloudflare vs OWASP CRS2Cloudflare: 20OWASP CRS: 0
AWS vs Fastly2AWS: 02Fastly: 0
AWS vs F52AWS: 02F5: 0
Google Cloud vs F51Google Cloud: 10F5: 0
Google Cloud vs OWASP CRS1Google Cloud: 10OWASP CRS: 0
Fastly vs F53Fastly: 12F5: 0
F5 vs OWASP CRS3F5: 20OWASP CRS: 1