This document contains the results of a second comparative penetration test conducted by a team of security specialists at Zero Science Lab against two cloud-based Web Application Firewall (WAF) solutions: Incapsula and Cloudflare. This test was designed to bypass security controls in place, in any possible way, circumventing whatever filters they have. Given the rise in application-level attacks, the goal of the test was to provide IT managers of online businesses with a comparison of these WAFs against real-world threats in simulated real-world conditions.
You can download it from the following link: https://packetstormsecurity.com/files/download/123845/wafreport2013v2.pdf
Source: https://packetstormsecurity.com/files/123845/CloudFlare-Versus-Incapsula-Round-2.html