This document contains the results of a comparative penetration test conducted by a team of security specialists at Zero Science Lab against three ‘leading’ web application firewall solutions. The goal of the authors was to bypass security controls in place, in any way we can, circumventing whatever filters they have. This report also outlines the setup and configuration process, as well as a detailed security assessment.
You can download it from the following link: https://packetstormsecurity.com/files/download/120407/wafreport2013.pdf
Source: https://packetstormsecurity.com/files/120407/CloudFlare-Versus-Incapsula-Versus-ModSecurity.html