Akamai Guardicore Segmentation vs Check Point CloudGuard CNAPP comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

SentinelOne Singularity Clo...
Sponsored
Ranking in Cloud and Data Center Security
7th
Ranking in Cloud Workload Protection Platforms (CWPP)
6th
Average Rating
8.6
Number of Reviews
81
Ranking in other categories
Vulnerability Management (5th), Container Security (6th), Cloud Security Posture Management (CSPM) (5th), Cloud-Native Application Protection Platforms (CNAPP) (5th), Compliance Management (4th)
Akamai Guardicore Segmentation
Ranking in Cloud and Data Center Security
2nd
Ranking in Cloud Workload Protection Platforms (CWPP)
13th
Average Rating
8.2
Number of Reviews
17
Ranking in other categories
Breach and Attack Simulation (BAS) (4th), Microsegmentation Software (2nd)
Check Point CloudGuard CNAPP
Ranking in Cloud and Data Center Security
8th
Ranking in Cloud Workload Protection Platforms (CWPP)
5th
Average Rating
8.6
Number of Reviews
64
Ranking in other categories
Vulnerability Management (6th), Container Management (6th), Cloud Security Posture Management (CSPM) (4th), Cloud-Native Application Protection Platforms (CNAPP) (4th), Data Security Posture Management (DSPM) (4th), Compliance Management (3rd)
 

Featured Reviews

SC
May 3, 2024
Helps reduce the number of false positives, and improves risk posture, but cloud filtering has a limitation
PingSafe has significantly reduced the number of false positives in our cloud-native security environment from 30 percent down to five percent. This is especially helpful since we receive notifications and alerts from various sources like AWS and Cloudflare, all with their own security policies. With PingSafe, I feel confident that these alerts are accurate, reducing the workload on our security team and giving us peace of mind for the past two years. The threat detection capabilities have improved our overall security by safeguarding our cloud data transfers, and protecting both incoming and outgoing files. With a large number of domains under our management, PingSafe's incident response feature is crucial for identifying and swiftly addressing any data corruption issues that may arise within them. PingSafe has a user-friendly interface, making it a breeze to learn the fundamentals and navigate the dashboard. Our Infrastructure as Code effectively identifies potential problems in templates and configuration files during the preproduction phase. This information is then relayed to our support team who can address these issues proactively. Before implementing PingSafe, our cloud security was inadequate, resulting in inaccurate data visibility. To ensure complete data encryption and client invisibility, we adopted PingSafe, which successfully secured our cloud environment. Reducing false positives has strengthened our security posture. While we transitioned from Prisma Cloud to PingSafe for our GCP and AWS environments, Prisma offered more advanced features. However, PingSafe prioritizes customer requests, addressing security needs faster than Prisma's release cycle, ultimately improving our security efficiency. PingSafe has strengthened our risk posture by implementing access controls to ensure only authorized personnel can reach our data, and by safeguarding it to minimize security risks. PingSafe has reduced our mean time to detection by 15 percent. The implementation of PingSafe has improved collaboration between our cloud security application developers and AppSec teams. By granting those teams write access, PingSafe streamlines interaction and fosters a more efficient working environment. Our engineering time has been saved thanks to the visibility that PingSafe provides.
Uday Varma - PeerSpot reviewer
Jan 30, 2024
Offers granular control and ease of policy creation with features like telemetry and micro-segmentation but incident tagging is missing
Our customers use the solution for micro-segmentation within the data center or cloud environments. One customer uses it for their on-premises infrastructure, deployed at the code level across their massive network. Another customer uses it in a data center to monitor microsegmentation for their 500-node workload. Moreover, Akamai Guardicore Segmentation has helped our customers manage and secure traffic between different applications or workloads. Earlier, they were using VMware NSX-v, which offered good logging for distributed services on an analytical level. However, Akamai Guardicore Segmentation provides them with better overall visibility and granular control over-segmentation, even for inter-application and inter-routing traffic.
JA
Apr 26, 2024
Robust security, competitive price, and easy to deploy and administer
We are using CloudGuard CNAPP for cloud-native application protection, real-time threat detection, and unified security across multi-cloud environments. Our organization is dependent on this solution for any kind of threat detection and security vulnerabilities in our cloud-based environment. CloudGuard CNAPP's Cloud Security Posture Management capabilities work fine. I have not found any issues with them. They help in identifying misconfiguration, but there can be advanced configuration and features, automation of security traces, and more user-friendly reports. Cloud Security Posture Management is effective for providing compliance rulesets and security best practices. It works fine. It is fully capable. It is a Check Point product. Cloud Security Posture Management identifies the risks that are most critical to our business. It also helps to mitigate those risks. It is very capable of identifying challenges, vulnerabilities, and security threats. Reports are very user-friendly, but in some cases, the reports cannot be fully analyzed by our technical team due to some complexities. Overall, the solution is good. I would rate it a nine out of ten. The time savings in identifying the most critical risks vary. If a security threat is of high severity, it can take 24 to 48 hours. In some cases, it can be resolved on a real-time basis. We use CloudGuard CNAPP's CloudGuard Workload Protection capabilities. We have VMs. We have containers. We have BLOBs. CloudGuard CNAPP is fully capable because it focuses on cloud-native applications. It is capable of identifying all the vulnerabilities. The scanning provided by CloudGuard Workload Protection helps us identify problems before they go live. This identification is very important. It helps us identify threats that are already there. It helps in getting more clarity about security threats and vulnerabilities before they go into production.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Support has been very helpful and provides regular feedback and help whenever needed. They've been very useful."
"We're monitoring several cloud accounts with Singularity. It is convenient to identify issues or security failures in any account. It's nice to have all the details we need to solve these issues."
"The cloud misconfiguration is the most valuable feature."
"PingSafe offers security solutions for both Kubernetes and CI/CD pipelines."
"The tool identifies issues quickly."
"The most valuable feature is the ability to gain deep visibility into the workloads inside containers."
"PingSafe's most valuable feature is its unified console."
"We use the infrastructure as code scanning, which is good."
"The label-based segmentation is the most valuable feature."
"That is primarily because I've seen increased rules. It's kind of caught us a little off guard. With GuardiCore, I have had to deal with their technical support and engineering team in Israel. They are amazing. They are very quick to adapt."
"Its deception features are great, providing a rich telemetry of lured origins, and are a great resource for any active defense strategy."
"The most valuable features of the solution are the maps and ring fencing that help monitor events."
"Guardicore Centra offers the best coverage specifically in backward compatibility with legacy operating systems."
"The interface and dashboard are amazing."
"Application Ring-Fencing and Deception Server, which is basically like a honeypot, are pretty useful features."
"We like the centralized management of the firewalls. Until we installed Guardicore Centra, we managed all our firewalls individually, so making changes was complicated, difficult, and time-consuming."
"The most valuable feature is the separate environment."
"It saves time because I can look across the organization. Instead of checking 50 different accounts atomically and spending 15 minutes investigating each, I can spend 15 minutes exploring all 50 accounts. It allows me to quickly look across the org for similar problems when one comes up. That's a huge time saver."
"The most valuable features of CloudGuard CNAPP are its reporting capabilities for aggregating vulnerability information and scoring."
"The two most valuable features for us are the central firewall administrator and the real-time cloud compliance monitoring."
"The initial setup is easy and not complex at all."
"It has an analytics service that does research for us."
"The visibility in our cloud environment is the most valuable feature."
"It is able to bring visibility into that cloudy space where the security departments do not really see what is happening on the DevOps side. It brings visibility, security control, and standardization."
 

Cons

"There is a bit of a learning curve for new users."
"In some cases, the rules are strictly enforced but do not align with real-world use cases."
"Sometimes the Storyline ID is a bit wacky."
"The integration with Oracle has room for improvement."
"Some of the navigation and some aspects of the portal may be a little bit confusing."
"There is room for improvement in the current active licensing model for PingSafe."
"A vulnerability alert would appear, and we'd fix it, but then the same alert would return the next day."
"The cost has the potential for improvement."
"Supports become difficult when it's for a big organization. For a small organization, medium organization, it still makes sense, however, for a big organization, it makes life difficult."
"Incident tagging could be improved. Other vendors offer semi-automatic tagging, which Guardicore doesn't yet have."
"Guardicore Centra should incorporate automation so that we don't require to write custom scripts and APIs. The tool also has limitations on rules where it allows only sixty thousand rules. Our clients have also commented that there are too many manual clicks and effort to do changes. I think that the incorporation of automation can help our clients make changes with confidence and without the possibility of human error."
"The product needs a few features like enhanced user policies and payload-level inspection to improve the offering."
"Sometimes, the speed needs improvement, especially when it comes to the generation of maps, where it can be a bit slow."
"Clients would like to see that the security policies of GuardiCore can continue to be comparable to all the major firewall players out there."
"They can maybe improve their customer service just because they are kind of a small organization, and customer service isn't as big as others such as VMware."
"It would be very helpful for beginners if the solution had more windows to help with the terms inside instead of going to the documentation."
"You do need to pay extra in order to get better support."
"Currently, I would like this solution extended to cellular devices or tablets."
"The rules are not well-tuned, and many of them generate false positives or nonsensical results."
"The entire system is complicated, and the setup process may not cater to the company's demands."
"Integration could be improved."
"The costs are high."
"In general, for the product to be successful, they need to improve security, and configuration detection."
"The user interface could be improved. Sometimes, the visibility is not immediately available for the environment. We have the native servers that come with the solutions, but we cannot see them in the Check Point log. Another issue is with the integrated file monitoring. It would make sense to have stuff like file integrity monitoring and malware scanning available within this module because we don't want to integrate another product."
 

Pricing and Cost Advice

"We have an enterprise license. It is affordable. I'm not sure, but I think we pay 150,000 rupees per month."
"PingSafe is not very expensive compared to Prisma Cloud, but it's also not that cheap. However, because of its features, it makes sense to us as a company. It's fairly priced."
"It's not expensive. The product is in its initial growth stages and appears more competitive compared to others. It comes in different variants, and I believe the enterprise version costs around $55 per user per year. I would rate it a five, somewhere fairly moderate."
"I wasn't sure what to expect from the pricing, but I was pleasantly surprised to find that it was a little less than I thought."
"Its pricing is okay. It is in line with what other providers were providing. It is not cheap. It is not expensive."
"Pricing is based on modules, which was ideal for us."
"The features included in PingSafe justify its price point."
"The tool is cost-effective."
"The solution is reasonably priced and I would rate it a six out of ten. The tool's licensing costs are yearly."
"Compared to the pricing we were seeing from both Illumio and Edgewise, Guardicore was very competitive."
"Akamai Guardicore Segmentation is expensive."
"The customer would complain about the cost."
"The pricing is too high."
"Guardicore Centra provides better value for money than NSX, was the other solution that we looked at, which was too expensive for what it does."
"This is not a cheap solution but you have to consider the bigger picture, which is what it is giving you."
"GuardiCore has made some new changes to the license now. We've seen monthly and annual licenses based on a subscription. We have a few clients that pay anywhere from $25,000 a year."
"Its price is very fair."
"The pricing is extremely competitive."
"The license fee is high."
"Everything in this field is very expensive."
"The pricing is tremendous and super cheap. It is shockingly cheap for what you get out of it. I am happy with that. I hope that doesn't get reported back and they increase the prices. I love the pricing and the licensing makes sense. It is just assets: The more stuff that you have, the more you pay."
"From a pricing perspective, they are pretty expensive."
"CloudGuard is fairly priced."
"The license for CloudGuard Posture Management is about $80 a year, and it's based on your cloud footprint, not the number of users. So you could have a million users, and it doesn't matter."
report
Use our free recommendation engine to learn which Cloud and Data Center Security solutions are best for your needs.
787,061 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
21%
Financial Services Firm
15%
Manufacturing Company
11%
Insurance Company
4%
Financial Services Firm
18%
Computer Software Company
15%
Manufacturing Company
7%
Insurance Company
6%
Financial Services Firm
17%
Computer Software Company
15%
Security Firm
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about PingSafe?
The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...
What needs improvement with PingSafe?
When I joined my organization, I saw that PingSafe was already implemented. I started to use the tool's alerting feat...
What do you like most about Guardicore Centra?
Guardicore Centra offers the best coverage specifically in backward compatibility with legacy operating systems.
What is your experience regarding pricing and costs for Guardicore Centra?
The pricing is too high. Based on market standards, I'd recommend lowering the price. I would rate the pricing a five...
What needs improvement with Guardicore Centra?
Customers would want to see the cost improved.
 

Also Known As

PingSafe
Guardicore Centra, GuardiCore
Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence
 

Overview

 

Sample Customers

Information Not Available
Santander, Frontier Airlines, OpenLink, Intermountain Healthcare, Cellcom, BancoBASE
Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners
Find out what your peers are saying about Akamai Guardicore Segmentation vs. Check Point CloudGuard CNAPP and other solutions. Updated: May 2024.
787,061 professionals have used our research since 2012.