Check Point CloudGuard CNAPP Reviews

Name: Check Point CloudGuard CNAPP
Brand: Check Point Software Technologies
Rating: 4.3 (70 reviews)

Vendor: Check Point Software Technologies

4.3 out of 5

70 reviews
94% willing to recommend

1,273 followers

What is Check Point CloudGuard CNAPP?

Check Point CloudGuard CNAPP is a cloud-native application protection platform designed to secure your cloud environments and applications. By combining CSPM, CWPP, CSNS, and WAF capabilities, it provides a comprehensive solution to protect your cloud environment from a wide range of threats.

Get the Check Point CloudGuard CNAPP Buyer's Guide and find out what your peers are saying about Check Point CloudGuard CNAPP, Wiz, Microsoft Defender for Cloud and more!

Check Point CloudGuard CNAPP is the #4 ranked solution in top Data Security Posture Management (DSPM) solutions, #5 ranked solution in top Cloud Security Posture Management (CSPM) solutions, #5 ranked solution in top Cloud-Native Application Protection Platforms (CNAPP) solutions, #6 ranked solution in Container Security Solutions, #6 ranked solution in Cloud Workload Protection Platforms, #6 ranked solution in top Compliance Management solutions, #8 ranked solution in top Vulnerability Management solutions, and #9 ranked solution in best Cloud Security companies. PeerSpot users give Check Point CloudGuard CNAPP an average rating of 8.6 out of 10. Check Point CloudGuard CNAPP is most commonly compared to Wiz: Check Point CloudGuard CNAPP vs Wiz. Check Point CloudGuard CNAPP is popular among the large enterprise segment, accounting for 64% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 15% of all views.

Buyer's Guide

Check Point CloudGuard CNAPP

February 2025

Get the report

Helped 838,640 peers since 2012

Featured reviews

Bart Coddens

Cloud Engineer at Cloudar

The user interface needs work. Sometimes, it is a transition from the old tool to the new CNAPP Two that I currently have, and remnants of the old environment can still be detected. I require consistency in the user interface to ensure everything is streamlined into the same look and feel. More work is needed in fine-tuning the threat data towards your CSPM and activity logs, aligning them with business intelligence, which requires a cohesive console interface. My assessment of CloudGuard CDRs in intrusion detection and threat hunting capabilities is that it still needs some work. All the threat data that comes in, you need to fine tune it a bit.

Read full review

Yokesh Mani

Deputy Manager at Computer Age Management Services Pvt. Ltd.

The user interface could be improved. Sometimes, the visibility is not immediately available for the environment. We have the native servers that come with the solutions, but we cannot see them in the Check Point log. Another issue is with the integrated file monitoring. It would make sense to have stuff like file integrity monitoring and malware scanning available within this module because we don't want to integrate another product. For example, let's say it's showing a process violation. It should be able to do some additional malware scanning in that particular bucket to get some additional information. I don't want to integrate with another third-party tool or go to the native server to check something. It would be helpful to have integrated monitoring and malware scanning for the file types. There are a few flaws with the security management portal where I have limited visibility into the workload protection features. There is no error visibility where I can see the communication and workflow between services. Some of the dashboards need to be fine-tuned if they are not customized. For example, I cannot customize anything on the effective risk management dashboard. Some of the information is not correct for my tenant. With respect to passwords and user management, there are no policies I can measure at the user level. If the user was created more than six months ago, you don't need to worry about that password or do anything like two-factor authentication associated with that user. They can still log in after six months or one year. It's also a challenge to use CloudGuard's agentless workload posture with AWS. An Azure storage is summed up with a CNAPP encryption by default. We tried onboarding this data, but the problem is the attachment is not done. After a few days, we identified that it was impossible to do the encryption detection. But CloudGuard's default rules say that this has to be encrypted. The AWS module says that we cannot access this volume with this encryption, so we cannot use an agentless workload posture with AWS because of this. It is a best practice to ensure that all the volumes are being encrypted. Without the encryption, how can I do this? It is a big challenge for CloudGuard.

Read full review

reviewer1459770

Advisory Information Security Analyst at a financial services firm with 501-1,000 employees

The biggest thing is the documentation aspect of Dome9 is a little lacking. They were purchased by Check Point about a year and a half to two years ago. When they integrated into Check Point's support system, a lot of the documentation that they had previously got mangled in the transition, e.g., linking to stuff on the Dome9 website that no longer exists. There are still a lot of spaces with incomplete links and stuff that is not as fully explained as it could be. However, the product itself is really easy to use, so there is not too much of an issue with that. Also, it's not too hard to get on with the actual Check Point support to go over this stuff.

Read full review

Check Point CloudGuard CNAPP mindshare

Product category:

As of February 2025, the mindshare of Check Point CloudGuard CNAPP in the Vulnerability Management category stands at 1.3%, up from 1.3% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Vulnerability Management

PeerAnalyst reports

Type	Title	Date
Category	Vulnerability Management	Feb 21, 2025	Download
Product	Reviews, tips, and advice from real users	Feb 21, 2025	Download
Comparison	Check Point CloudGuard CNAPP vs Tenable Nessus	Feb 21, 2025	Download
Comparison	Check Point CloudGuard CNAPP vs Wiz	Feb 21, 2025	Download
Comparison	Check Point CloudGuard CNAPP vs Qualys VMDR	Feb 21, 2025	Download

Title	Rating	Mindshare	Recommending
Wiz	4.5	10.9%	100%	20 interviews Add to research
Microsoft Defender for Cloud	4.0	5.1%	94%	74 interviews Add to research

Valuable Features

Check Point CloudGuard CNAPP's valuable features include centralized firewall management, compliance checks, and predictive visualization. It offers identity and access control, visibility into security configurations, and threat intelligence alerts. Users appreciate automated remediation, customizable queries, and comprehensive data visualization. The system's real-time monitoring aids in identifying security risks, demonstrating effectiveness in compliance with industry standards like CIS, PCI, and HIPAA. Users praise its user-friendly interface for efficient cloud infrastructure management.

"The CDR helps detect anomalous behavior and respond to threats before they become an issue."
"My overall product rating is ten out of ten."
"Customer service is very good."

Room for Improvement

Check Point CloudGuard CNAPP could benefit from improved third-party tool integration, enhanced policy validation, and more comprehensive reporting. Users find the documentation and technical support lacking. Many are concerned by high costs and false positives, suggesting more automation would be beneficial. More integrations with cloud platforms, increased remediation capabilities, and enhanced user interface features are desired. Enhanced training and streamlined configuration processes are frequently mentioned.

"The user interface needs work. Sometimes, it is a transition from the old tool to the new CNAPP Two that I currently have, and remnants of the old environment can still be detected."
"It feels somewhat fractured to me. I haven't grasped all the parts yet, and better integration would make CNAPP most valuable."
"The user interface needs work."

ROI

Check Point CloudGuard CNAPP enhances security by addressing significant risks and reducing vulnerabilities in cloud environments. Users experience savings in time and administrative efforts, with reports indicating reduced need for personnel. It delivers cost-effectiveness by saving money on cloud management and maintaining compliance. Users report ROI growth due to efficient risk management, improved operational metrics, and ease of implementation. This tool provides protection and operational efficiency leading to increased ROI from cost avoidance.

Pricing

Enterprise users report that Check Point CloudGuard CNAPP's pricing is based on the number of assets, with annual or hourly licensing options. The cost is seen as competitive but can be perceived as high for organizations with large infrastructures. Setup costs are generally low, and the transparent licensing model helps manage forecasting. Multiple modules can be purchased independently to tailor pricing. Despite varied feedback, many users appreciate the overall value and flexibility offered.

"Its price is very fair."
"The licensing part still needs some work. The issue that I have is that we do not use all the services in the cloud, but sometimes, CloudGuard identifies them as an asset."
"We have the enterprise-level license and we renew it annually because it is worth the cost."

Popular Use Cases

Check Point CloudGuard CNAPP users primarily utilize it for automated compliance checks, management of security policies, and governance across multiple cloud platforms like AWS, Azure, and GCP. It is also used for monitoring vulnerabilities, providing real-time alerts, and enhancing security for both cloud workloads and the infrastructure. Additionally, users gain centralized visibility, manage identities and access, and leverage threat detection to proactively handle potential cyber threats within their multi-cloud environments.

Service and Support

Check Point CloudGuard CNAPP's customer service and support are often described as highly engaged and helpful. Many users find technical support knowledgeable, responsive, and effective, with some mentioning direct access to a dedicated engineer. Some suggest improvement at initial support levels and note that premium support offers faster responses. Users appreciate regular updates and security patches and often experience reliable assistance with queries. However, a few mention delays and the need for improved staff training.

Deployment

Check Point CloudGuard CNAPP's initial setup is consistently described as straightforward and intuitive. Deployment times vary, with some achieving full integration in minutes, while others may require additional configuration and training. Users often find it easy to implement, although complexity can arise during configuration. Many appreciated its user-friendly interface, cloud-based functionality, and the ability to integrate seamlessly with AWS and Azure, often achieving full operational status with minimal staffing and effort.

Scalability

Check Point CloudGuard CNAPP offers robust scalability, efficiently managing large deployments without noticeable issues. Users appreciate its ability to scale with increasing workloads and adapt to complex cloud infrastructures. Though some mention potential cost considerations with scaling, most find the tool integrates well across multiple cloud providers with effective workload protection. Its SaaS nature means it scales automatically, providing a seamless experience in multi-cloud environments, earning high scalability ratings from users.

Stability

Check Point CloudGuard CNAPP is consistently stable, with users highlighting its reliable performance, absence of downtime, and seamless operation. Most organizations experienced uninterrupted service without encountering failures or crashes. Occasional minor latency and rare false positives were noted, but these did not significantly affect its performance. Users appreciate its consistent stability, rating it highly. Despite a few instances requiring troubleshooting, it remains a trusted choice with strong operational stability.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Check Point CloudGuard CNAPP Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

15%

Financial Services Firm

14%

Manufacturing Company

University

Educational Organization

Government

Retailer

Insurance Company

Comms Service Provider

Construction Company

Security Firm

Wholesaler/Distributor

Healthcare Company

Real Estate/Law Firm

Energy/Utilities Company

Non Profit

Performing Arts

Hospitality Company

Transportation Company

Outsourcing Company

Media Company

Recreational Facilities/Services Company

Logistics Company

Legal Firm

Pharma/Biotech Company

Consumer Goods Company

Marketing Services Firm

Engineering Company

Recruiting/Hr Firm

Compare Check Point CloudGuard CNAPP with alternative products

Learn more about Check Point CloudGuard CNAPP

CloudGuard CNAPP delivers end-to-end cloud security, including workload protection, vulnerability management, and identity management, all while maintaining continuous compliance. It uses advanced AI to detect and prevent threats, offering protection for containers, serverless applications, and APIs. CloudGuard CNAPP also emphasizes simplifying security management, integrating directly with cloud platforms like AWS, Azure, and GCP.

CloudGuard CNAPP provides customers with more context to drive actionable security and smarter prevention, from code-to-cloud, across the application lifecycle. More Context Means Actionable Security, Smarter Prevention. The primary components are:

Unified & Modular Platform - A single platform unifying SAST, CSPM, DSPM, CIEM, CWPP, WAF, and Cloud Detection and Response.
Continuous Cloud Security - Automatic enforcement of security requirements and internal policies from development to runtime.
Real-time Detection & Protection - Real-time incidents and vulnerability detection with a single-click or automated remediation.

What are the key features of CloudGuard CNAPP?

Workload Protection: Secures cloud-based workloads, including VMs, containers, and serverless functions, from vulnerabilities and attacks.
Posture Management: Continuously monitors cloud configurations and assets to ensure compliance with security standards and policies.
Threat Prevention: Uses AI-driven threat detection to block malware, ransomware, and zero-day exploits in real-time.
Compliance Automation: Automates compliance checks and ensures adherence to industry regulations, such as GDPR, HIPAA, and PCI-DSS.
Identity and Access Management (IAM) Protection: Secures identities by managing access policies and detecting misconfigurations in permissions.

What are the key benefits to consider?

Improved Cloud Visibility: Provides clear insights into cloud environments, assets, and workloads, helping teams detect misconfigurations and vulnerabilities early.
Risk Reduction: Threat prevention features help reduce the risk of breaches by identifying and blocking potential attacks before they can exploit system weaknesses.
Operational Efficiency: Automated compliance and posture management reduce the manual work needed to maintain security standards.
Multi-cloud Support: CloudGuard CNAPP integrates across AWS, Azure, and Google Cloud, streamlining security operations for hybrid and multi-cloud deployments.

Check Point CloudGuard CNAPP simplifies cloud security management with integrated protection and automation.

Check Point CloudGuard CNAPP was previously known as Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence.