Check Point CloudGuard Application Security enabled us to develop strength and process efficiency coupled with a secure environment in the IT system. We've installed software all over 3rd party dashboards and internet systems. This application security platform helped us put a strong security system in place with an advanced bot prevention system, ensuring end-to-end security across a complete chain of processes. Our cost of the security system was greatly reduced, and it helped us to achieve cost efficiency within six months.
Senior Manager at Agriculture Skill Council of India (ASCI)
Offers high performance and improved productivity with a useful chatbot system
Pros and Cons
- "It offers high performance and improved productivity for users."
- "The trial version should be extended further so that QA test engineers can actually test the utilities in a real sense and can provide the maximum amount of feedback for enhancements."
What is our primary use case?
How has it helped my organization?
Check Point CloudGuard Application Security helps to bring the cost down and increase process and cost efficiency. It provides improved productivity in system outcome and output. It is one of the master security solutions in the market for enhancing system security through an intrusion prevention system that restricts entry of malware and any kind of threat attempts on system confidential data and ensures flawless security inside out. The performance efficiency of users and their department increased multifold due to the introduction of the software.
What is most valuable?
The Intrusion Prevention System is an awesome feature with high-end security properties to ensure a sustainable security system across IT assets and software.
It offers high performance and improved productivity for users.
Our organization marks lowered expenses and improved revenue as part of the technical outcome.
The chatbot system is highly advanced with automated security enhancements and enables real-time system security. It helps the users continuously learn about any potential threats on the system and warns them with pop-ups and notifications.
There are end-to-end web applications protecting and securing IT assets from the inside out.
What needs improvement?
The technical team needs to exercise the pilot testing across all kinds of IT hardware and software to ensure the pilot QA testing shows the highest rate of positives while ensuring system protection. The trial version should be extended further so that QA test engineers can actually test the utilities in a real sense and can provide the maximum amount of feedback for enhancements.
There needs to be an improvement in features and utilities now and then as per business demand. It needs to be customized to match market trends and demand.
Buyer's Guide
Check Point CloudGuard WAF
February 2025

Learn what your peers think about Check Point CloudGuard WAF. Get advice and tips from experienced pros sharing their opinions. Updated: February 2025.
838,713 professionals have used our research since 2012.
For how long have I used the solution?
I've used the solution for one year.
What do I think about the stability of the solution?
The solution is stable.
What do I think about the scalability of the solution?
The solution is quite scalable.
Which solution did I use previously and why did I switch?
We were using our own in-house system security solution to prevent any ransomware and malware.
How was the initial setup?
It offers easy onboarding and is not complex at all. The solution has quite structured onboarding for deployment.
What about the implementation team?
We implemented it through a vendor team.
What was our ROI?
The ROI is great.
What's my experience with pricing, setup cost, and licensing?
The solution is low-cost and offers an easy renewal process as well as smooth onboarding for vendor partners.
Which other solutions did I evaluate?
We evaluated a lot many options available in the market, including Trend and McAfee, among others.
What other advice do I have?
It is a must-try security solution for all kinds of businesses. There are awesome features at extremely low cost.
Which deployment model are you using for this solution?
Private Cloud
Disclosure: I am a real user, and this review is based on my own experience and opinions.

CEO at a tech services company with 11-50 employees
Easy deployment, good reporting, and excellent support
Pros and Cons
- "The first valuable feature is that it is not a complex process to get it up and running. It was not complex at all. We were in a close relationship with the team that developed the app, and it worked in a few hours. The second valuable feature is the information that comes out of it."
- "I do not know if it is already there, but I would like to have complete visibility between the posture management and firewall as a service."
What is our primary use case?
We use AppSec. The primary use case was for our client's app. We did a successful project with the biggest university in Mexico. It was a big survey for all the former students. There were thousands of them, and it needed to be completed based on some specifications from the security team.
How has it helped my organization?
The service was available for the client on time. They had a go-to-market or a due date to start sending the app to various students to apply. We were there 24/7 hoping and waiting for everything to be fine, and it worked perfectly and smoothly.
The client was very happy with the performance of Check Point on this project. When comparing it with Imperva, we strongly feel that the formula that Check Point delivers on WAF was what the client needed.
Check Point CloudGuard works perfectly for preemptively blocking Zero Day attacks and detecting hidden anomalies. Check Point is all about prevention. We strongly believe that if you want to prevent threats, Check Point is the one. There is no one else.
What is most valuable?
There are two main features. The first valuable feature is that it is not a complex process to get it up and running. It was not complex at all. We were in a close relationship with the team that developed the app, and it worked in a few hours.
The second valuable feature is the information that comes out of it. With the dashboard or the information that came from it, we made some executive reports for the client. They were very happy with it.
What needs improvement?
I do not know if it is already there, but I would like to have complete visibility between the posture management and firewall as a service. I would like the complete visibility of every product for the client to see in an executive way. I do not want it in a very complex way with so many warnings and threats. They should focus on the main things in all the products. I would like to see that.
For how long have I used the solution?
We started using it six months ago.
What do I think about the stability of the solution?
Its stability is perfect. We have had no issues.
What do I think about the scalability of the solution?
It is made for scalability. We have no issues on the matter.
How are customer service and support?
Check Point helped us a lot with the project. We interacted with Check Point engineers. They knew it was our first project, and we came across as one strong team in front of the client. I would rate their customer service and support a ten out of ten.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
The client had Imperva, but for this project, they used Check Point. They have some current contracts and some expiration dates. We are hoping to have more deals with them.
They went for this solution for multiple reasons. The first reason was our service as a partner. The client needed somebody to handle the solution. They are not specialists in handling WAF or security. The second reason was that Check Point has authority over security. We were not delivering a solution that was new in the market. We were not an underdog. The third reason was that when we did the workshop, not a POV, the client saw that the solution was intuitive. The dashboards were executive. They liked it a lot. It provided visibility to focus on the efforts. It gave a list of all the threats. It was focused on the main ideas and threats.
Check Point CloudGuard WAF can reduce the total cost of ownership for your web application firewall, but in this case, it was not a big deal.
What was our ROI?
Our client could see that they can have a great solution that does not cost much more than Imperva.
What's my experience with pricing, setup cost, and licensing?
It is not cheap, but it is worth it. For this project, our channel manager and our territory manager helped us a lot. We got a lot of flexibility on the license. I do not know how much discount there was, but it was big enough to win the opportunity.
What other advice do I have?
For those evaluating WAF solutions, there are so many options, but I would recommend relying on a company like Check Point that has a great ecosystem. Their solutions are not only made for the cloud. They also have specialization in all types of security. With their AI and ThreatCloud, you have information about what is happening in the security world. The information that they provide is very useful, so rely on a company that is big enough to provide the security that you deserve.
In this project, there were a lot of technical issues that we had to manage through our engineers. It was our first project and the interaction with the development teams was important. It was very important to get the due dates and stay on track. For a successful project, you need to have a close interaction with the client, especially if the client is not a specialist in security. Check Point also helped us a lot with this project.
Overall, I would rate Check Point CloudGuard WAF a ten out of ten.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Microsoft Azure
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Buyer's Guide
Check Point CloudGuard WAF
February 2025

Learn what your peers think about Check Point CloudGuard WAF. Get advice and tips from experienced pros sharing their opinions. Updated: February 2025.
838,713 professionals have used our research since 2012.
Soporte técnico superior at Acobo
Help s guarantee that applications are secure, protected, and resistant to attacks
Pros and Cons
- "The solution offers sophisticated security techniques with unique characteristics that can be particularly valuable for the financial sector, which is where we develop apps."
- "Deeper and more transparent integration between Cloud Application Security and analysis monitoring tools could be very valuable - although the solution currently offers integrations with third-party security tools."
What is our primary use case?
As one of the solutions that we need for protection at the API level, we have found the level of attack detection needed to comply with the internal regulations of the corporation.
It protects both financials and identity searches. It is a new generation of security that can help us seek, implement, and select different brands products for enhanced protection. This is important due to the acceleration and development of many applications. It helps us reduce the risk of vulnerability in productive applications.
How has it helped my organization?
The use of CloudGuard Application Security protects the page and online web services against SQL injection attacks. This prevents attackers from accessing our databases and stealing financial information from customers. These services help identify and fix vulnerabilities in our application and allow us to identify when there is a vulnerability, such as a code injection, and click on the site to see recommendations in order to fix issues before attackers can exploit weaknesses.
What is most valuable?
The solution offers sophisticated security techniques with unique characteristics that can be particularly valuable for the financial sector, which is where we develop apps. It helps us to guarantee that financial applications are secure, protected, and resistant to attacks, which is essential to maintain trust and reputational power with any client that is subscribed to our services.
What needs improvement?
Deeper and more transparent integration between Cloud Application Security and analysis monitoring tools could be very valuable - although the solution currently offers integrations with third-party security tools. Still, a deeper integration could provide better visibility of all the threats. It would be ideal if they could be found in real-time, allowing our financial or security team to offer a more effective response to attacks.
For how long have I used the solution?
I've used the solution for two years.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Senior Manager ICT & Innovations at Bangalore International Airport Limited
Performs health checkups but needs to improve integration
Pros and Cons
- "The tool performs device health checkups and updates us. It helps us to be compliant with regulatory policies."
- "Check Point CloudGuard Application Security needs to improve updates on integrations. It also needs to incorporate real-time monitoring features."
What is our primary use case?
Check Point CloudGuard Application Security helps us ensure the security of contact devices and meet audit requirements for compliance.
What is most valuable?
The tool performs device health checkups and updates us. It helps us to be compliant with regulatory policies.
What needs improvement?
Check Point CloudGuard Application Security needs to improve updates on integrations. It also needs to incorporate real-time monitoring features.
For how long have I used the solution?
I have been using the product for two years.
What do I think about the stability of the solution?
We encountered stability issues during the configuration. The tool's stability is good.
What do I think about the scalability of the solution?
Check Point CloudGuard Application Security is scalable. My company has 1000 users for it.
How are customer service and support?
The tool's support is good.
How would you rate customer service and support?
Positive
How was the initial setup?
Check Point CloudGuard Application Security's deployment is easy and completed in six hours. You need two to three resources to handle the deployment. You need proper training to do it.
What's my experience with pricing, setup cost, and licensing?
The tool's licensing costs are yearly and competitive.
What other advice do I have?
I rate Check Point CloudGuard Application Security an eight out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Consultant at ITQS
Great API integration, good pricing, and offers good security
Pros and Cons
- "It is a very scalable and stable solution."
- "CloudGuard for Application Security, like the other Check Point applications, has been presenting major latency problems when entering their administrative portal."
How has it helped my organization?
CloudGuard for Application Security came to provide a layer and organization of security to our company. The management of the devices became easier and faster to manage. In addition, the tool had very good reviews since it is the one in the market with the best detection rate of threats.
The solution is scalable, reliable, and does not present many false positives.
In addition, CloudGuard for Application Security helped us with its AI. With the ability to assess vulnerabilities, it helps us with the best practices to implement in the company.
What is most valuable?
CloudGuard for Application Security one of its most valuable features is that it can be integrated into an API more easily and effortlessly.
It is also a very scalable and stable solution. That is one of the points that a company looks for when implementing something like this in an organization.
With this tool, we have been able to release the overload that was being caused in the IT department and be able to focus on other security functions and thus be able to apply all good practices and be able to manage security 100% of the time.
What needs improvement?
CloudGuard for Application Security, like the other Check Point applications, has been presenting major latency problems when entering their administrative portal. That should be one of the priorities to take into account.
They must also improve the support provided to the client and improve the documentation library.
The tool fulfills the functionality very well. Hopefully, the next improvements will surprise us with something new since at present it fulfills the security expectations very well.
For how long have I used the solution?
it was implemented approximately one year ago.
What do I think about the stability of the solution?
The stability it presents is excellent. It goes up to 100%.
What do I think about the scalability of the solution?
The scalability that it presents is very good.
How are customer service and support?
The support must be improved. It presents a lot of deficiency.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
No previous solution was implemented.
How was the initial setup?
The configuration is very simple and the product is easy to implement.
What about the implementation team?
We had an engineer that helped us with the implementation. Overall, it was fast and good.
What was our ROI?
The investment that is made is an investment that will be reflected in the security. It's worth it.
What's my experience with pricing, setup cost, and licensing?
The cost is competitive in the market.
Which other solutions did I evaluate?
We wanted to continue with the same horizon as we have several Check Point solutions in our environment.
What other advice do I have?
The solution works very well. They just need to improve the support and documentation.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Java Developer at EROAD
Guards privacy, protects data, and offers good security configuration
Pros and Cons
- "After integrating AppSec with other applications, team members can easily work without fear of confidential information exposure."
- "The creation of security profiles for each application takes a lot of time."
What is our primary use case?
This security management system allows teams to evaluate the performance of applications and identify vulnerabilities that could affect performance.
It has deployed reliable security measures that can easily detect any potential data leaks and cyber-attacks. Before we develop any application Check Point CloudGuard Application Security provides the best data protection tools that be configured easily with the new application. We have been able to scale down workflows and monitor appropriately the entire production ecosystem.
How has it helped my organization?
We have prevented many potential threats that could be a major setback to our set goals.
After integrating AppSec with other applications, team members can easily work without fear of confidential information exposure. It has really empowered employees with modern online security measures that can affect business progress.
Learning new security coding techniques has been a great opportunity for my team and the entire organization. We have quashed many authentication and code injection attempts by ransomware attacks to secure our networking infrastructure.
What is most valuable?
Sensitive data exposure models have helped in guarding the privacy of company and customer information from landing in unauthorized hands.
Confidential details like bank statements and the financial status of employees is very sensitive and can easily be exposed to cyber-attacks. AppSec has created a secure environment that allows members to create and manage their personal email accounts and related personal data.
Application security configuration gives the IT team and authorized personnel to have full access and control of workflows without fear.
What needs improvement?
The creation of security profiles for each application takes a lot of time. The new release can have a unified security control system that can access the security situation of all applications from one single source.
The system blocks some authorized data entries that are not threats. AppSec could easily deploy a system with set commands that can be used to block unsafe operations and authorize areas of interest based on the user's needs. I have loved the way this software works, and I am impressed by the increased security across the applications.
For how long have I used the solution?
I've used the solution for eight months.
What do I think about the stability of the solution?
It is stable throughout.
What do I think about the scalability of the solution?
This software is good and the performance is excellent.
How are customer service and support?
The customer support staff is dedicated to delivering the best services ever.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We decided to test the performance of this product for the first time, and it impressed the departments.
How was the initial setup?
The setup process was straightforward, and the vendor guided us effectively.
What about the implementation team?
Deployment took place through the vendor team.
What was our ROI?
ROI has increased from 40% to 65% in eight months.
What's my experience with pricing, setup cost, and licensing?
The price is good for all businesses.
Which other solutions did I evaluate?
I did not consider other options.
What other advice do I have?
We could not have prevented many external attacks without AppSec. I am happy due to its great performance.
Which deployment model are you using for this solution?
Private Cloud
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Cloud Engineer at ITQS
Great AI, less false positives, and great administration capabilities
Pros and Cons
- "Its main value and what we liked the most is its powerful AI."
- "We would like to have a solution of this type for the administration of applications from mobile devices."
What is our primary use case?
We had the need to protect the computers in the cloud that we were migrating, giving them greater security and having control over the events and tasks that they execute.
This need led us to have and search for a solution that would support us directly with containers and the security of our access APIs.
Above all, we needed something that would give us added value when implementing, and that was where we came to use Check Point AppSec.
Its main value and what we liked the most is its powerful AI.
How has it helped my organization?
With so many tasks that we have at the administration level, as administrators, we find this solution as one of the best recommendations due to its powerful AI. It supports us to be scalable and learn in management with the data it is learning.
Zero-day management and preemptive stop management provide detection in hours, not weeks. These help us to be much more proactive and efficient in our security management and in much of what we have in the cloud and the infrastructure that we have been migrating to the various cloud.
What is most valuable?
Among its most outstanding features is the powerful AI in container security. Above all, it is one of the most powerful and easy-to-manage solutions. It manages to protect itself, and it manages to include its new rules based on what manages to learn. This helps us protect web applications and APIs by eliminating false positives and stops automated attacks against our organization. It eliminates the need to adjust rules manually and create exceptions each time an update is performed.
What needs improvement?
We would like to have a solution of this type for the administration of applications from mobile devices. It would help us to be more portable with management from tablets, iPads, or some cell phones, becoming easier to administer.
We'd lie to see it take on the characteristics of quantum applications and have these solutions all in one, protecting us and giving us even more value than what it is giving us today.
For how long have I used the solution?
I've used the solution for one year.
Which solution did I use previously and why did I switch?
We did not previously use a different solution.
Which other solutions did I evaluate?
We did not evaluate other options.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Chief Technology Officer at a legal firm with 11-50 employees
A robust solution that provides a unified view of connections
Pros and Cons
- "The solution's strongest point is that you can connect everything to it, giving you a full view of what's connected."
- "You need to know exactly the system. You cannot have someone running the system if they don't have the knowledge to do so."
What is most valuable?
The solution's strongest point is that you can connect everything to it, giving you a full view of what's connected. If you configure it right, it works perfectly.
What needs improvement?
You need to know exactly the system. You cannot have someone running the system if they don't have the knowledge to do so.
For how long have I used the solution?
I've been working with the solution for about a year.
What do I think about the stability of the solution?
The solution is stable. It doesn't matter which device is running Check Point. The solution works. It has never gone down. I rate the solution's stability a ten out of ten.
What do I think about the scalability of the solution?
My clients are large, but they are not enterprise-sized or small.
How was the initial setup?
I rate the initial setup a five out of ten because it is easy if you have the required knowledge and difficult if you are new to the system. The challenge isn't installing it: "Next, next, next, finish." Even a less knowledgeable person can do that. The challenge is configuring the system. There are a lot of blades in CloudGuard. You need to keep each type of security in your view, except for the Check Point view.
The initial setup is very fast, but you need to pray that the solution does all the work itself.
Which other solutions did I evaluate?
Other unified platforms like QRadar and Cisco are comparatively easier to use.
What other advice do I have?
You need someone knowledgeable to run the system. Today, with all the technology and everything, the company just wants to buy control and be lazy. "Let Check Point do the work." But this does not happen with Check Point because you need professional eyes. Check Point's price is very low compared to those controlling the system. You have to learn to investigate the solution to work better with it. The knowledge costs more than the system. The solution has a hybrid deployment, and I don't know a company that only chooses one deployment or another.
There is no support available for Check Point. There are things you have to look for, and that's it.
Check Point is the world's first and probably best security company. They might change its face, give it new names, separate into new models, and so on, but in the end, they are the best security company in the world. I rate the solution a ten out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer:

Buyer's Guide
Download our free Check Point CloudGuard WAF Report and get advice and tips from experienced pros
sharing their opinions.
Updated: February 2025
Popular Comparisons
SonarQube Server (formerly SonarQube)
Checkmarx One
Buyer's Guide
Download our free Check Point CloudGuard WAF Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- If you had to both encrypt and compress data during transmission, which would you do first and why?
- When evaluating Application Security, what aspect do you think is the most important to look for?
- What are the Top 5 cybersecurity trends in 2022?
- What are the threats associated with using ‘bogus’ cybersecurity tools?
- We're evaluating Tripwire, what else should we consider?
- Which application security solutions include both vulnerability scans and quality checks?
- Is SonarQube the best tool for static analysis?
- Why Do I Need Application Security Software?
- Which Email Security enterprise solution would you choose: Cisco Secure Email vs Forcepoint Email Security vs Barracuda Email Security Gateway?
- SAST vs. DAST: Which is better for application security testing?