AWS Security Hub vs Check Point CloudGuard CNAPP comparison

Amazon Web Services (AWS) and Check Point Software Technologies are both solutions in the Cloud Security Posture Management (CSPM) category. Amazon Web Services (AWS) is ranked #13 with an average rating of 7.6, while Check Point Software Technologies is ranked #5 with an average rating of 8.5. Amazon Web Services (AWS) holds a 4.1% mindshare in CSPM, compared to Check Point Software Technologies’s 2.9% mindshare. Additionally, 89% of Amazon Web Services (AWS) users are willing to recommend the solution, compared to 94% of Check Point Software Technologies users who would recommend it.

AWS Security Hub

Read 26 AWS Security Hub reviews

7,414 Views
3,262 Comparison Views

89% willing to recommend

Check Point CloudGuard CNAPP

Read 70 Check Point CloudGuard CNAPP reviews

6,163 Views
4,068 Comparison Views

94% willing to recommend

AWS Security Hub

Check Point CloudGuard CNAPP

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 12, 2025

Check Point CloudGuard CNAPP and AWS Security Hub are two products competing in the cloud security category. Check Point CloudGuard CNAPP appears to have the upper hand due to its comprehensive features and adaptability across multi-cloud environments.

Features: Check Point CloudGuard CNAPP offers comprehensive compliance checks, effective cloud-native application protection, and significant automation capabilities with tools like CloudBots for auto-remediation. It delivers excellent visibility and control across multi-cloud environments. AWS Security Hub is highly valued for its seamless integration with AWS services, ensuring native compatibility and comprehensive alerts about potential compliance issues within AWS environments.

Room for Improvement: Check Point CloudGuard CNAPP users seek enhanced third-party integrations, better documentation, and more customization options for security policies. AWS Security Hub could improve in areas such as real-time scanning, customization of compliance checks, and open-source integrations to enhance its adaptability for multi-cloud settings.

Ease of Deployment and Customer Service: Check Point CloudGuard CNAPP is praised for its flexible deployment options supporting various cloud types and its ease of integration into existing infrastructures. Its responsive customer service provides knowledgeable support. AWS Security Hub, being AWS-native, offers straightforward integration within AWS environments but lacks the multi-cloud flexibility that CloudGuard CNAPP provides. It requires more integration knowledge for hybrid environments, though customer support remains effective.

Pricing and ROI: Check Point CloudGuard CNAPP positions itself on the higher end of the pricing spectrum but reports strong ROI through enhanced security visibility and reduced compliance risks. AWS Security Hub is considered reasonably priced with pay-as-you-go models, offering cost-effective solutions for AWS-focused organizations but with a more indirect ROI, as it enhances security primarily within AWS.

To learn more, read our detailed AWS Security Hub vs. Check Point CloudGuard CNAPP Report (Updated: September 2025).

Buyer's Guide

AWS Security Hub vs. Check Point CloudGuard CNAPP

September 2025

Download the complete report

Helped 871,688 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

AWS Security Hub

Ranking in Cloud Security Posture Management (CSPM)

13th

Average Rating

7.6

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

Security Orchestration Automation and Response (SOAR) (5th)

Check Point CloudGuard CNAPP

Ranking in Cloud Security Posture Management (CSPM)

5th

Average Rating

8.6

Reviews Sentiment

7.3

Number of Reviews

Ranking in other categories

Vulnerability Management (10th), Cloud and Data Center Security (8th), Container Security (10th), Cloud Workload Protection Platforms (CWPP) (6th), Cloud-Native Application Protection Platforms (CNAPP) (5th), Data Security Posture Management (DSPM) (6th), Compliance Management (6th)

Mindshare comparison

As of October 2025, in the Cloud Security Posture Management (CSPM) category, the mindshare of AWS Security Hub is 4.1%, down from 5.0% compared to the previous year. The mindshare of Check Point CloudGuard CNAPP is 2.9%, down from 3.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Cloud Security Posture Management (CSPM) Market Share Distribution
Product	Market Share (%)
Check Point CloudGuard CNAPP	2.9%
AWS Security Hub	4.1%
Other	93.0%

Cloud Security Posture Management (CSPM)

Featured Reviews

Karthik Ekambaram

Director at Scybers

Has helped identify misconfigurations and prioritize risks but lacks multi-cloud support and deeper integration features

AWS Security Hub cannot scale up to multiple different cloud environments; it only works for AWS. There are other products in the market for CSPM that can give you multi-cloud environment misconfigurations, even Microsoft for that matter. Regarding the integration of AWS Security Hub with third-party tools, I am not certain whether we can integrate them, but there is no need to do so. However, AWS Security Hub cannot integrate with other cloud providers, so it only supports the AWS environment. The compliance checks within AWS Security Hub are good, but we don't use them much. We utilize compliance frameworks such as CIS compliance frameworks and ISO 27017 framework, which are beneficial, but it can improve in other areas too, such as including NIST and other frameworks beyond just ISO and CIS. Improvements can be applicable for scalability, particularly on integration with multi-cloud environments, and compliance frameworks can be added for more variety as well. The unified dashboard in AWS Security Hub is adequate; I cannot say it is exceptional, but the content available in the dashboards is satisfactory for now.

Read full review

Bart Coddens

Cloud Engineer at Cloudar

Evolved cloud security with active monitoring but needs interface consistency

The user interface needs work. Sometimes, it is a transition from the old tool to the new CNAPP Two that I currently have, and remnants of the old environment can still be detected. I require consistency in the user interface to ensure everything is streamlined into the same look and feel. More work is needed in fine-tuning the threat data towards your CSPM and activity logs, aligning them with business intelligence, which requires a cohesive console interface. My assessment of CloudGuard CDRs in intrusion detection and threat hunting capabilities is that it still needs some work. All the threat data that comes in, you need to fine tune it a bit.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable feature of AWS Security Hub is the ability to track when monitoring is not enabled on any of my resources."

"Cloudposse is a valuable feature as it guarantees my security."

"I rate Security Hub ten out of ten for stability."

"The most valuable features of the solution are the scanning of all the cloud environments and most of the compliances available in the cloud."

"AWS Security Hub provides comprehensive alerts about potential compliance issues with CIS standards. The integration with third-party tools is another excellent feature. All our workloads are on AWS."

"The most valuable feature of the solution stems from the fact that it is easy to manage...It is a scalable solution."

"AWS Security Hub has very good integration features. It allows for AWS native services integration, and it helps us to integrate some of the services outside of AWS. They have partners, such as Amazon Preferred Network Partners (APN). If you have different security tools around APN, we can integrate those findings with AWS Security Hub reducing the need to refer to different portals or different UIs. You can have AWS Security Hub act as a single common go-to dashboard."

"Currently, our organization utilizes AWS for various purposes, including SaaS (Software as a Service), PaaS (Platform as a Service), and hosting applications in the cloud. We develop our applications and use AWS services as a platform for basic functions and secondary development needs. Additionally, we rely on PaaS for accounting services. Approximately, 50% of our applications are hosted in the cloud environment, making it a significant part of our current setup."

More AWS Security Hub pros

"The reporting is quite good. It is the most powerful aspect of this solution."

"The solution has intelligence that integrates with a range of threat intelligence feeds, including Check Point's ThreatCloud, to provide real-time intelligence on emerging threats."

"The identification of misconfigurations, maintenance of compliance in a centralized way, and visibility across all the multi-cloud tenants are the key functionalities."

"It offers advanced detection of threats that can harm data from the cloud database."

"The most valuable feature is the CloudBots for auto-remediation of security findings."

"Compliance is becoming an important tool for us as well."

"The most valuable feature is the single dashboard that enables us to manage the entire cloud environment from one place."

"The ability to drill down to individual hosts on an account and see which ones are affected is valuable."

More Check Point CloudGuard CNAPP pros

Cons

"Whenever my team gets some alarms from the central team, my team needs to initiate whether it's a real or false trigger. The central team needs to keep adjusting to the parameters or at least the concerned IPs, whether it's really from the company's pool of IPs, so the trigger process can be improved. In the next release of AWS Security Hub, I'd like a better dashboard that could result in better alert visibility."

"Shortening the response time for support tickets, particularly in production issues, could make the service more efficient."

"Security Hub is currently not worth investing in, as it requires more configurations and integration with other services to work effectively."

"It's not user-friendly. Too much going on, too many unnecessary findings, not very visual. You can't do much compared to other similar tools that are cheaper and better."

"There is room for improvement in implementing AI capabilities. It would be beneficial for Security Hub to implement preventative measures and to directly apply recommendations instead of just suggesting them."

"One aspect that could be improved in the solution is its adaptability to different markets and geopolitical restrictions. In certain regions like Thailand, specific services from certain countries or providers, such as AWS or Azure, might be limited or blocked. It also needs improvement in would require configuring the solution more adaptable to AWS infrastructure and function."

"The user interface, graphs, and dashboards of the solution could improve in the future. They are not very sophisticated and could use an update."

"Security needs to be measured based on their own criteria. We can't add custom criteria specific to our organization. For example, having an S3 bucket publicly available might be flagged as a critical alert, but it might not be critical in a sandbox environment. So, it gets flagged as critical, which becomes a false positive. So, customization options and creating custom dashboards would be areas for improvement."

More AWS Security Hub cons

"The user interface could be improved. Sometimes, the visibility is not immediately available for the environment. We have the native servers that come with the solutions, but we cannot see them in the Check Point log. Another issue is with the integrated file monitoring. It would make sense to have stuff like file integrity monitoring and malware scanning available within this module because we don't want to integrate another product."

"I would appreciate a way to receive periodic updates, like through email. I am the kind of person who likes to receive data passively."

"Scalability, particularly in workload protection, is an area that needs improvement."

"Their service needs improvement."

"Addressing the large amount of compliance information and benchmarks we need to observe, the tools are becoming our goto dashboards."

"For businesses with varied IT ecosystems, increasing the integration capabilities with additional third-party products and services would increase flexibility and user-friendliness."

"CloudGuard could be more customizable. It has built-in standards for things like GDPR compliance. But depending on your business lane, you might want to build your own controls based on your own standards."

"The costs are really high if you want the entire capabilities of the platform."

More Check Point CloudGuard CNAPP cons

Pricing and Cost Advice

"AWS Security Hub is not an expensive tool. I would consider it to be a cheap solution. AWS Security Hub follows the PAYG pricing model, meaning you will have to pay for whatever you use."

"The cost is based on the number of compliances, core checks, and services required, and for more than 10,000 recommendations, the charge is just one dollar."

"There are multiple subscription models, like yearly, monthly, and packaged."

"Security Hub is not an expensive solution."

"The price of the solution is not very competitive but it is reasonable."

"The price of AWS Security Hub is average compared to other solutions."

"AWS Security Hub's pricing is pretty reasonable."

"The pricing is fine. It is not an expensive tool."

"In the beginning, the price of Dome9 was cheap, whereas now it is not."

"The price is on the higher end."

"The pricing is tremendous and super cheap. It is shockingly cheap for what you get out of it. I am happy with that. I hope that doesn't get reported back and they increase the prices. I love the pricing and the licensing makes sense. It is just assets: The more stuff that you have, the more you pay."

"The license for CloudGuard Posture Management is about $80 a year, and it's based on your cloud footprint, not the number of users. So you could have a million users, and it doesn't matter."

"From a pricing perspective, they are pretty expensive."

"Right now, we have licenses on 500 machines, and they are not cheap."

"Licensing and costs are straightforward, as they have a baseline of 100 workloads within one license and no additional charges."

"Check Point CloudGuard Posture Management is expensive."

More Check Point CloudGuard CNAPP pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Cloud Security Posture Management (CSPM) solutions are best for your needs.

See recommendations

871,688 professionals have used our research since 2012.

Comparison Review

it_user186927

Director of Operations at Bell

Feb 16, 2015

Cybereason vs. Interset vs. SQRRL

Capture DB - they all use NoSQL db and hence solve the ad hoc query and 'go back in time' problem with current best of breed SIEM and DLP solutions that rely on real time analysis of incoming logs (and don't store them). This means deeper and quicker iterative threat analysis and assessment…

Read full review

Top Industries

By visitors reading reviews

Computer Software Company

13%

Financial Services Firm

12%

Manufacturing Company

10%

Government

Computer Software Company

12%

Financial Services Firm

10%

Manufacturing Company

Educational Organization

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	10
Midsize Enterprise	5
Large Enterprise	12

By reviewers
Company Size	Count
Small Business	51
Midsize Enterprise	17
Large Enterprise	57

Questions from the Community

Which is better - Azure Sentinel or AWS Security Hub?

We like that Azure Sentinel does not require as much maintenance as legacy SIEMs that are on-premises. Azure Sentinel is auto-scaling - you will not have to worry about performance impact, you will...

See all answers

What do you like most about AWS Security Hub?

The most valuable features of the solution are the scanning of all the cloud environments and most of the compliances available in the cloud.

See all answers

What needs improvement with AWS Security Hub?

See all answers

What is your experience regarding pricing and costs for CloudGuard Workload Protection?

My experience with pricing, setup cost, and licensing is that the pricing model is flexible and consumption-based, which makes it easier to align with our cloud. The setup cost was moderate, not to...

See all answers

What do you like most about CloudGuard for Cloud Intelligence?

The new scanning function is a valuable feature that wasn't available until recently.

See all answers

What needs improvement with CloudGuard for Cloud Intelligence?

There is a lack of functionalities and usability. I used to compare it with another solution that is focused on specific features. All solutions have some gaps, and we are looking for the best one ...

See all answers

Comparisons

Microsoft Sentinel vs AWS Security Hub

Compared 37% of the time

Wiz vs AWS Security Hub

Compared 11% of the time

Prisma Cloud by Palo Alto Networks vs AWS Security Hub

Compared 7% of the time

Microsoft Defender for Cloud vs AWS Security Hub

Compared 5% of the time

CrowdStrike Falcon Cloud Security vs AWS Security Hub

Compared 3% of the time

More AWS Security Hub Competitors

Wiz vs Check Point CloudGuard CNAPP

Compared 14% of the time

Prisma Cloud by Palo Alto Networks vs Check Point CloudGuard CNAPP

Compared 12% of the time

SentinelOne Singularity Cloud Security vs Check Point CloudGuard CNAPP

Compared 7% of the time

Cloudflare vs Check Point CloudGuard CNAPP

Compared 4% of the time

SUSE NeuVector vs Check Point CloudGuard CNAPP

Compared 2% of the time

More Check Point CloudGuard CNAPP Competitors

Product Reports

Buyer's Guide

AWS Security Hub

October 2025

Download AWS Security Hub product report

Buyer's Guide

Check Point CloudGuard CNAPP

October 2025

Download Check Point CloudGuard CNAPP product report

Also Known As

SQRRL

Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence

Overview

AWS Security Hub is a comprehensive security service that provides a centralized view of security alerts and compliance status across an AWS environment. It collects data from various AWS services, partner solutions, and AWS Marketplace products to provide a holistic view of security posture. With Security Hub, users can quickly identify and prioritize security issues, automate compliance checks, and streamline remediation efforts.

The service offers a range of features including continuous monitoring, threat intelligence integration, and customizable dashboards. It also provides automated insights and recommendations to help users improve their security posture. Security Hub integrates with other AWS services like Amazon GuardDuty, AWS Config, and AWS Macie to provide a unified security experience. Additionally, it supports integration with third-party security tools through its API, allowing users to leverage their existing security investments.

With its user-friendly interface and powerful capabilities, AWS Security Hub is a valuable tool for organizations looking to enhance their security and compliance posture in the cloud.

Amazon Web Services (AWS)

Check Point CloudGuard CNAPP offers comprehensive cloud security with features like dynamic access control, asset protection, and compliance checks, tailored for organizations seeking enhanced governance across AWS, Azure, and GCP platforms.

Check Point CloudGuard CNAPP provides robust capabilities, including centralized firewall management, IAM scanning, and real-time visibility. Its strengths lie in predictive visualization, threat intelligence, and auto-remediation, making it a valuable tool for risk mitigation and compliance management. The platform's integration and responsiveness enhance cloud security, ensuring alignment with industry standards and effective threat protection.

What are the key features of Check Point CloudGuard CNAPP?

Dynamic Access Control: Enables granular security permissions for cloud resources.
Asset Protection: Safeguards cloud assets from unauthorized access and threats.
Compliance Checks: Ensures alignment with industry regulations like PCI DSS and SOC 2.
Centralized Firewall Management: Simplifies firewall rule configuration across cloud environments.
IAM Scanning: Audits and secures identity and access management configurations.
Real-Time Visibility: Provides insights into cloud environments for proactive threat detection.

What benefits and ROI should you expect from Check Point CloudGuard CNAPP?

Threat Intelligence: Identifies and mitigates potential risks before exploitation.
Auto-Remediation: Automates responses to security incidents, reducing manual intervention.
Intuitive Interface: Simplifies management and enhances operational efficiency.
Posture Management: Maintains strong security posture through continuous assessment.

Organizations in finance, healthcare, and retail frequently implement Check Point CloudGuard CNAPP for compliance and security across cloud environments. It assists with workload protection, threat detection, and regulatory obligation fulfillment, proving effective for securing applications and monitoring API interactions.

Check Point Software Technologies

Sample Customers

Edmunds, Frame.io, GoDaddy, Realtor.com

Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners

Buyer's Guide

AWS Security Hub vs. Check Point CloudGuard CNAPP

September 2025

Free Report: AWS Security Hub vs. Check Point CloudGuard CNAPP

Find out what your peers are saying about AWS Security Hub vs. Check Point CloudGuard CNAPP and other solutions. Updated: September 2025.

DOWNLOAD NOW

871,688 professionals have used our research since 2012.

See our AWS Security Hub vs. Check Point CloudGuard CNAPP report.

See our list of best Cloud Security Posture Management (CSPM) vendors.

We monitor all Cloud Security Posture Management (CSPM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.