Try our new research platform with insights from 80,000+ expert users

Check Point CloudGuard CNAPP vs Illumio comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 12, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SentinelOne Singularity Clo...
Sponsored
Ranking in Cloud and Data Center Security
5th
Ranking in Cloud Workload Protection Platforms (CWPP)
4th
Average Rating
8.8
Reviews Sentiment
7.9
Number of Reviews
107
Ranking in other categories
Vulnerability Management (6th), Container Security (3rd), Cloud Security Posture Management (CSPM) (3rd), Cloud-Native Application Protection Platforms (CNAPP) (3rd), Compliance Management (2nd)
Check Point CloudGuard CNAPP
Ranking in Cloud and Data Center Security
9th
Ranking in Cloud Workload Protection Platforms (CWPP)
6th
Average Rating
8.6
Reviews Sentiment
7.4
Number of Reviews
71
Ranking in other categories
Vulnerability Management (9th), Container Security (7th), Cloud Security Posture Management (CSPM) (5th), Cloud-Native Application Protection Platforms (CNAPP) (5th), Data Security Posture Management (DSPM) (4th), Compliance Management (6th)
Illumio
Ranking in Cloud and Data Center Security
2nd
Ranking in Cloud Workload Protection Platforms (CWPP)
12th
Average Rating
8.0
Reviews Sentiment
6.4
Number of Reviews
11
Ranking in other categories
Microsegmentation Software (3rd)
 

Mindshare comparison

As of April 2025, in the Cloud and Data Center Security category, the mindshare of SentinelOne Singularity Cloud Security is 1.5%, up from 0.6% compared to the previous year. The mindshare of Check Point CloudGuard CNAPP is 0.9%, up from 0.5% compared to the previous year. The mindshare of Illumio is 25.2%, up from 21.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cloud and Data Center Security
 

Featured Reviews

Andrew W - PeerSpot reviewer
Tells us about vulnerabilities as well as their impact and helps to focus on real issues
Looking at all the different pieces, it has got everything we need. Some of the pieces we do not even use. For example, we do not have Kubernetes Security. We are not running any K8 clusters, so it is good for us. Overall, we find the solution to be fantastic. There can be additional education components. This may not be truly fair to them because of what the product is going for, but it would be great to see additional education for compliance. It is not a criticism of the tool per se, but anything to help non-development resources understand some of the complexities of the cloud is always appreciated. Any additional educational resources are always helpful for security teams, especially those without a development background.
Bart Coddens - PeerSpot reviewer
Evolved cloud security with active monitoring but needs interface consistency
The user interface needs work. Sometimes, it is a transition from the old tool to the new CNAPP Two that I currently have, and remnants of the old environment can still be detected. I require consistency in the user interface to ensure everything is streamlined into the same look and feel. More work is needed in fine-tuning the threat data towards your CSPM and activity logs, aligning them with business intelligence, which requires a cohesive console interface. My assessment of CloudGuard CDRs in intrusion detection and threat hunting capabilities is that it still needs some work. All the threat data that comes in, you need to fine tune it a bit.
Alark Singh - PeerSpot reviewer
Visual traffic interface aids in network micro-segmentation while a streamlined update option enhances process efficiency
The strongest aspect of Illumio is the visual traffic interface, which allows us to see all traffic that communicates with our servers and allied companies. We can write rules that can be embedded into the IP table, making it easy to handle. Illumio enables us to see network flows, traffic sources, and destinations. The policy generation and enforcement capabilities are valuable, allowing for selective enforcement. Illumio helps in audit purposes by saving data and showing blocked traffic, ensuring no outside traffic is allowed.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"PingSafe released a new security graph tool that helps us identify the root issue. Other tools give you a pass/fail type of profile on all misconfigurations, and those will run into the thousands. PingSafe's graphing algorithm connects various components together and tries to identify what is severe and what is not. It can correlate various vulnerabilities and datasets to test them on the back end to pinpoint the real issue."
"The most valuable feature is the easy-to-understand user interface, which allows even non-technical users to comprehend and resolve issues."
"The most valuable aspects of PingSafe are its alerting system and the remediation guidance it provides."
"PingSafe offers comprehensive security posture management."
"SentinelOne Singularity Cloud Security has significantly improved our risk posture."
"My favorite feature is Storyline."
"The multi-cloud support is valuable. They are expanding to different clouds. It is not restricted to only AWS. It allows us to have different clouds on one platform."
"Singularity Cloud Workload Security provides us with better security detection and more visibility. It is another resource that we can use to detect vulnerabilities in our company's systems. For example, it can help us detect new file processes that we are not familiar with, which could be used by attackers to exploit our systems. Singularity Cloud Workload Security can also help us diagnose and analyze data to determine whether it is malicious or not. Singularity Cloud Workload Security is like another pair of eyes that can help us protect our systems from cyberattacks."
"The system has deployed security tools to enhance effective investigations in the entire company networking system."
"Visibility is a key feature. It helps me to validate my overall network posture."
"The platform's full visibility and control across many cloud environments allows us to effectively monitor the security posture, uncover vulnerabilities, and consistently enforce security standards."
"Customer service is very good."
"Gives us centralized firewall management for both Windows and Linux distros. Also provides a clear view of the security configurations and connections across environments (DMZ, external and internal networks)."
"The most valuable feature is the ability to apply common tools across all accounts."
"It offers advanced detection of threats that can harm data from the cloud database."
"It's helped with misconfigurations."
"Customer support is excellent."
"The strongest aspect of Illumio is the visual traffic interface, which allows us to see all traffic that communicates with our servers and allied companies."
"The tool helps with my company's security posture."
"The Explorer allows you to know the traffic between source and destination."
"The flexibility of the solution is its most valuable feature."
"I would recommend Illumio to all sizes of companies."
"The product provides visibility into how the applications communicate and how the network protocols are being used."
"It has helped us to understand internal network visibility and firewall policy implementation. We use the product to simplify firewall policy implementation."
 

Cons

"The cloud-based operations might pose challenges in areas with limited or unavailable internet connectivity."
"One potential drawback is the cost of SentinelOne Singularity Cloud Security, which may be prohibitive for smaller businesses or startups, particularly those in regions with lower average incomes, such as India."
"While PingSafe offers real-time response, there is room for improvement in alert accuracy."
"PingSafe is an excellent CSPM tool, but the CWPP features need to improve, and there is a scope for more application security posture management features. There aren't many ASPM solutions on the market, and existing ones are costly. I would like to see PingSafe develop into a single pane of glass for ASPM, CSPM, and CWPP. Another feature I'd like to see is runtime protection."
"In version 2, a lot of rules have been deployed for Kubernetes security and CDR, which makes a lot of issues of critical severity, whereas they are not critical or of high severity. There is a mismatch of severities. They need to work on severity management."
"The could improve their mean time to detect."
"We've found a lot of false positives."
"They can add more widgets to its dashboard. A centralized dashboard with numerous metrics would improve user understanding."
"Timely updates and upgrades to meet modern technological changes could help improve performance and limit the chances of downtime."
"The setup can be better. With every other Check Point product, the setup is scripted. You just approve versions, and then you are off. The setup for this solution is still very much manual. I would like to see that transition to more of a scripted setup."
"The license cost is expensive and has room for improvement."
"CloudGuard could be improved by including integration with vendors other than AWS, especially Azure, especially in permissions."
"Automation and advanced threat prevention have room for improvement."
"The guidelines to implement or to link with the clouds are not complete."
"We want to be able to customize the solution more in order to meet the needs of our company."
"The user interface needs work."
"Some of the features that can be improved is offer additional guidance on creating an effective and risk-free tagging policy would be highly beneficial."
"The product’s agents don't work very well in OT environments."
"I would like to see better data security in the product."
"There should be an option to upgrade from the console to the latest version instead of performing manual upgrades. This would be more helpful to streamline processes."
"We need more details on areas where there is an error or a traffic blockage. I would like the tool to offer a more detailed view."
"There should be an option to upgrade from the console to the latest version instead of performing manual upgrades."
"The interaction we've had with the support team hasn't been ideal. Technical support should be improved."
"Illumio Adaptive Security Platform could improve by supporting more operating systems. For example, Cisco and Apache appliances."
 

Pricing and Cost Advice

"The features included in PingSafe justify its price point."
"The licensing is easy to understand and implement, with some flexibility to accommodate dynamic environments."
"SentinelOne is relatively cheap. If ten is the most expensive, I would rate it a seven."
"As a partner, we receive a discount on the licenses."
"SentinelOne Singularity Cloud Security is costly."
"PingSafe is priced reasonably for our workload."
"It is cost-effective compared to other solutions in the market."
"SentinelOne provided competitive pricing compared to other vendors, and we are satisfied with the deal."
"The license for CloudGuard Posture Management is about $80 a year, and it's based on your cloud footprint, not the number of users. So you could have a million users, and it doesn't matter."
"The pricing is tremendous and super cheap. It is shockingly cheap for what you get out of it. I am happy with that. I hope that doesn't get reported back and they increase the prices. I love the pricing and the licensing makes sense. It is just assets: The more stuff that you have, the more you pay."
"CloudGuard is fairly priced."
"We have the enterprise-level license and we renew it annually because it is worth the cost."
"It is difficult to contextualize the pricing because we are used to Indian pricing and licensing."
"In the beginning, the price of Dome9 was cheap, whereas now it is not."
"From a pricing perspective, they are pretty expensive."
"​They support either annual licensing or hourly. At the time of our last negotiation, it was either one or the other, you could not mix or match. I would have liked to mix/match. ​"
"The product's pricing is around 10,000-15,000 USD. The pricing is on a yearly basis."
"There is a subscription needed to use Illumio Adaptive Security Platform and we pay every three years. Overall the solution is expensive."
report
Use our free recommendation engine to learn which Cloud and Data Center Security solutions are best for your needs.
845,040 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Financial Services Firm
16%
Manufacturing Company
9%
Government
5%
Computer Software Company
16%
Financial Services Firm
14%
Manufacturing Company
9%
University
6%
Financial Services Firm
18%
Computer Software Company
15%
Manufacturing Company
8%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about PingSafe?
The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...
What is your experience regarding pricing and costs for PingSafe?
It is cost-effective compared to other solutions in the market.
What needs improvement with PingSafe?
In version 2, a lot of rules have been deployed for Kubernetes security and CDR, which makes a lot of issues of criti...
What do you like most about Illumio Adaptive Security Platform?
The features that I have found most useful is the ability to centralize all the rules and then distribute them across...
What is your experience regarding pricing and costs for Illumio Adaptive Security Platform?
I do not have specific knowledge about pricing details as it is handled by upper management. I know that Illumio is t...
What needs improvement with Illumio Adaptive Security Platform?
There should be an option to upgrade from the console to the latest version instead of performing manual upgrades. Th...
 

Also Known As

PingSafe
Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence
Illumio Adaptive Security Platform, Illumio ASP
 

Overview

 

Sample Customers

Information Not Available
Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners
Plantronics, NTT Innovation Institute Inc.
Find out what your peers are saying about Check Point CloudGuard CNAPP vs. Illumio and other solutions. Updated: March 2025.
845,040 professionals have used our research since 2012.