Try our new research platform with insights from 80,000+ expert users

Check Point CloudGuard CNAPP vs Illumio comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 12, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SentinelOne Singularity Clo...
Sponsored
Ranking in Cloud and Data Center Security
5th
Ranking in Cloud Workload Protection Platforms (CWPP)
4th
Average Rating
8.8
Reviews Sentiment
7.9
Number of Reviews
107
Ranking in other categories
Vulnerability Management (6th), Container Security (3rd), Cloud Security Posture Management (CSPM) (3rd), Cloud-Native Application Protection Platforms (CNAPP) (3rd), Compliance Management (2nd)
Check Point CloudGuard CNAPP
Ranking in Cloud and Data Center Security
9th
Ranking in Cloud Workload Protection Platforms (CWPP)
6th
Average Rating
8.6
Reviews Sentiment
7.4
Number of Reviews
71
Ranking in other categories
Vulnerability Management (9th), Container Security (7th), Cloud Security Posture Management (CSPM) (5th), Cloud-Native Application Protection Platforms (CNAPP) (5th), Data Security Posture Management (DSPM) (4th), Compliance Management (6th)
Illumio
Ranking in Cloud and Data Center Security
2nd
Ranking in Cloud Workload Protection Platforms (CWPP)
12th
Average Rating
8.0
Reviews Sentiment
6.4
Number of Reviews
11
Ranking in other categories
Microsegmentation Software (3rd)
 

Mindshare comparison

As of April 2025, in the Cloud and Data Center Security category, the mindshare of SentinelOne Singularity Cloud Security is 1.5%, up from 0.6% compared to the previous year. The mindshare of Check Point CloudGuard CNAPP is 0.9%, up from 0.5% compared to the previous year. The mindshare of Illumio is 25.2%, up from 21.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cloud and Data Center Security
 

Featured Reviews

Andrew W - PeerSpot reviewer
Tells us about vulnerabilities as well as their impact and helps to focus on real issues
Looking at all the different pieces, it has got everything we need. Some of the pieces we do not even use. For example, we do not have Kubernetes Security. We are not running any K8 clusters, so it is good for us. Overall, we find the solution to be fantastic. There can be additional education components. This may not be truly fair to them because of what the product is going for, but it would be great to see additional education for compliance. It is not a criticism of the tool per se, but anything to help non-development resources understand some of the complexities of the cloud is always appreciated. Any additional educational resources are always helpful for security teams, especially those without a development background.
Bart Coddens - PeerSpot reviewer
Evolved cloud security with active monitoring but needs interface consistency
The user interface needs work. Sometimes, it is a transition from the old tool to the new CNAPP Two that I currently have, and remnants of the old environment can still be detected. I require consistency in the user interface to ensure everything is streamlined into the same look and feel. More work is needed in fine-tuning the threat data towards your CSPM and activity logs, aligning them with business intelligence, which requires a cohesive console interface. My assessment of CloudGuard CDRs in intrusion detection and threat hunting capabilities is that it still needs some work. All the threat data that comes in, you need to fine tune it a bit.
Alark Singh - PeerSpot reviewer
Visual traffic interface aids in network micro-segmentation while a streamlined update option enhances process efficiency
The strongest aspect of Illumio is the visual traffic interface, which allows us to see all traffic that communicates with our servers and allied companies. We can write rules that can be embedded into the IP table, making it easy to handle. Illumio enables us to see network flows, traffic sources, and destinations. The policy generation and enforcement capabilities are valuable, allowing for selective enforcement. Illumio helps in audit purposes by saving data and showing blocked traffic, ensuring no outside traffic is allowed.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Cloud Native Security offers attack path analysis."
"It gives me the information I need."
"I rate SentinelOne Singularity Cloud Security ten out of ten."
"I would rate this solution a nine out of ten."
"My favorite feature is Storyline."
"We've seen a reduction in resources devoted to vulnerability monitoring. Before PingSafe we spent a lot of time monitoring and fixing these issues. PingSafe enabled us to divert more resources to the production environment."
"It is advantageous in terms of time-saving and cost reduction."
"The user-friendly dashboard offers both convenience and security by providing quick access to solutions and keeping us informed of potential threats."
"It helps us to analyze vulnerabilities way before they get installed in production and the web. It gives us more security in the production environment."
"The user interface is responsive and quite intuitive; when selecting an object it automatically shows the relevant actions."
"It has an analytics service that does research for us."
"Customer service is very good."
"Assets Management as it provide complete visibility of our workload inkling EC2 instance or Serverless"
"All of the features are very useful in today's market."
"The most valuable feature is the single dashboard that enables us to manage the entire cloud environment from one place."
"The two most valuable features for us are the central firewall administrator and the real-time cloud compliance monitoring."
"The Explorer allows you to know the traffic between source and destination."
"The solution is easy to use."
"The flexibility of the solution is its most valuable feature."
"The features that I have found most useful is the ability to centralize all the rules and then distribute them across various locations. However, I've encountered challenges related to tagging policies, which can be complex to devise. It's a matter that requires careful consideration and stakeholder involvement before implementing such policies."
"Customer support is excellent."
"It has helped us to understand internal network visibility and firewall policy implementation. We use the product to simplify firewall policy implementation."
"The strongest aspect of Illumio is the visual traffic interface, which allows us to see all traffic that communicates with our servers and allied companies."
"The product provides visibility into how the applications communicate and how the network protocols are being used."
 

Cons

"After closing an alert in Cloud Native Security, it still shows as unresolved."
"They can add more widgets to its dashboard. A centralized dashboard with numerous metrics would improve user understanding."
"It took us a while to configure the software to work well in this type of environment, as the support documents were not always clear."
"There can be a specific type of alert showing that a new type of risk has been identified."
"We don't get any notifications from PingSafe when the clusters are down."
"The main area for improvement I want to see is for the platform to become less resource-intensive. Right now, it can slow down processes on the machine, and it would be a massive improvement if it were more lightweight than it currently is."
"When you find a vulnerability and resolve it, the same issue will not occur again. I want PingSafe to block the same vulnerability from appearing again. I want something like a playbook where the steps that we take to resolve an issue are repeated when that issue happens again."
"The Infrastructure as Code service available in PingSafe and the services available in AWS cloud security can be merged so that we can get the security data directly from AWS cloud in PingSafe. This way, all the data related to security will be in one single place. Currently, we have to check a couple of things on PingSafe, and we have to validate that same data on the AWS Cloud to be sure. If they can collaborate like that, it will be great."
"In Dome9, there should be a policy validation option where we can validate the policy before we push it into production."
"Currently, worldwide, there are many companies of all sizes that do not understand the value that their data has, but even with all existing clouds, they also do not understand what the shared responsibility model is. They only assume that by having a cloud, the provider must ensure safety, when the truth is that the providers only secure their sites. Everything we do in the cloud and how we configure it is actually our responsibility."
"The impact analysis that they perform can be improved. It is currently lacking. It should be more detailed."
"The support it provides is not very good. They should improve it since we have had several setbacks due to support issues."
"I would like to see Test B functions at the application access level."
"Down the road, we would like to see automation. That is probably a feature that most people want. If they can automate patching a vulnerability, it will be much easier."
"Currently, I would like this solution extended to cellular devices or tablets."
"The accuracy of its remediation is a 7.5 out of 10. Before, I would have given it a ten but now, to handle remediation for fully qualified domain names, it's not working as it did in the past. We're finding some difficulties there."
"The product’s agents don't work very well in OT environments."
"There should be an option to upgrade from the console to the latest version instead of performing manual upgrades."
"I have not had the chance to experiment deeply with it."
"The customer service is lagging a bit. It could be better."
"There should be an option to upgrade from the console to the latest version instead of performing manual upgrades. This would be more helpful to streamline processes."
"I would like to see better data security in the product."
"It requires a low-level re-architecting of the product."
"The solution is very basic and doesn't do anything other than the orchestration of layer four endpoint firewall rules."
 

Pricing and Cost Advice

"The price depends on the extension of the solution that you want to buy. If you want to buy just EDR, the price is less. XDR is a little bit more expensive. There are going to be different add-ons for Singularity."
"PingSafe's primary advantage is its ability to consolidate multiple tools into a single user interface, but, beyond this convenience, it may not offer significant additional benefits to justify its price."
"I am not involved in the pricing, but it is cost-effective."
"We have an enterprise license. It is affordable. I'm not sure, but I think we pay 150,000 rupees per month."
"PingSafe is affordable."
"Its pricing is constant. It has been constant over the previous year, so I am happy with it. However, price distribution can be better explained. That is the only area I am worried about. Otherwise, the pricing is very reasonable."
"SentinelOne is relatively cheap. If ten is the most expensive, I would rate it a seven."
"It is a little expensive. I would rate it a four out of ten for pricing."
"Check Point CloudGuard Posture Management is always known as a good solution but an expensive one. When you're using Cisco, Check Point, or Palo Alto, you know that you will pay more, but you know that it will work."
"Licensing and costs are straightforward, as they have a baseline of 100 workloads within one license and no additional charges."
"In the beginning, the price of Dome9 was cheap, whereas now it is not."
"The pricing is tremendous and super cheap. It is shockingly cheap for what you get out of it. I am happy with that. I hope that doesn't get reported back and they increase the prices. I love the pricing and the licensing makes sense. It is just assets: The more stuff that you have, the more you pay."
"I would advise taking into account the existing number of devices and add a forecast of the number of devices to be added in the coming year or two, to obtain better pricing."
"Check Point CloudGuard Posture Management is expensive."
"The license for CloudGuard Posture Management is about $80 a year, and it's based on your cloud footprint, not the number of users. So you could have a million users, and it doesn't matter."
"The solution’s pricing is a little bit high."
"The product's pricing is around 10,000-15,000 USD. The pricing is on a yearly basis."
"There is a subscription needed to use Illumio Adaptive Security Platform and we pay every three years. Overall the solution is expensive."
report
Use our free recommendation engine to learn which Cloud and Data Center Security solutions are best for your needs.
845,040 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Financial Services Firm
16%
Manufacturing Company
9%
Government
5%
Computer Software Company
16%
Financial Services Firm
14%
Manufacturing Company
9%
University
6%
Financial Services Firm
18%
Computer Software Company
15%
Manufacturing Company
8%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about PingSafe?
The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...
What is your experience regarding pricing and costs for PingSafe?
It is cost-effective compared to other solutions in the market.
What needs improvement with PingSafe?
In version 2, a lot of rules have been deployed for Kubernetes security and CDR, which makes a lot of issues of criti...
What do you like most about Illumio Adaptive Security Platform?
The features that I have found most useful is the ability to centralize all the rules and then distribute them across...
What is your experience regarding pricing and costs for Illumio Adaptive Security Platform?
I do not have specific knowledge about pricing details as it is handled by upper management. I know that Illumio is t...
What needs improvement with Illumio Adaptive Security Platform?
There should be an option to upgrade from the console to the latest version instead of performing manual upgrades. Th...
 

Also Known As

PingSafe
Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence
Illumio Adaptive Security Platform, Illumio ASP
 

Overview

 

Sample Customers

Information Not Available
Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners
Plantronics, NTT Innovation Institute Inc.
Find out what your peers are saying about Check Point CloudGuard CNAPP vs. Illumio and other solutions. Updated: March 2025.
845,040 professionals have used our research since 2012.