Check Point CloudGuard CNAPP vs Qualys VMDR comparison

Check Point Software Technologies and Qualys are both solutions in the Vulnerability Management category. Check Point Software Technologies is ranked #8 with an average rating of 8.6, while Qualys is ranked #2 with an average rating of 8.2. Check Point Software Technologies holds a 1.5% mindshare in VM, compared to Qualys’s 11.1% mindshare. Additionally, 94% of Check Point Software Technologies users are willing to recommend the solution, compared to 94% of Qualys users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jan 5, 2025

Qualys VMDR and Check Point CloudGuard CNAPP compete in the vulnerability and cloud security sectors. Qualys VMDR is notable for its strength in vulnerability management, while CloudGuard CNAPP excels in cloud-specific security and compliance.

Features: Qualys VMDR is recognized for its comprehensive vulnerability management, automation in detecting, patching, and assessing vulnerabilities, and its scalability. On the other hand, CloudGuard CNAPP is valued for its cloud security posture management, offering compliance and threat detection capabilities, which provide comprehensive visibility and governance across multi-cloud environments.

Room for Improvement: Qualys VMDR users call for improvements in user interface simplicity, third-party tool integration, and reducing the incidence of false positives. CloudGuard CNAPP users highlight the need for more advanced features like enhanced remediation automation, better pricing, and improved multi-cloud integration.

Ease of Deployment and Customer Service: Qualys VMDR is versatile with deployments across various cloud environments, with user feedback on its technical support being mixed. CloudGuard CNAPP primarily serves public clouds but supports hybrid environments, with its customer service generally well-regarded, though improvements are needed in ticket handling.

Pricing and ROI: Both solutions are viewed as expensive, with Qualys VMDR presenting a worthwhile investment due to its licensing flexibility despite costs escalating with additional features. CloudGuard CNAPP's pricing is justified by its comprehensive functionalities. Users suggest that more competitive pricing models would enhance their market positions.

To learn more, read our detailed Check Point CloudGuard CNAPP vs. Qualys VMDR Report (Updated: January 2025).

Buyer's Guide

Check Point CloudGuard CNAPP vs. Qualys VMDR

January 2025

Download the complete report

Helped 831,020 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

SentinelOne Singularity Clo...

Mindshare comparison

As of January 2025, in the Vulnerability Management category, the mindshare of SentinelOne Singularity Cloud Security is 1.4%, up from 0.3% compared to the previous year. The mindshare of Check Point CloudGuard CNAPP is 1.5%, up from 1.3% compared to the previous year. The mindshare of Qualys VMDR is 11.1%, down from 13.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Vulnerability Management

Featured Reviews

Andrew W

VP - Information Technology at a financial services firm with 201-500 employees

Tells us about vulnerabilities as well as their impact and helps to focus on real issues

Looking at all the different pieces, it has got everything we need. Some of the pieces we do not even use. For example, we do not have Kubernetes Security. We are not running any K8 clusters, so it is good for us. Overall, we find the solution to be fantastic. There can be additional education components. This may not be truly fair to them because of what the product is going for, but it would be great to see additional education for compliance. It is not a criticism of the tool per se, but anything to help non-development resources understand some of the complexities of the cloud is always appreciated. Any additional educational resources are always helpful for security teams, especially those without a development background.

Read full review

Yokesh Mani

Deputy Manager at Computer Age Management Services Pvt. Ltd.

Easy to write custom rules and policies in the UI with limited coding knowledge

The user interface could be improved. Sometimes, the visibility is not immediately available for the environment. We have the native servers that come with the solutions, but we cannot see them in the Check Point log. Another issue is with the integrated file monitoring. It would make sense to have stuff like file integrity monitoring and malware scanning available within this module because we don't want to integrate another product. For example, let's say it's showing a process violation. It should be able to do some additional malware scanning in that particular bucket to get some additional information. I don't want to integrate with another third-party tool or go to the native server to check something. It would be helpful to have integrated monitoring and malware scanning for the file types. There are a few flaws with the security management portal where I have limited visibility into the workload protection features. There is no error visibility where I can see the communication and workflow between services. Some of the dashboards need to be fine-tuned if they are not customized. For example, I cannot customize anything on the effective risk management dashboard. Some of the information is not correct for my tenant. With respect to passwords and user management, there are no policies I can measure at the user level. If the user was created more than six months ago, you don't need to worry about that password or do anything like two-factor authentication associated with that user. They can still log in after six months or one year. It's also a challenge to use CloudGuard's agentless workload posture with AWS. An Azure storage is summed up with a CNAPP encryption by default. We tried onboarding this data, but the problem is the attachment is not done. After a few days, we identified that it was impossible to do the encryption detection. But CloudGuard's default rules say that this has to be encrypted. The AWS module says that we cannot access this volume with this encryption, so we cannot use an agentless workload posture with AWS because of this. It is a best practice to ensure that all the volumes are being encrypted. Without the encryption, how can I do this? It is a big challenge for CloudGuard.

Read full review

Harold Jensen

Senior Cybersecurity Engineer at 3M Health Information Systems

Good visibility but expensive and needs better support

Support: It's often overseas and often following a script, basically asking us to redo what we opened the case with. Multiple APIs: There seems to be a lack of easy onboarding into Qualys. We had to use manual inputs and some API calls to get items in place. Dashboard: It is very rudimentary with very little customization. The Qualys Scripting Language (QSL) works differently in different Qualys modules, so when you get it working in one area you have to modify the syntax in others. User account management: We often have to give users more rights than needed just to give them what they need. Integration with the various Qualys Modules: You can tell the UI is different based on of the different teams that created them. QSL syntax same in all modules Responsiveness of some of the components: They time out, you get a blank screen, etc. Backend updates between the various modules: You update connectors and information takes a few minutes to show in VMDR or Global Asset View Connectors: Connectors have a throttling issue with AWS which causes them to frequently fail unless you manually run them again.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"When creating cloud infrastructure, Cloud Native Security evaluates the cloud security parameters and how they will impact the organization's risk. It lets us know whether our security parameter conforms to international industry standards. It alerts us about anything that increases our risk, so we can address those vulnerabilities and prevent attacks."

"The most valuable feature of PingSafe is its integration with most of our technology stack, specifically all of our cloud platforms and ticketing software."

"The solution helped free other staff to work on other projects or other tasks. We basically just had to do a bunch of upfront configuring. With it, we do not have to spend as much time in the console."

"Singularity Cloud Native Security provides us with a platform to scan instances when they are getting created, and the dashboard helps us to identify the critical issues."

"The most valuable features of PingSafe are cloud misconfiguration, Kubernetes, and IaC scanning."

"It integrates very well. We sell different products from different vendors. We know that the SentinelOne Singularity platform can be integrated with several different solutions from different vendors."

"SentinelOne Singularity Cloud Security offers valuable scalability suitable for organizations of all sizes, from small businesses to large enterprises."

"We use the infrastructure as code scanning, which is good."

More SentinelOne Singularity Cloud Security pros

"The most valuable features of CloudGuard CNAPP are its compliance engine and auto-remediation features."

"The solution's main benefit is that it automates all the patching and reporting parts and generates an automated report."

"The Compliance engine has helped put our auditors and senior executives at ease, as we can quickly and accurately measure ourselves against hundreds of compliance checks to include CIS benchmarks, PCI, and other best practices."

"The administration portal panel is very intuitive."

"The solution is scalable."

"Dome9 continues to be a major piece of our cloud security architecture and has given our senior leadership team a high degree of confidence in our ability to protect our cloud environment."

"The valuable features of Checkpoint CloudGuard CNAPP include its automation capabilities."

"The most valuable feature is the ability to work with the APIs to integrate into our own backend systems."

More Check Point CloudGuard CNAPP pros

"It allowed us to divide tasks easily among teammates, significantly improving efficiency."

"I am impressed with the VMDR feature."

"Qualys VMDR provides us with a quick response to threat findings through regular scheduled scanning, which improves our security operations."

"I find the most valuable features are the continuous monitoring. Even on premises, there is constant monitoring."

"Monitors workstations and servers for vulnerabilities and creates reports."

"The initial setup was good. We didn't have any problems with it."

"This is one of the best products I have worked with so far. I like the power of Qualys, and it's a better solution because you can scan a compact file, a BIT file, or batch files. The product already knows what's happening inside, and you don't need to expand the package. Tenable will do the same thing, but you need to have a package issuance claim. With Qualys, we can immediately understand the file, even a compact file. If there's some kind of discovery or incident, you will know what happened in the environment."

"The most valuable feature is automation."

More Qualys VMDR pros

Cons

"In terms of ease of use, initially, it is a bit confusing to navigate around, but once you get used to it, it becomes easier."

"We are experiencing problems with Cloud Native Security reporting."

"I'd like to see better onboarding documentation."

"We'd like to have better notifications. We'd like them to happen faster."

"While SentinelOne offers robust security features, its higher cost may present a challenge for budget-conscious organizations."

"When you find a vulnerability and resolve it, the same issue will not occur again. I want PingSafe to block the same vulnerability from appearing again. I want something like a playbook where the steps that we take to resolve an issue are repeated when that issue happens again."

"PingSafe filtering has some areas that cause problems, and to achieve single sign-on functionality, a break-glass feature, which is currently unavailable, is necessary."

"The alerting system of the product is an area that I look at and sometimes get confused about. I feel the alerting feature needs improvement."

More SentinelOne Singularity Cloud Security cons

"The accuracy of its remediation is a 7.5 out of 10. Before, I would have given it a ten but now, to handle remediation for fully qualified domain names, it's not working as it did in the past. We're finding some difficulties there."

"The tool should incorporate more use cases like improving security scores. It should also improve documentation."

"Adding a feature that allows me to easily identify the changes that have been made to the CIS benchmark and update my own policy accordingly would be a valuable addition to Check Point CloudGuard Posture Management."

"The support it provides is not very good. They should improve it since we have had several setbacks due to support issues."

"Reporting should have more options."

"I would like to see some AI on the back-end, just to assist with doing analysis and making recommendations."

"The platform would be significantly enhanced by incorporating data security management capabilities."

"I would like an interface more adapted to cell phones or tablets."

More Check Point CloudGuard CNAPP cons

"Qualys VMDR identifies vulnerabilities and suggests fixes. However, it does not automate patching unless the patch management module is purchased separately."

"They should make it accessible for more operating systems."

"Support could be improved since the response can be slow."

"There needs to be better documentation."

"It's quite complex on the way it is set up, so it takes a fair bit of time in order to get your head around it in order to deploy it. Once you've deployed it, then you're never confident on the versions of the browsers and the SSL certificates, etc. You have to always go back into Qualys and check."

"This solution could be improved by extending the agent capabilities to different operating systems including Mac and Linux. We would also like the capability to easily check for vulnerability in assets in the IOTs."

"Qualys Container Security can improve the interface. It could be easier to navigate and be enriched."

"Sometimes the scanning can get overwhelmed and start to drag when a lot of users are trying to scan at once."

More Qualys VMDR cons

Pricing and Cost Advice

"Singularity Cloud Security by SentinelOne is cost-efficient."

"PingSafe's primary advantage is its ability to consolidate multiple tools into a single user interface, but, beyond this convenience, it may not offer significant additional benefits to justify its price."

"It was reasonable pricing for me."

"PingSafe falls within the typical price range for cloud security platforms."

"I wasn't sure what to expect from the pricing, but I was pleasantly surprised to find that it was a little less than I thought."

"It is a little expensive. I would rate it a four out of ten for pricing."

"Their pricing appears to be based simply on the number of accounts we have, which is common for cloud-based products."

"SentinelOne provided competitive pricing compared to other vendors, and we are satisfied with the deal."

More SentinelOne Singularity Cloud Security pricing and cost advice

"The license fee is high."

"Licensing and costs are straightforward, as they have a baseline of 100 workloads within one license and no additional charges."

"We have the enterprise-level license and we renew it annually because it is worth the cost."

"In the beginning, the price of Dome9 was cheap, whereas now it is not."

"Everything in this field is very expensive."

"Check Point CloudGuard Posture Management is expensive."

"The pricing is tremendous and super cheap. It is shockingly cheap for what you get out of it. I am happy with that. I hope that doesn't get reported back and they increase the prices. I love the pricing and the licensing makes sense. It is just assets: The more stuff that you have, the more you pay."

"I would advise taking into account the existing number of devices and add a forecast of the number of devices to be added in the coming year or two, to obtain better pricing."

More Check Point CloudGuard CNAPP pricing and cost advice

"Qualys VM is quite expensive. It's a subscription-based license, and it's yearly. Right now, it's open for me, and I don't have any limitations or caps on the licenses. They are seeing if the product is viable for 4500 users. I can add as much as I want, and at the end of the subscription, they'll let me know how many licenses were actually used and bill me accordingly. On a scale from one to five, I would give their pricing a three. It's still expensive."

"When you want to cover yourself for scalability, you will be charged for the number you place on the scan itself."

"The solution is costly."

"It is a high cost product. Compared to the other solutions, it is around 15 to 20% higher in cost."

"Qualys VM is better suited for medium to large companies because the price can be too much for smaller customers."

"In Nigerian Naira, we spend about roughly four to five million to use this solution and this is expensive compared to solutions like Nessus."

"It is different for every company, but for us, it's every three years."

"The pricing and licensing for Qualys could be improved."

More Qualys VMDR pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.

See recommendations

831,020 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

19%

Financial Services Firm

15%

Manufacturing Company

Government

Computer Software Company

14%

Financial Services Firm

14%

Manufacturing Company

University

Educational Organization

36%

Computer Software Company

10%

Financial Services Firm

10%

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about PingSafe?

The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...

See all answers

What is your experience regarding pricing and costs for PingSafe?

SentinelOne is relatively cheap. If ten is the most expensive, I would rate it a seven.

See all answers

What needs improvement with PingSafe?

The areas with room for improvement include the cost, which is higher compared to other security platforms. The dashb...

See all answers

What do you like most about Check Point CloudGuard Posture Management?

The visibility in our cloud environment is the most valuable feature.

See all answers

What is your experience regarding pricing and costs for Check Point CloudGuard Posture Management?

The price is on the higher end.

See all answers

What needs improvement with Check Point CloudGuard Posture Management?

We have concerns regarding the pricing and would appreciate seeing some improvements.

See all answers

What is your primary use case for Qualys VM?

Qualys VM is used for vulnerability scans for the internet and applications using application exchange. There are man...

See all answers

What do you like most about Qualys VMDR?

I like that we have many scanners and channels that don't overload. It helps us scan and track easily. Also, the tagg...

See all answers

What is your experience regarding pricing and costs for Qualys VMDR?

For smaller enterprises, the pricing is on the pricier side. However, for larger enterprises, it's considered okay. I...

See all answers

Comparisons

Wiz vs SentinelOne Singularity Cloud Security

Compared 28% of the time

Prisma Cloud by Palo Alto Networks vs SentinelOne Singularity Cloud Security

Compared 23% of the time

AWS GuardDuty vs SentinelOne Singularity Cloud Security

Compared 8% of the time

Microsoft Defender for Cloud vs SentinelOne Singularity Cloud Security

Compared 7% of the time

Sysdig Secure vs SentinelOne Singularity Cloud Security

Compared 3% of the time

More SentinelOne Singularity Cloud Security Competitors

Prisma Cloud by Palo Alto Networks vs Check Point CloudGuard CNAPP

Compared 26% of the time

Wiz vs Check Point CloudGuard CNAPP

Compared 18% of the time

Microsoft Defender for Cloud vs Check Point CloudGuard CNAPP

Compared 10% of the time

AWS GuardDuty vs Check Point CloudGuard CNAPP

Compared 9% of the time

Microsoft Defender for Cloud Apps vs Check Point CloudGuard CNAPP

Compared 2% of the time

More Check Point CloudGuard CNAPP Competitors

Tenable Nessus vs Qualys VMDR

Compared 18% of the time

Rapid7 InsightVM vs Qualys VMDR

Compared 9% of the time

Microsoft Defender Vulnerability Management vs Qualys VMDR

Compared 9% of the time

Tenable Security Center vs Qualys VMDR

Compared 7% of the time

Wiz vs Qualys VMDR

Compared 6% of the time

More Qualys VMDR Competitors

Product Reports

Buyer's Guide

SentinelOne Singularity Cloud Security

December 2024

SentinelOne Singularity Cloud Security report

Download SentinelOne Singularity Cloud Security product report

Buyer's Guide

Check Point CloudGuard CNAPP

January 2025

Download Check Point CloudGuard CNAPP product report

Buyer's Guide

Qualys VMDR

December 2024

Download Qualys VMDR product report

Also Known As

PingSafe

Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence

Qualys VM, QualysGuard VM, Qualys Asset Inventory, Qualys Container Security, Qualys Virtual Scanner Appliance

Learn More

SentinelOne

Check Point Software Technologies

Qualys

Overview

SentinelOne Singularity Cloud Security protects cloud workloads, offering advanced threat detection and automated response. It integrates seamlessly with cloud environments and secures containerized applications and virtual machines against vulnerabilities.

SentinelOne Singularity Cloud Security is renowned for its efficiency in mitigating threats in real-time. The platform integrates effortlessly with existing cloud environments, ensuring robust cloud security management with minimal manual intervention. Securing containerized applications and virtual machines, it excels in threat intelligence and endpoint protection. However, improvements are needed in performance during high workload periods, and more integrations with third-party tools and better documentation would be beneficial. Users often find the installation process complex, support response times slow, and the dashboard's navigation unintuitive.

What are the key features of SentinelOne Singularity Cloud Security?

Real-time Threat Detection: Identifies and mitigates threats as they occur.
Automated Response: Automatically responds to threats to minimize impact.
Ease of Deployment: Simple setup process with scalable options.
Machine Learning Insights: AI-driven insights enhance threat prevention.
Seamless Integration: Integrates with cloud environments for unified security management.

What are the primary benefits or ROI to expect from SentinelOne Singularity Cloud Security?

Enhanced Threat Mitigation: Improved security against real-time threats.
Reduced Manual Intervention: Automated processes save time and resources.
Scalability: Easily adapts to growing security requirements.
Centralized Management: Manage security across platforms from a single console.
Advanced Threat Intelligence: Provides in-depth analysis and protection.

In specific industries, SentinelOne Singularity Cloud Security is implemented to safeguard critical data and infrastructure. Organizations in finance, healthcare, and technology depend on its real-time threat detection and automated response to protect sensitive information. Its ability to secure containerized applications and virtual machines is particularly valuable in dynamic environments where rapid scaling is necessary.

Check Point CloudGuard CNAPP is a cloud-native application protection platform designed to secure your cloud environments and applications. By combining CSPM, CWPP, CSNS, and WAF capabilities, it provides a comprehensive solution to protect your cloud environment from a wide range of threats.

CloudGuard CNAPP delivers end-to-end cloud security, including workload protection, vulnerability management, and identity management, all while maintaining continuous compliance. It uses advanced AI to detect and prevent threats, offering protection for containers, serverless applications, and APIs. CloudGuard CNAPP also emphasizes simplifying security management, integrating directly with cloud platforms like AWS, Azure, and GCP.

CloudGuard CNAPP provides customers with more context to drive actionable security and smarter prevention, from code-to-cloud, across the application lifecycle. More Context Means Actionable Security, Smarter Prevention. The primary components are:

Unified & Modular Platform - A single platform unifying SAST, CSPM, DSPM, CIEM, CWPP, WAF, and Cloud Detection and Response.
Continuous Cloud Security - Automatic enforcement of security requirements and internal policies from development to runtime.
Real-time Detection & Protection - Real-time incidents and vulnerability detection with a single-click or automated remediation.

What are the key features of CloudGuard CNAPP?

Workload Protection: Secures cloud-based workloads, including VMs, containers, and serverless functions, from vulnerabilities and attacks.
Posture Management: Continuously monitors cloud configurations and assets to ensure compliance with security standards and policies.
Threat Prevention: Uses AI-driven threat detection to block malware, ransomware, and zero-day exploits in real-time.
Compliance Automation: Automates compliance checks and ensures adherence to industry regulations, such as GDPR, HIPAA, and PCI-DSS.
Identity and Access Management (IAM) Protection: Secures identities by managing access policies and detecting misconfigurations in permissions.

What are the key benefits to consider?

Improved Cloud Visibility: Provides clear insights into cloud environments, assets, and workloads, helping teams detect misconfigurations and vulnerabilities early.
Risk Reduction: Threat prevention features help reduce the risk of breaches by identifying and blocking potential attacks before they can exploit system weaknesses.
Operational Efficiency: Automated compliance and posture management reduce the manual work needed to maintain security standards.
Multi-cloud Support: CloudGuard CNAPP integrates across AWS, Azure, and Google Cloud, streamlining security operations for hybrid and multi-cloud deployments.

Check Point CloudGuard CNAPP simplifies cloud security management with integrated protection and automation.

Vulnerability Management, Detection, and Response (VMDR) is a cornerstone product of the Qualys TruRisk Platform and a global leader in the enterprise-grade vulnerability management (VM) vendor space. With VMDR, enterprises are empowered with visibility and insight into cyber risk exposure - making it easy to prioritize vulnerabilities, assets, or groups of assets based on business risk. Security teams can take action to mitigate risk, helping the business measure their actual risk exposure over time.

Qualys VMDR offers an all-inclusive risk-based vulnerability management solution to prioritize vulnerabilities and assets based on risk and business criticality. VMDR seamlessly integrates with configuration management databases (CMDB), Qualys Patch Management, Custom Assessment and Remediation (CAR), Qualys TotalCloud and other Qualys and non-Qualys solutions to facilitate vulnerability detection and remediation across the entire enterprise.

With VMDR, users are empowered with actionable risk insights that translate vulnerabilities and exploits into optimized remediation actions based on business impact. Qualys customers can now aggregate and orchestrate data from the Qualys Threat Library, 25+ threat intelligence feeds, and third-party security and IT solutions, empowering organizations to measure, communicate, and eliminate risk across on-premises, hybrid, and cloud environments.

Sample Customers

Information Not Available

Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners

Agrokor Group, American Specialty Health, American State Bank, Arval, Life:), Axway, Bank of the West, Blueport Commerce, BSkyB, Brinks, CaixaBank, Cartagena, Catholic Health System, CEC Bank, Cegedim, CIGNA, Clickability, Colby-Sawyer College, Commercial Bank of Dubai, University of Utah, eBay Inc., ING Singapore, National Theatre, OTP Bank, Sodexo, WebEx

Buyer's Guide

Check Point CloudGuard CNAPP vs. Qualys VMDR

January 2025

Free Report: Check Point CloudGuard CNAPP vs. Qualys VMDR

Find out what your peers are saying about Check Point CloudGuard CNAPP vs. Qualys VMDR and other solutions. Updated: January 2025.

DOWNLOAD NOW

831,020 professionals have used our research since 2012.

See our Check Point CloudGuard CNAPP vs. Qualys VMDR report.

See our list of best Vulnerability Management vendors and best Container Security vendors.

We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.