Check Point CloudGuard CNAPP vs Runecast comparison

Cloud-Native Application Protection Platforms (CNAPP)

Download the complete report

Helped 801,634 peers since 2012

Categories and Ranking

SentinelOne Singularity Clo...

Mindshare comparison

As of September 2024, in the Cloud-Native Application Protection Platforms (CNAPP) category, the mindshare of SentinelOne Singularity Cloud Security is 1.8%, up from 0.8% compared to the previous year. The mindshare of Check Point CloudGuard CNAPP is 3.4%, down from 4.2% compared to the previous year. The mindshare of Runecast is 0.1%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Cloud-Native Application Protection Platforms (CNAPP)

Featured Reviews

Andrew W

VP - Information Technology at a financial services firm with 201-500 employees

Aug 29, 2024

Tells us about vulnerabilities as well as their impact and helps to focus on real issues

Looking at all the different pieces, it has got everything we need. Some of the pieces we do not even use. For example, we do not have Kubernetes Security. We are not running any K8 clusters, so it is good for us. Overall, we find the solution to be fantastic. There can be additional education components. This may not be truly fair to them because of what the product is going for, but it would be great to see additional education for compliance. It is not a criticism of the tool per se, but anything to help non-development resources understand some of the complexities of the cloud is always appreciated. Any additional educational resources are always helpful for security teams, especially those without a development background.

Read full review

reviewer2244411

Senior Security Engineer at a consultancy with 5,001-10,000 employees

Jul 19, 2024

It centralizes all these cloud functions on a single tool, but the reporting could be improved

CloudGuard's reporting could be better. It's good now, but there is room for improvement. If you're looking for a centralized platform, there are a lot of features that can be appreciated. However, you want complete security integration with SaaS, DAST, secret scanning, etc., and a single platform for all these features. Check Point is known for its firewall. Six or seven years ago, it used to be a good thing because most businesses were on on-prem. If your business is on the cloud, you do not need a firewall because most of the cloud vendors already have that built into their cloud premises, and you can configure the rules there. You can do everything as a network security engineer. It depends on your business model. Some companies are segregated and most of their things are on-prem. They have physical outlets in multiple countries. Managing everything in these business environments and deploying the Check Point firewall would be a good investment. However, it doesn't make sense if your business is totally in the cloud. It depends on how Check Point sees things in the market. If they want to compete with all these vendors in terms of CNAPP, they need to first understand their audience. Once they have some visibility into who their audience is, they need to maintain their business.

Read full review

Burak AKCAGUN

Business Development Manager at Axoft Ukraine

Jan 11, 2024

Helps with risk assessments for containers, assessing security, and ensuring container compliance

The tool helps us with risk assessments for containers, assessing security, and ensuring container compliance. It also helps us protect our VMware platforms, identify vulnerabilities, and implement fixes Runecast is a good partner for VMware. Once we have installed it, we can see all the problems…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The user interface is well-designed and easy to navigate."

"The offensive security feature is valuable because it publicly detects the offensive and vulnerable things present in our domain or applications. It checks any applications with public access. Some of the applications give public access to certain files or are present over a particular domain. It detects and lets us know with evidence. That is quite good. It is protecting our infrastructure quite well."

"PingSafe provides email alerts and ranks issues based on severity, such as high, critical, etc., that help us prioritize issues."

"We've seen a reduction in resources devoted to vulnerability monitoring. Before PingSafe we spent a lot of time monitoring and fixing these issues. PingSafe enabled us to divert more resources to the production environment."

"The remediation process is good."

"We really appreciate the Slack integration. When we have an incident, we get an instant notification. We also use Joe Sandbox, which Singularity can integrate with, so we can verify if a threat is legitimate."

"PingSafe can integrate all your cloud accounts and resources you create in the AWS account, We have set it up to scan the AWS transfer services, EC2, security groups, and GitHub."

"It used to guide me about an alert. There is something called an alert guide. I used to click on the alert guide, and I could read everything. I could read about the alert and how to resolve it. I used to love that feature."

More SentinelOne Singularity Cloud Security pros

"We really liked its ease of implementation against our Microsoft Azure environment."

"It saves time because I can look across the organization. Instead of checking 50 different accounts atomically and spending 15 minutes investigating each, I can spend 15 minutes exploring all 50 accounts. It allows me to quickly look across the org for similar problems when one comes up. That's a huge time saver."

"The CloudGuard for Cloud Intelligence tool has several significant features that provide security to our company."

"Check Point CloudGuard CNAPP's initial configuration is very easy. It is plug-and-play. It also gives regular updates."

"The feature that I value the most about Check Point CloudGuard CNAPP is the possibility of checking compliance with different standards. This compliance check can be performed for each subscription or service that we have on all the different cloud providers that we use."

"We like the GSL Builder feature. When you're running a security operations center, you spend a lot of time monitoring endpoint activity to ensure there is no malicious traffic or anonymous access in the environment. The GSL Builder is helpful for deep investigations of a particular reason for an incident. You can use it to get more information."

"The way they offer container security is a big highlight that I have noticed. The solution is also agentless, so the scanning, runtime, really everything is offered directly by CloudGuard."

"The most valuable feature is the ability to work with the APIs to integrate into our own backend systems."

More Check Point CloudGuard CNAPP pros

"Runecast is a good partner for VMware. Once we have installed it, we can see all the problems and issues. It also has VMware knowledge-based articles."

Cons

"The Automation tab is an add-on that doesn’t work properly. They provide a list of scripts that don’t work and I have asked support to assist but they won’t help. When running on various endpoints the script doesn’t work and if it does, it’s only a couple. There are a lot of useful scripts that would be beneficial to run forensics, event logs, and process lists running on the endpoint."

"Singularity Cloud Security currently lacks a break-glass account function, which is a critical component for implementing Single Sign-On as it allows for regaining access in emergencies."

"It took us a while to configure the software to work well in this type of environment, as the support documents were not always clear."

"Maybe container runtime security could be improved."

"Cloud Native Security's reporting could be better. We are unable to see which images are impacted. Several thousand images have been deployed, so if we can see some application-specific information in the dashboard, we can directly send that report to the team that owns the application. We'd also like the option to download the report from the portal instead of waiting for the report to be sent to our email."

"I want PingSafe to integrate additional third-party resources. For example, PingSafe is compatible with Azure and AWS, but Azure AD isn't integrated with AWS. If PingSafe had that ability, it would enrich the data because how users interact with our AWS environment is crucial. All the identity-related features require improvement."

"We can customize security policies but lack auditing capabilities."

"We recently adopted a new ticket management solution, so we've asked them to include a connector to integrate that tool with Cloud Native Security directly. We'd also like to see Cloud Native Security add a scan for personally identifying information. We're looking at other tools for this capability, but having that functionality built into Cloud Native Security would be nice. Monitoring PII data is critical to us as an organization."

More SentinelOne Singularity Cloud Security cons

"I would like to see tighter integration with other compliance tools, like Chef Compliance, in addition to Inspector."

"The platform would be significantly enhanced by incorporating data security management capabilities."

"Streamlining the user interface would greatly improve the user experience."

"We want to be able to customize the solution more in order to meet the needs of our company."

"Compliance checks on cloud resources against various industry standards and compliance framework templates need to be improved."

"CloudGuard could be improved by including integration with vendors other than AWS, especially Azure, especially in permissions."

"CloudGuard CNAPP could be enhanced by increasing the number of components that run natively on Azure."

"Currently, worldwide, there are many companies of all sizes that do not understand the value that their data has, but even with all existing clouds, they also do not understand what the shared responsibility model is. They only assume that by having a cloud, the provider must ensure safety, when the truth is that the providers only secure their sites. Everything we do in the cloud and how we configure it is actually our responsibility."

More Check Point CloudGuard CNAPP cons

"The product lacks network assessment capabilities. We cannot view our network assets or scan switches, routers, or IPs for vulnerabilities and issues."

Pricing and Cost Advice

"As a partner, we receive a discount on the licenses."

"PingSafe falls somewhere in the middle price range, neither particularly cheap nor expensive."

"PingSafe is priced reasonably for our workload."

"We found it to be fine for us. Its price was competitive. It was something we were happy with. We are not a Fortune 500 company, so I do not know how pricing scales at the top end, but for our cloud environment, it works very well."

"PingSafe's primary advantage is its ability to consolidate multiple tools into a single user interface, but, beyond this convenience, it may not offer significant additional benefits to justify its price."

"The tool is cost-effective."

"PingSafe is fairly priced."

"The pricing for PingSafe in India was more reasonable than other competitors."

More SentinelOne Singularity Cloud Security pricing and cost advice

"It is difficult to contextualize the pricing because we are used to Indian pricing and licensing."

"In the beginning, the price of Dome9 was cheap, whereas now it is not."

"We have the enterprise-level license and we renew it annually because it is worth the cost."

"CloudGuard is fairly priced."

"Everything in this field is very expensive."

"The tool's pricing is moderate. Its licensing costs are yearly."

"The solution’s pricing is a little bit high."

"It is a very straightforward licensing model that is based on the number of assets you are discovering and managing with the solution."

More Check Point CloudGuard CNAPP pricing and cost advice

"Runecast's pricing is cheaper than that of its competitors."

See which vendors are best for you

Use our free recommendation engine to learn which Cloud-Native Application Protection Platforms (CNAPP) solutions are best for your needs.

See recommendations

801,634 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

19%

Financial Services Firm

15%

Manufacturing Company

10%

Insurance Company

Financial Services Firm

18%

Computer Software Company

14%

Manufacturing Company

Security Firm

No data available

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What do you like most about PingSafe?

The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...

What is your experience regarding pricing and costs for PingSafe?

I am personally not taking care of the pricing part, but when we moved from CrowdStrike to Singularity Cloud Native S...

What needs improvement with PingSafe?

They can provide some kind of alert when a new type of risk is there. There can be a specific type of alert showing t...

What do you like most about Check Point CloudGuard Posture Management?

The visibility in our cloud environment is the most valuable feature.

What is your experience regarding pricing and costs for Check Point CloudGuard Posture Management?

The price is on the higher end.

What needs improvement with Check Point CloudGuard Posture Management?

We have concerns regarding the pricing and would appreciate seeing some improvements.

What do you like most about Runecast?

Runecast is a good partner for VMware. Once we have installed it, we can see all the problems and issues. It also has...

What is your experience regarding pricing and costs for Runecast?

Runecast's pricing is cheaper than that of its competitors.

What needs improvement with Runecast?

The product lacks network assessment capabilities. We cannot view our network assets or scan switches, routers, or IP...

Wiz vs SentinelOne Singularity Cloud Security

Comparisons

Compared 32% of the time

Prisma Cloud by Palo Alto Networks vs SentinelOne Singularity Cloud Security

Compared 25% of the time

AWS GuardDuty vs SentinelOne Singularity Cloud Security

Compared 8% of the time

Orca Security vs SentinelOne Singularity Cloud Security

Compared 7% of the time

Trend Vision One - Cloud Security vs SentinelOne Singularity Cloud Security

Compared 2% of the time

More SentinelOne Singularity Cloud Security Competitors

Prisma Cloud by Palo Alto Networks vs Check Point CloudGuard CNAPP

Compared 27% of the time

Wiz vs Check Point CloudGuard CNAPP

Compared 19% of the time

Microsoft Defender for Cloud vs Check Point CloudGuard CNAPP

Compared 11% of the time

AWS GuardDuty vs Check Point CloudGuard CNAPP

Compared 11% of the time

Orca Security vs Check Point CloudGuard CNAPP

Compared 4% of the time

More Check Point CloudGuard CNAPP Competitors

VMware Aria Operations vs Runecast

Compared 58% of the time

Chainguard Images vs Runecast

Compared 42% of the time

More Runecast Competitors

Product Reports

SentinelOne Singularity Cloud Security

August 2024

SentinelOne Singularity Cloud Security report

Download SentinelOne Singularity Cloud Security product report

Check Point CloudGuard CNAPP

Download Check Point CloudGuard CNAPP product report

Cloud-Native Application Protection Platforms (CNAPP)

Download Runecast product report

Also Known As

PingSafe

Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence

Runecast Analyzer

Learn More

SentinelOne

Check Point Software Technologies

Runecast

Overview

SentinelOne Singularity Cloud Security protects cloud workloads, offering advanced threat detection and automated response. It integrates seamlessly with cloud environments and secures containerized applications and virtual machines against vulnerabilities.

SentinelOne Singularity Cloud Security is renowned for its efficiency in mitigating threats in real-time. The platform integrates effortlessly with existing cloud environments, ensuring robust cloud security management with minimal manual intervention. Securing containerized applications and virtual machines, it excels in threat intelligence and endpoint protection. However, improvements are needed in performance during high workload periods, and more integrations with third-party tools and better documentation would be beneficial. Users often find the installation process complex, support response times slow, and the dashboard's navigation unintuitive.

What are the key features of SentinelOne Singularity Cloud Security?

Real-time Threat Detection: Identifies and mitigates threats as they occur.
Automated Response: Automatically responds to threats to minimize impact.
Ease of Deployment: Simple setup process with scalable options.
Machine Learning Insights: AI-driven insights enhance threat prevention.
Seamless Integration: Integrates with cloud environments for unified security management.

What are the primary benefits or ROI to expect from SentinelOne Singularity Cloud Security?

Enhanced Threat Mitigation: Improved security against real-time threats.
Reduced Manual Intervention: Automated processes save time and resources.
Scalability: Easily adapts to growing security requirements.
Centralized Management: Manage security across platforms from a single console.
Advanced Threat Intelligence: Provides in-depth analysis and protection.

In specific industries, SentinelOne Singularity Cloud Security is implemented to safeguard critical data and infrastructure. Organizations in finance, healthcare, and technology depend on its real-time threat detection and automated response to protect sensitive information. Its ability to secure containerized applications and virtual machines is particularly valuable in dynamic environments where rapid scaling is necessary.

CloudGuard CNAPP provides prevention-first cloud security from code-to-cloud.

More Context Means Actionable Security, Smarter Prevention

CloudGuard CNAPP provides customers with more context to drive actionable security and smarter prevention, from code-to-cloud, across the application lifecycle.

Unified & Modular Platform
A single platform unifying SAST, CSPM, DSPM, CIEM, CWPP, WAF, and Cloud Detection and Response.
Continuous Cloud Security
Automatic enforcement of security requirements and internal policies from development to runtime.
Real-time Detection & Protection
Real-time incidents and vulnerability detection with a single-click or automated remediation.

What are the most important features?

Discovery: Identifies all assets in the cloud environment for better management.
IAM Role Control: Manages identities and access permissions securely.
Compliance Reporting: Provides automated compliance checks and detailed reports.
Centralized Dashboard: Offers a consolidated view of security posture.
Threat Intel Integration: Enhances threat detection with integrated intelligence.
Traffic Visibility: Monitors and analyzes cloud traffic in real-time.
Automated Remediation: Implements fixes automatically when issues are detected.
Asset Management: Manages cloud assets efficiently across environments.
Proactive Threat Detection: Identifies threats before they impact operations.
CloudBots for Auto-Remediation: Automates response to security incidents.

What benefits or ROI should users consider?

Enhanced Security Posture: Strong protection across multiple cloud platforms.
Real-Time Alerts: Immediate awareness and response to potential threats.
Automated Compliance: Reduces manual effort with automated checks and reporting.
Centralized Management: Streamlined management of cloud security and compliance.
Cost Efficiency: Saves time and resources via automation and integrated tools.

Runecast is an enterprise IT platform that saves your Security and Operations teams time and resources by enabling a proactive approach to ITOM, CSPM, and compliance. Its agentless scanning capability ensures efficient and in-depth assessment of your infrastructure without imposing additional load on your servers.

It automates vulnerability assessment, configuration drift management, and continuous compliance – for VMware, Cloud, and Containers.

Runecast helps reduce operational overhead, increase transparency, and easily assess and remediate infrastructure vulnerabilities. It simplifies managing regulatory compliance, making it an ideal solution for your infrastructure security needs.

It provides continuous audits against vendor best practices, common security standards, and frameworks such as BSI IT-Grundschutz, CIS, Cyber Essentials, DISA STIG, DORA, Essential 8, GDPR, HIPAA, ISO 27001, KVKK, NIST, PCI DSS, TISAX, VMware Security Hardening Guidelines, and the CISA KEVs catalog.

Your team can do more with less via a single platform that checks all your cloud infrastructure, for increased visibility, security, and time-saving. Security teams benefit from simplified vulnerability management and regulatory compliance, across multiple standards and technologies. Operations teams are able to reduce operational overheads and increase clarity, enabling you to be proactive and return to the valuable work you want to be doing.

Runecast has been recognized with Frost & Sullivan's 2023 European New Product Innovation Award in the CNAPP industry for its strong overall performance and commitment to user experience.

Get to know Runecast: www.runecast.com/

Read Customer Success Stories: www.runecast.com/case-studies

Sample Customers

Information Not Available

Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners

Our customers tell us regularly how Runecast benefits CIOs, CISOs, and both Security and Operations teams across verticals with a proactive approach that results in major time and cost savings, increased uptime and security standards complianceSuccess Highlight 75-85% troubleshooting time savings – Kiel Municipal Hospital90% time savings on reactive troubleshooting – Near East Bank90% time savings in upgrade planning– FLEXdata80% reduction in monthly incidents and issues – University of St Andrews78,000 EUR/year minimum annual cost savings – Notino100s of hours saved on security compliance with remediation scripts alone – Kiel Municipal Hospital75% time saved on troubleshooting and root cause analysis – de Volksbank

Cloud-Native Application Protection Platforms (CNAPP)