Try our new research platform with insights from 80,000+ expert users

Check Point CloudGuard CNAPP vs Skyhigh Security comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 17, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SentinelOne Singularity Clo...
Sponsored
Ranking in Cloud Security Posture Management (CSPM)
4th
Ranking in Cloud-Native Application Protection Platforms (CNAPP)
3rd
Average Rating
8.6
Reviews Sentiment
7.8
Number of Reviews
103
Ranking in other categories
Vulnerability Management (6th), Cloud and Data Center Security (5th), Container Security (3rd), Cloud Workload Protection Platforms (CWPP) (4th), Compliance Management (3rd)
Check Point CloudGuard CNAPP
Ranking in Cloud Security Posture Management (CSPM)
5th
Ranking in Cloud-Native Application Protection Platforms (CNAPP)
5th
Average Rating
8.6
Reviews Sentiment
7.4
Number of Reviews
67
Ranking in other categories
Vulnerability Management (8th), Cloud and Data Center Security (9th), Container Security (6th), Cloud Workload Protection Platforms (CWPP) (6th), Data Security Posture Management (DSPM) (4th), Compliance Management (6th)
Skyhigh Security
Ranking in Cloud Security Posture Management (CSPM)
20th
Ranking in Cloud-Native Application Protection Platforms (CNAPP)
16th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
55
Ranking in other categories
Secure Web Gateways (SWG) (15th), Cloud Access Security Brokers (CASB) (9th), ZTNA as a Service (14th), Secure Access Service Edge (SASE) (12th)
 

Featured Reviews

Andrew W - PeerSpot reviewer
Tells us about vulnerabilities as well as their impact and helps to focus on real issues
Looking at all the different pieces, it has got everything we need. Some of the pieces we do not even use. For example, we do not have Kubernetes Security. We are not running any K8 clusters, so it is good for us. Overall, we find the solution to be fantastic. There can be additional education components. This may not be truly fair to them because of what the product is going for, but it would be great to see additional education for compliance. It is not a criticism of the tool per se, but anything to help non-development resources understand some of the complexities of the cloud is always appreciated. Any additional educational resources are always helpful for security teams, especially those without a development background.
Yokesh Mani - PeerSpot reviewer
Easy to write custom rules and policies in the UI with limited coding knowledge
The user interface could be improved. Sometimes, the visibility is not immediately available for the environment. We have the native servers that come with the solutions, but we cannot see them in the Check Point log. Another issue is with the integrated file monitoring. It would make sense to have stuff like file integrity monitoring and malware scanning available within this module because we don't want to integrate another product. For example, let's say it's showing a process violation. It should be able to do some additional malware scanning in that particular bucket to get some additional information. I don't want to integrate with another third-party tool or go to the native server to check something. It would be helpful to have integrated monitoring and malware scanning for the file types. There are a few flaws with the security management portal where I have limited visibility into the workload protection features. There is no error visibility where I can see the communication and workflow between services. Some of the dashboards need to be fine-tuned if they are not customized. For example, I cannot customize anything on the effective risk management dashboard. Some of the information is not correct for my tenant. With respect to passwords and user management, there are no policies I can measure at the user level. If the user was created more than six months ago, you don't need to worry about that password or do anything like two-factor authentication associated with that user. They can still log in after six months or one year. It's also a challenge to use CloudGuard's agentless workload posture with AWS. An Azure storage is summed up with a CNAPP encryption by default. We tried onboarding this data, but the problem is the attachment is not done. After a few days, we identified that it was impossible to do the encryption detection. But CloudGuard's default rules say that this has to be encrypted. The AWS module says that we cannot access this volume with this encryption, so we cannot use an agentless workload posture with AWS because of this. It is a best practice to ensure that all the volumes are being encrypted. Without the encryption, how can I do this? It is a big challenge for CloudGuard.
Santiago Gomez - PeerSpot reviewer
Has improved the organization's PCI compliance with data loss prevention
I use the solution on a Macintosh computer and it has issues and does not work when I try to log in from the Safari Browser, but it works fine when I log in from the Google Chrome browser. The console has issues when the login is done through a Safari Browser. The console has to be more competitive and the compatibility of the browser needs to be better. I want to know about Skyhigh's competitiveness with other brands and about the vulnerability assessment and micro segmentations. I know Skyhigh has other products, but right now, I am studying what this new product is about. They only have English support, so I would like for them to add some Spanish support.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"SentinelOne Singularity Cloud Security has saved up to 50 percent in engineering time."
"We've seen a reduction in resources devoted to vulnerability monitoring. Before PingSafe we spent a lot of time monitoring and fixing these issues. PingSafe enabled us to divert more resources to the production environment."
"SentinelOne is far superior to our previous solution, Accops, due to its seamless updates, effortless maintenance, and user-friendly interface and dashboard."
"The cloud misconfiguration is the most valuable feature."
"Cloud Native Security is a tool that has good monitoring features."
"Cloud Native Security offers attack path analysis."
"The Offensive Security Engine, powered by impressive AI/ML capabilities, seamlessly integrates with cloud infrastructure to analyze data and provide optimal security solutions."
"Support has been very helpful and provides regular feedback and help whenever needed. They've been very useful."
"Dome9 wraps our FTP infrastructure with its network security configurations, and this also gives us the ability to monitor FTP activity."
"The most valuable features of CloudGuard CNAPP are its reporting capabilities for aggregating vulnerability information and scoring."
"The dashboard is intuitive. You know if you're compliant or not, and then it gives you a remediation plan."
"The visibility in our cloud environment is the most valuable feature."
"Dome9 has improved our organization; we have a centralized view of all of our assets, our visible assets our ECs, our inventories. And then all the policies are centralized, and it is easier to manage because everything is one component console."
"The solution has intelligence that integrates with a range of threat intelligence feeds, including Check Point's ThreatCloud, to provide real-time intelligence on emerging threats."
"It offers security insights and recommendations to assist organizations in acting and remediating issues swiftly."
"The ability to integrate it with Microsoft Azure Sentinel allows us to validate the logs in an even more complex and meaningful way."
"Good anti-virus filtering, URL categorization, and reporting capabilities."
"The other products that I have evaluated do not have the scalability options that McAfee has."
"User analytics."
"It's an easy-to-use product."
"It help us monitor high risk services, blocking them, and also feeding them to our egress points."
"The most valuable features of McAfee Web Gateway are anti-malware, reports, and powerful categorization of web pages."
"Tokenization."
"The initial setup is fairly straightforward and easy to perform."
 

Cons

"To enhance the notification system's efficiency, resolved issues should be promptly removed from the portal."
"The integration with Oracle has room for improvement."
"It took us a while to configure the software to work well in this type of environment, as the support documents were not always clear."
"The cloud-based operations might pose challenges in areas with limited or unavailable internet connectivity."
"Scanning capabilities should be added for the dark web."
"With Cloud Native Security, we can't selectively enable or disable alerts based on our specific use case."
"While SentinelOne offers robust security features, its higher cost may present a challenge for budget-conscious organizations."
"The could improve their mean time to detect."
"I would like to see tighter integration with other compliance tools, like Chef Compliance, in addition to Inspector."
"Automation and advanced threat prevention have room for improvement."
"The technical support could be better, but I do not know of any other needed improvements."
"Dome9 should also support deployments that are on-premises and in a hybrid cloud."
"I would like to see improvements in the vulnerability assessments in terms of how the solution discovers vulnerabilities or compromised workloads. Also, customizable reports would be nice."
"No improvements are needed."
"Improvements can be made to the user interface."
"The main issue that we found with Dome9 is that we have a default rule set with better recommendations that we want to use. So, you do a clone of that rule set, then you do some tweaks and customizations, but there is a problem. When they activate the default rule set with the recommendations and new security measures, it doesn't apply the new security measures to your clones profile. Therefore, you need to clone the profile again. We are already writing a report to Check Point."
"The pricing of the solution could be adjusted to make it more reasonable."
"SkyHigh has the ability to place users or groups on a ‘Watchlist’; which allows you to see certain views with these Watchlists users/groups in them. This is great when you are looking at live data but if I wanted to generate a report on "only" the watchlists."
"User interface could be more intuitive."
"The documentation could be improved."
"The only thing we have faced is that sometimes, randomly, the portal becomes too slow."
"One area for improvement I've seen in Skyhigh Security is that it lacks support for unsanctioned applications, where customers have their applications. Those applications do not come from Microsoft or other popular vendors. For example, Microsoft has support for Teams and it has support for OneDrive, but it doesn't have support for custom applications built by customers. Customers have internal teams building and publishing applications to the external world, but Skyhigh Security doesn't have support for those applications, and this is the main problem I've seen. The solution only supports a pool of applications that are from Microsoft and other major SaaS vendors. McAfee doesn't provide support for custom applications, compared to other vendors who provide it. For example, Bitglass and Netskope both have support for custom applications. Another area for improvement in Skyhigh Security is that its API support is a little weak. I also have not seen a strong integration between the solution and other McAfee products."
"Support for securing more cloud apps."
"It is an expensive solution."
 

Pricing and Cost Advice

"SentinelOne provided competitive pricing compared to other vendors, and we are satisfied with the deal."
"PingSafe's pricing is good because it provides us with a solution."
"PingSafe falls somewhere in the middle price range, neither particularly cheap nor expensive."
"PingSafe's primary advantage is its ability to consolidate multiple tools into a single user interface, but, beyond this convenience, it may not offer significant additional benefits to justify its price."
"The tool is cost-effective."
"It is a little expensive. I would rate it a four out of ten for pricing."
"SentinelOne Singularity Cloud Security is costly."
"SentinelOne offers excellent pricing and licensing options."
"The pricing is extremely competitive."
"Licensing and costs are straightforward, as they have a baseline of 100 workloads within one license and no additional charges."
"The tool's pricing is moderate. Its licensing costs are yearly."
"The licensing part still needs some work. The issue that I have is that we do not use all the services in the cloud, but sometimes, CloudGuard identifies them as an asset."
"Right now, we have licenses on 500 machines, and they are not cheap."
"The license fee is high."
"It is difficult to contextualize the pricing because we are used to Indian pricing and licensing."
"Check Point CloudGuard Posture Management is always known as a good solution but an expensive one. When you're using Cisco, Check Point, or Palo Alto, you know that you will pay more, but you know that it will work."
"The solution is quite expensive. As we take add-ons continuously as per our customer's requirements, there are additional charges."
"Pricing is not out of reach."
"The biggest thing to watch for is the difference in price per monitored user for the different API integrations."
"There is a license required to use this solution and it is paid annually. The price is reasonable."
"Skyhigh provided a FedRAMP solution, tokenization, a better shadow IT capability, and lower cost."
"Pricing for Skyhigh Security is okay, though there's always a scope for price improvements. Its pricing is okay compared to other products because other products have very expensive licensing costs. Along with the licensing, support is also provided for Skyhigh Security, so pricing is reasonable, but if there's proactive or better support, that will justify the pricing. I haven't interacted with the Skyhigh Security technical support team yet, so I'd give pricing a four out of five rating for now."
"Have a risk-based approach towards pricing."
"There is an annual licensing cost to use McAfee Web Gateway. The purchasing of licensing can be difficult for the government sector."
report
Use our free recommendation engine to learn which Cloud Security Posture Management (CSPM) solutions are best for your needs.
831,020 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
19%
Financial Services Firm
15%
Manufacturing Company
9%
Government
5%
Computer Software Company
14%
Financial Services Firm
14%
Manufacturing Company
9%
University
5%
Educational Organization
50%
Financial Services Firm
8%
Computer Software Company
6%
Manufacturing Company
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about PingSafe?
The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...
What is your experience regarding pricing and costs for PingSafe?
SentinelOne is relatively cheap. If ten is the most expensive, I would rate it a seven.
What needs improvement with PingSafe?
The areas with room for improvement include the cost, which is higher compared to other security platforms. The dashb...
What is your experience regarding pricing and costs for McAfee MVISION Cloud?
The pricing is good and the licensing is straightforward. I'd rate the affordability nine out of ten.
What needs improvement with McAfee MVISION Cloud?
The secure gateway could be improved. If they worked on that they would be more competitive. They should offer more l...
 

Also Known As

PingSafe
Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence
McAfee MVISION Cloud, McAfee MVISION Unified Cloud Edge, McAfee Web Gateway, McAfee MVISION CNAPP, and Skyhigh Networks, McAfee Web Gateway
 

Interactive Demo

 

Overview

 

Sample Customers

Information Not Available
Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners
Western Union.Aetna.DirecTV.Adventist.Equinix.Perrigo.Goodyear.HP.Cargill.Sony.Bank of the West.Prudential.
Find out what your peers are saying about Check Point CloudGuard CNAPP vs. Skyhigh Security and other solutions. Updated: December 2024.
831,020 professionals have used our research since 2012.