Check Point CloudGuard CNAPP vs Tenable Cloud Security comparison

Check Point CloudGuard CNAPP vs. Tenable Cloud Security

Download the complete report

Helped 815,854 peers since 2012

Categories and Ranking

SentinelOne Singularity Clo...

Featured Reviews

Andrew W

VP - Information Technology at a financial services firm with 201-500 employees

Aug 29, 2024

Tells us about vulnerabilities as well as their impact and helps to focus on real issues

Looking at all the different pieces, it has got everything we need. Some of the pieces we do not even use. For example, we do not have Kubernetes Security. We are not running any K8 clusters, so it is good for us. Overall, we find the solution to be fantastic. There can be additional education components. This may not be truly fair to them because of what the product is going for, but it would be great to see additional education for compliance. It is not a criticism of the tool per se, but anything to help non-development resources understand some of the complexities of the cloud is always appreciated. Any additional educational resources are always helpful for security teams, especially those without a development background.

Read full review

Yokesh Mani

Deputy Manager at Computer Age Management Services Pvt. Ltd.

Jan 23, 2024

Easy to write custom rules and policies in the UI with limited coding knowledge

The user interface could be improved. Sometimes, the visibility is not immediately available for the environment. We have the native servers that come with the solutions, but we cannot see them in the Check Point log. Another issue is with the integrated file monitoring. It would make sense to have stuff like file integrity monitoring and malware scanning available within this module because we don't want to integrate another product. For example, let's say it's showing a process violation. It should be able to do some additional malware scanning in that particular bucket to get some additional information. I don't want to integrate with another third-party tool or go to the native server to check something. It would be helpful to have integrated monitoring and malware scanning for the file types. There are a few flaws with the security management portal where I have limited visibility into the workload protection features. There is no error visibility where I can see the communication and workflow between services. Some of the dashboards need to be fine-tuned if they are not customized. For example, I cannot customize anything on the effective risk management dashboard. Some of the information is not correct for my tenant. With respect to passwords and user management, there are no policies I can measure at the user level. If the user was created more than six months ago, you don't need to worry about that password or do anything like two-factor authentication associated with that user. They can still log in after six months or one year. It's also a challenge to use CloudGuard's agentless workload posture with AWS. An Azure storage is summed up with a CNAPP encryption by default. We tried onboarding this data, but the problem is the attachment is not done. After a few days, we identified that it was impossible to do the encryption detection. But CloudGuard's default rules say that this has to be encrypted. The AWS module says that we cannot access this volume with this encryption, so we cannot use an agentless workload posture with AWS because of this. It is a best practice to ensure that all the volumes are being encrypted. Without the encryption, how can I do this? It is a big challenge for CloudGuard.

Read full review

SumeshKumar

Manager Cloud Security at Hitachi Systems, Ltd.

Sep 18, 2023

The solution provides a single dashboard to onboard and have visibility into all the cloud infrastructure, but it should offer a complete Cnapp solution

Tenable Cloud Security is used for CSPM. If you have multi-cloud tenancy using AWS and Azure, you can have a single dashboard where you can onboard all the cloud infrastructure and have visibility into it. It has multiple cover steps of compliance. So, if you are obliged by any compliance, you can…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The solution's most valuable features are its ability to detect vulnerabilities inside AWS resources and its ability to rescan after a specific duration set by the administrator."

"Cloud Native Security is a tool that has good monitoring features."

"The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best features."

"The UI is very good."

"We like PingSafe's vulnerability assessment and management features, and its vulnerability databases."

"PingSafe offers three key features: vulnerability management notifications, cloud configuration assistance, and security scanning."

"You not only get to know about vulnerabilities and misconfigurations but also some of the actual"

"Cloud Native Security has helped us with our risk posture and securing our agenda. It has been tremendous in terms of supporting growth."

More SentinelOne Singularity Cloud Security pros

"It learns from behavior, attacks, management, detections, captures packets, real-time analysis, et cetera. It's generating knowledge from a variety of sources for an excellent analysis."

"The valuable features of Checkpoint CloudGuard CNAPP include its automation capabilities."

"The reporting is quite good. It is the most powerful aspect of this solution."

"We like the ability to investigate, analyze, and generate reports."

"The identification of misconfigurations, maintenance of compliance in a centralized way, and visibility across all the multi-cloud tenants are the key functionalities."

"The ability to drill down to individual hosts on an account and see which ones are affected is valuable."

"Dome9 continues to be a major piece of our cloud security architecture and has given our senior leadership team a high degree of confidence in our ability to protect our cloud environment."

"People implementing this solution are concerned with addressing a significant risk, and within the AWS realm, this tool does de-risk substantially."

More Check Point CloudGuard CNAPP pros

"The key benefit lies in having the largest and most up-to-date database. When it comes to using any Tenable product, it excels in finding vulnerabilities and providing analytics."

"The product's deployment phase is easy."

"Scanning and reporting are the most valuable features of Tenable Cloud Security"

"Tenable Cloud Security excels in vulnerability detection, one of its strongest features. Another valuable feature is software composition analysis, which highlights and automates the detection of security flaws. Additionally, their knowledge base is excellent; if anything goes wrong, they provide clear guidance on what needs to be done to address specific vulnerabilities."

"The solution’s vulnerability management feature has helped us identify and mitigate risks well."

"The tool alerts us on depreciating performance or deficiencies of our web application. It helps us react on time."

"If you have multi-cloud tenancy using AWS and Azure, you can have a single dashboard where you can onboard all the cloud infrastructure and have visibility into it."

"The product's visibility and remediation work fine for me."

More Tenable Cloud Security pros

Cons

"A vulnerability alert would appear, and we'd fix it, but then the same alert would return the next day."

"The resolution suggestions could be better, and the compliance features could be more customizable for Indian regulations. Overall, the compliance aspects are good. It gives us a comprehensive list, and its feedback is enough to bring us into compliance with regulations, but it doesn't give us the specific objects."

"The Kubernetes scanning on the Oracle Cloud needs to be improved. It's on the roadmap. AWS has this capability, but it's unavailable for Oracle Cloud."

"The cost has the potential for improvement."

"They need more experienced support personnel."

"The reporting works well, but sometimes the severity classifications are inaccurate. Sometimes, it flags an issue as high-impact, but it should be a lower severity."

"In addition to our telecom and Slack channels, it would be helpful to receive Cloud Native Security security notifications in Microsoft Teams."

"I used to work on AWS. At times, I would generate a normal bug in my system, and then I would check PingSafe. The alert used to come after about three and a half hours. It used to take that long to generate the alert about the vulnerability in my system. If a hacker attacks a system and PingSafe takes three to four hours to generate an alert, it will not be beneficial for the company. It would be helpful if we get the alert in five to ten minutes."

More SentinelOne Singularity Cloud Security cons

"The biggest thing is the documentation aspect of Dome9 is a little lacking. They were purchased by Check Point about a year and a half to two years ago. When they integrated into Check Point's support system, a lot of the documentation that they had previously got mangled in the transition, e.g., linking to stuff on the Dome9 website that no longer exists. There are still a lot of spaces with incomplete links and stuff that is not as fully explained as it could be."

"I’d like to see more integration with third-party tools. For example, it would be helpful to have an integration between Dome9 and ServiceNow to manage security incidents and security changes."

"The integration process could be enhanced by enabling integration at the organizational level rather than requiring the manual setup of individual accounts."

"In general, for the product to be successful, they need to improve security, and configuration detection."

"There are opportunities for improvement that can be addressed through a roadmap."

"Dome9 should also support deployments that are on-premises and in a hybrid cloud."

"The costs are really high if you want the entire capabilities of the platform."

"Sometimes, the solution provides us with false alerts of vulnerabilities that are not present in our cloud environment."

More Check Point CloudGuard CNAPP cons

"I have faced several bug incidents with the solution"

"Ermetic needs to improve its security scanning. I would like to see more dynamic graphical forms."

"I do think there might be room for more integrations. This could allow for further customization and flexibility, essentially offering different functionality options to accommodate various budgets."

"There is a need for the support team to improve their response time since it is one of the areas where the product's technical team has certain shortcomings."

"The product must provide more features."

"Due to its robust nature, the platform's adoption can be overwhelming initially. However, once organizations start using it, they tend to get used to it. I haven't had much direct interaction with the support team, but some partners have reported a desire for better support for the product."

"I didn't find anything that wasn't useful or needed to be added."

"Tenable needs to offer a patch-based solution since it is an area where the tool lacks a bit."

More Tenable Cloud Security cons

Pricing and Cost Advice

"I am personally not taking care of the pricing part, but when we moved from CrowdStrike to PingSafe, there were some savings. The price of CrowdStrike was quite high. Compared to that, the price of PingSafe was low. PingSafe is charging based on the subscription model. If I want to add an AWS subscription, I need to pay more. It should not be based on subscription. It should be based on the number of servers that I am scanning."

"PingSafe falls within the typical price range for cloud security platforms."

"The pricing is fair. It is not inexpensive, and it is also not expensive. When managing a large organization, it is going to be costly, but it meets the business needs. In terms of what is out there on the market, it is fair and comparable to what I have seen, so I do not have any complaints about the cost"

"PingSafe is less expensive than other options."

"Singularity Cloud Security by SentinelOne is cost-efficient."

"It is not that expensive. There are some tools that are double the cost of PingSafe. It is good on the pricing side."

"PingSafe is fairly priced."

"PingSafe falls somewhere in the middle price range, neither particularly cheap nor expensive."

More SentinelOne Singularity Cloud Security pricing and cost advice

"The price is on the higher end."

"The licensing and costs are straightforward, as they have a baseline of 100 workloads (number of instances) within one license with no additional nor hidden charges. If you want to have 200 workloads under Dome9, then you need to take out two licenses for that. Also, it does not have any impact on cloud billing, as data is shared using the API call. This is well within the limit of free API calls provided by the cloud provider."

"Check Point CloudGuard Posture Management is expensive."

"The pricing of Check Point is very reasonable. Cisco is a very big brand, so the pricing is quite high. We want a solution that fits into our pocket and has all the features. They can improve the licensing model for small and mid-sized organizations. It suits large companies but not small and mid-sized organizations."

"We have the enterprise-level license and we renew it annually because it is worth the cost."

"Everything in this field is very expensive."

"Right now, we have licenses on 500 machines, and they are not cheap."

"The tool's pricing is moderate. Its licensing costs are yearly."

More Check Point CloudGuard CNAPP pricing and cost advice

"The tool's price is good compared to other brands. The tool's subscription is for a year."

"There is a need to opt for a subscription-based pricing model to use Tenable Cloud Security. I rate the product price an eight on a scale of one to ten, where one is low price and ten is high price."

"The tool's pricing is fair."

See which vendors are best for you

Use our free recommendation engine to learn which Cloud-Native Application Protection Platforms (CNAPP) solutions are best for your needs.

See recommendations

815,854 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

19%

Financial Services Firm

16%

Manufacturing Company

10%

Insurance Company

Financial Services Firm

15%

Computer Software Company

14%

Manufacturing Company

Security Firm

Computer Software Company

16%

Financial Services Firm

14%

Government

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about PingSafe?

The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...

What is your experience regarding pricing and costs for PingSafe?

SentinelOne provided competitive pricing compared to other vendors, and we are satisfied with the deal.

What needs improvement with PingSafe?

Sometimes, I am not able to see the flow when there is an issue. When anyone complains and I have to troubleshoot it,...

What do you like most about Check Point CloudGuard Posture Management?

The visibility in our cloud environment is the most valuable feature.

What is your experience regarding pricing and costs for Check Point CloudGuard Posture Management?

The price is on the higher end.

What needs improvement with Check Point CloudGuard Posture Management?

We have concerns regarding the pricing and would appreciate seeing some improvements.

What do you like most about Tenable Cloud Security?

The solution’s vulnerability management feature has helped us identify and mitigate risks well.

What needs improvement with Tenable Cloud Security?

Another team uses the tool. Tenable acquired Ermetic. I think Tenable has features, stays up to date, and upgrades ev...

What is your primary use case for Tenable Cloud Security?

Right now, I use Tenable as CNAPP, and it is good for the product as it offers enhanced security to users. We did use...

Wiz vs SentinelOne Singularity Cloud Security

Comparisons

Compared 31% of the time

Prisma Cloud by Palo Alto Networks vs SentinelOne Singularity Cloud Security

Compared 24% of the time

AWS GuardDuty vs SentinelOne Singularity Cloud Security

Compared 8% of the time

Orca Security vs SentinelOne Singularity Cloud Security

Compared 6% of the time

Aqua Cloud Security Platform vs SentinelOne Singularity Cloud Security

Compared 3% of the time

More SentinelOne Singularity Cloud Security Competitors

Prisma Cloud by Palo Alto Networks vs Check Point CloudGuard CNAPP

Compared 27% of the time

Wiz vs Check Point CloudGuard CNAPP

Compared 19% of the time

Microsoft Defender for Cloud vs Check Point CloudGuard CNAPP

Compared 10% of the time

AWS GuardDuty vs Check Point CloudGuard CNAPP

Compared 10% of the time

Microsoft Defender for Cloud Apps vs Check Point CloudGuard CNAPP

Compared 2% of the time

More Check Point CloudGuard CNAPP Competitors

Wiz vs Tenable Cloud Security

Compared 23% of the time

CrowdStrike Falcon Cloud Security vs Tenable Cloud Security

Compared 11% of the time

Prisma Cloud by Palo Alto Networks vs Tenable Cloud Security

Compared 10% of the time

Orca Security vs Tenable Cloud Security

Compared 9% of the time

Zscaler Zero Trust Exchange Platform vs Tenable Cloud Security

Compared 2% of the time

More Tenable Cloud Security Competitors

Product Reports

SentinelOne Singularity Cloud Security

Download SentinelOne Singularity Cloud Security product report

SentinelOne Singularity Cloud Security report

Check Point CloudGuard CNAPP

November 2024

Download Check Point CloudGuard CNAPP product report

Tenable Cloud Security

Download Tenable Cloud Security product report

Also Known As

PingSafe

Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence

Ermetic, Ermetic Identity Governance for AWS

Learn More

SentinelOne

Check Point Software Technologies

Tenable

Overview

SentinelOne Singularity Cloud Security protects cloud workloads, offering advanced threat detection and automated response. It integrates seamlessly with cloud environments and secures containerized applications and virtual machines against vulnerabilities.

SentinelOne Singularity Cloud Security is renowned for its efficiency in mitigating threats in real-time. The platform integrates effortlessly with existing cloud environments, ensuring robust cloud security management with minimal manual intervention. Securing containerized applications and virtual machines, it excels in threat intelligence and endpoint protection. However, improvements are needed in performance during high workload periods, and more integrations with third-party tools and better documentation would be beneficial. Users often find the installation process complex, support response times slow, and the dashboard's navigation unintuitive.

What are the key features of SentinelOne Singularity Cloud Security?

Real-time Threat Detection: Identifies and mitigates threats as they occur.
Automated Response: Automatically responds to threats to minimize impact.
Ease of Deployment: Simple setup process with scalable options.
Machine Learning Insights: AI-driven insights enhance threat prevention.
Seamless Integration: Integrates with cloud environments for unified security management.

What are the primary benefits or ROI to expect from SentinelOne Singularity Cloud Security?

Enhanced Threat Mitigation: Improved security against real-time threats.
Reduced Manual Intervention: Automated processes save time and resources.
Scalability: Easily adapts to growing security requirements.
Centralized Management: Manage security across platforms from a single console.
Advanced Threat Intelligence: Provides in-depth analysis and protection.

In specific industries, SentinelOne Singularity Cloud Security is implemented to safeguard critical data and infrastructure. Organizations in finance, healthcare, and technology depend on its real-time threat detection and automated response to protect sensitive information. Its ability to secure containerized applications and virtual machines is particularly valuable in dynamic environments where rapid scaling is necessary.

Check Point CloudGuard CNAPP is a cloud-native application protection platform designed to secure your cloud environments and applications. By combining CSPM, CWPP, CSNS, and WAF capabilities, it provides a comprehensive solution to protect your cloud environment from a wide range of threats.

CloudGuard CNAPP delivers end-to-end cloud security, including workload protection, vulnerability management, and identity management, all while maintaining continuous compliance. It uses advanced AI to detect and prevent threats, offering protection for containers, serverless applications, and APIs. CloudGuard CNAPP also emphasizes simplifying security management, integrating directly with cloud platforms like AWS, Azure, and GCP.

CloudGuard CNAPP provides customers with more context to drive actionable security and smarter prevention, from code-to-cloud, across the application lifecycle. More Context Means Actionable Security, Smarter Prevention. The primary components are:

Unified & Modular Platform - A single platform unifying SAST, CSPM, DSPM, CIEM, CWPP, WAF, and Cloud Detection and Response.
Continuous Cloud Security - Automatic enforcement of security requirements and internal policies from development to runtime.
Real-time Detection & Protection - Real-time incidents and vulnerability detection with a single-click or automated remediation.

What are the key features of CloudGuard CNAPP?

Workload Protection: Secures cloud-based workloads, including VMs, containers, and serverless functions, from vulnerabilities and attacks.
Posture Management: Continuously monitors cloud configurations and assets to ensure compliance with security standards and policies.
Threat Prevention: Uses AI-driven threat detection to block malware, ransomware, and zero-day exploits in real-time.
Compliance Automation: Automates compliance checks and ensures adherence to industry regulations, such as GDPR, HIPAA, and PCI-DSS.
Identity and Access Management (IAM) Protection: Secures identities by managing access policies and detecting misconfigurations in permissions.

What are the key benefits to consider?

Improved Cloud Visibility: Provides clear insights into cloud environments, assets, and workloads, helping teams detect misconfigurations and vulnerabilities early.
Risk Reduction: Threat prevention features help reduce the risk of breaches by identifying and blocking potential attacks before they can exploit system weaknesses.
Operational Efficiency: Automated compliance and posture management reduce the manual work needed to maintain security standards.
Multi-cloud Support: CloudGuard CNAPP integrates across AWS, Azure, and Google Cloud, streamlining security operations for hybrid and multi-cloud deployments.

Check Point CloudGuard CNAPP simplifies cloud security management with integrated protection and automation.

Tenable Cloud Security is a comprehensive solution designed to help organizations secure their cloud environments across various platforms, including AWS, Azure, and Google Cloud. It offers continuous visibility, compliance management, and threat detection to ensure that cloud infrastructure and applications are protected from vulnerabilities and misconfigurations.

Tenable Cloud Security exemplifies a comprehensive Cloud-Native Application Protection Platform (CNAPP) by providing a unified solution that covers the entire cloud security lifecycle, from development to runtime. This platform is designed to address vulnerabilities, misconfigurations, threats, and compliance risks across multi-cloud environments, making it an essential tool for organizations adopting cloud-native architectures. In practice, Tenable Cloud Security integrates security into the development process through its shift-left approach, particularly with Infrastructure as Code (IaC) security. This ensures that security measures are embedded early in the development lifecycle, allowing teams to identify and mitigate vulnerabilities before they reach production. Once in production, the platform continues to provide real-time visibility into cloud environments, enabling continuous monitoring and proactive threat detection.

The solution's comprehensive protection spans various aspects of cloud security, including the identification and remediation of misconfigurations, automated compliance management, and advanced threat intelligence. By automating these processes, Tenable Cloud Security reduces the manual effort required to manage cloud security, freeing up resources for more strategic initiatives.

What are the key features of Tenable Cloud Security?

Unified Platform: Covers the entire cloud security lifecycle, from development to runtime, providing comprehensive protection.
Shift-Left Approach with IaC Security: Integrates security early in the development process, ensuring that vulnerabilities are caught and remediated before deployment.
Continuous Monitoring: Offers real-time visibility and monitoring of cloud environments, enabling proactive threat detection and response.
Automation: Streamlines security operations, reducing the need for manual intervention and increasing operational efficiency.
Comprehensive Threat and Compliance Management: Identifies and mitigates vulnerabilities, misconfigurations, and compliance risks across multi-cloud environments.

What are the benefits of using Tenable Cloud Security?

Improved Security Posture: Early detection and remediation of vulnerabilities lead to a stronger overall security posture.
Operational Efficiency: Automation reduces the workload on security teams, allowing them to focus on higher-priority tasks.
Risk Reduction: Proactively identifies and addresses risks before they impact production environments.
Simplified Compliance: Helps organizations meet and maintain compliance with industry standards, reducing the complexity and cost of audits.

Tenable Cloud Security is particularly valuable in industries with stringent regulatory requirements, such as finance, healthcare, and retail. For example, in the financial sector, it helps organizations ensure compliance with regulations like PCI-DSS while safeguarding sensitive data across cloud environments.

In summary, Tenable Cloud Security is a robust CNAPP solution that integrates security throughout the cloud lifecycle, providing comprehensive protection and operational efficiency for cloud-native environments.

Sample Customers

Information Not Available

Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners

Tyler Technologies, Bilfinger, BarkBox, MongoDB, airSlate, Adama, Latch, Cloudinary, Riskified, AppsFlyer, IntelyCare, Aidoc, 42Dot, and more.

Check Point CloudGuard CNAPP vs. Tenable Cloud Security