Try our new research platform with insights from 80,000+ expert users

Check Point CloudGuard WAF vs SonarQube Server (formerly SonarQube) comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 30, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Check Point CloudGuard WAF
Ranking in Application Security Tools
11th
Average Rating
8.8
Reviews Sentiment
7.8
Number of Reviews
39
Ranking in other categories
Web Application Firewall (WAF) (14th)
SonarQube Server (formerly ...
Ranking in Application Security Tools
1st
Average Rating
8.0
Reviews Sentiment
7.5
Number of Reviews
114
Ranking in other categories
Static Application Security Testing (SAST) (1st), Software Development Analytics (1st)
 

Mindshare comparison

As of February 2025, in the Application Security Tools category, the mindshare of Check Point CloudGuard WAF is 0.1%, up from 0.1% compared to the previous year. The mindshare of SonarQube Server (formerly SonarQube) is 25.6%, down from 27.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools
 

Featured Reviews

Dialungana Malungo - PeerSpot reviewer
Protects our web applications and APIs and has a very low false positive rate
CloudGuard WAF is a very straightforward solution. I do not have to worry about signatures. Most of the solutions that are out there are mainly based on signatures, and I have to do a lot of maintenance to get the signature updates, and sometimes, due to a lack of resources, I am not able to do so. With CloudGuard WAF, I have peace of mind, because most of the features are AI-based, and there is not much configuration that needs to be done on my side. Once set, I only go to CloudGuard WAF to check. I do not have to worry about signatures or updates. Everything is done perfectly, and I have a sense of peace because I know our applications are safe. It is very important for us that CloudGuard WAF protects our applications against threats without relying on signatures. That is definitely one of the key features I need.
Wang Dayong - PeerSpot reviewer
Easy to integrate and has a plug-in that supports both C and C++ languages
The product provides false reports sometimes. It also fails to understand the context of the code. It reports that a line of code has issues without considering its relation with the previous line. The product should improve the report quality. While it asks us to improve the code quality, it would be good if it also suggests how to improve the quality.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We have not had any incidents. We could realize its benefits immediately. We watched and monitored the traffic, and it was amazing to see the results."
"The most valuable features are its ease of use and multiple functionalities."
"The communication between the on-premises device and the cloud for analysis and feedback is a valuable feature."
"The most valuable feature we have found in Check Point CloudGuard WAF is its rich logging capabilities."
"It seamlessly protects through machine learning, giving us visibility into potential attacks and where they come from."
"On the endpoint side, the most valuable feature is undoubtedly the cloud-based management capability, along with the ransomware protection, despite not encountering any instances so far."
"Support is the same with on-premise devices, and it is very good. Since it is cloud-based, I do not need them as much."
"It offers high performance and improved productivity for users."
"Using SonarQube benefits us because we are able to avoid the inclusion of malware in our applications."
"Strong code evaluation for budget-minded clients."
"Provides local scanning for developers."
"The freemium version of SonarQube Server offers excellent value, especially compared to the high costs of Snyk."
"If you want to have your code scanned and timed then this is a good tool."
"SonarQube is designed well making it easy to use, simple to identify issues and find solutions to problems."
"We are using the Community edition. So, we don't have to incur any licensing costs. This is the best part."
"It automatically scans for code, detects vulnerabilities, and generates daily reports."
 

Cons

"They need improved latency in the main window."
"Cost reduction and trial period extension should be considered with some lucrative discount offerings in buying standard versions."
"CloudGuard could improve in areas such as ease of integration with Fortinet and reducing costs associated with deployment in cloud environments like Azure."
"One of the big problems we found in Check Point, in general, is the support."
"There are occasions when it interfaces with other systems, leading to a loss of visibility."
"The reporting can be improved."
"The user interface, SmartConsole, sometimes malfunctions and requires a restart."
"The coding configurations can be simplified to save time for IT teams and developers."
"SonarQube could improve its static application security testing as per the industry standard."
"There are limitations to the free version that limit development options as far as languages."
"Depending on the tool's configuration, sometimes you get false alarms that are unimportant to you."
"We had some issues where the Quality Gate check sometimes gets stuck and it is unclear."
"The reporting is good, but I am not able to download a specific report as a PDF, so downloading reports is something that should be looked at."
"There is need for support for the additional languages and ease of use in adding new rules for detecting issues."
"The implementation of the solution is straightforward. However, we did have some initial initialization issues at the of the projects. I don't think it was SonarQube's fault. It was the way it was implemented in our organization because it's mainly integrated with many software, such as Jira, Confluence, and Butler."
"The BPM language is important and should be considered in SonarQube."
 

Pricing and Cost Advice

"As Infiniti customers, the pricing is manageable, as we have allowances dedicated to each Check Point product. The price is not as high compared to other options I have dealt with in the past."
"I find the pricing to be reasonable."
"I work for an Indian banking client. In India, companies are on a budget. The company liked Check Point very much, but it was a little bit costly compared to FortiWeb. However, it had more features compared to FortiWeb."
"Check Point CloudGuard WAF is expensive compared to Azure WAF."
"Check Point CloudGuard Application Security's pricing is not friendly."
"The pricing is not that expensive considering what it offers."
"Considering all the benefits we've observed, we find the price to be satisfactory."
"The tool's licensing costs are yearly and competitive."
"The free version of SonarQube does everything that we need it to."
"SonarQube is an open-source product that can be used free of charge."
"This is open source."
"The beauty of this solution is the free open-source version is capable enough in doing pretty much what an enterprise-level version can do."
"I do not know about the pricing as I am using the community edition, which is free. But I compared the pricing with Sigma, and it is higher than SonarQube."
"We are using the open-source version, which is available free of cost."
"We are using the community version of the solution and we plan on purchasing licenses for the upgraded version soon. There is a limitation on how many lines of code can be scanned and this is why we are going to purchase a license for an increased amount."
"The licence is standard open source licensing"
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
838,713 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Financial Services Firm
13%
Security Firm
8%
Manufacturing Company
8%
Financial Services Firm
17%
Computer Software Company
15%
Manufacturing Company
13%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about CloudGuard for Application Security?
We have not had any incidents. We could realize its benefits immediately. We watched and monitored the traffic, and it was amazing to see the results.
What is your experience regarding pricing and costs for CloudGuard for Application Security?
The base solution costs approximately 30,000 euros, with an additional 2,000 euros per year for licenses and support. The price is fair for the features offered. For us, it is cost-effective compar...
What needs improvement with CloudGuard for Application Security?
The learning curve was a challenge due to initially incorrect configurations. It took approximately a month and a half to understand how the solution works because of inadequate documentation. The ...
Is SonarQube the best tool for static analysis?
I am not very familiar with SonarQube and their solutions, so I can not answer. But if you are asking me about which tools that are the best for for Static Code Analysis, I suggest you have a look...
Which gives you more for your money - SonarQube or Veracode?
SonarQube is easy to deploy and configure, and also integrates well with other tools to do quality code analysis. SonarQube has a great community edition, which is open-source and free. Easy to use...
How would you decide between Coverity and Sonarqube?
We researched Coverity, but in the end, we chose SonarQube. SonarQube is a tool for reviewing code quality and security. It helps to guide our development teams during code reviews by providing rem...
 

Also Known As

Check Point CloudGuard Application Security, CloudGuard Application Security, CloudGuard AppSec
Sonar
 

Interactive Demo

 

Overview

 

Sample Customers

Orange España, Paschoalotto
Information Not Available
Find out what your peers are saying about Check Point CloudGuard WAF vs. SonarQube Server (formerly SonarQube) and other solutions. Updated: January 2025.
838,713 professionals have used our research since 2012.