Check Point CloudGuard CNAPP vs Microsoft Defender for Cloud Apps comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Check Point CloudGuard CNAPP
Average Rating
8.6
Number of Reviews
65
Ranking in other categories
Vulnerability Management (6th), Cloud and Data Center Security (8th), Container Management (6th), Cloud Workload Protection Platforms (CWPP) (5th), Cloud Security Posture Management (CSPM) (4th), Cloud-Native Application Protection Platforms (CNAPP) (4th), Data Security Posture Management (DSPM) (4th), Compliance Management (3rd)
Microsoft Defender for Clou...
Average Rating
8.4
Number of Reviews
30
Ranking in other categories
Cloud Access Security Brokers (CASB) (2nd), Advanced Threat Protection (ATP) (12th), Microsoft Security Suite (10th)
 

Featured Reviews

PJ
May 28, 2024
Enables us to detect incidents and vulnerabilities in our code with one click
We use CloudGuard to secure apps we develop in the cloud Before Check Point, we didn't have a cloud solution. Having a CNAPP solution gives us confidence that our cloud apps are secure. From day one, we saw that the product was working and detecting issues in real-time.  CloudGuard's best…
SH
Nov 28, 2023
Provides good stability and a valuable SQL database
I am not sure if the product has improved our organization yet. However, it certainly gives another level of confidence that the assets are secure. We are aware of the activity in the tenant The product’s most valuable feature is SQL database. It notifies us even in case of false positives when…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature is the ability to apply common tools across all accounts."
"I can take proactive actions based on an alert without having to interact with the platform directly."
"The initial setup is easy and not complex at all."
"Its monitoring and alerts are triggered by a failure or non-compliance with policies. It helps us to be able to act effectively and quickly."
"Good interface and visibility."
"This product provides a really nice visualization of the infrastructure, including network topology, firewalls, etc."
"CloudGuard's best feature is real-time detection. We can detect incidents and vulnerabilities in our code with one click."
"We know the vulnerability in advance, so we can take some action for that vulnerability."
"The most valuable feature is the alerting system."
"There are a lot of features with benefits, including discovery, investigation, and putting controls around things. You can't say that you like the investigation part but not the discovery. Everything is correlated; that's how the tool works."
"It does a great job of monitoring and maintaining a security baseline. For us, that is a key element. The notifications are pretty good."
"Defender helps us control which applications are being used and gain more security insight into remote and hybrid users based on user identity and log in location. You can also integrate Defender for Cloud Apps with Defender for Endpoint to extend its capabilities."
"Everything from Microsoft is integrated. You receive regular reports on them all. You can push your reports, logs, and security alerts, which are all integrated. It is crucial that these solutions work natively together to deliver coordinated detection and response across our environment."
"Threat detection is its key feature, and that's why we use this tool. It gives an alert if a PC is attacked or there is any kind of anomaly, such as there is a spike in sending emails or we see an unauthorized website being accessed. So, it keeps us on our toes. We get to know that there is something wrong, and we can isolate the user and find any issues with it. So, threat detection is very robust in this tool."
"The most valuable feature is the seamless integration across different clouds."
"On-demand scanning is the most valuable feature. In addition, it's a fairly fluid product. It syncs back to the cloud and provides metrics. It's pretty intelligent."
 

Cons

"I would like to see tighter integration with other compliance tools, like Chef Compliance, in addition to Inspector."
"Adding a feature that allows me to easily identify the changes that have been made to the CIS benchmark and update my own policy accordingly would be a valuable addition to Check Point CloudGuard Posture Management."
"Integration could be improved."
"I would like to see Test B functions at the application access level."
"Automation and advanced threat prevention have room for improvement."
"The security of Check Point CloudGuard Posture Management could improve. There are always new security issues coming out."
"The support must be more effective."
"The costs are high."
"Defender for Cloud apps is primarily useful for Azure apps. It has limited capabilities for applications based on other cloud platforms."
"Microsoft Defender for Cloud Apps’s technical support services needs improvement."
"The interface needs to be more user-friendly."
"The response time could be better. It will be helpful if the alerts are even more proactive and we can see more data. Currently, the data is a little bit weak. It is not complete. I can't just see it and completely know which user or which device it is. It takes some effort and time on my part to investigate and isolate a user. It would be great if it is more user-friendly or easy for people to understand."
"There could be more granular roles that are out of the box included in the product."
"I want them to enhance in-session policy."
"Sometimes, we'll get false positive alarms. For example, when a SharePoint path has no file sharing, but there is an external user, it will trigger an alarm that the file has been shared with an external user... the alerting mechanism should be more precise when giving you an alert about what activity has been done with the file..."
"The integration with macOS operating systems needs to be better."
 

Pricing and Cost Advice

"​They support either annual licensing or hourly. At the time of our last negotiation, it was either one or the other, you could not mix or match. I would have liked to mix/match. ​"
"The license for CloudGuard Posture Management is about $80 a year, and it's based on your cloud footprint, not the number of users. So you could have a million users, and it doesn't matter."
"Check Point CloudGuard Posture Management is expensive."
"The tool's pricing is moderate. Its licensing costs are yearly."
"Check Point CloudGuard Posture Management is always known as a good solution but an expensive one. When you're using Cisco, Check Point, or Palo Alto, you know that you will pay more, but you know that it will work."
"It is a very straightforward licensing model that is based on the number of assets you are discovering and managing with the solution."
"Right now, we have licenses on 500 machines, and they are not cheap."
"In the beginning, the price of Dome9 was cheap, whereas now it is not."
"This product is not expensive."
"I'm not totally involved in the pricing part, but I think its pricing is quite aggressive, and its price is quite similar to Netskope. Netskope has separate licensing fees or additional charges if you want to monitor certain SaaS services, whereas, with MCAS, you get 5,000 applications with their Office 365. It is all bundled, and there's no cost for using that. You only have the operational costs. In the country I am in, it is a bit difficult to get people with the required skill sets."
"Its pricing is on the higher side. Its price is definitely very high for a small-scale company. As an enterprise client, we do get benefits from Microsoft. We get a discounted price because of the number of users we have in our company. We have a premier package, and with that, we do get a lot of discounts. There are no additional costs. It only comes in the top-tier packages. Generally, the top-tier license is the best license that you can get for your organization. If you want, you can buy it separately, but that's not a good idea."
"It is a little bit expensive. When you want to have the complete package with Office 365, Defender, and everything else, it is expensive."
"The price could be better and should be reconsidered."
"The pricing is fair."
"We are an MST and we do not pay for the solution. However, the price of the solution could be better."
"We have an educational licensing agreement. It's a customer agreement for multiple years."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
787,779 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
17%
Computer Software Company
15%
Security Firm
8%
Manufacturing Company
8%
Computer Software Company
17%
Financial Services Firm
11%
Manufacturing Company
8%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better security solution - Cisco Umbrella or Microsoft Cloud App Security?
Cisco Umbrella is an integral component of the Cisco SASE architecture. It integrates security in a single, cloud-native solution, unifying multiple features like DNS-layer security, threat intelli...
What do you like most about Microsoft Cloud App Security?
It does a great job of monitoring and maintaining a security baseline. For us, that is a key element. The notifications are pretty good.
What is your experience regarding pricing and costs for Microsoft Cloud App Security?
Where we are right now, this is an acceptable pricing. I would like to see more transparency given to the end user. The end user given to us is via the cloud service provider. There are different p...
 

Also Known As

Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence
MS Cloud App Security, Microsoft Cloud App Security
 

Overview

 

Sample Customers

Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners
Customers for Microsoft Defender for Cloud Apps include Accenture, St. Luke’s University Health Network, Ansell, and Nakilat.
Find out what your peers are saying about Tenable, Wiz, SentinelOne and others in Vulnerability Management. Updated: June 2024.
787,779 professionals have used our research since 2012.