Check Point CloudGuard CNAPP Reviews

Name: Check Point CloudGuard CNAPP
Brand: Check Point Software Technologies
Rating: 4.3 (71 reviews)

Vendor: Check Point Software Technologies

4.3 out of 5

71 reviews
94% willing to recommend

1,177 followers

What is Check Point CloudGuard CNAPP?

Check Point CloudGuard CNAPP is a cloud-native application protection platform designed to secure your cloud environments and applications. By combining CSPM, CWPP, CSNS, and WAF capabilities, it provides a comprehensive solution to protect your cloud environment from a wide range of threats.

Get the Check Point CloudGuard CNAPP Buyer's Guide and find out what your peers are saying about Check Point CloudGuard CNAPP, Wiz, Microsoft Defender for Cloud and more!

Check Point CloudGuard CNAPP is the #4 ranked solution in top Data Security Posture Management (DSPM) solutions, #5 ranked solution in Cloud Workload Protection Platforms, #5 ranked solution in top Cloud Security Posture Management (CSPM) solutions, #5 ranked solution in top Cloud-Native Application Protection Platforms (CNAPP) solutions, #6 ranked solution in top Compliance Management solutions, #7 ranked solution in Container Security Solutions, #9 ranked solution in top Vulnerability Management solutions, and #9 ranked solution in best Cloud Security companies. PeerSpot users give Check Point CloudGuard CNAPP an average rating of 8.6 out of 10. Check Point CloudGuard CNAPP is most commonly compared to Wiz: Check Point CloudGuard CNAPP vs Wiz. Check Point CloudGuard CNAPP is popular among the large enterprise segment, accounting for 64% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 15% of all views.

Buyer's Guide

Check Point CloudGuard CNAPP

April 2025

Get the report

Helped 849,686 peers since 2012

Featured Check Point CloudGuard CNAPP reviews

Bart Coddens

Cloud Engineer at Cloudar

The user interface needs work. Sometimes, it is a transition from the old tool to the new CNAPP Two that I currently have, and remnants of the old environment can still be detected. I require consistency in the user interface to ensure everything is streamlined into the same look and feel. More work is needed in fine-tuning the threat data towards your CSPM and activity logs, aligning them with business intelligence, which requires a cohesive console interface. My assessment of CloudGuard CDRs in intrusion detection and threat hunting capabilities is that it still needs some work. All the threat data that comes in, you need to fine tune it a bit.

Read full review

Yokesh Mani

Deputy Manager at Computer Age Management Services Pvt. Ltd.

The user interface could be improved. Sometimes, the visibility is not immediately available for the environment. We have the native servers that come with the solutions, but we cannot see them in the Check Point log. Another issue is with the integrated file monitoring. It would make sense to have stuff like file integrity monitoring and malware scanning available within this module because we don't want to integrate another product. For example, let's say it's showing a process violation. It should be able to do some additional malware scanning in that particular bucket to get some additional information. I don't want to integrate with another third-party tool or go to the native server to check something. It would be helpful to have integrated monitoring and malware scanning for the file types. There are a few flaws with the security management portal where I have limited visibility into the workload protection features. There is no error visibility where I can see the communication and workflow between services. Some of the dashboards need to be fine-tuned if they are not customized. For example, I cannot customize anything on the effective risk management dashboard. Some of the information is not correct for my tenant. With respect to passwords and user management, there are no policies I can measure at the user level. If the user was created more than six months ago, you don't need to worry about that password or do anything like two-factor authentication associated with that user. They can still log in after six months or one year. It's also a challenge to use CloudGuard's agentless workload posture with AWS. An Azure storage is summed up with a CNAPP encryption by default. We tried onboarding this data, but the problem is the attachment is not done. After a few days, we identified that it was impossible to do the encryption detection. But CloudGuard's default rules say that this has to be encrypted. The AWS module says that we cannot access this volume with this encryption, so we cannot use an agentless workload posture with AWS because of this. It is a best practice to ensure that all the volumes are being encrypted. Without the encryption, how can I do this? It is a big challenge for CloudGuard.

Read full review

reviewer1459770

Advisory Information Security Analyst at a financial services firm with 501-1,000 employees

The biggest thing is the documentation aspect of Dome9 is a little lacking. They were purchased by Check Point about a year and a half to two years ago. When they integrated into Check Point's support system, a lot of the documentation that they had previously got mangled in the transition, e.g., linking to stuff on the Dome9 website that no longer exists. There are still a lot of spaces with incomplete links and stuff that is not as fully explained as it could be. However, the product itself is really easy to use, so there is not too much of an issue with that. Also, it's not too hard to get on with the actual Check Point support to go over this stuff.

Read full review

Check Point CloudGuard CNAPP mindshare

Product category:

As of May 2025, the mindshare of Check Point CloudGuard CNAPP in the Vulnerability Management category stands at 1.6%, up from 1.3% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Vulnerability Management

PeerResearch reports based on Check Point CloudGuard CNAPP reviews

Type	Title	Date
Category	Vulnerability Management	May 1, 2025	Download
Product	Reviews, tips, and advice from real users	May 1, 2025	Download
Comparison	Check Point CloudGuard CNAPP vs Wiz	May 1, 2025	Download
Comparison	Check Point CloudGuard CNAPP vs Qualys VMDR	May 1, 2025	Download
Comparison	Check Point CloudGuard CNAPP vs Tenable Nessus	May 1, 2025	Download

Title	Rating	Mindshare	Recommending
Wiz	4.5	12.3%	100%	21 interviews Add to research
Microsoft Defender for Cloud	4.0	5.6%	94%	76 interviews Add to research

Valuable Features

Check Point CloudGuard CNAPP is praised for features like dynamic access, centralized management, compliance engine, IAM control, auto-remediation, and real-time visibility. Users find value in its ability to identify misconfigurations, provide compliance checks, manage cloud traffic flows, automate policies, and detect threats proactively. The platform's ease of use, integration capabilities, intuitive interface, and advanced reporting enhance security management across multi-cloud environments.

"I value the comfort and the ability to receive proper insights almost hands-off."
"The CDR helps detect anomalous behavior and respond to threats before they become an issue."
"My overall product rating is ten out of ten."

Room for Improvement

Check Point CloudGuard CNAPP needs enhanced third-party tool integration, more effective automation, and better policy validation before deployment. Improved reporting options, including customization, would be beneficial. Reducing false positives and enhancing compliance framework support are important. Users desire better documentation and a more intuitive user interface. Faster and more effective support, reduced costs, and increased configurability are also areas needing attention. Improved support for various environments, such as hybrid and on-premises, is also necessary.

"The user interface needs work. Sometimes, it is a transition from the old tool to the new CNAPP Two that I currently have, and remnants of the old environment can still be detected."
"It feels somewhat fractured to me. I haven't grasped all the parts yet, and better integration would make CNAPP most valuable."
"The user interface needs work."

ROI

Check Point CloudGuard CNAPP offers notable time and cost efficiencies by automating cloud security processes, reducing the need for extensive manual oversight. Users report improved security compliance and risk avoidance, leading to a measurable return on investment. Many clients cite reduced personnel requirements and streamlined operations as key benefits, emphasizing time savings as a crucial factor. The platform's ability to handle vulnerabilities and misconfigurations provides an essential safeguard comparable to insurance, enhancing operational fluidity across cloud environments.

Pricing

Check Point CloudGuard CNAPP pricing offers flexibility with options like annual or hourly licensing, tailored to the enterprise needs based on asset count. Costs vary based on organization size, number of devices, and workloads. While some find it cost-effective, others consider it on the higher end compared to competitors. Setup is relatively affordable, but ongoing costs may escalate as cloud infrastructures grow. Overall, competitive pricing aligns with market standards, offering scalability within enterprise agreements.

"Its price is very fair."
"The licensing part still needs some work. The issue that I have is that we do not use all the services in the cloud, but sometimes, CloudGuard identifies them as an asset."
"We have the enterprise-level license and we renew it annually because it is worth the cost."

Popular Use Cases

Check Point CloudGuard CNAPP is used for comprehensive cloud security, workload protection, security posture management, threat detection, and compliance management. Users deploy it across multi-cloud environments like AWS, Azure, and GCP for monitoring and improving security configurations, preventing vulnerabilities, and ensuring adherence to compliance standards. CNAPP offers centralized visibility, enabling users to detect and remediate risks effectively, protect cloud-native apps, manage identities, and enhance overall security posture.

Service and Support

Check Point CloudGuard CNAPP's customer service and support are generally described as professional, helpful, and responsive. Many highlight the empowered customer service team and quick response from technical support. Some mention having dedicated support engineers, which is appreciated. There are instances where support needs improvement, with some users noting initial contact difficulties or delays. The service is often rated positively, with scores frequently falling between seven and ten. Pre-sales support also receives high praise.

Deployment

Users found Check Point CloudGuard CNAPP's initial setup generally straightforward and quick. It is cloud-based, easy to implement, and involves using templates and APIs. While experienced cloud professionals had minimal difficulty, less experienced users required guidance. Deployment time varied, with some completing setup in hours, while others took weeks due to integration challenges and extensive training. Simple onboarding steps were noted, and different environments, like AWS and Azure, affected setup complexity.

Scalability

Check Point CloudGuard CNAPP is recognized for its scalability, easily adapting to various cloud environments. Users report it supports hundreds of cloud instances and a vast array of virtual machines, though attention to licensing is necessary. It is well-suited for larger enterprises with complex infrastructures, while smaller setups may not see significant benefits. Extensive scaling capabilities ensure seamless integration across multiple locations, with performance and scaling being highly regarded by numerous entities.

Stability

Check Point CloudGuard CNAPP is recognized for high stability, consistently delivering reliable performance without frequent issues. Many users report dependable operation, citing minimal downtime or outages. Even during updates, stability remains unaffected. Some experience occasional latency or false positives but regard these as minor. Most rate stability between eight and nine out of ten. It manages workloads efficiently, providing seamless integration with existing systems, though some find certain functionalities less transparent. Stability overall remains strong across diverse environments.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Check Point CloudGuard CNAPP Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

15%

Financial Services Firm

13%

Manufacturing Company

University

Educational Organization

Government

Insurance Company

Retailer

Comms Service Provider

Healthcare Company

Security Firm

Construction Company

Real Estate/Law Firm

Energy/Utilities Company

Non Profit

Outsourcing Company

Wholesaler/Distributor

Transportation Company

Media Company

Performing Arts

Hospitality Company

Legal Firm

Logistics Company

Consumer Goods Company

Marketing Services Firm

Pharma/Biotech Company

Recruiting/Hr Firm

Recreational Facilities/Services Company

Compare Check Point CloudGuard CNAPP with alternative products

Learn more about Check Point CloudGuard CNAPP

CloudGuard CNAPP delivers end-to-end cloud security, including workload protection, vulnerability management, and identity management, all while maintaining continuous compliance. It uses advanced AI to detect and prevent threats, offering protection for containers, serverless applications, and APIs. CloudGuard CNAPP also emphasizes simplifying security management, integrating directly with cloud platforms like AWS, Azure, and GCP.

CloudGuard CNAPP provides customers with more context to drive actionable security and smarter prevention, from code-to-cloud, across the application lifecycle. More Context Means Actionable Security, Smarter Prevention. The primary components are:

Unified & Modular Platform - A single platform unifying SAST, CSPM, DSPM, CIEM, CWPP, WAF, and Cloud Detection and Response.
Continuous Cloud Security - Automatic enforcement of security requirements and internal policies from development to runtime.
Real-time Detection & Protection - Real-time incidents and vulnerability detection with a single-click or automated remediation.

What are the key features of CloudGuard CNAPP?

Workload Protection: Secures cloud-based workloads, including VMs, containers, and serverless functions, from vulnerabilities and attacks.
Posture Management: Continuously monitors cloud configurations and assets to ensure compliance with security standards and policies.
Threat Prevention: Uses AI-driven threat detection to block malware, ransomware, and zero-day exploits in real-time.
Compliance Automation: Automates compliance checks and ensures adherence to industry regulations, such as GDPR, HIPAA, and PCI-DSS.
Identity and Access Management (IAM) Protection: Secures identities by managing access policies and detecting misconfigurations in permissions.

What are the key benefits to consider?

Improved Cloud Visibility: Provides clear insights into cloud environments, assets, and workloads, helping teams detect misconfigurations and vulnerabilities early.
Risk Reduction: Threat prevention features help reduce the risk of breaches by identifying and blocking potential attacks before they can exploit system weaknesses.
Operational Efficiency: Automated compliance and posture management reduce the manual work needed to maintain security standards.
Multi-cloud Support: CloudGuard CNAPP integrates across AWS, Azure, and Google Cloud, streamlining security operations for hybrid and multi-cloud deployments.

Check Point CloudGuard CNAPP simplifies cloud security management with integrated protection and automation.

Check Point CloudGuard CNAPP was previously known as Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence.