Check Point CloudGuard WAF Reviews

Name: Check Point CloudGuard WAF
Brand: Check Point Software Technologies
Rating: 4.4 (45 reviews)

Vendor: Check Point Software Technologies

4.4 out of 5

45 reviews
100% willing to recommend

What is Check Point CloudGuard WAF?

Check Point CloudGuard WAF (Web Application Firewall) is a cloud-native security solution designed to protect web applications and APIs from known and unknown threats. It employs contextual AI and machine learning to prevent zero-day attacks without relying on traditional signature-based detection methods, ensuring that applications remain secure even as new threats emerge.

Get the Check Point CloudGuard WAF Buyer's Guide and find out what your peers are saying about Check Point CloudGuard WAF, SonarQube Server (formerly SonarQube), Checkmarx One and more!

Check Point CloudGuard WAF is the #8 ranked solution in application security solutions and #11 ranked solution in top Web Application Firewalls. PeerSpot users give Check Point CloudGuard WAF an average rating of 8.8 out of 10. Check Point CloudGuard WAF is most commonly compared to SonarQube Server (formerly SonarQube): Check Point CloudGuard WAF vs SonarQube Server (formerly SonarQube). Check Point CloudGuard WAF is popular among the large enterprise segment, accounting for 57% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 21% of all views.

Buyer's Guide

Check Point CloudGuard WAF

June 2025

Get the report

Helped 856,873 peers since 2012

Featured Check Point CloudGuard WAF reviews

Dialungana Malungo

Principal Cybersecurity Specialist at Unitel S.A.

CloudGuard WAF is a very straightforward solution. I do not have to worry about signatures. Most of the solutions that are out there are mainly based on signatures, and I have to do a lot of maintenance to get the signature updates, and sometimes, due to a lack of resources, I am not able to do so. With CloudGuard WAF, I have peace of mind, because most of the features are AI-based, and there is not much configuration that needs to be done on my side. Once set, I only go to CloudGuard WAF to check. I do not have to worry about signatures or updates. Everything is done perfectly, and I have a sense of peace because I know our applications are safe. It is very important for us that CloudGuard WAF protects our applications against threats without relying on signatures. That is definitely one of the key features I need.

Read full review

Baruch Peretz

Ciso at a government with 1,001-5,000 employees

Check Point CloudGuard WAF has helped our organization in time-to-market manners; the time to market is very short. Unlike other products we tested, which were a bit more complex, they would take a day's process. Check Point CloudGuard WAF only takes a few minutes of assimilation and then goes live. Its ability to protect our applications against threats without relying on signatures is one of the benefits I liked about this product. It does not depend on signatures. It looks at the anomaly in behavior. This is what we call a modern application. It saves us the headache of these updates and also the fact that the zero day usually has no signature. The ability to preemptively block zero day attacks and detect hidden anomalies is exactly its advantage. The zero day does not wait for a signature but looks at behavior. This is how a modern app should be. If you wait for the unknown, your application will be affected, but with this solution, even if you don't know where the attack could come from, the product protects it because of the behavior. That's the advantage. The assimilation time is short, about a few minutes only, so it is very simple for us and shortens the time of our functions. I'd say it has lowered 30% of our time. In a product like this, there are not many false positive cases, at least not in our type of implementations, which are not complex. When you do not hear about any false positives, it is a sign that the solution is doing its job.

Read full review

Charalampos Symeou

Information Technology - Infrastructure and Security at Cyprus Development Bank

This solution not require training. It has its own mechanisms, eliminating the need for training for our applications. The learning curve is quick. It provides security for our services to customers. As a financial institution, we provide security to our customers and products. The solution preemptively blocks zero-day attacks and detects hidden anomalies effectively. The solution reduced the cost to the company when considering that we,with a previous solution, spent many hours on configurations. It reduced our false positive rate significantly - by 90%.

Read full review

Check Point CloudGuard WAF mindshare

Product category:

As of June 2025, the mindshare of Check Point CloudGuard WAF in the Application Security Tools category stands at 0.1%, up from 0.1% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Application Security Tools

PeerResearch reports based on Check Point CloudGuard WAF reviews

Type	Title	Date
Category	Application Security Tools	Jun 15, 2025	Download
Product	Reviews, tips, and advice from real users	Jun 15, 2025	Download
Comparison	Check Point CloudGuard WAF vs SonarQube Server (formerly SonarQube)	Jun 15, 2025	Download
Comparison	Check Point CloudGuard WAF vs Veracode	Jun 15, 2025	Download
Comparison	Check Point CloudGuard WAF vs Checkmarx One	Jun 15, 2025	Download

Title	Rating	Mindshare	Recommending
SonarQube Server (formerly SonarQube)	4.0	23.5%	81%	116 interviews Add to research
Checkmarx One	3.8	10.0%	87%	71 interviews Add to research

Valuable Features

Check Point CloudGuard WAF's most valuable features include advanced intrusion prevention, automated security with AI-driven behavior analysis, seamless API integration, easy deployment, and comprehensive threat prevention. It excels in low false positive rates, cost-effectiveness, and robust monitoring capabilities. The tool provides significant security enhancements like real-time threat detection and integration with cloud environments, ensuring data protection and compliance. Automated policy management and logging enable enhanced visibility and threat mitigation, allowing organizations to maintain regulatory compliance efficiently.

"The integration with other Microsoft products, especially Visual Studio, is seamless."
"Check Point CloudGuard WAF offers comprehensive monitoring and alerting for my entire VMware virtual environment."
"Overall, it's a good solution, and it fulfills all our core purposes, providing complete visibility and security."

Room for Improvement

Check Point CloudGuard WAF needs improvements in areas such as cost reduction, documentation clarity, user interface simplification, and better integration with third-party tools. Technical support and latency in the management portal also require enhancement. More robust customization options and compatibility with mobile applications could increase usability. Enhanced language support and real-time threat detection features are also desired. Addressing these areas could help organizations utilize CloudGuard WAF with greater efficiency and satisfaction.

"Check Point CloudGuard WAF could benefit from an enhanced user interface as it can be a bit complex and overwhelming for new users."
"The UI interface needs improvement because there are a number of bugs. Integration with the SIEM platform is currently one of the key challenges that need to be addressed."
"I would like it to be able to analyze more complex functions, although I did not examine the case study of more complex implementations. Things like forum fields, etc seem to need a little more focused protection of the fields scheme validation."

ROI

Organizations report a return on investment of over 70%, with some even experiencing close to 90%. The cost-effectiveness is evident from reduced server management needs and improved security. Many highlight long-term benefits such as cost reduction and enhanced application protection. While not all have concrete figures, there is optimism regarding improved budget management and risk reduction. Some emphasize time savings in cloud migration and better management efficiencies with Check Point CloudGuard WAF.

Pricing

Check Point CloudGuard WAF's pricing is generally competitive within the market, despite some users noting higher costs than specific alternatives. Many organizations appreciate bundled packages that may reduce expenses, and the overall pricing is often seen as fair considering the extensive features offered. Some find the setup costs reasonable, while others highlight complexity in understanding pricing structures. Enterprises should evaluate potential licensing costs against organizational needs, as smaller businesses might find it expensive.

"The sales team or account managers from Check Point are top-notch. As I am using other products as well, my pricing was competitive compared to others."
"As Infiniti customers, the pricing is manageable, as we have allowances dedicated to each Check Point product. The price is not as high compared to other options I have dealt with in the past."
"The base solution costs approximately 30,000 euros, with an additional 2,000 euros per year for licenses and support."

Popular Use Cases

Check Point CloudGuard WAF is utilized for securing web applications and APIs, intercepting internet traffic to block malicious activities, and protecting against vulnerabilities like SQL injections and cross-site scripting. It aids businesses in safeguarding IT assets, optimizing resources, and ensuring compliance within multi-cloud environments such as AWS and Azure. Organizations leverage it to maintain robust security practices, scale operations, and manage cloud-based workloads efficiently. Businesses implement it to protect sensitive data across diverse IT ecosystems.

Service and Support

Check Point CloudGuard WAF's service and support receive mixed feedback. Some users praise it for being responsive, knowledgeable, and effective, with ratings up to ten out of ten. Others mention deficiencies, particularly slow resolutions and need for improvement, rating it lower. Users appreciate the dedication and proactive assistance during implementation projects. However, some identify room for enhancement, especially during escalations and licensing issues. Responses are prompt with positive experiences despite noted delays.

Deployment

Check Point CloudGuard WAF's initial setup is often straightforward with simple configuration. Most describe it as easy to implement with minimal difficulties if users possess prior knowledge or training. However, complexity may arise during configuration without enough expertise. Deployments typically require a small team and are facilitated by vendor assistance, enhancing the setup process. Transitioning to a SaaS model and utilizing APIs can simplify the experience, generally resulting in a smooth implementation.

Scalability

Check Point CloudGuard WAF offers excellent scalability, accommodating different work environments and cloud platforms. Users appreciate its adaptability, allowing seamless scaling up or down based on traffic needs without significant performance issues. Licensing flexibility based on traffic rather than applications simplifies management. Various teams benefit from its scalable infrastructure, with positive ratings for scalability. As a SaaS model, it excels in providing the necessary resources for expanding usage, receiving high praise from its diverse user base.

Stability

Check Point CloudGuard WAF is praised for its stability, with users noting minimal downtimes and robust performance. Some experience interruptions related to updates or license renewals but find these resolved quickly. Users often rate it around nine out of ten for stability, citing reliable service that meets high expectations. Logging or crashing issues are rare, allowing it to support critical services efficiently, contributing to its reputation as a strong performer in stability.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Check Point CloudGuard WAF Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

21%

Financial Services Firm

12%

Manufacturing Company

10%

Government

Healthcare Company

Comms Service Provider

Security Firm

Educational Organization

Outsourcing Company

Construction Company

University

Recruiting/Hr Firm

Logistics Company

Transportation Company

Performing Arts

Retailer

Energy/Utilities Company

Non Profit

Hospitality Company

Media Company

Wholesaler/Distributor

Legal Firm

Compare Check Point CloudGuard WAF with alternative products

Learn more about Check Point CloudGuard WAF

CloudGuard WAF offers preemptive protection against vulnerabilities by using machine learning to identify and block zero-day threats like Log4Shell and Spring4Shell. It provides precise detection capabilities, minimizing the need for constant fine-tuning and reducing false positives. Designed for cloud-native environments, CloudGuard WAF integrates seamlessly with CI/CD pipelines, supporting automated deployment and configuration through infrastructure as code (IaC) or APIs.

Key Features of CloudGuard WAF:

ML-Based Threat Prevention: Stops application-layer attacks, including those listed in the OWASP Top 10, with minimal tuning and no reliance on signature updates.
API Discovery and Security: Identifies and secures APIs, preventing misuse and enforcing API schemas to protect against unauthorized access.
Bot and DDoS Prevention: Detects and mitigates automated attacks that can disrupt services or degrade customer experiences.
Intrusion Prevention (IPS): Provides protection against over 2,800 web-related CVEs using Check Point’s award-winning IPS technology.

Benefits of CloudGuard WAF:

Zero-Day Protection: Mitigates risks from newly discovered vulnerabilities without waiting for signature updates.
Reduced Operational Overhead: Eliminates the need for constant manual tuning and exception handling, simplifying security management.
Comprehensive API Security: Enhances control over your attack surface by discovering and securing all APIs, including shadow, rogue, and deprecated endpoints.
Fast and Easy Deployment: Deployable within minutes via WAF as a Service (WAFaaS), requiring only a one-time DNS configuration for immediate protection.

CloudGuard WAF is particularly suitable for organizations using modern, cloud-based architectures that require robust, automated security measures for both applications and APIs. Its capabilities are valuable for industries that handle sensitive data, such as finance or healthcare, where compliance and data protection are critical. Pricing and support are typically customized to the specific needs and scale of the deployment, with options for continuous updates and maintenance through Check Point's managed services.

CloudGuard WAF by Check Point provides advanced, AI-driven protection for web applications and APIs, offering automated, precise threat prevention and easy integration with cloud-native environments, ensuring robust security without the need for extensive manual configuration.

Check Point CloudGuard WAF was previously known as Check Point CloudGuard Application Security, CloudGuard Application Security, CloudGuard AppSec.