What is our primary use case?
Our primary use case for Check Point CloudGuard CNAPP is for securing our multi-cloud environment, AWS, Azure, by providing continuous posture management, threat detection, and compliance monitoring. We use it to identify misconfigurations, enforce security best practices, and monitor cloud workloads in real-time. It also helps us with vulnerability scanning and keeping our environment compliant to frameworks such as CIS, GDPR, etc.
What is most valuable?
Check Point CloudGuard CNAPP flagged a misconfiguration in our AWS S3 bucket that had overly permissive access settings. That configuration could have exposed our sensitive data to the public internet. The platform not only identified the issue but also provided remediation that our team was able to apply immediately. This prevented a potential data exposure.
Check Point CloudGuard CNAPP offers a unified, modular platform that combines CSPM, CWPP, CIEM, code security, and cloud detection and response. The agentless workload posture, real-time threat detection and response, multi-cloud coverage and visibility, compliance automation, and one-click remediations stand out as its best features.
I find myself relying on the risk management engine and prioritization the most day-to-day. In any cloud environment, you are flooded with findings, misconfigurations, vulnerabilities, and compliance gaps. Without prioritization, it is overwhelming for our team to take care of the posture. CloudGuard's risk scoring helps us cut through incidents. This makes remediation faster and focused instead of wasting time checking every alert. We get to fix the issues that pose real business risks.
Check Point CloudGuard CNAPP has positively impacted our organization at a significant level. We get greater visibility and control across all our cloud environments. Some biggest benefits we have seen are faster detection and remediation of misconfigurations, improved compliance posture, reduced risk exposure, operational efficiency, and cost savings. Overall, it has made our cloud environment more secure, compliant, and easier to manage while freeing up our teams to focus on projects instead of chasing alerts.
What needs improvement?
Areas of improvement for Check Point CloudGuard CNAPP can be the UI navigation. The dashboard is feature-rich, but it can sometimes feel overwhelming. A more streamlined or customizable view would help teams focus on the highest priority risks more quickly. While it integrates with AWS and GCP, deeper integration with DevOps and third-party SIEM tools could make workflows even smoother. For first-time users, the documentation could be more intuitive or hands-on.
For how long have I used the solution?
Check Point CloudGuard CNAPP is stable.
What do I think about the stability of the solution?
Check Point CloudGuard CNAPP is stable.
What do I think about the scalability of the solution?
Check Point CloudGuard CNAPP scales efficiently in the multi-cloud environment. We have expanded our usage from a few accounts to two dozen across AWS and
Azure without performance issues.
How are customer service and support?
Customer support for Check Point CloudGuard CNAPP has been responsive and knowledgeable.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
I previously used different solutions, specifically native cloud security tools such as AWS Security Hub and Azure Security Center with manual compliance checks. While they provided some visibility, they lacked a unified multi-cloud view and deep threat prevention capabilities. We switched to Check Point CloudGuard CNAPP because it consolidated compliance, posture management, and threat protection, reducing tool sprawl and giving us stronger coverage across AWS and GCP.
What was our ROI?
We have seen measurable outcomes since using Check Point CloudGuard CNAPP, with time saving being a significant outcome. We reduced manual compliance checks by about 40 to 50%, saving our team 10 to 12 hours per week. The compliance has improved as our overall compliance score against CIS benchmark has improved from around 72 to 92% within the first three months of adoption. We also saw a drop in recurring misconfigurations after enabling continuous posture management and automated guardrails.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing, setup cost, and licensing is that the pricing model is flexible and consumption-based, which makes it easier to align with our cloud. The setup cost was moderate, not too heavy. In terms of ROI, we can see time savings for audit preparation of at least 30-40%.
What other advice do I have?
I would rate Check Point CloudGuard CNAPP an eight out of ten, because it is powerful and reliable, but still has room for polish.
I provided this rating because it delivers strong visibility, compliance, and misconfiguration detection, but there are still areas that could be refined such as complex UI navigation, integration gaps, and alert fatigue.
If you are considering Check Point CloudGuard CNAPP, start by clearly mapping out your cloud environments and compliance needs. The platform is effective for leveraging single visibility across AWS, Azure, GCP. Ensure you integrate all accounts early on. Take time to configure policies to match your organization's compliance framework such as CIS, GDPR, PCI. This saves a lot of effort later.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner