Check Point CloudGuard WAF Reviews

Name: Check Point CloudGuard WAF
Brand: Check Point Software Technologies
Rating: 4.4 (46 reviews)

Vendor: Check Point Software Technologies

4.4 out of 5

46 reviews
100% willing to recommend

What is Check Point CloudGuard WAF?

Check Point CloudGuard WAF (Web Application Firewall) is a cloud-native security solution designed to protect web applications and APIs from known and unknown threats. It employs contextual AI and machine learning to prevent zero-day attacks without relying on traditional signature-based detection methods, ensuring that applications remain secure even as new threats emerge.

Get the Check Point CloudGuard WAF Buyer's Guide and find out what your peers are saying about Check Point CloudGuard WAF, SonarQube Server (formerly SonarQube), Checkmarx One and more!

Check Point CloudGuard WAF is the #8 ranked solution in application security solutions and #13 ranked solution in top Web Application Firewalls. PeerSpot users give Check Point CloudGuard WAF an average rating of 8.8 out of 10. Check Point CloudGuard WAF is most commonly compared to SonarQube Server (formerly SonarQube): Check Point CloudGuard WAF vs SonarQube Server (formerly SonarQube). Check Point CloudGuard WAF is popular among the large enterprise segment, accounting for 56% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 16% of all views.

Buyer's Guide

Check Point CloudGuard WAF

April 2025

Get the report

Helped 849,686 peers since 2012

Featured Check Point CloudGuard WAF reviews

Dialungana Malungo

Principal Cybersecurity Specialist at Unitel S.A.

CloudGuard WAF is a very straightforward solution. I do not have to worry about signatures. Most of the solutions that are out there are mainly based on signatures, and I have to do a lot of maintenance to get the signature updates, and sometimes, due to a lack of resources, I am not able to do so. With CloudGuard WAF, I have peace of mind, because most of the features are AI-based, and there is not much configuration that needs to be done on my side. Once set, I only go to CloudGuard WAF to check. I do not have to worry about signatures or updates. Everything is done perfectly, and I have a sense of peace because I know our applications are safe. It is very important for us that CloudGuard WAF protects our applications against threats without relying on signatures. That is definitely one of the key features I need.

Read full review

Rui Dias

Sysadmin at a government with 501-1,000 employees

The Check Point WAF gives me a view that I did not have that occurs on the web servers. It allows me to show results and reports to demonstrate the attacks, the number of attacks, and prevention measures. It protects against threats without relying on signatures. The zero-day attacks could be bad. Without this, we wouldn't know al the attacks we're getting. It allows us to save time manually analyzing on the web servers. It frees us up. It helps against zero-day attacks and protects against anomalies. It's one of the factors that made us choose this solution.

Read full review

Charalampos Symeou

Information Technology - Infrastructure and Security at Cyprus Development Bank

This solution not require training. It has its own mechanisms, eliminating the need for training for our applications. The learning curve is quick. It provides security for our services to customers. As a financial institution, we provide security to our customers and products. The solution preemptively blocks zero-day attacks and detects hidden anomalies effectively. The solution reduced the cost to the company when considering that we,with a previous solution, spent many hours on configurations. It reduced our false positive rate significantly - by 90%.

Read full review

Check Point CloudGuard WAF mindshare

Product category:

As of May 2025, the mindshare of Check Point CloudGuard WAF in the Application Security Tools category stands at 0.1%, up from 0.1% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Application Security Tools

PeerResearch reports based on Check Point CloudGuard WAF reviews

Type	Title	Date
Category	Application Security Tools	May 1, 2025	Download
Product	Reviews, tips, and advice from real users	May 1, 2025	Download
Comparison	Check Point CloudGuard WAF vs SonarQube Server (formerly SonarQube)	May 1, 2025	Download
Comparison	Check Point CloudGuard WAF vs Veracode	May 1, 2025	Download
Comparison	Check Point CloudGuard WAF vs Checkmarx One	May 1, 2025	Download

Title	Rating	Mindshare	Recommending
SonarQube Server (formerly SonarQube)	4.0	24.5%	81%	114 interviews Add to research
Checkmarx One	3.8	10.3%	87%	70 interviews Add to research

Valuable Features

Check Point CloudGuard WAF offers powerful scalability and seamless API integration, enhancing IT operations without complexity. Its AI-driven mechanisms provide advanced intrusion prevention and threat detection. It supports compliance with regulations like PCI-DSS. With minimal manual rule adjustments, it reduces false positives and costs of ownership. Organizations benefit from real-time logging, comprehensive visibility in cloud environments, and robust protection against diverse security threats, including zero-day attacks, without relying on signatures.

"The integration with other Microsoft products, especially Visual Studio, is seamless."
"Check Point CloudGuard WAF offers comprehensive monitoring and alerting for my entire VMware virtual environment."
"Overall, it's a good solution, and it fulfills all our core purposes, providing complete visibility and security."

Room for Improvement

Check Point CloudGuard WAF requires enhancements in latency issues and support quality. Cost and pricing strategies need reconsideration, alongside improving documentation for ease of use. Customization features and integration with other technologies could be more simplified. Real-time threat monitoring and reporting accuracy are areas needing attention. Enhanced mobile application protection and an improved user interface would be beneficial. Reducing the learning curve and streamlining the configuration process are also important.

"Check Point CloudGuard WAF could benefit from an enhanced user interface as it can be a bit complex and overwhelming for new users."
"The UI interface needs improvement because there are a number of bugs. Integration with the SIEM platform is currently one of the key challenges that need to be addressed."
"I would like it to be able to analyze more complex functions, although I did not examine the case study of more complex implementations. Things like forum fields, etc seem to need a little more focused protection of the fields scheme validation."

ROI

Check Point CloudGuard WAF has delivered impressive ROI, with percentages ranging from 40% to over 90%. Security efficiency has improved, leading to productivity boosts and cost reduction by consolidating tools. Companies have observed significant time savings and decreased incident response times, enhancing their security measures. Organizations appreciate the improved application security and long-term profitability. Many recognize ROI advantages like quick market entry and reduced operational burden. Some have yet to measure exact ROI but foresee future benefits.

Pricing

Enterprise users find Check Point CloudGuard WAF's pricing competitive yet variable. Some report it as reasonable and fair for the features and support offered, while others see it as expensive compared to competitors like FortiWeb and Azure WAF. Discounts and flexible licensing are beneficial, especially for entities with large-scale deployments. Setup costs are straightforward, and overall perceived value aligns with product capabilities. Cost considerations depend on organizational budget and needs.

"The sales team or account managers from Check Point are top-notch. As I am using other products as well, my pricing was competitive compared to others."
"As Infiniti customers, the pricing is manageable, as we have allowances dedicated to each Check Point product. The price is not as high compared to other options I have dealt with in the past."
"The base solution costs approximately 30,000 euros, with an additional 2,000 euros per year for licenses and support."

Popular Use Cases

Organizations primarily use Check Point CloudGuard WAF for securing web applications and APIs. It protects against threats like SQL injections, cross-site scripting, and unauthorized access. Its AI capabilities enhance security policies, and automation streamlines processes. Many entities utilize it for cloud-based network protection, safeguarding infrastructure across multiple environments like Azure and AWS. They appreciate its ability to integrate with various platforms, ensuring comprehensive protection and efficient security management for workloads and IT assets.

Service and Support

Customer service for Check Point CloudGuard WAF varies. Some report dedicated, efficient support, with prompt responses and knowledgeable staff, rating it high out of ten. Others experience delays and unresolved issues, emphasizing the need for improvement, especially in response times and problem-solving. Users collaborating with engineers find them helpful but note varying consistency. Despite some satisfaction, customer service requires enhancements to meet expectations universally.

Deployment

Check Point CloudGuard WAF’s initial setup is widely described as straightforward. Many users found the configuration simple, although complexities arise without extensive knowledge. Deployment often requires two to three personnel and can vary in time from a few hours to weeks. Assistance from vendors and third-party providers is common to ensure a smooth transition. While mostly intuitive, creating virtual machines and managing settings can add difficulty, especially in diverse cloud environments.

Scalability

Check Point CloudGuard WAF is highly scalable, with users noting its excellent performance in diverse environments. It effectively scales across multi-cloud platforms and adapts to various workloads. Many highlight its ease of scale-up based on traffic needs, without issues, and commend its functionality in SaaS environments. Users consistently rate its scalability positively, describing the experience as seamless and supported by Check Point’s responsive team.

Stability

Check Point CloudGuard WAF demonstrates exceptional stability, with users highlighting its robust, reliable performance. Many report no downtimes or errors, rating its stability highly. Several mention its capability to run uninterrupted across various devices and environments, providing peace of mind. While some note occasional issues, like lagging or license renewals, they are generally resolved quickly. Organizations, particularly those in finance, appreciate the minimized risks associated with potential downtime.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Check Point CloudGuard WAF Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

16%

Financial Services Firm

15%

Manufacturing Company

11%

Government

Comms Service Provider

Healthcare Company

Educational Organization

Security Firm

Logistics Company

Recruiting/Hr Firm

Construction Company

Transportation Company

University

Energy/Utilities Company

Retailer

Non Profit

Media Company

Hospitality Company

Outsourcing Company

Wholesaler/Distributor

Performing Arts

Real Estate/Law Firm

Leisure / Travel Company

Non Tech Company

Insurance Company

Compare Check Point CloudGuard WAF with alternative products

Learn more about Check Point CloudGuard WAF

CloudGuard WAF offers preemptive protection against vulnerabilities by using machine learning to identify and block zero-day threats like Log4Shell and Spring4Shell. It provides precise detection capabilities, minimizing the need for constant fine-tuning and reducing false positives. Designed for cloud-native environments, CloudGuard WAF integrates seamlessly with CI/CD pipelines, supporting automated deployment and configuration through infrastructure as code (IaC) or APIs.

Key Features of CloudGuard WAF:

ML-Based Threat Prevention: Stops application-layer attacks, including those listed in the OWASP Top 10, with minimal tuning and no reliance on signature updates.
API Discovery and Security: Identifies and secures APIs, preventing misuse and enforcing API schemas to protect against unauthorized access.
Bot and DDoS Prevention: Detects and mitigates automated attacks that can disrupt services or degrade customer experiences.
Intrusion Prevention (IPS): Provides protection against over 2,800 web-related CVEs using Check Point’s award-winning IPS technology.

Benefits of CloudGuard WAF:

Zero-Day Protection: Mitigates risks from newly discovered vulnerabilities without waiting for signature updates.
Reduced Operational Overhead: Eliminates the need for constant manual tuning and exception handling, simplifying security management.
Comprehensive API Security: Enhances control over your attack surface by discovering and securing all APIs, including shadow, rogue, and deprecated endpoints.
Fast and Easy Deployment: Deployable within minutes via WAF as a Service (WAFaaS), requiring only a one-time DNS configuration for immediate protection.

CloudGuard WAF is particularly suitable for organizations using modern, cloud-based architectures that require robust, automated security measures for both applications and APIs. Its capabilities are valuable for industries that handle sensitive data, such as finance or healthcare, where compliance and data protection are critical. Pricing and support are typically customized to the specific needs and scale of the deployment, with options for continuous updates and maintenance through Check Point's managed services.

CloudGuard WAF by Check Point provides advanced, AI-driven protection for web applications and APIs, offering automated, precise threat prevention and easy integration with cloud-native environments, ensuring robust security without the need for extensive manual configuration.

Check Point CloudGuard WAF was previously known as Check Point CloudGuard Application Security, CloudGuard Application Security, CloudGuard AppSec.