Check Point CloudGuard CNAPP Reviews

Name: Check Point CloudGuard CNAPP
Brand: Check Point Software Technologies
Rating: 4.3 (72 reviews)

Vendor: Check Point Software Technologies

4.3 out of 5

72 reviews
94% willing to recommend

What is Check Point CloudGuard CNAPP?

Check Point CloudGuard CNAPP offers comprehensive cloud security with features like dynamic access control, asset protection, and compliance checks, tailored for organizations seeking enhanced governance across AWS, Azure, and GCP platforms.

Get the Check Point CloudGuard CNAPP Buyer's Guide and find out what your peers are saying about Check Point CloudGuard CNAPP, Cloudflare, Wiz and more!

Check Point CloudGuard CNAPP is the #5 ranked solution in Cloud Workload Protection Platforms, #5 ranked solution in top Cloud Security Posture Management (CSPM) solutions, #5 ranked solution in top Cloud-Native Application Protection Platforms (CNAPP) solutions, #6 ranked solution in top Data Security Posture Management (DSPM) solutions, #6 ranked solution in top Compliance Management solutions, #9 ranked solution in top Vulnerability Management solutions, #9 ranked solution in best Cloud Security companies, and #10 ranked solution in Container Security Solutions. PeerSpot users give Check Point CloudGuard CNAPP an average rating of 8.6 out of 10. Check Point CloudGuard CNAPP is most commonly compared to Cloudflare: Check Point CloudGuard CNAPP vs Cloudflare. Check Point CloudGuard CNAPP is popular among the large enterprise segment, accounting for 59% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 12% of all views.

Buyer's Guide

Check Point CloudGuard CNAPP

August 2025

Get the report

Helped 865,140 peers since 2012

Featured Check Point CloudGuard CNAPP reviews

Bart Coddens

Cloud Engineer at Cloudar

The compliance is well executed, and the CDR is evolving, with both progressing well. We use the CloudGuard CNAPP CloudGuard Security Posture Management capabilities. It's good for identifying misconfiguration. You have a a variety of rulesets that you can apply. So you can choose on depending on which on which industry standard that you are following. And you can really adapt it towards your environment, so you can mix and match what you need and really come to a more secure cloud environment. The effectiveness of its cloud security posture management for providing compliance rule sets and security best practices has been good. You can define KPIs in CNAPP. You can say: "this is the percentage that we want to work towards." And you can see your progress and say, "okay, at the beginning of the month, we are we are at 60%. And at the end of the year, we are there 80% compliance." You can do that. And you can really monitor it. The cloud security posture management identify the risks that are the most critical to our business. We can define certain key assets that are your crown jewels. And whenever something hits on these crown jewels, you get a very high score. So you can really fine tune towards protecting your risk based assets in the cloud. It also lowered the amount of time it takes when identifying of the most critical risks. If I would do that manually, it would take me ages. So when I have a fine tuned rule set that I that I apply upon all my workloads, I do have automatic identification of every resource. The time savings are indefinite. The CloudGuard CNAPP visibility into CloudGuard logs for simplifying incident investigation is very good. It can reach CloudGuard VPC flow logs and GoToKey events, and it can also look at Azure activity logs. So you can have multi cloud capability, CDR, and you have different rule sets that are quite good. So far, it's excellent. The CDR helps detect anomalous behavior and respond to threats before they become an issue. We had we had some third party products that were using that was not properly configured. CDR detected this when it was doing certain certain scans. We updated the role towards the policy that that CDR provided, and it really helped. The events went away.

Read full review

GeorgeGeorgiou2

Head DB Management & Systems Support at a financial services firm with 51-200 employees

It offers good detection. This capability allows us to effectively manage compliance. It helps us find misconfiguration. We use it to try to find possible storage accounts that may be misused or other misconfigurations. The effectiveness of its cloud security posture management is good. It's really helpful for us and allows us to comply with various standards. It helps our company identify risks that are most critical to our business. It not only saves us time, it provides us with the visibility we need to manage the cloud.

Read full review

Yokesh Mani

Deputy Manager at Computer Age Management Services Pvt. Ltd.

We like the GSL Builder feature. When you're running a security operations center, you spend a lot of time monitoring endpoint activity to ensure there is no malicious traffic or anonymous access in the environment. The GSL Builder is helpful for deep investigations of a particular reason for an incident. You can use it to get more information. We have more than 30 AWS accounts and use more than 16 versions with some different tenants. I don't want to turn on each enrollment and app one at a time in the application. With GSL Builder, I can select multiple accounts from one place and execute the commands. I can see the results of which entities passed and failed. It's easy to write custom rules and policies. I have limited coding knowledge, but I can make policies from inside the UI. It will show what services are available in the cloud provider, and I can go through and check the ones I need. It requires no scripting knowledge. If you have experience in the industry, you can immediately learn GSL Builder and adapt it. Auto-remediation is a module you can enable at the enrollment level. It detects and fixes human errors or misconfigurations. For example, we can't create a bucket that is exposed to the internet for compliance reasons. CloudGuard can prevent that bucket from being created, ensuring compliance. With effective risk management, we can identify every asset and assign a score to each network violation or process. We will flag the most critical assets and bring them to private subnets. There's also a graph, which is useful if we need to explain things to developers and administrators.

Read full review

Check Point CloudGuard CNAPP mindshare

Product category:

As of August 2025, the mindshare of Check Point CloudGuard CNAPP in the Vulnerability Management category stands at 1.5%, up from 1.4% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Vulnerability Management

PeerResearch reports based on Check Point CloudGuard CNAPP reviews

Type	Title	Date
Category	Vulnerability Management	Aug 17, 2025	Download
Product	Reviews, tips, and advice from real users	Aug 17, 2025	Download
Comparison	Check Point CloudGuard CNAPP vs Tenable Nessus	Aug 17, 2025	Download
Comparison	Check Point CloudGuard CNAPP vs Qualys VMDR	Aug 17, 2025	Download
Comparison	Check Point CloudGuard CNAPP vs Wiz	Aug 17, 2025	Download

Title	Rating	Mindshare	Recommending
Cloudflare	4.3	N/A	96%	76 interviews Add to research
Wiz	4.5	11.7%	95%	22 interviews Add to research

Valuable Features

Check Point CloudGuard CNAPP offers critical features like centralized firewall management, real-time cloud compliance monitoring, IAM control, Compliance Engine, and threat intelligence integration. Its visibility into security configurations across environments helps teams manage and mitigate risks effectively. Auto-remediation and compliance reporting are highly valued, and the intuitive user interface enhances user experience. These features collectively streamline cloud security operations, ensuring adherence to regulations and efficient protection against vulnerabilities and threats.

"I value the comfort and the ability to receive proper insights almost hands-off."
"The CDR helps detect anomalous behavior and respond to threats before they become an issue."
"My overall product rating is ten out of ten."

Room for Improvement

Check Point CloudGuard CNAPP users pointed out issues with the user interface, indicating it could be more user-friendly, unified, and responsive. Integration with third-party tools and systems is also needed according to users, alongside enhancements in automation and threat data management. Users express a desire for better policy validation, advanced encryption, improved documentation, and support, and reduced costs. There's a call for enhanced automation, reporting, and compliance checks.

"The user interface needs work. Sometimes, it is a transition from the old tool to the new CNAPP Two that I currently have, and remnants of the old environment can still be detected."
"It feels somewhat fractured to me. I haven't grasped all the parts yet, and better integration would make CNAPP most valuable."
"The user interface needs work."

ROI

The return on investment for Check Point CloudGuard CNAPP varies across organizations. Many report significant time savings and reduced need for manual intervention in cloud environments. Users find that it reduces the number of staff needed for compliance and security tasks. Decreasing risks and enhancing infrastructure security, integration with CI/CD pipelines helps identify vulnerabilities early. Although exact ROI figures are challenging to measure, users often see noticeable improvements in efficiency and cost avoidance.

Pricing

Enterprise buyers evaluating Check Point CloudGuard CNAPP should note its competitive pricing, with options for annual or hourly licensing. Some users found it cost-effective, especially with proper forecasting of device numbers, while others mentioned it as expensive, particularly when scaling. The licensing model, based on asset count, offers transparency without hidden charges. Setup costs are typically low and straightforward. Partner involvement can aid in managing costs and ensuring the right solutions fit organizational needs.

"Its price is very fair."
"The licensing part still needs some work. The issue that I have is that we do not use all the services in the cloud, but sometimes, CloudGuard identifies them as an asset."
"We have the enterprise-level license and we renew it annually because it is worth the cost."

Popular Use Cases

Check Point CloudGuard CNAPP is primarily used for managing security across multiple cloud platforms, including AWS and Azure. Users employ it for cloud security posture management, workload protection, compliance checks, and threat detection. It provides centralized visibility, real-time alerts, and automatic remediation for security issues. The tool also facilitates the enforcement and management of security policies and user access, ensuring secure cloud environments and preventing vulnerabilities in cloud-native applications.

Service and Support

Check Point CloudGuard CNAPP's customer service and support are highly responsive and reliable. Users often find the support team knowledgeable and capable of addressing queries promptly. While most agree support is excellent, some believe improvements are needed in first-level support and documentation. Premium support clients report timely responses and effective assistance. Experiences vary, with some facing delays in attention, but many appreciate having dedicated support contacts for assistance.

Deployment

Check Point CloudGuard CNAPP's initial setup is generally straightforward and quick, although some organizations encounter challenges based on their specific environments and integration needs. Deployment times vary, with some achieving setup in minutes and others taking weeks due to configuration and tuning requirements. CloudGuard CNAPP's cloud-based nature simplifies installation, but users often need training to fully utilize its features. Successful deployment often involves collaboration between security teams and cloud administrators across different cloud platforms.

Scalability

Users consistently express satisfaction with Check Point CloudGuard CNAPP's scalability. Many appreciate its ability to accommodate various project sizes and complex environments. Cost and licensing considerations are notable, though they generally find the platform to be reliable and efficient. Integration with diverse cloud and security systems is seamless. Some mention that scaling requires thoughtful asset management and planning. Onboarding processes might need refinement, but users feel confident in expanding its utilization within their infrastructures.

Stability

Check Point CloudGuard CNAPP demonstrates exceptional stability. Many users observe its rock-solid performance without outages or downtime, rating it highly. While minor latency issues and occasional false positives are reported, its reliability remains strong among users. It integrates seamlessly into different environments, offering consistent performance and managing cloud workloads effortlessly. Some users need additional clarity for certain functionalities, but its steady performance meets expectations.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Check Point CloudGuard CNAPP Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

12%

Financial Services Firm

11%

Manufacturing Company

Educational Organization

Government

Retailer

Comms Service Provider

Insurance Company

Healthcare Company

University

Security Firm

Performing Arts

Construction Company

Outsourcing Company

Transportation Company

Non Profit

Real Estate/Law Firm

Wholesaler/Distributor

Energy/Utilities Company

Media Company

Legal Firm

Hospitality Company

Individual & Family Service

Logistics Company

Consumer Goods Company

Recreational Facilities/Services Company

Marketing Services Firm

Recruiting/Hr Firm

Engineering Company

Venture Capital & Private Equity Firm

Compare Check Point CloudGuard CNAPP with alternative products

Learn more about Check Point CloudGuard CNAPP

Check Point CloudGuard CNAPP provides robust capabilities, including centralized firewall management, IAM scanning, and real-time visibility. Its strengths lie in predictive visualization, threat intelligence, and auto-remediation, making it a valuable tool for risk mitigation and compliance management. The platform's integration and responsiveness enhance cloud security, ensuring alignment with industry standards and effective threat protection.

What are the key features of Check Point CloudGuard CNAPP?

Dynamic Access Control: Enables granular security permissions for cloud resources.
Asset Protection: Safeguards cloud assets from unauthorized access and threats.
Compliance Checks: Ensures alignment with industry regulations like PCI DSS and SOC 2.
Centralized Firewall Management: Simplifies firewall rule configuration across cloud environments.
IAM Scanning: Audits and secures identity and access management configurations.
Real-Time Visibility: Provides insights into cloud environments for proactive threat detection.

What benefits and ROI should you expect from Check Point CloudGuard CNAPP?

Threat Intelligence: Identifies and mitigates potential risks before exploitation.
Auto-Remediation: Automates responses to security incidents, reducing manual intervention.
Intuitive Interface: Simplifies management and enhances operational efficiency.
Posture Management: Maintains strong security posture through continuous assessment.

Organizations in finance, healthcare, and retail frequently implement Check Point CloudGuard CNAPP for compliance and security across cloud environments. It assists with workload protection, threat detection, and regulatory obligation fulfillment, proving effective for securing applications and monitoring API interactions.

Check Point CloudGuard CNAPP was previously known as Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence.