No more typing reviews! Try our Samantha, our new voice AI agent.

BMC Helix Automation Console vs Check Point Cloud Firewall (formerly CloudGuard Network Security) comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 13, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Ranking in Vulnerability Management
11th
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
43
Ranking in other categories
Container Security (12th), Cloud Workload Protection Platforms (CWPP) (8th), Cloud Security Posture Management (CSPM) (8th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (7th)
BMC Helix Automation Console
Ranking in Vulnerability Management
56th
Average Rating
7.6
Reviews Sentiment
7.5
Number of Reviews
2
Ranking in other categories
No ranking in other categories
Check Point Cloud Firewall ...
Ranking in Vulnerability Management
5th
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
241
Ranking in other categories
Firewalls (8th), Managed Security Services Providers (MSSP) (1st), Software Defined WAN (SD-WAN) Solutions (3rd), Cloud and Data Center Security (3rd), Container Security (7th), Cloud Workload Protection Platforms (CWPP) (5th), WAN Edge (3rd), Unified Threat Management (UTM) (4th), Cloud Security Posture Management (CSPM) (5th), Cloud-Native Application Protection Platforms (CNAPP) (5th), Data Security Posture Management (DSPM) (4th), Compliance Management (5th)
 

Mindshare comparison

As of August 2026, in the Vulnerability Management category, the mindshare of Qualys TotalCloud is 1.2%, up from 1.0% compared to the previous year. The mindshare of BMC Helix Automation Console is 0.9%, up from 0.2% compared to the previous year. The mindshare of Check Point Cloud Firewall (formerly CloudGuard Network Security) is 1.2%, down from 1.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management Mindshare Distribution
ProductMindshare (%)
Check Point Cloud Firewall (formerly CloudGuard Network Security)1.2%
Qualys TotalCloud1.2%
BMC Helix Automation Console0.9%
Other96.7%
Vulnerability Management
 

Featured Reviews

RO
IT Security Expert at Alior Bank S.A.
Unified risk scoring has improved our cloud visibility and simplifies remediation priorities
Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.
ShashiGupta - PeerSpot reviewer
Soo at a manufacturing company with 10,001+ employees
Reasonably Priced
In terms of improvement, the product could benefit from streamlining the implementation process, particularly regarding customization. Currently, the process involves navigating through multiple layers of custom and staging forms, which can be cumbersome and time-consuming. Another aspect to consider is the foundation data provided out of the box, particularly regarding categorization and its associated values. This foundational data may only sometimes meet the mark, as organizations often require more flexibility to tailor it to their needs. Discovering hardware, for instance, can lead to different category processing needs, with certain layers providing minimal benefits. The challenge lies in the inability to directly specify servers, hardware, software, and their respective details, highlighting a need for improvement in this area. As per the current state of the Helix product, it has seen some resolution to issues but still faces challenges when adding more attributes. It can lead to restrictions, particularly with the progressive view page, limiting flexibility in certain cases. While benefits can be gained in other aspects, such drawbacks are common. Improvements are necessary to enhance flexibility in this regard. Exploring alternative solutions like containerization or cloud services may offer opportunities for optimization, requiring careful consideration due to the complexity involved. I'm still determining the current strategy. While there have been improvements in the latest version, there's still a need for further enhancements in an extended version. Additionally, stakeholders, including manufacturing companies, emphasize the importance of fine-tuning performance for the Helix product. The search functionality remains problematic, often taking more than 15 seconds, undermining reliability.
reviewer2875401 - PeerSpot reviewer
Network Engineer at a outsourcing company with 10,001+ employees
Unified security policies have protected our hybrid network with deep, user-based controls
The main limitations of Check Point Cloud Firewall (formerly CloudGuard Network Security) are not in Check Point itself but in the cloud platforms on which it is deployed. Because not all clouds have L2 infrastructure, you cannot build a unified clustering system everywhere. As a result, the problem usually is not with Check Point, but with the cloud. The main problem with Check Point Cloud Firewall (formerly CloudGuard Network Security) is that it uses a separate thick client instead of a browser. A browser-based SmartConsole exists, but it still has a number of limitations, while the thick client, the so-called SmartConsole, often works unstably, freezes, and has to be restarted. I do not recommend using Check Point Cloud Firewall (formerly CloudGuard Network Security) as a VPN hub for site-to-site VPN because it is inconvenient to monitor the state of its tunnels, especially visually. It does not have a convenient snap-in and everything can be checked only via the console, which is very inconvenient. Check Point is not the most universal solution as a device that provides routing and administration capabilities in addition to security. It is an excellent firewall, but it has a number of limitations in terms of routing and in creating VPN sessions, especially in terms of displaying their states.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The dashboards are particularly valuable as they offer a comprehensive view of the environment, highlighting any misconfigurations."
"I found the initial setup user-friendly."
"Qualys TotalCloud's most valuable feature is its ability to link clusters of assets, providing a clear model of deployments, vulnerabilities, and statuses."
"I would definitely recommend it because it is easy to handle any cloud resources."
"Qualys TotalCloud's most valuable features are its cloud security posture management, Kubernetes, and container security capabilities."
"We were able to realize its benefits within 24 to 48 hours."
"The agent and agentless scanning in TotalCloud, particularly the FlexScan method, is incredibly valuable. With traditional scanning approaches, we had to give IP ranges and whitelist IPs. All that is now simplified. FlexScan requires minimal intervention, and after configuration, it automatically collects data and performs necessary scans."
"While automatic inventory detection upon connection is a helpful feature, a truly valuable capability would be assessing an environment's security posture against Azure and CIS best practices."
"It's reasonably priced."
"Takes reports from other vulnerabilities."
"In terms of scalability, I can only tell you my experience from our clients: I had Remedy installed, and then we installed Discovery, two months ago we installed Server Automation and we've now completed the installation with Vulnerability Management, and everything is inter-operational, it's all automated now, and our customers are happy."
"I love the work involved in maintaining and scaling security services and configurations across multiple public clouds using this solution, versus using native native cloud security controls. It is so much better. The different cloud platforms all have their own way that they handle a lot of the stuff that Dome9 handles. Even within their platform, they are in a lot of disparate places, e.g., in AWS, there are five different tools. You have to jump between them to get the same information that you can just pull in automatically on Dome9, which is just one platform. We are using multiple platforms, so that makes it even more complicated and time consuming if you had to just rely on them to get all of your information. Whereas, it's all just summarized and put together on the Dome9 end."
"It is able to bring visibility into that cloudy space where the security departments do not really see what is happening on the DevOps side. It brings visibility, security control, and standardization."
"The tool's most valuable feature is its management console."
"I can take proactive actions based on an alert without having to interact with the platform directly."
"The IPS, application and URL filtering, as well as Identity Awareness, are all very valuable features."
"Dome9 is a very good product for us as we are using a hybrid solution."
"It has an analytics service that does research for us."
"The solution provides me with unified security management across all environments."
 

Cons

"Their support could be improved."
"Overall, we are satisfied with it. However, the response part of the Cloud Detection and Response (CDR) module can be improved. It is not yet in place according to requirements; it is not completely available even though the module has been released."
"The cloud licensing unit system is unclear, especially since "units" aren't well-defined."
"I would like the ability to disable certain default built-in policies as they can be misleading when creating dashboards. That is the top one."
"In TotalCloud, I would suggest improvements in policy checks to cater to various inventory types like VPCs, subnets, S3 buckets, or IAMs. There is a lack of data segregation according to criticality or inventory."
"In a future release, I suggest that zero-day vulnerabilities should be predicted in advance using AI technologies. The system is not 100% secure yet, so proactive threat hunting could be enhanced to be more proactive than the current system."
"TotalCloud could improve the classification of vulnerabilities. Specifically, it could enhance the categorization of what aspects fall under patches resolved by OS or software updates and what pertains to configuration adjustments."
"I think Qualys TotalCloud needs to improve its handling of zero-day vulnerabilities and supply chain management because modern ransomware attacks not only target prime critical infrastructures but also the supply chain system."
"With BMC I'd like to see the ability to integrate with other software."
"In terms of improvement, the product could benefit from streamlining the implementation process, particularly regarding customization."
"No third-party applications or integrations with additional software solutions."
"This application can be more integrated with web application firewalls. Better integrations would provide more granularity, which would be helpful for focusing on the application itself and preventing attacks. It would be good to include the cross-domain search. If you have multiple firewalls that are managed on the same platform and you want to check who is using some particular objects or where a specific ID is being used, it should provide an option for this kind of search instead of having to check one by one on each firewall."
"Operations management is difficult in Check Point CloudGuard Cloud Network Security."
"The licensing structure is unclear, so a transparent and flexible licensing structure would be preferable."
"Despite using it for a long time, there are always new features. For example, just last week, I discovered a new feature that had been in the software for years yet it was not visible due to its placement behind multiple menus. Teaching sessions would be beneficial, yet it is our responsibility to learn, so we cannot entirely rely on Check Point."
"The initial deployment using the ARM template in Azure was straightforward, but migrating to Terraform added complexity, although we managed to make it work."
"I want the upgrades of their CloudGuard solution to major versions to be easier. We have had a few small hiccups. They have different types of cloud clusters called Geo Clusters, and those just cannot be upgraded past a certain point, which is a hurdle that we are currently experiencing."
"The convergence time between cluster members is still not perfect. It's far away from what we get in traditional appliances. If a company wants to move mission-critical applications for an environment to the cloud, it somehow has to accept that it could have downtime of up to 40 seconds, until cluster members switch virtual IP addresses between themselves and start accepting the traffic. That is a little bit too high in my opinion. It's not fully Check Point's fault, because it's a hybrid mechanism with AWS. The blame is 50/50."
"When rules change, it messes up the remediation. They haven't found a fix for that yet. The remediation rule goes into limbo. It's an architectural design flaw within their end compliance engine—a serious bug."
 

Pricing and Cost Advice

"While Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive and may soon be considered overpriced."
"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."
"TotalCloud's price is about right where I would expect it to be."
"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."
"Qualys TotalCloud offers cost-effective licensing flexibility."
"The cost is high, but it meets our organizational needs."
"Although Qualys TotalCloud is relatively expensive due to its unique automation features, its cost-effectiveness is rated an eight out of ten, with ten being the most costly."
"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."
Information not available
"My experience has been extremely positive. It was not a concern because I had an account team that fought for pricing for our company. They were not pushing me to professional services for certain help. I was instantly getting a CloudGuard architect to help us out."
"The pricing is tremendous and super cheap. It is shockingly cheap for what you get out of it. I am happy with that. I hope that doesn't get reported back and they increase the prices. I love the pricing and the licensing makes sense. It is just assets: The more stuff that you have, the more you pay."
"It is fairly priced, but it can be a little expensive from time to time."
"The license fee is high."
"The licensing and costs are straightforward, as they have a baseline of 100 workloads (number of instances) within one license with no additional nor hidden charges. If you want to have 200 workloads under Dome9, then you need to take out two licenses for that. Also, it does not have any impact on cloud billing, as data is shared using the API call. This is well within the limit of free API calls provided by the cloud provider."
"It is expensive."
"​They support either annual licensing or hourly. At the time of our last negotiation, it was either one or the other, you could not mix or match. I would have liked to mix/match. ​"
"The price is on the higher end."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
909,725 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
13%
Comms Service Provider
11%
Outsourcing Company
11%
Financial Services Firm
10%
Construction Company
22%
Financial Services Firm
17%
Comms Service Provider
15%
Insurance Company
6%
Construction Company
15%
Outsourcing Company
12%
Financial Services Firm
10%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business12
Midsize Enterprise5
Large Enterprise31
No data available
By reviewers
Company SizeCount
Small Business132
Midsize Enterprise55
Large Enterprise139
 

Questions from the Community

What needs improvement with Qualys TotalCloud?
To be totally honest, I do not have any best features because I have had a bad experience using this tool, especially...
What is your primary use case for Qualys TotalCloud?
My main use case for Qualys TotalCloud is vulnerability management and exposure management. I use this tool to evalua...
Ask a question
Earn 20 points
What is your experience regarding pricing and costs for Check Point CloudGuard Network Security?
Since we use a unified standard for using policies and modules in Check Point Cloud Firewall (formerly CloudGuard Net...
What needs improvement with Check Point CloudGuard Network Security?
The main limitations of Check Point Cloud Firewall (formerly CloudGuard Network Security) are not in Check Point itse...
What is your primary use case for Check Point CloudGuard Network Security?
Check Point Cloud Firewall (formerly CloudGuard Network Security) is the main manager that provides network security ...
 

Also Known As

Qualys TotalCloud with FlexScan
TrueSight Vulnerability Management, SecOps Response Service, BladeLogic Threat Director, BMC Helix Remediate
CloudGuard IaaS, Check Point vSEC, CloudGuard IaaS, Check Point Virtual Systems, Check Point CloudGuard Network Security, Check Point CloudGuard CNAPP
 

Overview

 

Sample Customers

Information Not Available
Online Business Systems
Physicians Choice Laboratory Services, Helvetica Insurance
Find out what your peers are saying about Wiz, Qualys, Tenable and others in Vulnerability Management. Updated: July 2026.
909,725 professionals have used our research since 2012.