Chainguard Containers vs Check Point Cloud Firewall (formerly CloudGuard Network Security) comparison

Chainguard Containers vs. Check Point Cloud Firewall (formerly CloudGuard Network Security)

Download the complete report

Helped 909,725 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Qualys TotalCloud

Mindshare comparison

As of August 2026, in the Container Security category, the mindshare of Qualys TotalCloud is 1.6%, up from 1.0% compared to the previous year. The mindshare of Chainguard Containers is 1.0%, up from 0.6% compared to the previous year. The mindshare of Check Point Cloud Firewall (formerly CloudGuard Network Security) is 2.8%, up from 1.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Container Security Mindshare Distribution
Product	Mindshare (%)
Check Point Cloud Firewall (formerly CloudGuard Network Security)	2.8%
Qualys TotalCloud	1.6%
Chainguard Containers	1.0%
Other	94.6%

Container Security

Featured Reviews

Robert Orłowski

IT Security Expert at Alior Bank S.A.

Unified risk scoring has improved our cloud visibility and simplifies remediation priorities

Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.

Read full review

ParthasarathyT

Senior Infrastructure Engineer at Publicis Sapient

Secures container builds, has simplified compliance audits and reduced vulnerabilities dramatically

The benefit of Chainguard Containers is that it makes development simpler. It makes the development team confident there will not be any bugs or vulnerabilities in the image they are using. It is mainly needed for vulnerabilities, SLAs, security audits, and SOC 2, ISO, and PCI compliance. The image includes SBOM, signature, and provenance metadata, which makes audits much easier. The best features Chainguard Containers offers include a reduced image size. It removes the shell and the package manager, resulting in a significantly smaller image size compared with a normal image. We can deploy production workloads directly without worrying about security concerns. If we want a strong supply chain for security, we will be using it. Many users are already tired of scanning alerts, so this will be a great thing. Removing the shell and package manager has positively impacted my team's workflow and deployment speed by making it quite user-friendly, where the developer can touch it without any hesitation. Chainguard Containers are built and pushed from non-patched binaries, with the packages compiled directly from the source. No dependencies or pre-built distro packages like Debian or Alpine are required, so there are no hidden vulnerabilities. The developer gains full control over what goes inside, and the image size is smaller with fewer vulnerabilities, in fact, zero. It has built-in processes like SBOM, which is Software Bill of Material generated. The image is cryptographically signed, and provenance is tracked, leading to faster patching, minimal footprint, and best supply chain control. Chainguard Containers has positively impacted my organization by reducing constant CVE fixing, resolving security versus DevOps conflicts, and minimizing compliance headaches. After implementing secured-by-default containers, there is less effort on fixing vulnerabilities, faster delivery, and better compliance. The impact on security teams includes a lower risk of attack, less panic during audits, and significantly fewer security noises. A specific outcome we have noted since implementing Chainguard Containers is that for a client who uses more than 200 containers, they previously received vulnerability warnings for every deployment. Once we implemented Chainguard Containers, the vulnerability ratio drastically decreased, from 100 to 30. Nearly 70% of the vulnerability checks have passed. Chainguard Containers are CVE-resistant, which is significant as CVEs represent Common Vulnerabilities and Exposures.

Read full review

reviewer2875401

Network Engineer at a outsourcing company with 10,001+ employees

Unified security policies have protected our hybrid network with deep, user-based controls

The main limitations of Check Point Cloud Firewall (formerly CloudGuard Network Security) are not in Check Point itself but in the cloud platforms on which it is deployed. Because not all clouds have L2 infrastructure, you cannot build a unified clustering system everywhere. As a result, the problem usually is not with Check Point, but with the cloud. The main problem with Check Point Cloud Firewall (formerly CloudGuard Network Security) is that it uses a separate thick client instead of a browser. A browser-based SmartConsole exists, but it still has a number of limitations, while the thick client, the so-called SmartConsole, often works unstably, freezes, and has to be restarted. I do not recommend using Check Point Cloud Firewall (formerly CloudGuard Network Security) as a VPN hub for site-to-site VPN because it is inconvenient to monitor the state of its tunnels, especially visually. It does not have a convenient snap-in and everything can be checked only via the console, which is very inconvenient. Check Point is not the most universal solution as a device that provides routing and administration capabilities in addition to security. It is an excellent firewall, but it has a number of limitations in terms of routing and in creating VPN sessions, especially in terms of displaying their states.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"In my opinion, this is the best tool."

"Qualys TotalCloud's most valuable features are its cloud security posture management, Kubernetes, and container security capabilities."

"The agent and agentless scanning in TotalCloud, particularly the FlexScan method, is incredibly valuable. With traditional scanning approaches, we had to give IP ranges and whitelist IPs. All that is now simplified. FlexScan requires minimal intervention, and after configuration, it automatically collects data and performs necessary scans."

"TotalCloud offers a comprehensive suite of features, including EDR, XDR, and TrueRisk, providing a centralized platform for managing vulnerabilities and security risks."

"I found the initial setup user-friendly."

"The most valuable feature is extensibility."

"I would rate Qualys TotalCloud ten out of ten."

"Qualys TotalCloud provides unified vulnerability and threat assessment for IaaS and SaaS and a single prioritized view of risk, which helps reduce my workload by not having to combine multiple sources."

More Qualys TotalCloud pros

"Chainguard Containers has positively impacted my organization by reducing constant CVE fixing, resolving security versus DevOps conflicts, and minimizing compliance headaches."

"Specific outcomes and metrics show that before this, every month there would be 15 to 20 vulnerabilities, but after switching to Chainguard Containers, there are now only one or maybe two vulnerabilities."

"Chainguard Containers has positively impacted my organization even during the proof of concept phase by improving our security posture."

"The best feature of Chainguard Containers is being distroless, and the main thing I liked about it is that they follow the SBOM process and the continuous rebuilds they were doing, and they were helping me to rapidly remediate the failures which were happening."

"We like the GSL Builder feature. When you're running a security operations center, you spend a lot of time monitoring endpoint activity to ensure there is no malicious traffic or anonymous access in the environment. The GSL Builder is helpful for deep investigations of a particular reason for an incident. You can use it to get more information."

"The most valuable feature is the automation and the APIs, making our life much easier for integration."

"Check Point CloudGuard Posture Management has created the best data management environment that can easily monitor workloads from the entire company networking system."

"The ease of deployment has been nice. It is like managing any of our on-prem firewalls."

"The feature that I value the most about Check Point CloudGuard CNAPP is the possibility of checking compliance with different standards. This compliance check can be performed for each subscription or service that we have on all the different cloud providers that we use."

"I give it a ten out of ten."

"Check Point CloudGuard Network Security has positively impacted our organization by improving our security posture; we have seen a sharp reduction in successful intrusion attacks because of its unified threat prevention, along with greater visibility and control."

"Workflows across the company ecosystem have can flow smoothly without experiencing any challenges."

More Check Point Cloud Firewall (formerly CloudGuard Network Security) pros

Cons

"Areas that need improvement in every solution include the remediation part. The remediation steps should be simple enough for everyone to understand."

"The price is very expensive, actually."

"It has been working very well, but it would be helpful if the dashboard could generate reports tailored to specific compliance needs. For example, in India, we have to comply with RBI and SEBI guidelines. It w"

"A feature improvement could be the inclusion of Windows OS support for container security, as it is currently only supported for Linux."

"I would like the ability to disable certain default built-in policies as they can be misleading when creating dashboards. That is the top one."

"TotalCloud could improve its scanning of niche devices like Wi-Fi dongles and USB modems because they are often untested. It covers everything else, like laptops, mobile devices, and Bluetooth IoT devices. They can improve on the small IoT devices because hackers and testers use these."

"There should be improvement from a dashboard perspective when collecting and showcasing data to lead management."

"The support process is inefficient due to the excessive number of replies required when submitting tickets."

More Qualys TotalCloud cons

"The biggest challenge in Chainguard Containers is that they provide minimal images, which can make troubleshooting difficult because common debugging tools are also not included."

"The accuracy and reliability of the output from Chainguard Containers are below average, but I still give it an average rating of 6.5 to 7 because of its capabilities and its functionality for a developer-friendly approach."

"Sometimes there are backend errors which we come across again and again, and there is a resolution, but there are pending tickets for it. That sucks sometimes."

"The only limitation or challenge that stood out during my evaluation of Chainguard Containers was the fact that it is primarily based on Alpine, which can be tricky to use in native Kubernetes environments, as we use Tecton primarily, which is a CI/CD pipeline that runs on native Kubernetes."

"Improvement is needed in the deployment models. Currently, I have deployed VMs and installed CloudGuard as if they were gateways. Having some as-a-service models would be great."

"I find troubleshooting a bit challenging with Check Point Cloud Firewall (formerly CloudGuard Network Security); one area needing improvement is log clarity, as sometimes policy installation takes longer than expected, and resolving cloud-native routing conflicts requires advanced knowledge due to the differences in how AWS and GCP operate."

"We want to be able to customize the solution more in order to meet the needs of our company."

"One feature of the product that I would like to enhance is the possibility to connect to vulnerability management platforms so that the issues that emerge from the scans can then be ingested directly into the vulnerability management process."

"When rules change, it messes up the remediation. They haven't found a fix for that yet. The remediation rule goes into limbo. It's an architectural design flaw within their end compliance engine—a serious bug."

"The reporting needs enhancement. Currently, we are not always aware of the gateways' status, like CPU and RAM usage."

"It should capture more information in metadata including communication detail. Also, Internal IP addresses should not be tracked as this might be having some compliance issues."

"I’d like to see more integration with third-party tools."

More Check Point Cloud Firewall (formerly CloudGuard Network Security) cons

Pricing and Cost Advice

"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."

"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."

"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."

"While Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive and may soon be considered overpriced."

"Qualys TotalCloud offers cost-effective licensing flexibility."

"Qualys TotalCloud is expensive."

"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."

"Its price seems higher compared to other tools, but it is worth it. If they could adjust the pricing and make it comparable with other tools, that would be great."

More Qualys TotalCloud pricing and cost advice

Information not available

"CloudGuard Network Security is not too cheap."

"Although I am not in sales and cannot comment extensively on pricing, it is known that Check Point’s licensing can be complex. However, it is a similar experience to other gateways and not particularly unique for cloud protection."

"Generally, it has been fine for me. I can find my way around the price list, and it is pretty simple."

"The tool's pricing is good. Customers want it to be cheap. I consider the pricing to be elastic. CloudGuard Network Security is perceived as cost-effective compared to using the built-in tools provided by the cloud."

"I would advise taking into account the existing number of devices and add a forecast of the number of devices to be added in the coming year or two, to obtain better pricing."

"The solution’s pricing is a little bit high."

"In the beginning, the price of Dome9 was cheap, whereas now it is not."

"They support either annual licensing or hourly. At the time of our last negotiation, it was either one or the other, you could not mix or match. I would have liked to mix/match. "

More Check Point Cloud Firewall (formerly CloudGuard Network Security) pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Container Security solutions are best for your needs.

See recommendations

909,725 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

13%

Comms Service Provider

11%

Outsourcing Company

11%

Financial Services Firm

10%

Manufacturing Company

16%

Outsourcing Company

Healthcare Company

University

Construction Company

15%

Outsourcing Company

12%

Financial Services Firm

10%

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	12
Midsize Enterprise	5
Large Enterprise	31

No data available

By reviewers
Company Size	Count
Small Business	132
Midsize Enterprise	55
Large Enterprise	139

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?

The price is very expensive, actually.

What needs improvement with Qualys TotalCloud?

To be totally honest, I do not have any best features because I have had a bad experience using this tool, especially...

What is your primary use case for Qualys TotalCloud?

My main use case for Qualys TotalCloud is vulnerability management and exposure management. I use this tool to evalua...

What is your experience regarding pricing and costs for Chainguard Containers?

My experience with pricing, setup cost, and licensing is that while I work on implementation and do not manage billin...

What needs improvement with Chainguard Containers?

The only limitation or challenge that stood out during my evaluation of Chainguard Containers was the fact that it is...

What is your primary use case for Chainguard Containers?

Chainguard Containers was a tool brought into my enterprise as a proof of concept that we evaluated, but we have not ...

What is your experience regarding pricing and costs for Check Point CloudGuard Network Security?

Since we use a unified standard for using policies and modules in Check Point Cloud Firewall (formerly CloudGuard Net...

What needs improvement with Check Point CloudGuard Network Security?

The main limitations of Check Point Cloud Firewall (formerly CloudGuard Network Security) are not in Check Point itse...

What is your primary use case for Check Point CloudGuard Network Security?

Check Point Cloud Firewall (formerly CloudGuard Network Security) is the main manager that provides network security ...

Microsoft Defender for Cloud vs Qualys TotalCloud

Comparisons

Wiz vs Qualys TotalCloud

Compared 10% of the time

Compared 8% of the time

JupiterOne vs Qualys TotalCloud

Compared 6% of the time

Prisma Cloud by Palo Alto Networks vs Qualys TotalCloud

Compared 6% of the time

AWS Security Hub vs Qualys TotalCloud

Compared 5% of the time

More Qualys TotalCloud Competitors

Minimus vs Chainguard Containers

Compared 14% of the time

Wiz vs Chainguard Containers

Compared 11% of the time

Root.io vs Chainguard Containers

Compared 9% of the time

Snyk vs Chainguard Containers

Compared 9% of the time

Runecast vs Chainguard Containers

Compared 7% of the time

More Chainguard Containers Competitors

Prisma Cloud by Palo Alto Networks vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 8% of the time

Azure Firewall vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 3% of the time

Palo Alto Networks NG Firewalls vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 3% of the time

Fortinet FortiGate vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 3% of the time

Cisco Secure Firewall vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 2% of the time

More Check Point Cloud Firewall (formerly CloudGuard Network Security) Competitors

Product Reports

Qualys TotalCloud

Download Qualys TotalCloud product report

Chainguard Containers

Download Chainguard Containers product report

Check Point Cloud Firewall (formerly CloudGuard Network Security)

Download Check Point Cloud Firewall (formerly CloudGuard Network Security) product report

Check Point Cloud Firewall (formerly CloudGuard Network Security) report

Also Known As

Qualys TotalCloud with FlexScan

No data available

CloudGuard IaaS, Check Point vSEC, CloudGuard IaaS, Check Point Virtual Systems, Check Point CloudGuard Network Security, Check Point CloudGuard CNAPP

Overview

Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.

Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.

What are the most important features of Qualys TotalCloud?

Accurate Vulnerability Reports: Delivers precise and actionable insights for risk mitigation.
Zero-Day Detection: Identifies and addresses zero-day vulnerabilities proactively.
Unified Threat Assessment: Offers comprehensive evaluation of threats across the environment.
Extensive Risk Management: Manages risks effectively with advanced insights and prioritization.
Continuous Monitoring: Provides non-stop surveillance for vulnerabilities and threats.
Cloud-Native Automation: Streamlines processes and reduces manual efforts using automation.
FlexScan for Internet-Facing VMs: Scans external VMs efficiently to detect vulnerabilities.
Dashboard Risk Visualization: Clear visualization helps prioritize vulnerabilities.

What benefits and ROI should users look for?

Improved Security Posture: Enhances threat detection and response across clouds.
Time Savings: Automation reduces time spent on manual vulnerability management.
Resource Efficiency: Better allocation of resources through streamlined workflows.
Enhanced Risk Prioritization: Focus on critical vulnerabilities for effective mitigation.
Integrated Cloud Accounts: Facilitates seamless cloud management and security.

Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.

Qualys

Chainguard Containers provide security-focused container solutions designed to address modern application challenges. Its use enhances system integrity and ensures robust protection against vulnerabilities.

Chainguard Containers stand out by offering an innovative approach to container security. Expertly crafted to ensure only verified code runs, it emphasizes reducing attack surfaces and enhancing overall workload security. Its utility is crucial for maintaining a secure software pipeline, minimizing risks in application deployments.

What are the standout features of Chainguard Containers?

Secure by Default: Incorporates security best practices automatically to protect system deployments.
Minimal Base Images: Ensures a smaller attack surface by using minimalistic container bases.
Supply Chain Security: Enhanced visibility and control over the software supply chain to mitigate threats.
Automatic Updates: Regularly updates containers to address new vulnerabilities promptly.
Compliance Tools: Facilitates meeting regulatory requirements with built-in compliance features.

What benefits should users consider in reviews?

Increased Security: Enhances overall security posture with reinforced protection measures.
Faster Deployment: Streamlines deployment processes, boosting operational efficiency.
Cost Efficiency: Reduces the overhead of manual security checks, saving time and money.
Regulatory Compliance: Assists in adhering to industry regulations, reducing legal risks.
Operational Stability: Improves system stability through a more secure infrastructure.

Chainguard Containers find significant application in industries like finance and healthcare, where data security is paramount. By integrating seamlessly into existing IT frameworks, they bolster security without disrupting operational workflows, a critical advantage in sectors with stringent compliance demands.

Chainguard

Check Point Cloud Firewall, previously known as CloudGuard Network Security, provides advanced threat prevention, centralized management, and VPN capabilities, enabling robust cloud security across various platforms including Azure and AWS.

Check Point Cloud Firewall delivers seamless cloud integration with advanced automated threat prevention and centralized management to enhance security posture. It offers auto-scaling for dynamic environments and a comprehensive policy enforcement framework in hybrid settings. The unified interface streamlines administration across cloud infrastructures, ensuring consistent protection and reducing risk.

What important features does it offer?

Advanced Threat Prevention: Safeguards against sophisticated threats.
Centralized Management: Simplifies control for cloud infrastructures.
Auto-scaling: Adapts to changing workloads seamlessly.
VPN Capabilities: Enables secure connections across environments.
Integration with Azure and AWS: Ensures compatibility with leading cloud services.
Visibility Tools: Enhanced monitoring and management for security enforcement.

What benefits can users expect?

Enhanced Security: Comprehensive threat management reduces risk.
Operational Efficiency: Automation capabilities streamline processes.
Cost Management: Efficient resource usage with auto-scaling reduces expenses.
Integration Flexibility: Adapts easily into existing cloud platforms.
Simplified Administration: Unified management reduces complexity.

In manufacturing and conglomerate sectors, Check Point Cloud Firewall is utilized for protecting cloud environments and implementing network segmentation. It supports secure cloud migration on AWS, Azure, and GCP, ensuring compliance, perimeter defense, and traffic inspection, facilitating sophisticated threat prevention strategies.

Check Point Software Technologies

Sample Customers

Information Not Available

Physicians Choice Laboratory Services, Helvetica Insurance

Chainguard Containers vs. Check Point Cloud Firewall (formerly CloudGuard Network Security)