Check Point Cloud Firewall (formerly CloudGuard Network Security) vs SUSE NeuVector comparison

Check Point Software Technologies and SUSE are both solutions in the Container Security category. Additionally, 96% of Check Point Software Technologies users are willing to recommend the solution, compared to 87% of SUSE users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Aug 13, 2026

Check Point Cloud Firewall and SUSE NeuVector compete in the network and container security category. Check Point seems to have the upper hand due to its advanced threat prevention and hybrid cloud integration, which outpaces SUSE's focus on container-specific security.

Features: Check Point Cloud Firewall offers features including zero-day protection, SandBlast Threat Prevention, and application control. It supports advanced network security and VPN integration. SUSE NeuVector focuses on tools for vulnerability scanning and runtime protection, targeting containerized environments but lacks comprehensive threat prevention.

Room for Improvement: Check Point Cloud Firewall needs better integration with Nutanix and easier setup for web application firewalls. SUSE NeuVector should enhance integration across the DevSecOps pipeline and improve visibility to compete better in hybrid environments.

Ease of Deployment and Customer Service: Check Point is preferred in hybrid environments for seamless integration with existing infrastructures. However, it occasionally suffers from delays in technical assistance. SUSE NeuVector offers effective container-specific security but may lack deep support for larger enterprises.

Pricing and ROI: Check Point Cloud Firewall's pricing is high yet justified by extensive features and strong ROI in operational efficiency. SUSE NeuVector has a lower entry cost, being open-source, but requires additional fees for premium support, resulting in a different ROI model focused on container security needs.

To learn more, read our detailed Container Security Report (Updated: July 2026).

Buyer's Guide

Container Security

July 2026

Download the complete report

Helped 909,563 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Qualys TotalCloud

Featured Reviews

Robert Orłowski

IT Security Expert at Alior Bank S.A.

Unified risk scoring has improved our cloud visibility and simplifies remediation priorities

Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.

Read full review

reviewer2875401

Network Engineer at a outsourcing company with 10,001+ employees

Unified security policies have protected our hybrid network with deep, user-based controls

The main limitations of Check Point Cloud Firewall (formerly CloudGuard Network Security) are not in Check Point itself but in the cloud platforms on which it is deployed. Because not all clouds have L2 infrastructure, you cannot build a unified clustering system everywhere. As a result, the problem usually is not with Check Point, but with the cloud. The main problem with Check Point Cloud Firewall (formerly CloudGuard Network Security) is that it uses a separate thick client instead of a browser. A browser-based SmartConsole exists, but it still has a number of limitations, while the thick client, the so-called SmartConsole, often works unstably, freezes, and has to be restarted. I do not recommend using Check Point Cloud Firewall (formerly CloudGuard Network Security) as a VPN hub for site-to-site VPN because it is inconvenient to monitor the state of its tunnels, especially visually. It does not have a convenient snap-in and everything can be checked only via the console, which is very inconvenient. Check Point is not the most universal solution as a device that provides routing and administration capabilities in addition to security. It is an excellent firewall, but it has a number of limitations in terms of routing and in creating VPN sessions, especially in terms of displaying their states.

Read full review

Danie Joubert

Managing Director at ProQuanta

Good value for money; great for policy management

Our model of deployment for this solution is on-premises. For people looking into this solution and trying to use it for the first time, I'd say make your life easier by using the SUSE product as well on top of your community scale stack. That makes your integration points a lot easier and smoother. I would also say during your initial setup, make sure that your clusters are already in terms of the capabilities with the version required. I would rate this solution an eight, on a scale from one to 10, with one being the worst and 10 being the best. The reason for this rating is that what they offer is solid, but they could expand their service and add more features just to make more things integrated into an enterprise itself.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It is a cloud-native app that integrates with both IaaS and SaaS. It seamlessly integrates with other platforms."

"We were able to realize its benefits within 24 to 48 hours."

"The most valuable feature of Qualys TotalCloud is the visibility it provides."

"The vulnerability management feature is the one I like the most because it provides a clear picture of all vulnerabilities."

"The best part I like is the on-demand scans."

"Once you have your vulnerabilities fixed and your patches pushed out using Qualys TotalCloud, then you are able to eliminate threats and cyber risk."

"I depend heavily on the reports that I have from this tool."

"TruRisk Insights is the most important innovation they've released this year."

More Qualys TotalCloud pros

"The clients who are using it have nothing bad to say about its capabilities."

"The most valuable feature is the ability to work with the APIs to integrate into our own backend systems."

"Check Point Cloud Firewall (formerly CloudGuard Network Security) has significantly reduced our organizational risk."

"We find Check Point valuable because they are 100% focused on security. It totally closes the potential vulnerability channel. We can check our mail and our attachments and we can scan everything easily. We get an immediate report about the situation of the attachments. We can discover if the target's security attack was started from phishing, etc. We also enjoy using the additional features that protect our internal customer from targeted attacks."

"The stability of the solution is fantastic."

"The most valuable feature is that we can use the same manager server that we use on our own Check Point firewalls. We integrated CloudGuard on that manager and we can use the same kind of protections that we use on the on-prem firewalls, like the IPS and antivirus policy. We can have the same kind of protection on the Cloud environment that we have on-premise."

"The solution learns day by day, learning from behavior, attacks, management, detections, capturing packets, and performing real-time analysis while generating knowledge from a variety of sources for an excellent analysis, which allows us to move faster and have more efficient responses to incidents."

"A unified security solution across all major public clouds affects our cloud security operations by saving us a ton of time and effort."

More Check Point Cloud Firewall (formerly CloudGuard Network Security) pros

"When it comes to the price, we got a really good deal from the vendor instantly."

"The most valuable feature of SUSE NeuVector is its run-time security."

"The UI has a lot of features."

"The solution includes many features, not only for container and client security but also for scanning nodes, networks, and vulnerabilities."

"The features of image scanning and anti-malware are really valuable."

"The most valuable feature of SUSE NeuVector is the performance, deployment, and cost."

"The tool's deployment is simple. Also, I am impressed with its risk capabilities."

"The initial setup is quite good, it's straightforward."

Cons

"Some major banks and insurance companies require an on-premises solution for comprehensive vulnerability management, which TotalCloud does not offer."

"Regarding technical support from Qualys, they respond, but the response time can be too long. Sometimes we need to wait weeks for solutions to simple questions."

"It is already perfect, but they can bring some newer dashboards and customization options for the dashboard. It would be great to be able to include on-prem assets on the dashboard."

"Qualys TotalCloud needs to improve its accuracy for non-Windows operating systems."

"TotalCloud could improve the classification of vulnerabilities. Specifically, it could enhance the categorization of what aspects fall under patches resolved by OS or software updates and what pertains to configuration adjustments."

"I would like the ability to disable certain default built-in policies as they can be misleading when creating dashboards. That is the top one."

"The price is very expensive, actually."

"With the growing integration of AI, I would like Qualys to enhance its service offerings to better accommodate AI-related risks."

More Qualys TotalCloud cons

"Operations management is difficult in Check Point CloudGuard Cloud Network Security."

"CloudGuard functions just like any other firewall. It functions very well. The only thing that could maybe be improved would be to integrate some tools that are not integrated with the SmartConsole, like the SmartView Monitor that we need to open on a different application to access."

"It is a very expensive program and there are additional costs despite the standard licensing fees."

"Sometimes the customer service is good. Sometimes it is very bad. And I have nightmares from it."

"The deployment phase takes too much time."

"The connection to the on-premises management requires using the CLI. It's not just a click, and you cannot edit in the management to prepare everything. You need to do it online and in real time. After that, you must execute a script, and then you should be happy that it appears in the management."

"I would like to see more focus on east-west traffic inspection and AWS."

"The reporting dashboard responds slowly, which leads to late report compilation."

More Check Point Cloud Firewall (formerly CloudGuard Network Security) cons

"The tool should offer seamless integration of other security tools while in a hybrid environment."

"I would say that this solution should improve monitoring and reporting. I would also like to see more integrations so that we could essentially make it a part of a developing pipeline."

"The image-scanning features need improvement."

"SUSE NeuVector should provide more security protection rules and better container image scanning."

"The documentation needs to improve a bit."

"Using a node port instead of a cluster IP is less ideal when implementing federation features between two clusters and could be improved."

"However, I found that the support in Egypt was not very qualified, and there was a need to upgrade to a higher support layer to solve my issues."

"We are also working with IaaS VMS, but NeuVector doesn't support virtual machines."

More SUSE NeuVector cons

Pricing and Cost Advice

"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."

"The cost is high, but it meets our organizational needs."

"TotalCloud's price is about right where I would expect it to be."

"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."

"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."

"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."

"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."

"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."

More Qualys TotalCloud pricing and cost advice

"CloudGuard Network Security's pricing is fine."

"We explored both pay-as-you-go and build-your-own-licensing models, and found both to be competitive."

"It is fair. Its license covers all the features. There is a cost-benefit. The licensing for the cloud is better than on-premises because, with on-premises, you have to pay separately for different things."

"The pricing and licensing have been good. We just had to do a license increase for our portion of it. We had that done within a couple of days. Given the fact that it's purely a software-based license, it ends up being even quicker than doing it for an on-prem firewall."

"Handling costs is not my department. Licensing has been quite acceptable. It is a bit easier now, but when I began working with CloudGuard, it was a bit too technical."

"I quite like the way they priced it. It is very reasonable."

"I know that we have an enterprise agreement with Check Point. That gives us some benefits, but I do not have more information about that."

"They're a little high in price. The price could be lower."

More Check Point Cloud Firewall (formerly CloudGuard Network Security) pricing and cost advice

"The solution's pricing could be better. The cost of a subscription is calculated on the basis of work."

"SUSE NeuVector is an open-source solution."

"The price of SUSE NeuVector is low. There is an additional cost for support."

"Licensing fees are paid yearly."

See which vendors are best for you

Use our free recommendation engine to learn which Container Security solutions are best for your needs.

See recommendations

909,563 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

13%

Outsourcing Company

11%

Comms Service Provider

10%

Financial Services Firm

10%

Construction Company

16%

Outsourcing Company

13%

Financial Services Firm

Manufacturing Company

Financial Services Firm

18%

Manufacturing Company

11%

Computer Software Company

10%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	11
Midsize Enterprise	5
Large Enterprise	30

By reviewers
Company Size	Count
Small Business	132
Midsize Enterprise	54
Large Enterprise	138

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	1
Large Enterprise	2

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?

The price is very expensive, actually.

See all answers

What needs improvement with Qualys TotalCloud?

To be totally honest, I do not have any best features because I have had a bad experience using this tool, especially...

See all answers

What is your primary use case for Qualys TotalCloud?

My main use case for Qualys TotalCloud is vulnerability management and exposure management. I use this tool to evalua...

See all answers

What is your experience regarding pricing and costs for Check Point CloudGuard Network Security?

Since we use a unified standard for using policies and modules in Check Point Cloud Firewall (formerly CloudGuard Net...

See all answers

What needs improvement with Check Point CloudGuard Network Security?

The main limitations of Check Point Cloud Firewall (formerly CloudGuard Network Security) are not in Check Point itse...

See all answers

What is your primary use case for Check Point CloudGuard Network Security?

Check Point Cloud Firewall (formerly CloudGuard Network Security) is the main manager that provides network security ...

See all answers

What needs improvement with NeuVector?

One area for improvement is NeuVector's ability to import CVEs from different sources. Additionally, using a node por...

See all answers

What is your primary use case for NeuVector?

In my company, I am looking to deploy a container security runtime solution.

See all answers

What advice do you have for others considering NeuVector?

I'd rate the solution eight out of ten.

See all answers

Comparisons

Wiz vs Qualys TotalCloud

Compared 10% of the time

Microsoft Defender for Cloud vs Qualys TotalCloud

Compared 8% of the time

JupiterOne vs Qualys TotalCloud

Compared 7% of the time

Prisma Cloud by Palo Alto Networks vs Qualys TotalCloud

Compared 6% of the time

AWS Security Hub vs Qualys TotalCloud

Compared 5% of the time

More Qualys TotalCloud Competitors

Prisma Cloud by Palo Alto Networks vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 8% of the time

Azure Firewall vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 3% of the time

Palo Alto Networks NG Firewalls vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 3% of the time

Fortinet FortiGate vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 3% of the time

Cisco Secure Firewall vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 2% of the time

More Check Point Cloud Firewall (formerly CloudGuard Network Security) Competitors

Aqua Cloud Security Platform vs SUSE NeuVector

Compared 10% of the time

CrowdStrike Falcon Cloud Security vs SUSE NeuVector

Compared 8% of the time

Trivy vs SUSE NeuVector

Compared 8% of the time

Sysdig Falco vs SUSE NeuVector

Compared 7% of the time

Qualys Exposure Management vs SUSE NeuVector

Compared 3% of the time

More SUSE NeuVector Competitors

Product Reports

Buyer's Guide

Qualys TotalCloud

July 2026

Download Qualys TotalCloud product report

Buyer's Guide

Check Point Cloud Firewall (formerly CloudGuard Network Security)

August 2026

Check Point Cloud Firewall (formerly CloudGuard Network Security) report

Download Check Point Cloud Firewall (formerly CloudGuard Network Security) product report

Buyer's Guide

Container Security

July 2026

Download SUSE NeuVector product report

Also Known As

Qualys TotalCloud with FlexScan

CloudGuard IaaS, Check Point vSEC, CloudGuard IaaS, Check Point Virtual Systems, Check Point CloudGuard Network Security, Check Point CloudGuard CNAPP

NeuVector

Overview

Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.

Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.

What are the most important features of Qualys TotalCloud?

Accurate Vulnerability Reports: Delivers precise and actionable insights for risk mitigation.
Zero-Day Detection: Identifies and addresses zero-day vulnerabilities proactively.
Unified Threat Assessment: Offers comprehensive evaluation of threats across the environment.
Extensive Risk Management: Manages risks effectively with advanced insights and prioritization.
Continuous Monitoring: Provides non-stop surveillance for vulnerabilities and threats.
Cloud-Native Automation: Streamlines processes and reduces manual efforts using automation.
FlexScan for Internet-Facing VMs: Scans external VMs efficiently to detect vulnerabilities.
Dashboard Risk Visualization: Clear visualization helps prioritize vulnerabilities.

What benefits and ROI should users look for?

Improved Security Posture: Enhances threat detection and response across clouds.
Time Savings: Automation reduces time spent on manual vulnerability management.
Resource Efficiency: Better allocation of resources through streamlined workflows.
Enhanced Risk Prioritization: Focus on critical vulnerabilities for effective mitigation.
Integrated Cloud Accounts: Facilitates seamless cloud management and security.

Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.

Qualys

Check Point Cloud Firewall, previously known as CloudGuard Network Security, provides advanced threat prevention, centralized management, and VPN capabilities, enabling robust cloud security across various platforms including Azure and AWS.

Check Point Cloud Firewall delivers seamless cloud integration with advanced automated threat prevention and centralized management to enhance security posture. It offers auto-scaling for dynamic environments and a comprehensive policy enforcement framework in hybrid settings. The unified interface streamlines administration across cloud infrastructures, ensuring consistent protection and reducing risk.

What important features does it offer?

Advanced Threat Prevention: Safeguards against sophisticated threats.
Centralized Management: Simplifies control for cloud infrastructures.
Auto-scaling: Adapts to changing workloads seamlessly.
VPN Capabilities: Enables secure connections across environments.
Integration with Azure and AWS: Ensures compatibility with leading cloud services.
Visibility Tools: Enhanced monitoring and management for security enforcement.

What benefits can users expect?

Enhanced Security: Comprehensive threat management reduces risk.
Operational Efficiency: Automation capabilities streamline processes.
Cost Management: Efficient resource usage with auto-scaling reduces expenses.
Integration Flexibility: Adapts easily into existing cloud platforms.
Simplified Administration: Unified management reduces complexity.

In manufacturing and conglomerate sectors, Check Point Cloud Firewall is utilized for protecting cloud environments and implementing network segmentation. It supports secure cloud migration on AWS, Azure, and GCP, ensuring compliance, perimeter defense, and traffic inspection, facilitating sophisticated threat prevention strategies.

Check Point Software Technologies

SUSE NeuVector offers robust container security with features like image scanning, anti-malware, deployment simplicity, and run-time security. It enhances risk management and performance across container, client, node, network security, and vulnerability scanning.

SUSE NeuVector is designed for comprehensive Kubernetes and container security, handling vulnerability management, and simplifying deployment in hybrid environments. It integrates with CI/CD pipelines and supports multiple clusters, providing flexibility for cloud and on-premise implementations. The platform enhances compliance with automation and informative interfaces, aiding in ISO certification checks. While it excels in various security aspects, there are areas for improvement including image scanning and integration with other tools. Users need enhanced visibility into DevSecOps and better support for IaaS VMs, alongside improved documentation and monitoring capabilities.

What are the key features of SUSE NeuVector?

Image Scanning: Identifies vulnerabilities in container images to ensure policy satisfaction.
Run-time Security: Protects container workloads with network behavior automation.
CI/CD Integration: Seamlessly integrates into existing pipelines like GitLab.
Multi-Cluster Support: Manages security across clusters efficiently.
Advanced Learning Automation: Enhances security with intelligent automation and machine learning.

What benefits can users expect from SUSE NeuVector?

Risk Management: Enhances security for container environments, mitigating potential threats.
Cost-Effectiveness: Offers economical solutions for robust container security.
Performance Improvement: Boosts security efficiency with streamlined processes.
Compliance Enhancement: Supports ISO checks and policy compliance, ensuring standards are met.
Flexibility: Adapts to cloud and on-premise setups, providing varied deployment options.

Industries implement SUSE NeuVector to fortify container security within Kubernetes ecosystems. Often used in conjunction with Amazon AWS, it monitors events and manages vulnerabilities to protect assets. It finds application in sectors where security runtime solutions and network automation are crucial, catering to both cloud-based and on-premise needs. Its integration capabilities with CI/CD pipelines support agile software development across different industries.

SUSE

Sample Customers

Information Not Available

Physicians Choice Laboratory Services, Helvetica Insurance

Figo, Clear Review, Arvato Bertelsmann, Experian, Chime

Find out what your peers are saying about Wiz, Palo Alto Networks, SentinelOne and others in Container Security. Updated: July 2026.

DOWNLOAD NOW

909,563 professionals have used our research since 2012.

See our list of best Container Security vendors and best Cloud Workload Protection Platforms (CWPP) vendors.

We monitor all Container Security reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.