Check Point CloudGuard Cloud Intelligence and Threat Hunting vs Microsoft Defender for Cloud comparison

Check Point CloudGuard Cloud Intelligence and Threat Hunting vs. Microsoft Defender for Cloud

Download the complete report

Helped 868,759 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Check Point CloudGuard Clou...

Ranking in Cloud Detection and Response (CDR)

9th

Average Rating

9.0

Reviews Sentiment

7.3

Number of Reviews

Ranking in other categories

No ranking in other categories

Microsoft Defender for Cloud

Ranking in Cloud Detection and Response (CDR)

2nd

Average Rating

8.0

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

Vulnerability Management (7th), Container Management (9th), Container Security (7th), Cloud Workload Protection Platforms (CWPP) (1st), Cloud Security Posture Management (CSPM) (4th), Cloud-Native Application Protection Platforms (CNAPP) (4th), Data Security Posture Management (DSPM) (4th), Microsoft Security Suite (8th), Compliance Management (5th)

Mindshare comparison

As of October 2025, in the Cloud Detection and Response (CDR) category, the mindshare of Check Point CloudGuard Cloud Intelligence and Threat Hunting is 0.8%. The mindshare of Microsoft Defender for Cloud is 17.6%, down from 23.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Cloud Detection and Response (CDR) Market Share Distribution
Product	Market Share (%)
Microsoft Defender for Cloud	17.6%
Check Point CloudGuard Cloud Intelligence and Threat Hunting	0.8%
Other	81.6%

Cloud Detection and Response (CDR)

Featured Reviews

YeAung

Network Engineer at ATG Systems

Improved investigation efficiency and visibility while custom reporting and integration need enhancement

I would like to see more flexibility in creating custom and scheduled reports in Check Point CloudGuard Cloud Intelligence and Threat Hunting. For example, being able to generate a weekly threat activity summary to specify business unit or cloud account would make it easier to share insights with management and non-technical stakeholders. More native integration with SIEM and SOAR platforms like QRadar, ServiceNow, etc., would reduce manual effort. That way, incidents surfaced in CloudGuard could automatically flow into existing workflows without extra connectors. Adding a way to tag, annotate, or assign investigations inside the platform would make it easier for teams to collaborate without switching to another tool.

Read full review

Vibhor Goel

Senior Cloud Platform Engineer at Deutsche Börse

A single tool for complete visibility and addressing security gaps

Currently, issues are structured in Microsoft Defender for Cloud at severity levels of high, critical, or warning, but these severity levels are not always right. For example, Microsoft might consider a port being open as critical, but that might not be the case for our company. Similarly, it might suggest closing some management ports, but you might need them to be able to log in, so the severity levels for certain things can be improved. Even though Microsoft Defender for Cloud provides a way to temporarily disable certain alerts or notifications without affecting our security score, it would be better to have more granularized control over these recommendations. Currently, we cannot even disable certain alerts or notifications. There should be an automated mechanism to design Azure policies based on the recommendations, possibly with AI integration. Instead of an engineer having to write a policy to fix security gaps, which is very time-consuming, there should be an inbuilt capability to auto-remediate everything and have proper control in place. Additionally, enabling Defender for Cloud at the resource group level, rather than only at the subscription level, would be beneficial.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"During testing, I consistently saw a 70 or 75% faster investigation and reduced analyst workload, which is a concrete way it can deliver our work."

"This solution helped me to improve and enhance our security posture."

"Check Point CloudGuard Cloud Intelligence and Threat Hunting made our work much easier as it serves as a centralized platform for all my cloud environment and provides workload protection such as malware protection for my entire cloud environment."

"Most importantly, it's an integrated solution. We not only have Defender for Cloud, but we also have Defender for Endpoint, Defender for Office 365, and Defender for Identity. It's an integrated, holistic solution."

"My favorite part of Microsoft Defender for Cloud is the compliance features. Defender covers a wide range of workloads, on par with competing products on the market."

"The most valuable features offer the latest threat detection and response capabilities."

"The entire Defender Suite is tightly coupled, integrated, and collaborative."

"Defender is user-friendly and provides decent visibility into threats."

"I have not experienced any difficulties or issues with the stability of Microsoft Defender for Cloud."

"We can create alerts that trigger if there is any malicious activity happening in the workflow and these alerts can be retrieved using the query language."

"It takes very little effort to integrate it. It also gives very good visibility into what exactly is happening."

More Microsoft Defender for Cloud pros

Cons

"In my testing, Check Point CloudGuard Cloud Intelligence and Threat Hunting's scalability is not easy; it is a very challenging experience for me."

"The product can be improved by optimizing performance."

"Malware protection for my entire cloud environment is an area where improvements are needed."

"Azure Security Center takes a long time to update, compared to the on-premises version of Microsoft Defender."

"Customizing some of the compliance requirements based on individual needs seems like the biggest area of improvement. There should be an option to turn specific controls on and off based on how your solution is configured."

"For Kubernetes, I was using Azure Kubernetes Service (AKS). To see that whatever is getting deployed into AKS goes through the correct checks and balances in terms of affinities and other similar aspects and follows all the policies, we had to use a product called Stackrox. At a granular level, the built-in policies were good for Kubernetes, but to protect our containers from a coding point of view, we had to use a few other products. For example, from a programming point of view, we were using Checkmarx for static code analysis. For CIS compliance, there are no CIS benchmarks for AKS. So, we had to use other plugins to see that the CIS benchmarks are compliant. There are CIS benchmarks for Kubernetes on AWS and GCP, but there are no CIS benchmarks for AKS. So, Azure Security Center fell short from the regulatory compliance point of view, and we had to use one more product. We ended up with two different dashboards. We had Azure Security Center, and we had Stackrox that had its own dashboard. The operations team and the security team had to look at two dashboards, and they couldn't get an integrated piece. That's a drawback of Azure Security Center. Azure Security Center should provide APIs so that we can integrate its dashboard within other enterprise dashboards, such as the PowerBI dashboard. We couldn't get through these aspects, and we ended up giving Reader security permission to too many people, which was okay to some extent, but when we had to administer the users for the Stackrox portal and Azure Security Center, it became painful."

"Customer service and support from Microsoft are very poor. Even for high-severity cases, response or resolution time can extend to three or four weeks."

"The solution could improve by being more intuitive and easier to use requiring less technical knowledge."

"No possibility to write or edit any capability."

"You cannot create custom use cases."

"If they had an easier way to display all the vulnerabilities of the machines affected and remediation steps on one screen rather than having to dive deep into each of them, that would be a lot easier."

More Microsoft Defender for Cloud cons

Pricing and Cost Advice

Information not available

"This is a worldwide service and depending on the country, there will be different prices."

"Currently, Microsoft offers only one plan at the enterprise level which is $15 per machine."

"While we pay for any additional features, the pricing seems competitive, though I am not involved in the specific cost details."

"Understanding the costs of cloud services can be complicated at first. As with a lot of things in the cloud, it can be quite hard to understand the end cost, but it becomes clearer over time. Early on, the lack of transparency is a challenge. Microsoft does not tell you the cost when they launch something. It is clever marketing, and there is room for improvement there. There should be clarity from the start."

"Pricing depends on your workload size, but it is very cheap. If you're talking about virtual machines, it is $5 or something for each machine, which is minimal. If you go for some agent-based solution for every virtual machine, then you need to pay the same thing or more than that. For an on-premises solution like this, we were paying around $30 to $50 based on size. With Defender, Microsoft doesn't bother about the size. You pay based on the number of machines. So, if you have 10 virtual machines, and 10 virtual machines are being monitored, you are paying based on that rather than the size of the virtual machine. Thus, you are paying for the number of units rather than paying for the size of your units."

"Pricing is difficult because each license has its own metrics and cost."

"Azure Defender is a bit pricey. The price could be lower."

"The pricing and licensing of Microsoft Defender for Cloud have been good for us. We appreciate the licensing approach based on employee count rather than a big enterprise license."

More Microsoft Defender for Cloud pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Cloud Detection and Response (CDR) solutions are best for your needs.

See recommendations

868,759 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

No data available

Financial Services Firm

13%

Computer Software Company

13%

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

By reviewers
Company Size	Count
Small Business	26
Midsize Enterprise	7
Large Enterprise	45

Questions from the Community

What needs improvement with Check Point CloudGuard Cloud Intelligence and Threat Hunting?

What is your primary use case for Check Point CloudGuard Cloud Intelligence and Threat Hunting?

I will honestly say that we are just testing Check Point CloudGuard Cloud Intelligence and Threat Hunting in my company. It is just for testing, not production. It has not been experienced for conf...

What is your experience regarding pricing and costs for Check Point CloudGuard Cloud Intelligence and Threat Hunting?

The payment pricing is a business matter I discuss directly with the key account manager, and it's not something related directly to our technical team. I just go directly to the key account manage...

How is Prisma Cloud vs Azure Security Center for security?

Azure Security Center is very easy to use, integrates well, and gives very good visibility on what is happening across your ecosystem. It also has great remote workforce capabilities and supports a...

What do you like most about Microsoft Defender for Cloud?

The entire Defender Suite is tightly coupled, integrated, and collaborative.

What is your experience regarding pricing and costs for Microsoft Defender for Cloud?

The pricing is pretty standard.

Sysdig Secure vs Check Point CloudGuard Cloud Intelligence and Threat Hunting

Comparisons

Compared 100% of the time

More Check Point CloudGuard Cloud Intelligence and Threat Hunting Competitors

AWS GuardDuty vs Microsoft Defender for Cloud

Compared 29% of the time

Wiz vs Microsoft Defender for Cloud

Compared 11% of the time

Prisma Cloud by Palo Alto Networks vs Microsoft Defender for Cloud

Compared 8% of the time

Microsoft Defender XDR vs Microsoft Defender for Cloud

Compared 4% of the time

Orca Security vs Microsoft Defender for Cloud

Compared 3% of the time

More Microsoft Defender for Cloud Competitors

Product Reports

Cloud Detection and Response (CDR)

Download Check Point CloudGuard Cloud Intelligence and Threat Hunting product report

Check Point CloudGuard Cloud Intelligence and Threat Hunting report

Microsoft Defender for Cloud

Download Microsoft Defender for Cloud product report

Also Known As

No data available

Microsoft Azure Security Center, Azure Security Center, Microsoft ASC, Azure Defender

Interactive Demo

Demo not available

Check Point Software Technologies

Microsoft

Overview

Check Point CloudGuard Cloud Intelligence and Threat Hunting offers advanced analytics and threat detection for cloud environments, streamlining security management and enhancing threat prevention capabilities.

Designed for enterprises seeking robust security solutions, Check Point CloudGuard Cloud Intelligence and Threat Hunting leverages machine learning to analyze potential threats in cloud infrastructures. This tool enhances cloud security postures by identifying suspicious activities and providing deep insights, aiding security teams in responding to threats efficiently. It integrates seamlessly with existing security setups, offering comprehensive threat visibility and streamlined threat management.

What are the key features of Check Point CloudGuard Cloud Intelligence and Threat Hunting?

Threat Detection: Employs machine learning to identify potential threats in cloud environments.
Analytics: Provides detailed analysis and actionable insights on security incidents.
Integration: Works seamlessly with other security tools to enhance capabilities.

What benefits and ROI should be evaluated in reviews?

Improved Security: Enhances threat detection and response capabilities.
Efficiency: Streamlines threat management workflows.
Scalability: Adapts to growing cloud environments with ease.

In industries like finance and healthcare, Check Point CloudGuard Cloud Intelligence and Threat Hunting is implemented to safeguard sensitive data while ensuring compliance with regulatory standards. Its capabilities are crucial for maintaining high security in dynamic and data-sensitive environments, where vigilant threat detection and quick response are critical.

Check Point Software Technologies

Microsoft Defender for Cloud is a comprehensive security solution that provides advanced threat protection for cloud workloads. It offers real-time visibility into the security posture of cloud environments, enabling organizations to quickly identify and respond to potential threats. With its advanced machine learning capabilities, Microsoft Defender for Cloud can detect and block sophisticated attacks, including zero-day exploits and fileless malware.

The solution also provides automated remediation capabilities, allowing security teams to quickly and easily respond to security incidents. With Microsoft Defender for Cloud, organizations can ensure the security and compliance of their cloud workloads, while reducing the burden on their security teams.

Microsoft

Sample Customers

Information Not Available

Microsoft Defender for Cloud is trusted by companies such as ASOS, Vatenfall, SWC Technology Partners, and more.

Check Point CloudGuard Cloud Intelligence and Threat Hunting vs. Microsoft Defender for Cloud