Try our new research platform with insights from 80,000+ expert users

Check Point CloudGuard CNAPP vs CloudLock comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Zafran Security
Sponsored
Average Rating
9.6
Reviews Sentiment
7.8
Number of Reviews
6
Ranking in other categories
Vulnerability Management (18th), Continuous Threat Exposure Management (CTEM) (2nd)
Check Point CloudGuard CNAPP
Average Rating
8.6
Reviews Sentiment
7.4
Number of Reviews
71
Ranking in other categories
Vulnerability Management (9th), Cloud and Data Center Security (9th), Container Security (9th), Cloud Workload Protection Platforms (CWPP) (5th), Cloud Security Posture Management (CSPM) (5th), Cloud-Native Application Protection Platforms (CNAPP) (5th), Data Security Posture Management (DSPM) (6th), Compliance Management (6th)
CloudLock
Average Rating
7.8
Reviews Sentiment
7.3
Number of Reviews
5
Ranking in other categories
Cloud Access Security Brokers (CASB) (22nd)
 

Mindshare comparison

Vulnerability Management
Cloud Access Security Brokers (CASB)
 

Featured Reviews

Israel Cavazos Landini - PeerSpot reviewer
Weekly insights and risk analysis facilitate informed security decisions
I appreciate the weekly insights Zafran provides, which include critical topics for networks and IT security, allowing us to evaluate which insights apply to our environment. The organization score feature is valuable to keep the leadership team updated on how our infrastructure fares security-wise. The applicable risk level versus base risk level feature is beneficial because prior to Zafran, we only used the base risk level, but now understand that risk depends on the asset itself. Zafran is an excellent tool.
Bart Coddens - PeerSpot reviewer
Evolved cloud security with active monitoring but needs interface consistency
The user interface needs work. Sometimes, it is a transition from the old tool to the new CNAPP Two that I currently have, and remnants of the old environment can still be detected. I require consistency in the user interface to ensure everything is streamlined into the same look and feel. More work is needed in fine-tuning the threat data towards your CSPM and activity logs, aligning them with business intelligence, which requires a cohesive console interface. My assessment of CloudGuard CDRs in intrusion detection and threat hunting capabilities is that it still needs some work. All the threat data that comes in, you need to fine tune it a bit.
reviewer779877 - PeerSpot reviewer
Screens sensitive data but it should be a bigger part of an end-user device
The only improvement is that it has to be a bigger part of an end-user device. It should look at how endpoints appear on the EDR rather than creating an API to integrate into the agent app which need additional development effort. We have to integrate the source code into the system endpoint and make it as part of the connected app.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Zafran has become an indispensable tool in our cybersecurity arsenal."
"We saw benefits from Zafran Security almost immediately after deploying it."
"We are able to see the real risk of a vulnerability on our environment with our security tools."
"Zafran is an excellent tool."
"Overall, we have seen about eighty-seven percent reduction of the number of vulnerabilities that require urgency to remediate, specifically the number of criticals."
"The CloudGuard for Cloud Intelligence tool has several significant features that provide security to our company."
"The most valuable feature is the separate environment."
"It presents a real-time database that is always updated."
"The solution is scalable."
"The solution's main benefit is that it automates all the patching and reporting parts and generates an automated report."
"Checkpoint posture management gives you visibility across your entire cloud infrastructure, so it helps you with management, maintenance, and compliance. With visibility across all these cloud platforms, you can protect against compromised credentials or identity theft."
"It is able to bring visibility into that cloudy space where the security departments do not really see what is happening on the DevOps side. It brings visibility, security control, and standardization."
"The cloud security posture management identify the risks that are the most critical to our business. We can define certain key assets that are your crown jewels. And whenever something hits on these crown jewels, you get a very high score. So you can really fine tune towards protecting your risk based assets in the cloud."
"I like CloudLock because when data gets sent out, I do not want it to get out of the environment. In today's world, a lot of users will remotely use the application. It screens all of the sensitive data. That data will really be as part of the environment that you do not want it to be part of. CloudLock is protection for sensitive data."
"The solution is very stable and reliable."
 

Cons

"I think the ability to have some enhanced reporting capabilities is something they can improve on, as they have good reports but we have asked for some specific reporting enhancements."
"The dashboarding and reporting functionality of Zafran Security is an area that definitely could use some improvements."
"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."
"The biggest thing is the documentation aspect of Dome9 is a little lacking. They were purchased by Check Point about a year and a half to two years ago. When they integrated into Check Point's support system, a lot of the documentation that they had previously got mangled in the transition, e.g., linking to stuff on the Dome9 website that no longer exists. There are still a lot of spaces with incomplete links and stuff that is not as fully explained as it could be."
"Timely updates and upgrades to meet modern technological changes could help improve performance and limit the chances of downtime."
"Sometimes, the solution provides us with false alerts of vulnerabilities that are not present in our cloud environment."
"The false positives can be annoying at times."
"The technical support could be better, but I do not know of any other needed improvements."
"Currently, this solution is somewhat expensive."
"The security of Check Point CloudGuard Posture Management could improve. There are always new security issues coming out."
"The software configurations theory is complicated, and without proper planning and a well-skilled technical team, it cannot perform its tasks properly."
"The only improvement is that it has to be a bigger part of an end-user device. It should look at how endpoints appear on the EDR rather than creating a separate agent. We have to integrate the source code into the system endpoint and make it an agent."
"The solution needs to have better integration capabilities. I have a lot of customers asking about how they can integrate it better."
 

Pricing and Cost Advice

Information not available
"CloudGuard is fairly priced."
"In the beginning, the price of Dome9 was cheap, whereas now it is not."
"The tool's pricing is moderate. Its licensing costs are yearly."
"The licensing part still needs some work. The issue that I have is that we do not use all the services in the cloud, but sometimes, CloudGuard identifies them as an asset."
"The price is on the higher end."
"The pricing is tremendous and super cheap. It is shockingly cheap for what you get out of it. I am happy with that. I hope that doesn't get reported back and they increase the prices. I love the pricing and the licensing makes sense. It is just assets: The more stuff that you have, the more you pay."
"Everything in this field is very expensive."
"Right now, we have licenses on 500 machines, and they are not cheap."
Information not available
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
862,514 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
11%
Financial Services Firm
11%
Manufacturing Company
7%
Healthcare Company
6%
Computer Software Company
12%
Financial Services Firm
12%
Manufacturing Company
8%
Educational Organization
5%
Computer Software Company
33%
Manufacturing Company
8%
Healthcare Company
6%
Financial Services Firm
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?
The current pricing of Zafran Security is fair overall. They were good to work with to accommodate our organization w...
What needs improvement with Zafran Security?
The dashboarding and reporting functionality of Zafran Security is an area that definitely could use some improvement...
What is your primary use case for Zafran Security?
Zafran Security is helping reduce the amount of critical vulnerabilities in our environments that require prompt reme...
Ask a question
Earn 20 points
 

Also Known As

No data available
Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence
No data available
 

Overview

 

Sample Customers

Information Not Available
Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners
Dominion Enterprises, Quality Distribution, Clark Construction Group LLC, Ahold, Middlesex Hospital, Austin Community College (ACC), Dominion Enterprises, The United States Holocaust Memorial Museum, Oakland Unified School District, Sunnova, Damballa, Financial Times, Boise State University
Find out what your peers are saying about Qualys, Wiz, Tenable and others in Vulnerability Management. Updated: July 2025.
862,514 professionals have used our research since 2012.