No more typing reviews! Try our Samantha, our new voice AI agent.

Check Point CloudGuard CNAPP vs CloudLock vs Netskope comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

Vulnerability Management Mindshare Distribution
ProductMindshare (%)
Check Point CloudGuard CNAPP1.2%
Wiz6.4%
Tenable Nessus4.9%
Other87.5%
Vulnerability Management
Cloud Access Security Brokers (CASB) Mindshare Distribution
ProductMindshare (%)
CloudLock0.7%
Netskope14.4%
Prisma Access by Palo Alto Networks14.3%
Other70.6%
Cloud Access Security Brokers (CASB)
Cloud Access Security Brokers (CASB) Mindshare Distribution
ProductMindshare (%)
Netskope14.4%
Prisma Access by Palo Alto Networks14.3%
Cato SASE Cloud Platform10.0%
Other61.3%
Cloud Access Security Brokers (CASB)
 

Featured Reviews

reviewer2751468 - PeerSpot reviewer
Assistant Manager at a computer software company with 201-500 employees
Boosts security and compliance in multi-cloud environments while real-time threat detection enhances risk management
Check Point CloudGuard CNAPP flagged a misconfiguration in our AWS S3 bucket that had overly permissive access settings. That configuration could have exposed our sensitive data to the public internet. The platform not only identified the issue but also provided remediation that our team was able to apply immediately. This prevented a potential data exposure. Check Point CloudGuard CNAPP offers a unified, modular platform that combines CSPM, CWPP, CIEM, code security, and cloud detection and response. The agentless workload posture, real-time threat detection and response, multi-cloud coverage and visibility, compliance automation, and one-click remediations stand out as its best features. I find myself relying on the risk management engine and prioritization the most day-to-day. In any cloud environment, you are flooded with findings, misconfigurations, vulnerabilities, and compliance gaps. Without prioritization, it is overwhelming for our team to take care of the posture. CloudGuard's risk scoring helps us cut through incidents. This makes remediation faster and focused instead of wasting time checking every alert. We get to fix the issues that pose real business risks. Check Point CloudGuard CNAPP has positively impacted our organization at a significant level. We get greater visibility and control across all our cloud environments. Some biggest benefits we have seen are faster detection and remediation of misconfigurations, improved compliance posture, reduced risk exposure, operational efficiency, and cost savings. Overall, it has made our cloud environment more secure, compliant, and easier to manage while freeing up our teams to focus on projects instead of chasing alerts.
reviewer779877 - PeerSpot reviewer
Senior Software Engineer with 501-1,000 employees
Screens sensitive data but it should be a bigger part of an end-user device
The only improvement is that it has to be a bigger part of an end-user device. It should look at how endpoints appear on the EDR rather than creating an API to integrate into the agent app which need additional development effort. We have to integrate the source code into the system endpoint and make it as part of the connected app.
AV
Cyber security consultant at L&T Technology Services
User-friendly console integrates robust security features for seamless traffic management
Netskope serves as a single web console carrying out multiple functionalities: Zero Trust Network Architecture (ZTNA), Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), Web DLP, and firewall services. I can toggle between these features on a single platform, enhancing ease of use. In comparison, Zscaler requires multiple consoles for managing similar features. Having these functionalities integrated into one dashboard makes Netskope efficient and user-friendly.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It has great scalability."
"The initial setup was straightforward."
"Using CloudGuard, I was able to manage a multi-cloud platform based on AWS, Azure, and Google for a multinational company in Europe with only three engineers."
"Most of the features are pretty valuable, whether that's a description of the attacks or the attack graph showing the vulnerabilities. If a single tool does all this work, the value is centralizing all these functions on a single tool. These are the cloud-native applications we talk about — containers, Kubernetes, and cloud infrastructure — and all those things are the primary focus of the CNAPP solution."
"Overall, Dome9 is a good product and I haven't received any negative feedback from our customers about it."
"People implementing this solution are concerned with addressing a significant risk, and within the AWS realm, this tool does de-risk substantially."
"The dashboard is intuitive. You know if you're compliant or not, and then it gives you a remediation plan."
"It is able to bring visibility into that cloudy space where the security departments do not really see what is happening on the DevOps side. It brings visibility, security control, and standardization."
"It allows us to know where sensitive data is really stored and offers the ability to quarantine based on data types and sharing criteria."
"I like CloudLock because when data gets sent out, I do not want it to get out of the environment."
"I like CloudLock because when data gets sent out, I do not want it to get out of the environment. In today's world, a lot of users will remotely use the application. It screens all of the sensitive data. That data will really be as part of the environment that you do not want it to be part of. CloudLock is protection for sensitive data."
"The solution is very stable and reliable."
"It is a good CASB solution for protection of collaboration of content."
"CloudLock is a great solution if you use multiple cloud systems like Google, Salesforce, AWS, and so on, because you can scan all systems with one tool."
"The cloud infrastructure is the solution's most valuable feature."
"The most valuable feature of Netskope is that it is a SaaS-delivered solution."
"The client size and architectural components in Netskope are far better than other solutions."
"We are a Netskope partner; we deploy this solution and also do the demos to demonstrate the power of Netskope to our customers."
"It allows the use of cloud since we can control risks vs. just blocking access."
"Netskope is a really good product; we find most of the features to be valuable, and it gives us what we are looking for."
"The most helpful features in Netskope are the data loss prevention module, the anti-malware module, and the integration that it has with Information Rights Management from Microsoft."
"Netskope started with a cloud-first approach, which makes it adaptable to the day-to-day changes that the cloud will generate."
"The most valuable feature for us is the 360-degree visibility it provides."
 

Cons

"In Dome9, there should be a policy validation option where we can validate the policy before we push it into production."
"One feature of the product that I would like to enhance is the possibility to connect to vulnerability management platforms so that the issues that emerge from the scans can then be ingested directly into the vulnerability management process."
"The user interface needs work. Sometimes, it is a transition from the old tool to the new CNAPP Two that I currently have, and remnants of the old environment can still be detected."
"The biggest thing is the documentation aspect of Dome9 is a little lacking. They were purchased by Check Point about a year and a half to two years ago. When they integrated into Check Point's support system, a lot of the documentation that they had previously got mangled in the transition, e.g., linking to stuff on the Dome9 website that no longer exists. There are still a lot of spaces with incomplete links and stuff that is not as fully explained as it could be."
"In Dome9, there should be a policy validation option where we can validate the policy before we push it into production."
"One area that Check Point CloudGuard CNAPP could use improvement is the navigation when switching between modules."
"I would like an interface more adapted to cell phones or tablets."
"Check Point CloudGuard CNAPP can improve with more intuitive onboarding and policy templates for new users who are not accustomed to it, better customizable dashboards for different team roles, and deeper automated remediation suggestions to speed up fixes."
"The only improvement is that it has to be a bigger part of an end-user device."
"The only improvement is that it has to be a bigger part of an end-user device. It should look at how endpoints appear on the EDR rather than creating a separate agent. We have to integrate the source code into the system endpoint and make it an agent."
"The solution needs to have better integration capabilities."
"As long as this issue exists, CloudLock or any other product is only a band-aid solution."
"Like all CASB products, this product also needs to expand its capabilities and features in order to increase scope of application."
"The solution needs to have better integration capabilities. I have a lot of customers asking about how they can integrate it better."
"Deployment and policy tweaking were two areas where improvement needs to be made."
"They could improve their mobile agents as they have some limitations."
"The configuration in the cloud model could be improved upon."
"There could be better integration with other solutions."
"I deduced two points: one for their feature modification and one for the feature maturity of the solution."
"I found the support from Netskope CASB not to be responsive. There were delays and the customer was not happy because there was some critical issue."
"Netskope needs to improve its stability."
"There should be some granular custom roles that are not available. However, this is on the road map. There are many devices that do not have the Zero Trust feature and other enhancements available which they should have."
 

Pricing and Cost Advice

"It is difficult to contextualize the pricing because we are used to Indian pricing and licensing."
"The solution’s pricing is a little bit high."
"CloudGuard is fairly priced."
"I suggest that you pay attention to the product pricing because while there are no tricks, and the licensing model is transparent, the final numbers may surprise you."
"The license fee is high."
"The price is on the higher end."
"Licensing and costs are straightforward, as they have a baseline of 100 workloads within one license and no additional charges."
"From a pricing perspective, they are pretty expensive."
Information not available
"Licensing fees are paid annually."
"Pricing is a little expensive but it is affordable."
"The product's price is average."
"I wasn't involved in the initial discussions about its cost. However, within the next year, by around June, I'll need to review the vendors' quotes. Typically, our procurement team handles the process by issuing an RFP to vendors to get quotes. From there, we evaluate based on pricing and may conduct a proof of concept to assess value."
"The pricing is very flexible."
"I rate the product's price a six on a scale of one to ten, where one is expensive, and ten is low price."
"Netskope's pricing is reasonable compared to Microsoft."
"Licensing is on a yearly basis."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
885,444 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
No data available
Financial Services Firm
11%
Manufacturing Company
11%
Computer Software Company
9%
Construction Company
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business55
Midsize Enterprise18
Large Enterprise56
No data available
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise9
Large Enterprise25
 

Questions from the Community

What is your experience regarding pricing and costs for CloudGuard Workload Protection?
My experience with pricing, setup cost, and licensing has been reasonable for the value it delivers. The initial setu...
What do you like most about CloudGuard for Cloud Intelligence?
The new scanning function is a valuable feature that wasn't available until recently.
What needs improvement with CloudGuard for Cloud Intelligence?
One area that Check Point CloudGuard CNAPP could use improvement is the navigation when switching between modules. A ...
Ask a question
Earn 20 points
Which is better, Zscaler internet access or Netsckope CASB?
We researched Netskope but ultimately chose Zscaler. Netskope is a cloud access security broker that helps identify ...
What needs improvement with Netskope CASB?
Netskope's pricing is very high compared to other vendors, and compared to Zscaler, Netskope has less capability.
 

Also Known As

Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence
No data available
Netskope CASB
 

Overview

 

Sample Customers

Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners
Dominion Enterprises, Quality Distribution, Clark Construction Group LLC, Ahold, Middlesex Hospital, Austin Community College (ACC), Dominion Enterprises, The United States Holocaust Memorial Museum, Oakland Unified School District, Sunnova, Damballa, Financial Times, Boise State University
NetApp, Genomic Health, Caterpillar, Apollo, Pandora, Continental Resources, Fractal, infinera, Tesla
Find out what your peers are saying about Wiz, Tenable, Qualys and others in Vulnerability Management. Updated: February 2026.
885,444 professionals have used our research since 2012.