We performed a comparison between Check Point CloudGuard Posture Management and CrowdStrike Falcon Cloud Security based on our users’ reviews in five categories. After reading all of the collected data, you can find our conclusion below.
Features: Check Point CloudGuard Posture Management provides complete 360 security, granular reports, a governance and administration portal, and automated compliance checks. CrowdStrike Falcon Cloud Security was lauded for its strong adherence to security best practices. It particularly excels in endpoint protection and its ability to leverage machine learning and AI. Check Point CloudGuard Posture Management could benefit from expanded reporting, better investigation of security events, reduced price, and additional features for vulnerability assessments and integration. CrowdStrike Falcon Cloud Security could improve its Kubernetes and GCP support.
Service and Support: Some customers have had positive experiences with Check Point CloudGuard Posture Management, while others have reported delays and said the technical support needs improvement. CrowdStrike Falcon Cloud Security users are generally content with the support team's assistance and promptness.
Ease of Deployment: Check Point CloudGuard Posture Management may require professional deployment. The setup for CrowdStrike Falcon Cloud Security was deemed easy, but some users struggled with the Kubernetes implementation.
Pricing: Check Point’s pricing has received mixed reviews. Some users say Check Point is affordable, but others say the price could be lower. Users consider the pricing of CrowdStrike Falcon Cloud Security to be fair, but it may be pricier than on-premises alternatives.
ROI: Check Point CloudGuard Posture Management delivers an excellent ROI and valuable compliance solutions. Users have provided limited feedback about the return on investment for CrowdStrike Falcon Cloud Security.
"The vulnerability management modules and the discovery and inventory are the most valuable features. Before using Wiz, it was a very manual process for both. After implementing it, we're able to get all of the analytics into a single platform that gives us visibility across all the systems in our cloud. We're able to correspond and understand what the vulnerability landscape looks like a lot faster."
"The product supports out-of-the-box reporting with context about the asset and allows us to perform complex custom queries on UI."
"Out of all the features, the one item that has been most valuable is the fact that Wiz puts into context all the pieces that create an issue, and applies a particular risk evaluation that helps us prioritize when we need to address a misconfiguration, vulnerability, or any issue that would put our environment into risk."
"The solution is very user-friendly."
"With Wiz, we get timely alerts for leaked data or any vulnerabilities already existing in our environment."
"Our most important features are those around entitlement, external exposure, vulnerabilities, and container security."
"The first thing that stood out was the ease of installation and the quick value we got out of the solution."
"The CSPM module has been the most effective. It was easy to deploy and covered all our accounts through APIs, requiring no agents. Wiz provides instant visibility into high-level risks that we need to address."
"The reporting against compliance is an important feature that helps you comply with policies and standards within your organization."
"The most valuable features of CloudGuard CNAPP are its compliance engine and auto-remediation features."
"The solution offers an excellent price, benefit, and installation relationship."
"Auto remediation is a very effective feature that helps ensure less manual intervention."
"The feature that I find most valuable is the blocking feature."
"The most valuable feature is the single dashboard that enables us to manage the entire cloud environment from one place."
"The most valuable feature of Check Point CloudGuard Posture Management is the training."
"The posture management and remediation features are the most valuable. We use GSL Builder to build custom rules in alignment with our organization's policies. CloudGuard has canned rules using multiple standard frameworks, but we also have additional rules."
"There is a lot that it can do, but endpoint protection is the main thing about it. The fact that it uses machine learning and artificial intelligence to monitor and remediate the issues in real-time is probably the bread and butter of the product."
"CrowdStrike utilizes signatureless technology, eliminating the need for regular signature updates on endpoint systems."
"It's easy to gather insights and conduct analysis about existing threats."
"Cloud security is one valuable feature. Spotlight is the other one. There is also vulnerability management and a couple of more features."
"The RTR feature stands out as particularly valuable to me due to its capability to log into machines."
"It is fully cloud-based, so we don't need to invest in third-party agents repeatedly."
"The most significant benefit is how quickly malware and other malicious attacks are detected."
"Cloud security posture management (CSPM) is most valuable."
"We would like to see improvements to executive-level reporting and data reporting in general, which we understand is being rolled out to the platform."
"Wiz's reporting capabilities could be refined a bit. They are making headway on that, but more executive-style dashboards would be nice. They just implemented a community aspect where you can share documents and feedback. This was something users had been requesting for a while. They are listening to customer feedback and making changes."
"The only small pain point has been around some of the logging integrations. Some of the complexities of the script integrations aren't supported with some of the more automated infrastructure components. So, it's not as universal. For example, they have great support for cloud formation and other services, but if you're using another type of management utility or governance language for your infrastructure-as-code automation components, it becomes a little bit trickier to navigate that."
"The reporting isn't that great. They have executive summaries, but it's only a compliance report that maps all current issues to specific controls. Whether you look at one subscription or project, regardless of the size, you will get a multipage report on how the issues in that account map to that control. Our CSO isn't going to read through that. He won't filter that out or show that to his leadership and say, "Here's what we're doing." It isn't a helpful report. They're working on it, but it's a poor executive summary."
"The solution's container security could be improved."
"The remediation workflow within the Wiz could be improved."
"We're looking at some of the data compliance stuff that they've got Jon offer. I know they're looking at container security, which we gonna be looking at next."
"One significant issue is that the searches are case-sensitive, so finding a misconfigured resource can become very challenging."
"The rules are not well-tuned, and many of them generate false positives or nonsensical results."
"Check Point tools need to improve the latency in the portal since they take a long time to load."
"They take time to respond or coordinate a meeting since they maintain a schedule that does not fit Latin America very well."
"The main issue that we found with Dome9 is that we have a default rule set with better recommendations that we want to use. So, you do a clone of that rule set, then you do some tweaks and customizations, but there is a problem. When they activate the default rule set with the recommendations and new security measures, it doesn't apply the new security measures to your clones profile. Therefore, you need to clone the profile again. We are already writing a report to Check Point."
"I would like to see tighter integration with other compliance tools, like Chef Compliance, in addition to Inspector."
"Making basic rules is easy, but it's complex if you want to do something a little more nuanced. I've been unable to make some rules that I wanted. I couldn't evaluate some values or parameters of the components I look for. I haven't always been able to assess them."
"You do need to pay extra in order to get better support."
"Currently, I would like this solution extended to cellular devices or tablets."
"The only challenge lies in token verification."
"The UI part needs to be improved."
"It would be more convenient if there was an easier way to install CrowdStrike, perhaps through better integration with Active Directory."
"There should be cloud storage scanning. We would like to have cloud storage vulnerability and threat management on any cloud storage."
"One area for improvement in Falcon Cloud Security is the support portal."
"Incorporating threat intelligence into the system would be a valuable addition."
"It gets the work done, but the main problem with the solution is that if you remediate anything, it takes 45 days for you to get any of the features displayed on the dashboard. This is the real weakness of CrowdStrike. Their customer support is also not ready to help with it. If you remediate any cloud vulnerability that they are giving you, such as removing a host from your organization, it takes around 45 days for them to remove it from their console."
"The CrowdStrike dashboard currently lacks a username field."
More CrowdStrike Falcon Cloud Security Pricing and Cost Advice →
Check Point CloudGuard CNAPP is ranked 4th in Cloud Security Posture Management (CSPM) with 60 reviews while CrowdStrike Falcon Cloud Security is ranked 8th in Cloud Security Posture Management (CSPM) with 13 reviews. Check Point CloudGuard CNAPP is rated 8.6, while CrowdStrike Falcon Cloud Security is rated 8.8. The top reviewer of Check Point CloudGuard CNAPP writes "Threat intel integration provides us visibility in case any workload is communicating with suspicious or blacklisted IPs". On the other hand, the top reviewer of CrowdStrike Falcon Cloud Security writes "Enhances the overall safety of our company's environment from cyber threats". Check Point CloudGuard CNAPP is most compared with Prisma Cloud by Palo Alto Networks, AWS GuardDuty, Microsoft Defender for Cloud, Qualys VMDR and Tenable Security Center, whereas CrowdStrike Falcon Cloud Security is most compared with Prisma Cloud by Palo Alto Networks, AWS GuardDuty, Qualys VMDR, Akamai Guardicore Segmentation and Sysdig Falco. See our Check Point CloudGuard CNAPP vs. CrowdStrike Falcon Cloud Security report.
See our list of best Cloud Security Posture Management (CSPM) vendors, best Cloud-Native Application Protection Platforms (CNAPP) vendors, and best Cloud Workload Protection Platforms (CWPP) vendors.
We monitor all Cloud Security Posture Management (CSPM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
