No more typing reviews! Try our Samantha, our new voice AI agent.

Check Point CloudGuard CNAPP vs Google Cloud Armor comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Check Point CloudGuard CNAPP
Ranking in Cloud and Data Center Security
9th
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
72
Ranking in other categories
Vulnerability Management (13th), Container Security (11th), Cloud Workload Protection Platforms (CWPP) (6th), Cloud Security Posture Management (CSPM) (6th), Cloud-Native Application Protection Platforms (CNAPP) (6th), Data Security Posture Management (DSPM) (7th), Compliance Management (6th)
Google Cloud Armor
Ranking in Cloud and Data Center Security
14th
Average Rating
8.0
Reviews Sentiment
7.7
Number of Reviews
2
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of March 2026, in the Cloud and Data Center Security category, the mindshare of Check Point CloudGuard CNAPP is 2.1%, up from 0.9% compared to the previous year. The mindshare of Google Cloud Armor is 1.1%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cloud and Data Center Security Mindshare Distribution
ProductMindshare (%)
Check Point CloudGuard CNAPP2.1%
Google Cloud Armor1.1%
Other96.8%
Cloud and Data Center Security
 

Featured Reviews

reviewer2751468 - PeerSpot reviewer
Assistant Manager at a computer software company with 201-500 employees
Boosts security and compliance in multi-cloud environments while real-time threat detection enhances risk management
Check Point CloudGuard CNAPP flagged a misconfiguration in our AWS S3 bucket that had overly permissive access settings. That configuration could have exposed our sensitive data to the public internet. The platform not only identified the issue but also provided remediation that our team was able to apply immediately. This prevented a potential data exposure. Check Point CloudGuard CNAPP offers a unified, modular platform that combines CSPM, CWPP, CIEM, code security, and cloud detection and response. The agentless workload posture, real-time threat detection and response, multi-cloud coverage and visibility, compliance automation, and one-click remediations stand out as its best features. I find myself relying on the risk management engine and prioritization the most day-to-day. In any cloud environment, you are flooded with findings, misconfigurations, vulnerabilities, and compliance gaps. Without prioritization, it is overwhelming for our team to take care of the posture. CloudGuard's risk scoring helps us cut through incidents. This makes remediation faster and focused instead of wasting time checking every alert. We get to fix the issues that pose real business risks. Check Point CloudGuard CNAPP has positively impacted our organization at a significant level. We get greater visibility and control across all our cloud environments. Some biggest benefits we have seen are faster detection and remediation of misconfigurations, improved compliance posture, reduced risk exposure, operational efficiency, and cost savings. Overall, it has made our cloud environment more secure, compliant, and easier to manage while freeing up our teams to focus on projects instead of chasing alerts.
AnupChapalgaonkar - PeerSpot reviewer
Cloud Solution Architect at Tech Mahindra Limited
Bot management tool enhances defense capabilities against DDoS and SQL injections
This solution is a bot management tool that provides extensive capabilities for Cloud Armor. It helps with DDoS defense and OWASP for SQL injections and cross-site scripting. We can rewrite these rule sets for DDoS protection. Integration with Cisco WAF is possible. It is scalable and integrates with Google's Kubernetes for easier scaling processes. It includes AI features like auditing and logging for troubleshooting.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The product enables us to check the information that goes out of the company."
"The reporting is quite good; it is the most powerful aspect of this solution and it's user-friendly."
"It learns from behavior, attacks, management, detections, captures packets, real-time analysis, et cetera. It's generating knowledge from a variety of sources for an excellent analysis."
"It offers security insights and recommendations to assist organizations in acting and remediating issues swiftly."
"It helps us to analyze vulnerabilities way before they get installed in production and the web. It gives us more security in the production environment."
"Assets Management as it provide complete visibility of our workload inkling EC2 instance or Serverless"
"On Dome9, you can have reports on compliance, users created, and EAM access to the cloud infrastructure. For example, if some machine is exposed to the Internet, importing and exporting to the Internet when it shouldn't, we get immediate alerts if someone does this type of configuration by mistake. Dome9 is very important because AWS doesn't protect us for this. It is the client's responsibility to make sure that we don't export things to the Internet. This solution helps us ensure that we comply with our security measures."
"The Compliance engine has helped put our auditors and senior executives at ease, as we can quickly and accurately measure ourselves against hundreds of compliance checks to include CIS benchmarks, PCI, and other best practices."
"This solution is a bot management tool that provides extensive capabilities for Cloud Armor."
"We utilize Google Cloud Armor alongside our Cloud Load Balancer to safeguard against DDoS attacks. This setup acts as a local Layer 7 proxy provided by Google, allowing us to predict and mitigate DDoS threats effectively."
"It helps with DDoS defense and OWASP for SQL injections and cross-site scripting."
 

Cons

"Adding a feature that allows me to easily identify the changes that have been made to the CIS benchmark and update my own policy accordingly would be a valuable addition to Check Point CloudGuard Posture Management."
"The software configurations theory is complicated, and without proper planning and a well-skilled technical team, it cannot perform its tasks properly."
"The license cost is expensive and has room for improvement."
"CloudGuard could be improved by including integration with vendors other than AWS, especially Azure, especially in permissions."
"The integration process could be enhanced by enabling integration at the organizational level rather than requiring the manual setup of individual accounts."
"In general, we abandoned this solution this year. Each component of this solution, in my opinion, could be improved."
"It should have some options to activate API calls to the platform in the cloud, another improvement would be that when the rules are colonized and they want to be published."
"It feels somewhat fractured to me. I haven't grasped all the parts yet, and better integration would make CNAPP most valuable."
"There are some discrepancies within billing, which makes the product average."
"There are some discrepancies within billing, which makes the product average."
"I believe Google Cloud Armor can benefit from enhancements of AI and automation."
 

Pricing and Cost Advice

"It is a very straightforward licensing model that is based on the number of assets you are discovering and managing with the solution."
"The license for CloudGuard Posture Management is about $80 a year, and it's based on your cloud footprint, not the number of users. So you could have a million users, and it doesn't matter."
"From a pricing perspective, they are pretty expensive."
"The licensing part still needs some work. The issue that I have is that we do not use all the services in the cloud, but sometimes, CloudGuard identifies them as an asset."
"We have the enterprise-level license and we renew it annually because it is worth the cost."
"The tool's pricing is moderate. Its licensing costs are yearly."
"The licensing and costs are straightforward, as they have a baseline of 100 workloads (number of instances) within one license with no additional nor hidden charges. If you want to have 200 workloads under Dome9, then you need to take out two licenses for that. Also, it does not have any impact on cloud billing, as data is shared using the API call. This is well within the limit of free API calls provided by the cloud provider."
"Check Point CloudGuard Posture Management is expensive."
"I would rate the pricing of Google Cloud Armor around 7 on a scale of 10. As for the licensing costs, I'm not directly involved in billing, so I don't have specific details on that aspect. We have a partner agreement with Google, which gives us a discounted price for using Cloud Armor."
report
Use our free recommendation engine to learn which Cloud and Data Center Security solutions are best for your needs.
885,311 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
10%
Manufacturing Company
8%
Computer Software Company
7%
Outsourcing Company
7%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business55
Midsize Enterprise18
Large Enterprise56
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for CloudGuard Workload Protection?
My experience with pricing, setup cost, and licensing has been reasonable for the value it delivers. The initial setup cost was fair. Understanding the right modules and tiers took a bit of plannin...
What do you like most about CloudGuard for Cloud Intelligence?
The new scanning function is a valuable feature that wasn't available until recently.
What needs improvement with CloudGuard for Cloud Intelligence?
One area that Check Point CloudGuard CNAPP could use improvement is the navigation when switching between modules. A more streamlined interface and a quicker drill-down into findings would make the...
What do you like most about Google Cloud Armor?
We utilize Google Cloud Armor alongside our Cloud Load Balancer to safeguard against DDoS attacks. This setup acts as a local Layer 7 proxy provided by Google, allowing us to predict and mitigate D...
What is your experience regarding pricing and costs for Google Cloud Armor?
We have to maintain the solution with the least cost. One to two people are fine, one being an SME and one being a senior SME.
What needs improvement with Google Cloud Armor?
There are some discrepancies within billing, which makes the product average. We have not proceeded with the ROI analysis right now, so I cannot comment on it.
 

Also Known As

Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence
No data available
 

Overview

 

Sample Customers

Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners
Information Not Available
Find out what your peers are saying about Check Point CloudGuard CNAPP vs. Google Cloud Armor and other solutions. Updated: March 2026.
885,311 professionals have used our research since 2012.