Check Point CloudGuard CNAPP vs Google Kubernetes Engine comparison

The compared Check Point Software Technologies and Google solutions aren't in the same category. Check Point Software Technologies is ranked #9 in VM , with an average rating of 8.5, and holds a 1.5% mindshare in the category. Google is ranked #11 in CM , with an average rating of 8.1, and holds a 2.2% mindshare. Additionally, 95% of Check Point Software Technologies users are willing to recommend the solution, compared to 95% of Google users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 13, 2024

Check Point CloudGuard CNAPP and Google Kubernetes Engine are competitors in the cloud management and security sector. Google Kubernetes Engine appears to have an edge with its strong focus on containerization and integration within the Google ecosystem, which streamlines deployments and workloads.

Features: Check Point CloudGuard CNAPP's standout features include centralized firewall management, compliance integration, and auto-remediation, making it comprehensive for cloud security management. The IAM role control provides detailed access management. Google Kubernetes Engine focuses on containerization with automatic scaling, load balancing, and seamless integration with Google services like BigQuery and VertexAI, facilitating easy cluster management.

Room for Improvement: Check Point CloudGuard CNAPP needs better integration with third-party tools, improved documentation, and customizable options to decrease false positives. Google Kubernetes Engine requires enhanced monitoring, better documentation, and application-level security, as well as greater support for integrating non-Google platforms.

Ease of Deployment and Customer Service: Check Point CloudGuard CNAPP supports public, private, and hybrid clouds but could improve response times and technical expertise in customer service. Google Kubernetes Engine’s simple deployment and management are praised, though customer service has mixed reviews, especially for complex issues.

Pricing and ROI: Check Point CloudGuard CNAPP's asset-based pricing may become costly as environments expand, yet users appreciate the ROI from increased security. Google Kubernetes Engine offers a pay-as-you-go model, making it cost-effective for resource usage, though potentially expensive for high-redundancy needs due to compute resource costs.

To learn more, read our detailed Check Point CloudGuard CNAPP vs. Google Kubernetes Engine Report (Updated: October 2024).

Buyer's Guide

Check Point CloudGuard CNAPP vs. Google Kubernetes Engine

October 2024

Download the complete report

Helped 867,836 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Zafran Security

Mindshare comparison

Vulnerability Management Market Share Distribution
Product	Market Share (%)
Check Point CloudGuard CNAPP	1.5%
Wiz	10.8%
Tenable Nessus	8.0%
Other	79.7%

Vulnerability Management

Container Management Market Share Distribution
Product	Market Share (%)
Google Kubernetes Engine	2.2%
Red Hat OpenShift Container Platform	19.7%
VMware Tanzu Platform	12.1%
Other	66.0%

Container Management

Featured Reviews

Israel Cavazos Landini

Associate Director IT Security Operations at a pharma/biotech company with 10,001+ employees

Weekly insights and risk analysis facilitate informed security decisions

I appreciate the weekly insights Zafran provides, which include critical topics for networks and IT security, allowing us to evaluate which insights apply to our environment. The organization score feature is valuable to keep the leadership team updated on how our infrastructure fares security-wise. The applicable risk level versus base risk level feature is beneficial because prior to Zafran, we only used the base risk level, but now understand that risk depends on the asset itself. Zafran is an excellent tool.

Read full review

Bart Coddens

Cloud Engineer at Cloudar

Evolved cloud security with active monitoring but needs interface consistency

The user interface needs work. Sometimes, it is a transition from the old tool to the new CNAPP Two that I currently have, and remnants of the old environment can still be detected. I require consistency in the user interface to ensure everything is streamlined into the same look and feel. More work is needed in fine-tuning the threat data towards your CSPM and activity logs, aligning them with business intelligence, which requires a cohesive console interface. My assessment of CloudGuard CDRs in intrusion detection and threat hunting capabilities is that it still needs some work. All the threat data that comes in, you need to fine tune it a bit.

Read full review

Parthasarathy T

Cloud Associate DevOps at Publicis Sapient

Managed solutions enable efficient handling of web applications and migration projects

Google Kubernetes Engine can be improved by enabling the in-place upgrade of the machine type of an existing node pool since I currently need to destroy and recreate it. There is no feature present where I can upgrade directly, and having more than 1,000 to 2,000 workloads in one node pool makes changing the node pool name difficult for all those workloads. I choose eight out of ten mainly because of the node pool upgrade challenge I mentioned, but also because of the existence of Anthos service mesh, which is the ingress controller available only for the enterprise Kubernetes Engine. It would be beneficial if it could be offered in the normal Kubernetes Engine with any limitations.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Zafran is an excellent tool."

"We saw benefits from Zafran Security almost immediately after deploying it."

"Overall, we have seen about eighty-seven percent reduction of the number of vulnerabilities that require urgency to remediate, specifically the number of criticals."

"Zafran has become an indispensable tool in our cybersecurity arsenal."

"We are able to see the real risk of a vulnerability on our environment with our security tools."

"The ability to drill down to individual hosts on an account and see which ones are affected is valuable."

"The CDR helps detect anomalous behavior and respond to threats before they become an issue."

"The most valuable features of CloudGuard CNAPP are its compliance engine and auto-remediation features."

"The posture management and remediation features are the most valuable. We use GSL Builder to build custom rules in alignment with our organization's policies. CloudGuard has canned rules using multiple standard frameworks, but we also have additional rules."

"Most of the features are pretty valuable, whether that's a description of the attacks or the attack graph showing the vulnerabilities. If a single tool does all this work, the value is centralizing all these functions on a single tool. These are the cloud-native applications we talk about — containers, Kubernetes, and cloud infrastructure — and all those things are the primary focus of the CNAPP solution."

"I value the comfort and the ability to receive proper insights almost hands-off."

"It offers security insights and recommendations to assist organizations in acting and remediating issues swiftly."

"I can take proactive actions based on an alert without having to interact with the platform directly."

More Check Point CloudGuard CNAPP pros

"The product has valuable security features. It can connect with multiple DevOps tools."

"The feature that I like the most is the ease of use as compared to AWS. Its ease of use is very high, and I can quickly deploy clusters with a simple template."

"The solution is more user-friendly than AWS or Azure. I can also easily scale out the service in the future when the number of customers grows. GKE is the leader of Kubernetes service and it can be easily updated. I love the tool's user interfaces."

"The initial setup process is simpler and more user-friendly than other cloud providers."

"On the tip of a command, you can scale in or scale out, and it offers every robust platform to implement DevOps processes for your automation solutions. The product fully supports the IaC concept."

"The main advantage of GKE is that it is a managed service. This means that Google is responsible for managing the master node in the Kubernetes cluster system. As a result, we can focus on deploying applications to the slaves, while Google handles any updates and security patches. The fact that GKE is fully integrated into the Google ecosystem, including solutions such as BigQuery and VertexAI. This makes it easier for us to integrate these tools into our process. This integration ultimately speeds up our time to market and reduces the time and effort spent on managing infrastructure. The managed aspect of GKE allows us to simply deploy and utilize it without having to worry about the technicalities of infrastructure management."

"The product has no downtime."

"GKE's plugin management and configuration sync are excellent features. The amount of data it provides is good, and I've been able to integrate it with the things I need."

More Google Kubernetes Engine pros

Cons

"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."

"The dashboarding and reporting functionality of Zafran Security is an area that definitely could use some improvements."

"I think the ability to have some enhanced reporting capabilities is something they can improve on, as they have good reports but we have asked for some specific reporting enhancements."

"We're looking for a solution that can incorporate legacy infrastructure for some of our business needs."

"The user interface needs work."

"The tool should incorporate more use cases like improving security scores. It should also improve documentation."

"Down the road, we would like to see automation. That is probably a feature that most people want. If they can automate patching a vulnerability, it will be much easier."

"They take time to respond or coordinate a meeting since they maintain a schedule that does not fit Latin America very well."

"Currently, worldwide, there are many companies of all sizes that do not understand the value that their data has, but even with all existing clouds, they also do not understand what the shared responsibility model is. They only assume that by having a cloud, the provider must ensure safety, when the truth is that the providers only secure their sites. Everything we do in the cloud and how we configure it is actually our responsibility."

"CloudGuard could be more customizable. It has built-in standards for things like GDPR compliance. But depending on your business lane, you might want to build your own controls based on your own standards."

"The accuracy of its remediation is a 7.5 out of 10. Before, I would have given it a ten but now, to handle remediation for fully qualified domain names, it's not working as it did in the past. We're finding some difficulties there."

More Check Point CloudGuard CNAPP cons

"The product's integration with third-party vendors needs improvement."

"It needs to support load balancing."

"The product could be cheaper."

"The pricing could be more competitive. It should be cheaper."

"The product's stability is an area of concern where improvements are required."

"The product’s visible allocation feature needs improvement."

"Their documentation is a little here and there. Sometimes, the information is not clear or updated. Their documentation should be a little bit better."

"The monitoring part requires some serious improvements in Google Kubernetes Engine, as it does not have very good monitoring consoles."

More Google Kubernetes Engine cons

Pricing and Cost Advice

Information not available

"Its price is very fair."

"We have the enterprise-level license and we renew it annually because it is worth the cost."

"The license for CloudGuard Posture Management is about $80 a year, and it's based on your cloud footprint, not the number of users. So you could have a million users, and it doesn't matter."

"Check Point CloudGuard Posture Management is expensive."

"Right now, we have licenses on 500 machines, and they are not cheap."

"CloudGuard is fairly priced."

"They support either annual licensing or hourly. At the time of our last negotiation, it was either one or the other, you could not mix or match. I would have liked to mix/match. "

"From a pricing perspective, they are pretty expensive."

More Check Point CloudGuard CNAPP pricing and cost advice

"I would rate the solution's pricing a nine out of ten. The tool costs around 3000 dollars per month. There are no additional costs apart from these."

"Pricing is a bit expensive compared to some other products, but it's acceptable."

"Initially, Google Kubernetes Engine was a little bit cheaper, but now its prices have been increased compared to the pricing model and the features that are made available by its competitors."

"Its pricing is good. They bill us only per user. That's nice."

"The price for Google Kubernetes Engine could be lower - I'd rate its pricing at three out of five."

"The pricing for GKE is dependent on the type of machine or virtual machine (VM) that is selected for the nodes in the cluster. There is a degree of flexibility in choosing the specifications of the machine, such as the number of CPUs, GPUs, and so on. Google provides a variety of options, allowing the user to create the desired cluster composition. However, the cost can be quite steep when it comes to regional clusters, which are necessary for high availability and failover. This redundancy is crucial for businesses and is required to handle an increase in requests in case of any issues in one region, such as jumping to a different region in case of a failure in the Toronto region. While it may be tempting to choose the cheapest type of machines, this may result in a limited capacity and user numbers, requiring over-provisioning to handle additional requests, such as those for a web application."

"The tool's licensing costs are yearly."

"The product is a little bit expensive."

More Google Kubernetes Engine pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.

See recommendations

867,836 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

11%

Computer Software Company

10%

Manufacturing Company

Government

Computer Software Company

12%

Financial Services Firm

11%

Manufacturing Company

Educational Organization

Financial Services Firm

24%

Computer Software Company

Retailer

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

By reviewers
Company Size	Count
Small Business	54
Midsize Enterprise	17
Large Enterprise	57

By reviewers
Company Size	Count
Small Business	20
Midsize Enterprise	6
Large Enterprise	15

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?

Since we stood Zafran Security up in our private cloud, we handle the maintenance on our side. As we opted not to use...

See all answers

What needs improvement with Zafran Security?

In terms of areas for improvement, Zafran Security is doing a really great job as a new and emerging company. Oftenti...

See all answers

What is your primary use case for Zafran Security?

My use cases for Zafran Security revolve around two primary areas. One is around vulnerability management and priorit...

See all answers

What is your experience regarding pricing and costs for CloudGuard Workload Protection?

My experience with pricing, setup cost, and licensing is that the pricing model is flexible and consumption-based, wh...

See all answers

What do you like most about CloudGuard for Cloud Intelligence?

The new scanning function is a valuable feature that wasn't available until recently.

See all answers

What needs improvement with CloudGuard for Cloud Intelligence?

There is a lack of functionalities and usability. I used to compare it with another solution that is focused on speci...

See all answers

What do you like most about Google Kubernetes Engine?

The product has no downtime.

See all answers

What is your experience regarding pricing and costs for Google Kubernetes Engine?

My experience with pricing, setup cost, and licensing for Google Kubernetes Engine is straightforward, as I previousl...

See all answers

What needs improvement with Google Kubernetes Engine?

Google Kubernetes Engine can be improved by enabling the in-place upgrade of the machine type of an existing node poo...

See all answers

Comparisons

Wiz Code vs Zafran Security

Compared 37% of the time

Vulcan Cyber vs Zafran Security

Compared 16% of the time

Tenable Vulnerability Management vs Zafran Security

Compared 9% of the time

Nucleus vs Zafran Security

Compared 7% of the time

Qualys VMDR vs Zafran Security

Compared 7% of the time

More Zafran Security Competitors

Wiz vs Check Point CloudGuard CNAPP

Compared 15% of the time

Prisma Cloud by Palo Alto Networks vs Check Point CloudGuard CNAPP

Compared 14% of the time

SentinelOne Singularity Cloud Security vs Check Point CloudGuard CNAPP

Compared 7% of the time

AWS GuardDuty vs Check Point CloudGuard CNAPP

Compared 5% of the time

Cloudflare vs Check Point CloudGuard CNAPP

Compared 5% of the time

More Check Point CloudGuard CNAPP Competitors

Red Hat OpenShift Container Platform vs Google Kubernetes Engine

Compared 25% of the time

Akamai Connected Cloud (Linode) vs Google Kubernetes Engine

Compared 15% of the time

Docker vs Google Kubernetes Engine

Compared 15% of the time

VMware Tanzu Platform vs Google Kubernetes Engine

Compared 15% of the time

Rancher Labs vs Google Kubernetes Engine

Compared 13% of the time

More Google Kubernetes Engine Competitors

Product Reports

Buyer's Guide

Zafran Security

August 2025

Download Zafran Security product report

Buyer's Guide

Check Point CloudGuard CNAPP

September 2025

Download Check Point CloudGuard CNAPP product report

Buyer's Guide

Google Kubernetes Engine

September 2025

Download Google Kubernetes Engine product report

Also Known As

No data available

Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence

GKE

Overview

Zafran Security integrates with existing security tools to identify and mitigate vulnerabilities effectively, proving that most critical vulnerabilities are not exploitable, optimizing threat management.

Zafran Security introduces an innovative operating model for managing security threats and vulnerabilities. By leveraging the threat exposure management platform, it pinpoints and prioritizes exploitable vulnerabilities, reducing risk through immediate remediation. This platform enhances your hybrid cloud security by normalizing vulnerability signals and integrating specific IT context data, such as CVE runtime presence and internet asset reachability, into its analysis. No longer reliant on patch windows, Zafran Security allows you to manage risks actively.

What are the key features of Zafran Security?

Threat Exposure Management: Utilizes existing tools to prioritize vulnerabilities and manage threats.
Integrative Analysis: Combines security data with IT context for precise vulnerability management.
Real-time Risk Reduction: Enables immediate risk management without waiting for patches.
Hybrid Cloud Compatibility: Functions across diverse cloud environments for comprehensive security.

What benefits can users expect from Zafran Security?

Improved Security: Enhances protection by efficiently identifying and mitigating risks.
Cost Efficiency: Reduces unnecessary patching expenses by confirming non-exploitable vulnerabilities.
Time Savings: Frees developers to focus on root causes by handling immediate threats.
Comprehensive Insight: Offers a holistic view of security threats and vulnerabilities.

In industries where security is paramount, such as finance and healthcare, Zafran Security provides invaluable protection by ensuring that only exploitable vulnerabilities are addressed. It allows entities to maintain robust security measures while allocating resources efficiently, fitting seamlessly into existing security strategies.

Zafran Security

Check Point CloudGuard CNAPP offers comprehensive cloud security with features like dynamic access control, asset protection, and compliance checks, tailored for organizations seeking enhanced governance across AWS, Azure, and GCP platforms.

Check Point CloudGuard CNAPP provides robust capabilities, including centralized firewall management, IAM scanning, and real-time visibility. Its strengths lie in predictive visualization, threat intelligence, and auto-remediation, making it a valuable tool for risk mitigation and compliance management. The platform's integration and responsiveness enhance cloud security, ensuring alignment with industry standards and effective threat protection.

What are the key features of Check Point CloudGuard CNAPP?

Dynamic Access Control: Enables granular security permissions for cloud resources.
Asset Protection: Safeguards cloud assets from unauthorized access and threats.
Compliance Checks: Ensures alignment with industry regulations like PCI DSS and SOC 2.
Centralized Firewall Management: Simplifies firewall rule configuration across cloud environments.
IAM Scanning: Audits and secures identity and access management configurations.
Real-Time Visibility: Provides insights into cloud environments for proactive threat detection.

What benefits and ROI should you expect from Check Point CloudGuard CNAPP?

Threat Intelligence: Identifies and mitigates potential risks before exploitation.
Auto-Remediation: Automates responses to security incidents, reducing manual intervention.
Intuitive Interface: Simplifies management and enhances operational efficiency.
Posture Management: Maintains strong security posture through continuous assessment.

Organizations in finance, healthcare, and retail frequently implement Check Point CloudGuard CNAPP for compliance and security across cloud environments. It assists with workload protection, threat detection, and regulatory obligation fulfillment, proving effective for securing applications and monitoring API interactions.

Check Point Software Technologies

Kubernetes Engine is a managed, production-ready environment for deploying containerized applications. It brings our latest innovations in developer productivity, resource efficiency, automated operations, and open source flexibility to accelerate your time to market.

Google

Sample Customers

Information Not Available

Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners

Philips Lighting, Alpha Vertex, GroupBy, BQ

Buyer's Guide

Check Point CloudGuard CNAPP vs. Google Kubernetes Engine

October 2024

Free Report: Check Point CloudGuard CNAPP vs. Google Kubernetes Engine

Find out what your peers are saying about Check Point CloudGuard CNAPP vs. Google Kubernetes Engine and other solutions. Updated: October 2024.

DOWNLOAD NOW

867,836 professionals have used our research since 2012.

See our Check Point CloudGuard CNAPP vs. Google Kubernetes Engine report.

We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.