Try our new research platform with insights from 80,000+ expert users

Check Point CloudGuard CNAPP vs Microsoft Defender for Cloud comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jul 13, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
8.0
SentinelOne Singularity Cloud Security boosts efficiency by improving visibility, reducing costs, and decreasing time for threat detection and resolution.
Sentiment score
7.3
Check Point CloudGuard CNAPP automates security tasks, boosting efficiency, reducing costs, and improving compliance management and risk mitigation.
Sentiment score
7.3
Microsoft Defender for Cloud boosts security and efficiency, integrates with Azure, reduces costs, prevents breaches, and offers proactive defense.
The detailed information PingSafe gives about how to fix vulnerabilities reduces the time spent on remediation by about 70 to 80 percent.
After implementing SentinelOne, it takes about five to seven minutes.
The solution has provided improvement in productivity and the time spent on issues.
The compliance has improved as our overall compliance score against CIS benchmark has improved from around 72 to 92% within the first three months of adoption.
Monitoring cloud security automatically ensures a return on investment.
Defender proactively indexes and analyzes documents, identifying potential threats even when inactive, enhancing preventative security.
Identifying potential vulnerabilities has helped us avoid costly data losses.
The biggest return on investment is the rapid improvement of security posture.
 

Customer Service

Sentiment score
7.8
SentinelOne Singularity Cloud Security's customer support is highly rated for responsiveness and effective issue resolution, ensuring smooth collaboration.
Sentiment score
6.6
Check Point CloudGuard CNAPP customer service is professional with high-level commendations but improvement needed at first-level interactions.
Sentiment score
6.5
Microsoft Defender for Cloud support is responsive at higher levels, but experiences vary with mixed satisfaction due to delays.
When we send an email, they respond quickly and proactively provide solutions.
They took direct responsibility for the system and could solve queries quickly.
Having a reliable team ready and willing to assist with any issues is essential.
When I need help or have open questions, or if I require the capability to deploy a quick test environment, there are always people I can contact at Check Point to get my information or the environment as fast as I need it.
I have a dedicated support engineer and a presales engineer dedicated to me.
Customer support for Check Point CloudGuard CNAPP has been responsive and knowledgeable.
Since security is critical, we prefer a quicker response time.
The support team was very responsive to queries.
They understand their product, but much like us, they struggle with the finer details, especially with new features.
 

Scalability Issues

Sentiment score
8.2
SentinelOne Singularity Cloud Security excels in scalability, smoothly integrating accounts and auto-scaling, despite separate account management challenges.
Sentiment score
7.8
Check Point CloudGuard CNAPP offers scalable performance across cloud environments, with some users noting cost considerations but praising its capabilities.
Sentiment score
7.7
Microsoft Defender for Cloud is scalable, integrating across environments effortlessly, suitable for all enterprise sizes with flexible performance.
I would rate it a 10 out of 10 for scalability.
Scalability is no longer a concern because Cloud Native Security is a fully cloud-based resource.
I would rate the scalability of PingSafe 10 out of 10.
Check Point CloudGuard CNAPP scales efficiently in the multi-cloud environment.
I never had any performance-related issues.
We are using infrastructure as a code, so we do not have any scalability issues with Microsoft Defender for Cloud implementation because our cloud automatically does it.
It has multiple licenses and features, covering infrastructures from a hundred to five hundred virtual machines, without any issues.
Defender won't replace our endpoint XDR, but it will likely adapt and support any growth in the Microsoft Cloud space.
 

Stability Issues

Sentiment score
8.2
SentinelOne Singularity Cloud Security is highly stable but experiences minor UI glitches and occasional agent-related issues.
Sentiment score
8.2
Check Point CloudGuard CNAPP is reliable and stable with minimal maintenance, despite occasional latency and false positives.
Sentiment score
7.6
Microsoft Defender for Cloud is stable and reliable, with minimal issues mainly during updates, ensuring strong user satisfaction.
Singularity Cloud Workload Security is significantly more stable than our previous solution.
Singularity Cloud Workload Security is more stable than our previous solution.
No lag, no crashing, no downtime.
If there are errors, it is sometimes challenging to elaborate or troubleshoot since it is not transparent enough to understand what to search for.
It is rapidly evolving, and sometimes mistakes occur, necessitating testing.
Defender's stability has been flawless for us.
Microsoft Defender for Cloud is very stable.
Microsoft sometimes changes settings or configurations without transparency.
 

Room For Improvement

SentinelOne Singularity Cloud needs enhanced features, stability, better reporting, integration, and support for improved user experience and efficiency.
Check Point CloudGuard CNAPP needs improved integration, reporting, and documentation, with enhanced automation and support for multiple cloud environments.
Microsoft Defender for Cloud users seek better automation, clarity, integration, AI features, and comprehensive analytics for improved security management.
If I had to ask for anything to make it easier, it would be signed images that are GPG signed and a public repository where we can get the bits from.
If they can merge Kubernetes Security with other modules related to Kubernetes, that would help us to get more modules in the current subscription.
As organizations move to the cloud, a cloud posture management tool that offers complete cloud visibility becomes crucial for maintaining compliance.
I need more integration from the code-to-cloud principle.
It would be nice to have periodic updates on what people should do, maybe with some analysis or something.
I require consistency in the user interface to ensure everything is streamlined into the same look and feel.
Microsoft, in general, could significantly improve its communication and support.
It would be beneficial to streamline recommendations to avoid unnecessary alerts and to refine the severity of alerts based on specific environments or environmental attributes.
The artificial intelligence features could be expanded to allow the system to autonomously manage security issues without needing intervention from admins.
 

Setup Cost

SentinelOne Singularity Cloud offers competitive pricing and value, with flexibility and discounts available, though costly for large deployments.
Check Point CloudGuard CNAPP offers flexible licensing and pricing based on managed assets, with costs varying by user perspective.
Microsoft Defender for Cloud is scalable, offering free and paid versions with costs averaging $15 monthly per server.
Covering our 50,000 endpoints would have nearly bankrupted most security programs, even well-funded ones like ours.
I believe the enterprise version costs around $55 per user per year.
There are some tools that are double the cost of Cloud Native Security.
In terms of ROI, we can see time savings for audit preparation of at least 30-40%.
It is not cheap, of course, yet it is a necessity.
From a licensing and cost perspective, it is really competitive.
Every time we consider expanding usage, we carefully evaluate the necessity due to cost concerns.
We appreciate the licensing approach based on employee count rather than a big enterprise license.
Microsoft Defender for Cloud is pricey, especially for Kubernetes clusters.
 

Valuable Features

SentinelOne Singularity Cloud's ease, AI detection, and seamless integration enhance IT efficiency, risk management, and forensic visibility.
Check Point CloudGuard CNAPP offers comprehensive cloud security with automation, compliance, asset management, and user-friendly dashboards for enhanced protection.
Microsoft Defender for Cloud enhances security with AI-based threat detection, multi-cloud support, and a unified portal for comprehensive management.
Our previous product took a lot of man hours to manage. Once we got Singularity Cloud Workload Security, it freed up our time to work on other tasks.
For example, we can set up an automation alert so that if a threat is detected on an endpoint, we can automatically take action on our Okta or AD environment, such as locking the account that was signed in or forcing a password reset.
This helps visualize potential attack paths and even suggests attack paths a malicious actor might take.
One of the main reasons we use the solution is that it is great at identifying risks that are critical to our business.
The CDR helps detect anomalous behavior and respond to threats before they become an issue.
Check Point CloudGuard CNAPP offers a unified, modular platform that combines CSPM, CWPP, CIEM, code security, and cloud detection and response.
The most valuable feature for me is the variety of APIs available.
This feature significantly aids in threat detection and enhances the user experience by streamlining security management.
The most valuable feature is the recommendations provided on how to improve security.
 

Categories and Ranking

SentinelOne Singularity Clo...
Sponsored
Ranking in Vulnerability Management
5th
Ranking in Container Security
3rd
Ranking in Cloud Workload Protection Platforms (CWPP)
4th
Ranking in Cloud Security Posture Management (CSPM)
3rd
Ranking in Cloud-Native Application Protection Platforms (CNAPP)
3rd
Ranking in Compliance Management
1st
Average Rating
8.8
Reviews Sentiment
7.9
Number of Reviews
114
Ranking in other categories
Cloud and Data Center Security (2nd)
Check Point CloudGuard CNAPP
Ranking in Vulnerability Management
9th
Ranking in Container Security
10th
Ranking in Cloud Workload Protection Platforms (CWPP)
5th
Ranking in Cloud Security Posture Management (CSPM)
5th
Ranking in Cloud-Native Application Protection Platforms (CNAPP)
5th
Ranking in Compliance Management
6th
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
73
Ranking in other categories
Cloud and Data Center Security (8th), Data Security Posture Management (DSPM) (6th)
Microsoft Defender for Cloud
Ranking in Vulnerability Management
7th
Ranking in Container Security
7th
Ranking in Cloud Workload Protection Platforms (CWPP)
1st
Ranking in Cloud Security Posture Management (CSPM)
4th
Ranking in Cloud-Native Application Protection Platforms (CNAPP)
4th
Ranking in Compliance Management
5th
Average Rating
8.0
Reviews Sentiment
7.0
Number of Reviews
79
Ranking in other categories
Container Management (8th), Data Security Posture Management (DSPM) (5th), Microsoft Security Suite (7th)
 

Mindshare comparison

As of September 2025, in the Cloud Workload Protection Platforms (CWPP) category, the mindshare of SentinelOne Singularity Cloud Security is 3.6%, up from 1.4% compared to the previous year. The mindshare of Check Point CloudGuard CNAPP is 2.7%, up from 2.6% compared to the previous year. The mindshare of Microsoft Defender for Cloud is 14.3%, down from 16.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cloud Workload Protection Platforms (CWPP) Market Share Distribution
ProductMarket Share (%)
Microsoft Defender for Cloud14.3%
SentinelOne Singularity Cloud Security3.6%
Check Point CloudGuard CNAPP2.7%
Other79.4%
Cloud Workload Protection Platforms (CWPP)
 

Featured Reviews

Andrew W - PeerSpot reviewer
Tells us about vulnerabilities as well as their impact and helps to focus on real issues
Looking at all the different pieces, it has got everything we need. Some of the pieces we do not even use. For example, we do not have Kubernetes Security. We are not running any K8 clusters, so it is good for us. Overall, we find the solution to be fantastic. There can be additional education components. This may not be truly fair to them because of what the product is going for, but it would be great to see additional education for compliance. It is not a criticism of the tool per se, but anything to help non-development resources understand some of the complexities of the cloud is always appreciated. Any additional educational resources are always helpful for security teams, especially those without a development background.
Bart Coddens - PeerSpot reviewer
Evolved cloud security with active monitoring but needs interface consistency
The user interface needs work. Sometimes, it is a transition from the old tool to the new CNAPP Two that I currently have, and remnants of the old environment can still be detected. I require consistency in the user interface to ensure everything is streamlined into the same look and feel. More work is needed in fine-tuning the threat data towards your CSPM and activity logs, aligning them with business intelligence, which requires a cohesive console interface. My assessment of CloudGuard CDRs in intrusion detection and threat hunting capabilities is that it still needs some work. All the threat data that comes in, you need to fine tune it a bit.
Vibhor Goel - PeerSpot reviewer
A single tool for complete visibility and addressing security gaps
Currently, issues are structured in Microsoft Defender for Cloud at severity levels of high, critical, or warning, but these severity levels are not always right. For example, Microsoft might consider a port being open as critical, but that might not be the case for our company. Similarly, it might suggest closing some management ports, but you might need them to be able to log in, so the severity levels for certain things can be improved. Even though Microsoft Defender for Cloud provides a way to temporarily disable certain alerts or notifications without affecting our security score, it would be better to have more granularized control over these recommendations. Currently, we cannot even disable certain alerts or notifications. There should be an automated mechanism to design Azure policies based on the recommendations, possibly with AI integration. Instead of an engineer having to write a policy to fix security gaps, which is very time-consuming, there should be an inbuilt capability to auto-remediate everything and have proper control in place. Additionally, enabling Defender for Cloud at the resource group level, rather than only at the subscription level, would be beneficial.
report
Use our free recommendation engine to learn which Cloud Workload Protection Platforms (CWPP) solutions are best for your needs.
867,341 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Financial Services Firm
14%
Manufacturing Company
9%
Government
6%
Computer Software Company
12%
Financial Services Firm
11%
Manufacturing Company
7%
Educational Organization
6%
Financial Services Firm
13%
Computer Software Company
13%
Manufacturing Company
9%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business43
Midsize Enterprise21
Large Enterprise53
By reviewers
Company SizeCount
Small Business54
Midsize Enterprise17
Large Enterprise57
By reviewers
Company SizeCount
Small Business26
Midsize Enterprise8
Large Enterprise44
 

Questions from the Community

What do you like most about PingSafe?
The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...
What is your experience regarding pricing and costs for PingSafe?
I don't handle the price part, but it isn't more expensive than Palo Alto Prisma Cloud. It's not cheap, but it is wor...
What needs improvement with PingSafe?
There is scope for more application security posture management features. Additionally, the runtime protection needs ...
How is Prisma Cloud vs Azure Security Center for security?
Azure Security Center is very easy to use, integrates well, and gives very good visibility on what is happening acros...
What do you like most about Microsoft Defender for Cloud?
The entire Defender Suite is tightly coupled, integrated, and collaborative.
 

Also Known As

PingSafe
Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence
Microsoft Azure Security Center, Azure Security Center, Microsoft ASC, Azure Defender
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

Information Not Available
Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners
Microsoft Defender for Cloud is trusted by companies such as ASOS, Vatenfall, SWC Technology Partners, and more.
Find out what your peers are saying about Check Point CloudGuard CNAPP vs. Microsoft Defender for Cloud and other solutions. Updated: August 2025.
867,341 professionals have used our research since 2012.