

Check Point CloudGuard CNAPP and Microsoft Defender for Cloud Apps compete in the cloud security and application protection category. Microsoft Defender for Cloud Apps holds an advantage due to its integration capabilities and threat detection features, providing a seamless experience for users already embedded in the Microsoft ecosystem.
Features: Check Point CloudGuard CNAPP offers dynamic access control, predictive visualization, and a compliance engine, enabling secure and visual security management. Microsoft Defender for Cloud Apps provides robust threat detection, identity security posture, and unified policies across Microsoft products, allowing for smooth application access monitoring.
Room for Improvement: Check Point CloudGuard CNAPP could enhance third-party tool integration, improve reporting options, and address false positives. Microsoft Defender for Cloud Apps may improve its reporting capabilities, third-party integration, and granularity of security alerts, while also refining its threat detection to reduce false positives.
Ease of Deployment and Customer Service: Check Point CloudGuard CNAPP features smooth deployment across cloud environments but could improve its customer support responsiveness. Microsoft Defender for Cloud Apps benefits from tight integration within Microsoft’s ecosystem, making it easier for existing users, though it could enhance response times and communication clarity.
Pricing and ROI: Check Point CloudGuard CNAPP, with flexible licensing models based on asset count, is seen as costly, offering ROI through reduced compliance efforts. Microsoft Defender for Cloud Apps, often bundled with Microsoft 365 E3/E5 licenses, is cost-effective for existing users and provides ROI through data protection and integration benefits.
The compliance has improved as our overall compliance score against CIS benchmark has improved from around 72 to 92% within the first three months of adoption.
This helped my team cut manual review time by roughly twenty to twenty-five percent, allowing me to reallocate effort to proactive cloud security improvements.
Monitoring cloud security automatically ensures a return on investment.
The biggest return on investment so far has been visibility, knowing what we have in our environment.
As a small team, Microsoft Defender for Cloud Apps allowed us to manage systems with just one or two people.
We have at least saved the costs we had from the Netskope solution this year.
When I need help or have open questions, or if I require the capability to deploy a quick test environment, there are always people I can contact at Check Point to get my information or the environment as fast as I need it.
I have a dedicated support engineer and a presales engineer dedicated to me.
Customer support for Check Point CloudGuard CNAPP has been responsive and knowledgeable.
Their customer service is pretty good, but it's frustrating to go through three or four channels before reaching the right person.
The support is excellent, and the speed of response is commendable.
There were instances where the engineers were knowledgeable and helpful, but at other times it felt like a ping pong game, with unnecessary transfers until the right person was found.
Visibility scales without performance issues as my environment expands.
Check Point CloudGuard CNAPP scales efficiently in the multi-cloud environment.
I never had any performance-related issues.
For what I know about the log collector and how much data it can take in, it is super scalable and capable of handling high workloads.
Microsoft Defender for Cloud Apps is very scalable, provided you have the right subscription.
In my experience, Microsoft Defender for Cloud Apps is good enough for small to medium businesses.
If there are errors, it is sometimes challenging to elaborate or troubleshoot since it is not transparent enough to understand what to search for.
It is rapidly evolving, and sometimes mistakes occur, necessitating testing.
I would rate it a ten because I have not experienced any stability issues so far with Defender for Cloud Apps.
I would assess the stability and reliability of Microsoft Defender for Cloud Apps as stable
My impression on the stability and reliability of Microsoft Defender for Cloud Apps is that it is very stable.
I need more integration from the code-to-cloud principle.
It would be nice to have periodic updates on what people should do, maybe with some analysis or something.
I require consistency in the user interface to ensure everything is streamlined into the same look and feel.
For data loss prevention, it would be useful to be able to drill down into the kind of data being transferred over CloudApp.
Defender typically connects to Entra ID, but we have local users on the cloud for database access, SSH, or RDS, and there is nothing produced by Defender regarding those local IAM users.
Microsoft Defender for Cloud Apps would benefit if Microsoft allows users to fine-tune false positives, enabling us to dismiss alerts or make adjustments so that such things don't trigger multiple times in the future.
In terms of ROI, we can see time savings for audit preparation of at least 30-40%.
It is not cheap, of course, yet it is a necessity.
From a licensing and cost perspective, it is really competitive.
The pricing for Microsoft Defender for Cloud Apps is acceptable.
My organization is currently revisiting pricing, but previously, the cost was a bit expensive, yet comparable to other solutions with similar functionalities and features.
It's not the cheapest, but also not the most expensive, placing it in the mid-level range.
One of the main reasons we use the solution is that it is great at identifying risks that are critical to our business.
The CDR helps detect anomalous behavior and respond to threats before they become an issue.
Check Point CloudGuard CNAPP offers a unified, modular platform that combines CSPM, CWPP, CIEM, code security, and cloud detection and response.
It provides excellent suggestions and options for configuration; for example, it can track suspicious files getting uploaded to cloud resources on Azure based on their signatures, generating alerts for those files.
The product recommends things that need to be blocked and allows for dynamic configuration, which cuts down on potential issues that might arise from going through lists and understanding what needs to be blocked.
The ability to sanction unsanctioned apps using Secure Score benchmarking, included in Cloud, is also beneficial.
| Product | Mindshare (%) |
|---|---|
| Check Point CloudGuard CNAPP | 1.2% |
| Wiz | 6.4% |
| Tenable Nessus | 4.9% |
| Other | 87.5% |
| Product | Mindshare (%) |
|---|---|
| Microsoft Defender for Cloud Apps | 6.0% |
| Netskope | 14.4% |
| Prisma Access by Palo Alto Networks | 14.3% |
| Other | 65.3% |
| Company Size | Count |
|---|---|
| Small Business | 55 |
| Midsize Enterprise | 18 |
| Large Enterprise | 56 |
| Company Size | Count |
|---|---|
| Small Business | 15 |
| Midsize Enterprise | 10 |
| Large Enterprise | 19 |
Check Point CloudGuard CNAPP offers comprehensive cloud security with features like dynamic access control, asset protection, and compliance checks, tailored for organizations seeking enhanced governance across AWS, Azure, and GCP platforms.
Check Point CloudGuard CNAPP provides robust capabilities, including centralized firewall management, IAM scanning, and real-time visibility. Its strengths lie in predictive visualization, threat intelligence, and auto-remediation, making it a valuable tool for risk mitigation and compliance management. The platform's integration and responsiveness enhance cloud security, ensuring alignment with industry standards and effective threat protection.
What are the key features of Check Point CloudGuard CNAPP?Organizations in finance, healthcare, and retail frequently implement Check Point CloudGuard CNAPP for compliance and security across cloud environments. It assists with workload protection, threat detection, and regulatory obligation fulfillment, proving effective for securing applications and monitoring API interactions.
Microsoft Defender for Cloud Apps is a comprehensive security solution that provides protection for cloud-based applications and services. It offers real-time threat detection and response, as well as advanced analytics and reporting capabilities. With Defender for Cloud Apps, organizations can ensure the security of their cloud environments and safeguard against cyber threats. Whether you're running SaaS applications, IaaS workloads, or PaaS services, Microsoft Defender for Cloud Apps can help you secure your cloud environment and protect your business from cyber threats.
Reviews from Real Users
Ram-Krish, Cloud Security & Governance at a financial services firm, says that Microsoft Defender for Cloud Apps "Integrates well and helps us in protecting sensitive information, but takes time to scan and apply the policies and cannot detect everything we need".
PeerSpot user, Senior Cloud & Security Consultant at a tech services, writes that Microsoft Defender for Cloud Apps "Great for monitoring user activity and protecting data while integrating well with other applications".
Simon Burgess,Infrastructure Engineer at SBITSC, states that Microsoft Defender for Cloud Apps is "A fluid, intelligent product for great visibility, centralized management, and increased uptime".
We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.