Try our new research platform with insights from 80,000+ expert users

Check Point CloudGuard CNAPP vs Netskope comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jul 13, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Zafran Security
Sponsored
Average Rating
9.6
Reviews Sentiment
7.8
Number of Reviews
6
Ranking in other categories
Vulnerability Management (16th), Continuous Threat Exposure Management (CTEM) (1st)
Check Point CloudGuard CNAPP
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
73
Ranking in other categories
Vulnerability Management (9th), Cloud and Data Center Security (8th), Container Security (10th), Cloud Workload Protection Platforms (CWPP) (5th), Cloud Security Posture Management (CSPM) (5th), Cloud-Native Application Protection Platforms (CNAPP) (5th), Data Security Posture Management (DSPM) (6th), Compliance Management (6th)
Netskope
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
46
Ranking in other categories
Cloud Access Security Brokers (CASB) (3rd), Secure Access Service Edge (SASE) (3rd)
 

Mindshare comparison

Vulnerability Management Market Share Distribution
ProductMarket Share (%)
Check Point CloudGuard CNAPP1.5%
Wiz10.8%
Tenable Nessus8.0%
Other79.7%
Vulnerability Management
Cloud Access Security Brokers (CASB) Market Share Distribution
ProductMarket Share (%)
Netskope14.9%
Prisma Access by Palo Alto Networks17.9%
Cato SASE Cloud Platform10.7%
Other56.5%
Cloud Access Security Brokers (CASB)
 

Featured Reviews

Israel Cavazos Landini - PeerSpot reviewer
Weekly insights and risk analysis facilitate informed security decisions
I appreciate the weekly insights Zafran provides, which include critical topics for networks and IT security, allowing us to evaluate which insights apply to our environment. The organization score feature is valuable to keep the leadership team updated on how our infrastructure fares security-wise. The applicable risk level versus base risk level feature is beneficial because prior to Zafran, we only used the base risk level, but now understand that risk depends on the asset itself. Zafran is an excellent tool.
Bart Coddens - PeerSpot reviewer
Evolved cloud security with active monitoring but needs interface consistency
The user interface needs work. Sometimes, it is a transition from the old tool to the new CNAPP Two that I currently have, and remnants of the old environment can still be detected. I require consistency in the user interface to ensure everything is streamlined into the same look and feel. More work is needed in fine-tuning the threat data towards your CSPM and activity logs, aligning them with business intelligence, which requires a cohesive console interface. My assessment of CloudGuard CDRs in intrusion detection and threat hunting capabilities is that it still needs some work. All the threat data that comes in, you need to fine tune it a bit.
Benjamin Naranjo - PeerSpot reviewer
Provides secure remote access and web navigation protection with highly customizable features
The most helpful features in Netskope are the data loss prevention module, the anti-malware module, and the integration that it has with Information Rights Management from Microsoft. It has better categorization and more granular features regarding web protection, as it allows me to control HTTP methods. I can publish WhatsApp web for my users as read-only, for example. Other providers cannot; they are only on and off, and do not have the granularity for a website to be read-only. That comes with a downside, which is that they need to regularly update their controls to support those features in those websites.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Overall, we have seen about eighty-seven percent reduction of the number of vulnerabilities that require urgency to remediate, specifically the number of criticals."
"Zafran is an excellent tool."
"We are able to see the real risk of a vulnerability on our environment with our security tools."
"Zafran has become an indispensable tool in our cybersecurity arsenal."
"We saw benefits from Zafran Security almost immediately after deploying it."
"It has great scalability."
"It presents great visibility of the traffic flow of our cloud, providing information on what data and users are circulating and in the event of a threat, it immediately identifies them by providing detailed and granular information from our entire environment."
"I value the comfort and the ability to receive proper insights almost hands-off."
"Overall, it provides good security."
"The audit feature is the most valuable for compliance reasons. It gives you a full view of the whole environment, no matter how many accounts you have in AWS or Azure. You have it all under one umbrella."
"We can monitor each activity from our mobile devices, so there is complete visibility of our cloud traffic flows, with threat intelligence provided by Check Point."
"I can take proactive actions based on an alert without having to interact with the platform directly."
"We really liked its ease of implementation against our Microsoft Azure environment."
"Netskope is highly scalable and has supported our organization's growth without any challenges."
"Netskope is cloud-native, enabling differentiation of tenants in cloud applications, whether they are enterprise or personal, and provides control over shadow IT access."
"The initial setup is straightforward"
"Their technical support is very good."
"A very straightforward interface."
"I have found the most useful features to be the Web Secure Gateway, CASB, infrastructural service scanning, and Zero Trust."
"The feature that I like best is the GUI."
"Netskope started with a cloud-first approach, which makes it adaptable to the day-to-day changes that the cloud will generate."
 

Cons

"The dashboarding and reporting functionality of Zafran Security is an area that definitely could use some improvements."
"I think the ability to have some enhanced reporting capabilities is something they can improve on, as they have good reports but we have asked for some specific reporting enhancements."
"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."
"The security of Check Point CloudGuard Posture Management could improve. There are always new security issues coming out."
"Currently, I would like this solution extended to cellular devices or tablets."
"It should have some options to activate API calls to the platform in the cloud, another improvement would be that when the rules are colonized and they want to be published."
"Compliance checks on cloud resources against various industry standards and compliance framework templates need to be improved."
"I'd like to see more advanced encryption for local features, which is not present right now."
"CloudGuard could be improved by including integration with vendors other than AWS, especially Azure, especially in permissions."
"I would like to see Test B functions at the application access level."
"I don't have any notes for improvements."
"Support services could definitely be improved. Support is the one area that can always use improvement. It's an evolving thing, so based on demand and based on market requirement and the way market is moving towards."
"In some cases, when you have a lot of policies, it can get confusing for users and you can get lost in the GUI."
"The threat protection features must be improved."
"The configuration in the cloud model could be improved upon."
"Netskope CASB can improve by working more similarly to a VPN technology instead of a proxy. They then could have visibility on the endpoint device. Most clients have some tools where they check the endpoint health or other things, such as the security posture, or if they want to access the resources. For example, if they should have antivirus running, this kind of posture check should be available but it is missing."
"The right categorization of websites needs improvement. It is important for the solution to correctly categorize websites as genuine or non-genuine, fitting them into the right category."
"Lacking in local customer support."
"It needed some fine-tuning on core business sites that we used, which were sensitive to what we term a man-in-the-middle certificate by design. Some sites were not tolerant because they presented as potentially malicious. So, we just had to make some tweaks so that it would bypass or interpret it."
 

Pricing and Cost Advice

Information not available
"In the beginning, the price of Dome9 was cheap, whereas now it is not."
"The pricing is tremendous and super cheap. It is shockingly cheap for what you get out of it. I am happy with that. I hope that doesn't get reported back and they increase the prices. I love the pricing and the licensing makes sense. It is just assets: The more stuff that you have, the more you pay."
"It is a very straightforward licensing model that is based on the number of assets you are discovering and managing with the solution."
"We have the enterprise-level license and we renew it annually because it is worth the cost."
"Check Point CloudGuard Posture Management is always known as a good solution but an expensive one. When you're using Cisco, Check Point, or Palo Alto, you know that you will pay more, but you know that it will work."
"The license fee is high."
"The licensing and costs are straightforward, as they have a baseline of 100 workloads (number of instances) within one license with no additional nor hidden charges. If you want to have 200 workloads under Dome9, then you need to take out two licenses for that. Also, it does not have any impact on cloud billing, as data is shared using the API call. This is well within the limit of free API calls provided by the cloud provider."
"CloudGuard is fairly priced."
"The pricing is competitive."
"The pricing is very flexible."
"The product's price is average."
"The price of the solution is fair but it depends on your use case."
"I would rate the pricing nine out of ten."
"Netskope is a premium service, and its pricing ranges from medium to expensive."
"Licensing is on a yearly basis."
"There is a license required for this solution and there are many licensing models available. For example, what applications are covered as part of the license."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
867,676 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Computer Software Company
10%
Manufacturing Company
7%
Government
6%
Computer Software Company
12%
Financial Services Firm
11%
Manufacturing Company
8%
Educational Organization
6%
Computer Software Company
14%
Financial Services Firm
13%
Manufacturing Company
10%
Healthcare Company
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business54
Midsize Enterprise17
Large Enterprise57
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise9
Large Enterprise25
 

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?
Since we stood Zafran Security up in our private cloud, we handle the maintenance on our side. As we opted not to use...
What needs improvement with Zafran Security?
In terms of areas for improvement, Zafran Security is doing a really great job as a new and emerging company. Oftenti...
What is your primary use case for Zafran Security?
My use cases for Zafran Security revolve around two primary areas. One is around vulnerability management and priorit...
Which is better, Zscaler internet access or Netsckope CASB?
We researched Netskope but ultimately chose Zscaler. Netskope is a cloud access security broker that helps identify ...
What do you like most about Netskope CASB?
The product's analytics part is pretty fine.
 

Also Known As

No data available
Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence
Netskope CASB
 

Overview

 

Sample Customers

Information Not Available
Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners
NetApp, Genomic Health, Caterpillar, Apollo, Pandora, Continental Resources, Fractal, infinera, Tesla
Find out what your peers are saying about Tenable, Qualys, Wiz and others in Vulnerability Management. Updated: August 2025.
867,676 professionals have used our research since 2012.