No more typing reviews! Try our Samantha, our new voice AI agent.

Check Point CloudGuard CNAPP vs NGINX App Protect comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.3
Check Point CloudGuard CNAPP improves security and compliance, reduces manual tasks, boosting efficiency and ROI with automation.
Sentiment score
5.8
NGINX App Protect offers notable ROI, enhancing security, integrating with CICD pipelines, and providing compliance and time-saving benefits.
The compliance has improved as our overall compliance score against CIS benchmark has improved from around 72 to 92% within the first three months of adoption.
Assistant Manager at a computer software company with 201-500 employees
This helped my team cut manual review time by roughly twenty to twenty-five percent, allowing me to reallocate effort to proactive cloud security improvements.
Networking and System Consultant at Orbcom,Lda.
Monitoring cloud security automatically ensures a return on investment.
Cloud Engineer at Cloudar
 

Customer Service

Sentiment score
6.6
Check Point CloudGuard CNAPP offers excellent, knowledgeable support but could improve initial response times at the basic support level.
Sentiment score
5.8
NGINX App Protect's support is reliable and helpful, though costs and occasional delays affect accessibility for some users.
When I need help or have open questions, or if I require the capability to deploy a quick test environment, there are always people I can contact at Check Point to get my information or the environment as fast as I need it.
Cloud Security Architect at controlware
I have a dedicated support engineer and a presales engineer dedicated to me.
Cloud Engineer at Cloudar
Customer support for Check Point CloudGuard CNAPP has been responsive and knowledgeable.
Assistant Manager at a computer software company with 201-500 employees
They were quick and efficient when we had issues.
Project Manager at a comms service provider with 10,001+ employees
I would rate the customer support a 9 on a scale of 1 to 10.
Tech Lead at a tech vendor with 51-200 employees
 

Scalability Issues

Sentiment score
7.7
Check Point CloudGuard CNAPP scales well across clouds, with reliable performance and strong security compliance, despite licensing concerns.
Sentiment score
6.1
NGINX App Protect offers strong scalability praised by users, despite challenges with policy limits and deployment delays.
Visibility scales without performance issues as my environment expands.
Networking and System Consultant at Orbcom,Lda.
Check Point CloudGuard CNAPP scales efficiently in the multi-cloud environment.
Assistant Manager at a computer software company with 201-500 employees
I never had any performance-related issues.
Cloud Security Architect at controlware
The scalability of NGINX App Protect is good and open source at its best.
Tech Lead at a tech vendor with 51-200 employees
 

Stability Issues

Sentiment score
8.1
Check Point CloudGuard CNAPP is reliable and efficient, handling large-scale workloads with minimal downtime despite occasional minor latency issues.
Sentiment score
8.4
Users praise NGINX App Protect's stability and reliability, outperforming competitors, handling high traffic efficiently, and receiving high ratings.
If there are errors, it is sometimes challenging to elaborate or troubleshoot since it is not transparent enough to understand what to search for.
Cloud Security Architect at controlware
It is rapidly evolving, and sometimes mistakes occur, necessitating testing.
Cloud Engineer at Cloudar
It is a quality solution, and I would rate its stability as eight out of ten.
IT Architect at a financial services firm with 10,001+ employees
 

Room For Improvement

Check Point CloudGuard CNAPP needs better integrations, user interfaces, support, automation, and documentation to enhance functionality and user satisfaction.
NGINX App Protect needs enhancements in automation, UI, security, performance, and support, with complex setup and integration issues.
I need more integration from the code-to-cloud principle.
Cloud Security Architect at controlware
It would be nice to have periodic updates on what people should do, maybe with some analysis or something.
Information Security Officer at Cargus
I require consistency in the user interface to ensure everything is streamlined into the same look and feel.
Cloud Engineer at Cloudar
There was more information from F5 regarding hardware requirements and specifications to deploy the service.
IT Architect at a financial services firm with 10,001+ employees
For now, I think NGINX App Protect is good, but maybe I would like to see the logging feature added.
Dev Ops Engineer at BARQ Systems
The GUI and web GUI configuration could be improved to be easier to manage and use.
Dev Ops Engineer at adesso AG
 

Setup Cost

Check Point CloudGuard CNAPP offers flexible licensing with varied costs, seen as high but valuable for security management.
NGINX App Protect offers reasonable annual pricing, ranging from $25,000 to $400,000, aligning with industry-leading solutions.
In terms of ROI, we can see time savings for audit preparation of at least 30-40%.
Assistant Manager at a computer software company with 201-500 employees
It is not cheap, of course, yet it is a necessity.
Cloud Security Architect at controlware
From a licensing and cost perspective, it is really competitive.
Cloud Engineer at Cloudar
 

Valuable Features

Check Point CloudGuard CNAPP offers visibility, compliance, and threat intelligence, enhancing security management and governance across multi-cloud environments.
NGINX App Protect provides comprehensive security features including automation, real-time threat detection, DDoS protection, and flexible deployment options.
One of the main reasons we use the solution is that it is great at identifying risks that are critical to our business.
Information Security Officer at Cargus
The CDR helps detect anomalous behavior and respond to threats before they become an issue.
Cloud Engineer at Cloudar
Check Point CloudGuard CNAPP offers a unified, modular platform that combines CSPM, CWPP, CIEM, code security, and cloud detection and response.
Assistant Manager at a computer software company with 201-500 employees
The most valuable feature is the ability to operate in a DevOps environment and to be configured through API and pipeline by the developers themselves.
IT Architect at a financial services firm with 10,001+ employees
Some threats like injection and running scripts, SQL injections, these all get stopped and rejected by the server.
Dev Ops Engineer at BARQ Systems
Detecting bots and blocking IPs have proven effective for securing applications.
Project Manager at a comms service provider with 10,001+ employees
 

Categories and Ranking

Check Point CloudGuard CNAPP
Ranking in Container Security
11th
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
72
Ranking in other categories
Vulnerability Management (13th), Cloud and Data Center Security (9th), Cloud Workload Protection Platforms (CWPP) (6th), Cloud Security Posture Management (CSPM) (6th), Cloud-Native Application Protection Platforms (CNAPP) (6th), Data Security Posture Management (DSPM) (7th), Compliance Management (6th)
NGINX App Protect
Ranking in Container Security
27th
Average Rating
8.2
Reviews Sentiment
6.4
Number of Reviews
27
Ranking in other categories
Web Application Firewall (WAF) (15th), API Security (7th)
 

Mindshare comparison

As of March 2026, in the Container Security category, the mindshare of Check Point CloudGuard CNAPP is 2.7%, up from 2.0% compared to the previous year. The mindshare of NGINX App Protect is 0.4%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Container Security Mindshare Distribution
ProductMindshare (%)
Check Point CloudGuard CNAPP2.7%
NGINX App Protect0.4%
Other96.9%
Container Security
 

Featured Reviews

reviewer2751468 - PeerSpot reviewer
Assistant Manager at a computer software company with 201-500 employees
Boosts security and compliance in multi-cloud environments while real-time threat detection enhances risk management
Check Point CloudGuard CNAPP flagged a misconfiguration in our AWS S3 bucket that had overly permissive access settings. That configuration could have exposed our sensitive data to the public internet. The platform not only identified the issue but also provided remediation that our team was able to apply immediately. This prevented a potential data exposure. Check Point CloudGuard CNAPP offers a unified, modular platform that combines CSPM, CWPP, CIEM, code security, and cloud detection and response. The agentless workload posture, real-time threat detection and response, multi-cloud coverage and visibility, compliance automation, and one-click remediations stand out as its best features. I find myself relying on the risk management engine and prioritization the most day-to-day. In any cloud environment, you are flooded with findings, misconfigurations, vulnerabilities, and compliance gaps. Without prioritization, it is overwhelming for our team to take care of the posture. CloudGuard's risk scoring helps us cut through incidents. This makes remediation faster and focused instead of wasting time checking every alert. We get to fix the issues that pose real business risks. Check Point CloudGuard CNAPP has positively impacted our organization at a significant level. We get greater visibility and control across all our cloud environments. Some biggest benefits we have seen are faster detection and remediation of misconfigurations, improved compliance posture, reduced risk exposure, operational efficiency, and cost savings. Overall, it has made our cloud environment more secure, compliant, and easier to manage while freeing up our teams to focus on projects instead of chasing alerts.
Valerio Guaglianone - PeerSpot reviewer
Dev Ops Engineer at adesso AG
Long-term web protection has supported reliable traffic management but needs a simpler interface
NGINX App Protect is a good product. I have used both versions from F5 -also the free version- (I mean the NGINX/NGINX One/App Protect free trial period), and I think it is a good product. It's stable, affordable, and easy to manage. NGINX App Protect is a comprehensive security solution that combines advanced WAF, DoS protection, API security, and DevSecOps automation in a lightweight, scalable package ideal for modern cloud-native architectures. The adaptive machine learning capabilities are truly commendable, as the solution can establish traffic baselines and detect anomalies in real time. It automatically adjusts security policies, minimizing the need for manual intervention and reducing false positives. Additionally, it supports scalable deployment across diverse environments, including on-premises, cloud, Kubernetes, and containers, offering both flexibility and scalability I have experience with the web server, F5 load balancer, and similar products provided by Ergon, for eg. the web application firewall and the Microgateway for K8S. I'm also familiar with F5 BIG-IP products.
report
Use our free recommendation engine to learn which Container Security solutions are best for your needs.
885,311 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
10%
Manufacturing Company
8%
Computer Software Company
7%
Outsourcing Company
7%
Financial Services Firm
12%
Computer Software Company
11%
Comms Service Provider
9%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business55
Midsize Enterprise18
Large Enterprise56
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise6
Large Enterprise12
 

Questions from the Community

What is your experience regarding pricing and costs for CloudGuard Workload Protection?
My experience with pricing, setup cost, and licensing has been reasonable for the value it delivers. The initial setup cost was fair. Understanding the right modules and tiers took a bit of plannin...
What do you like most about CloudGuard for Cloud Intelligence?
The new scanning function is a valuable feature that wasn't available until recently.
What needs improvement with CloudGuard for Cloud Intelligence?
One area that Check Point CloudGuard CNAPP could use improvement is the navigation when switching between modules. A more streamlined interface and a quicker drill-down into findings would make the...
What is your experience regarding pricing and costs for NGINX App Protect?
I will not be able to answer about my experience with pricing, setup cost, and licensing for NGINX App Protect, as something different handles that in my team.
What needs improvement with NGINX App Protect?
I think NGINX App Protect could be improved by having it come out of the box with NGINX.
What is your primary use case for NGINX App Protect?
My main use case for NGINX App Protect is primarily in our infrastructure layer with Kubernetes, as I am using it to protect my application from attacks like DDoS and provide additional firewall pr...
 

Also Known As

Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence
NGINX WAF, NGINX Web Application Firewall
 

Overview

 

Sample Customers

Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners
Information Not Available
Find out what your peers are saying about Check Point CloudGuard CNAPP vs. NGINX App Protect and other solutions. Updated: March 2026.
885,311 professionals have used our research since 2012.