Try our new research platform with insights from 80,000+ expert users

Check Point CloudGuard CNAPP vs Red Hat OpenShift Container Platform comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 13, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Zafran Security
Sponsored
Average Rating
9.6
Reviews Sentiment
7.8
Number of Reviews
6
Ranking in other categories
Vulnerability Management (16th), Continuous Threat Exposure Management (CTEM) (1st)
Check Point CloudGuard CNAPP
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
73
Ranking in other categories
Vulnerability Management (9th), Cloud and Data Center Security (8th), Container Security (10th), Cloud Workload Protection Platforms (CWPP) (5th), Cloud Security Posture Management (CSPM) (5th), Cloud-Native Application Protection Platforms (CNAPP) (5th), Data Security Posture Management (DSPM) (6th), Compliance Management (6th)
Red Hat OpenShift Container...
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
51
Ranking in other categories
Container Management (1st)
 

Mindshare comparison

Vulnerability Management Market Share Distribution
ProductMarket Share (%)
Check Point CloudGuard CNAPP1.5%
Wiz10.8%
Tenable Nessus8.0%
Other79.7%
Vulnerability Management
Container Management Market Share Distribution
ProductMarket Share (%)
Red Hat OpenShift Container Platform19.7%
VMware Tanzu Platform12.1%
Amazon EKS11.8%
Other56.400000000000006%
Container Management
 

Featured Reviews

Israel Cavazos Landini - PeerSpot reviewer
Weekly insights and risk analysis facilitate informed security decisions
I appreciate the weekly insights Zafran provides, which include critical topics for networks and IT security, allowing us to evaluate which insights apply to our environment. The organization score feature is valuable to keep the leadership team updated on how our infrastructure fares security-wise. The applicable risk level versus base risk level feature is beneficial because prior to Zafran, we only used the base risk level, but now understand that risk depends on the asset itself. Zafran is an excellent tool.
Bart Coddens - PeerSpot reviewer
Evolved cloud security with active monitoring but needs interface consistency
The user interface needs work. Sometimes, it is a transition from the old tool to the new CNAPP Two that I currently have, and remnants of the old environment can still be detected. I require consistency in the user interface to ensure everything is streamlined into the same look and feel. More work is needed in fine-tuning the threat data towards your CSPM and activity logs, aligning them with business intelligence, which requires a cohesive console interface. My assessment of CloudGuard CDRs in intrusion detection and threat hunting capabilities is that it still needs some work. All the threat data that comes in, you need to fine tune it a bit.
Rifat Rahman - PeerSpot reviewer
Integration and automation have transformed deployment and maintenance
Regarding the learning curve, the customers actually do not need the technical nitty-gritty details; they need to know about the containerization journey because they are not familiar with it. They know it as a theory, but they don't understand anything about its practical implications. That's the main challenge. The solution itself doesn't require a high learning curve; it is actually quite good to manage. However, application developers and managers have to understand the beauty of it, and that is the challenge. If Red Hat can execute some programs regarding that, it will help. Regarding Red Hat OpenShift Container Platform, it is expensive according to market feedback. Notably, the platform plus is perceived as quite expensive and some features from an infrastructure perspective are lacking.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We saw benefits from Zafran Security almost immediately after deploying it."
"Overall, we have seen about eighty-seven percent reduction of the number of vulnerabilities that require urgency to remediate, specifically the number of criticals."
"Zafran is an excellent tool."
"We are able to see the real risk of a vulnerability on our environment with our security tools."
"Zafran has become an indispensable tool in our cybersecurity arsenal."
"The user interface is responsive and quite intuitive; when selecting an object it automatically shows the relevant actions."
"It learns from behavior, attacks, management, detections, captures packets, real-time analysis, et cetera. It's generating knowledge from a variety of sources for an excellent analysis."
"The way they offer container security is a big highlight that I have noticed. The solution is also agentless, so the scanning, runtime, really everything is offered directly by CloudGuard."
"The solution is scalable."
"On Dome9, you can have reports on compliance, users created, and EAM access to the cloud infrastructure. For example, if some machine is exposed to the Internet, importing and exporting to the Internet when it shouldn't, we get immediate alerts if someone does this type of configuration by mistake. Dome9 is very important because AWS doesn't protect us for this. It is the client's responsibility to make sure that we don't export things to the Internet. This solution helps us ensure that we comply with our security measures."
"Good interface and visibility."
"The most valuable features of CloudGuard CNAPP are its reporting capabilities for aggregating vulnerability information and scoring."
"It offers security insights and recommendations to assist organizations in acting and remediating issues swiftly."
"More tools are available in OpenShift Container Platform to maintain and manage the clusters."
"The most valuable feature of the solution is that it has a lot to offer to developers, so they don't need to care about the infrastructure or basic setup of the containers, so you can just jump in and develop."
"For us, the fully automated upgrades are valuable. We have to maintain the clusters in production. For us, it is very important that it does not take too much time to manage all the clusters and do life cycle management and upgrades."
"Autoscaling is an excellent feature that makes it very simple to scale our applications as required."
"It is easy to expand."
"Red Hat's security throughout the stack and software supply chain is good. It is a lightweight operating system. You don't have to worry about the security patches on the system. You can update the entire environment with security patches, which is a nice feature."
"Everything is packaged into OpenShift Container Platform."
"The most valuable features of OpenShift include its advanced security, integrated DNS system, built-in pipeline management with Tekton, enhanced networking routes, and dedicated platforms for DataOps and MLOps."
 

Cons

"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."
"The dashboarding and reporting functionality of Zafran Security is an area that definitely could use some improvements."
"I think the ability to have some enhanced reporting capabilities is something they can improve on, as they have good reports but we have asked for some specific reporting enhancements."
"In general, for the product to be successful, they need to improve security, and configuration detection."
"Scalability, particularly in workload protection, is an area that needs improvement."
"I’d like to see more integration with third-party tools. For example, it would be helpful to have an integration between Dome9 and ServiceNow to manage security incidents and security changes."
"The reporting dashboard responds slowly, which leads to late report compilation."
"In Dome9, there should be a policy validation option where we can validate the policy before we push it into production."
"There are opportunities for improvement that can be addressed through a roadmap."
"The reporting has a lot of opportunities to continuously improve so that we can continue to show value."
"We were demotivated by the lack of native automation modules for the Terraform and Ansible tools."
"The solution needs to introduce open ID connect integration for role-based access control."
"It has an option to install OpenShift without connecting it to the Internet. We tried this, but it was very hard. We couldn't manage to use that option. We wanted to use it offline for installations, updates, upgrades, etc., but we didn't find the offline installation and updates easy. This could be better."
"The solution does not work on a route-wise NFS."
"The monitoring and logging could be improved."
"One challenge is that sometimes it may be difficult to find the answers to your questions if you are not a Red Hat customer."
"From a networking perspective, the routing capability can be matured further. OpenShift doesn't handle restrictions on what kind of IPs are allowed, who can access them, and who cannot access them. So it is a simple matter of just using it with adequate network access, at the network level."
"Setting up OpenShift locally can be challenging, particularly because it requires RHL Linux and has specific restrictions."
"The price needs to be improved in OpenShift Container Platform. When I choose this, the product is the first factor that we have to make a long analysis to compare the real cost for the other services. However, price is high."
 

Pricing and Cost Advice

Information not available
"The solution’s pricing is a little bit high."
"I would advise taking into account the existing number of devices and add a forecast of the number of devices to be added in the coming year or two, to obtain better pricing."
"From a pricing perspective, they are pretty expensive."
"It is a very straightforward licensing model that is based on the number of assets you are discovering and managing with the solution."
"In the beginning, the price of Dome9 was cheap, whereas now it is not."
"The tool's pricing is moderate. Its licensing costs are yearly."
"The licensing and costs are straightforward, as they have a baseline of 100 workloads (number of instances) within one license with no additional nor hidden charges. If you want to have 200 workloads under Dome9, then you need to take out two licenses for that. Also, it does not have any impact on cloud billing, as data is shared using the API call. This is well within the limit of free API calls provided by the cloud provider."
"We have the enterprise-level license and we renew it annually because it is worth the cost."
"Its price is a bit high because it's a premium product, but as long as the business is ready to pay for that, it's okay."
"The pricing is a bit more expensive than expected."
"We have to pay for the license."
"Its licensing is completely incomprehensible. We have special people within our company. They discuss with Red Hat subscription managers. It is too complex, and I do not understand it. We are from the government, and we are trying to be as cheap as possible. Sometimes, I am just amazed at the amount of money that we have to pay. It is crazy."
"OpenShift Container Platform is highly-priced."
"We currently have an annual license renewal."
"It depends on who you're talking to. For a large corporation, it is acceptable, other than the significant infrastructure requirements. For a small organization, it is in no way suitable, and we'd go for Amazon's container solution."
"The price is slightly on the higher side. It is something that can be worked on because most of the businesses now have margins."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
867,370 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Computer Software Company
10%
Manufacturing Company
8%
Government
6%
Computer Software Company
12%
Financial Services Firm
11%
Manufacturing Company
7%
Educational Organization
6%
Financial Services Firm
20%
Computer Software Company
11%
Government
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business54
Midsize Enterprise17
Large Enterprise57
By reviewers
Company SizeCount
Small Business14
Midsize Enterprise4
Large Enterprise39
 

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?
Since we stood Zafran Security up in our private cloud, we handle the maintenance on our side. As we opted not to use...
What needs improvement with Zafran Security?
In terms of areas for improvement, Zafran Security is doing a really great job as a new and emerging company. Oftenti...
What is your primary use case for Zafran Security?
My use cases for Zafran Security revolve around two primary areas. One is around vulnerability management and priorit...
Which is better - OpenShift Container Platform or VMware Tanzu Mission Control?
Red Hat Openshift is ideal for organizations using microservices and cloud environments. I like that the platform is ...
What do you like most about OpenShift Container Platform?
The tool's most valuable features include high availability, scalability, and security. Other features like advanced ...
What is your experience regarding pricing and costs for OpenShift Container Platform?
Regarding whether Red Hat OpenShift Container Platform is expensive or if the price is reasonable for my customers, t...
 

Also Known As

No data available
Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence
No data available
 

Overview

 

Sample Customers

Information Not Available
Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners
Edenor, BMW, Ford, Argentine Ministry of Health
Find out what your peers are saying about Check Point CloudGuard CNAPP vs. Red Hat OpenShift Container Platform and other solutions. Updated: October 2024.
867,370 professionals have used our research since 2012.