Try our new research platform with insights from 80,000+ expert users

Check Point CloudGuard CNAPP vs Sophos Cloud Optix comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Check Point CloudGuard CNAPP
Ranking in Cloud Security Posture Management (CSPM)
5th
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
72
Ranking in other categories
Vulnerability Management (9th), Cloud and Data Center Security (9th), Container Security (10th), Cloud Workload Protection Platforms (CWPP) (5th), Cloud-Native Application Protection Platforms (CNAPP) (5th), Data Security Posture Management (DSPM) (6th), Compliance Management (6th)
Sophos Cloud Optix
Ranking in Cloud Security Posture Management (CSPM)
31st
Average Rating
7.6
Reviews Sentiment
6.8
Number of Reviews
4
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of August 2025, in the Cloud Security Posture Management (CSPM) category, the mindshare of Check Point CloudGuard CNAPP is 2.8%, down from 2.9% compared to the previous year. The mindshare of Sophos Cloud Optix is 0.4%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cloud Security Posture Management (CSPM)
 

Featured Reviews

Bart Coddens - PeerSpot reviewer
Evolved cloud security with active monitoring but needs interface consistency
The user interface needs work. Sometimes, it is a transition from the old tool to the new CNAPP Two that I currently have, and remnants of the old environment can still be detected. I require consistency in the user interface to ensure everything is streamlined into the same look and feel. More work is needed in fine-tuning the threat data towards your CSPM and activity logs, aligning them with business intelligence, which requires a cohesive console interface. My assessment of CloudGuard CDRs in intrusion detection and threat hunting capabilities is that it still needs some work. All the threat data that comes in, you need to fine tune it a bit.
Jean Desir - PeerSpot reviewer
DLP is a valuable feature that we use a lot for info audits.
The dashboard and the process for applying policies could be more intuitive. Cloud Optix isn't that difficult once you get the hang of it, but the IT folks managing this want it to be more user-friendly. Deploying the agents could be more seamless, too. Ideally, Cloud Optix would automate adding agents into your environment by integrating with Active Directory or some policy.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The various CNAPP modules have granted more visibility of our cloud applications to our system engineers and developers."
"The most valuable feature is the ability to apply common tools across all accounts."
"The system has deployed security tools to enhance effective investigations in the entire company networking system."
"The solution has intelligence that integrates with a range of threat intelligence feeds, including Check Point's ThreatCloud, to provide real-time intelligence on emerging threats."
"My overall product rating is ten out of ten."
"It has an analytics service that does research for us."
"The most valuable features of CloudGuard CNAPP are its compliance engine and auto-remediation features."
"The ability to drill down to individual hosts on an account and see which ones are affected is valuable."
"DLP is a valuable feature that we use a lot for info audits."
"The most valuable feature of Sophos Cloud Optix is the simple way to manage my devices on the network. Additionally, it is easy to navigate and has a user-friendly interface."
"I find Cloud Optix to be a valuable solution since it provides a single, unified dashboard to monitor cloud assets, such as AWS and Azure."
"The most valuable feature for me would be the solution's endpoint protection."
"I find Cloud Optix to be a valuable solution since it provides a single, unified dashboard to monitor cloud assets, such as AWS and Azure."
 

Cons

"The costs are high."
"I don't have any notes for improvements."
"There are opportunities for improvement that can be addressed through a roadmap."
"The tool has a lot of potential, but today, it lacks a lot of Scripts/Bots for Azure."
"The platform would be significantly enhanced by incorporating data security management capabilities."
"I am not a technical person, but generically, the user interface can be a little more intuitive. Our staff has trained network security and cloud security professionals, and they get it, but when you are trying to get to the customers to be able to pick it up and maintain it, it can be a bit difficult."
"Automation and advanced threat prevention have room for improvement."
"They take time to respond or coordinate a meeting since they maintain a schedule that does not fit Latin America very well."
"The setup was a little bit complex."
"Sophos should enhance its AI-driven detection features and anomaly detection."
"The dashboard and the process for applying policies could be more intuitive. Cloud Optix isn't that difficult once you get the hang of it, but the IT folks managing this want it to be more user-friendly."
"Sophos should enhance its AI-driven detection features and anomaly detection."
"There are times when the devices are at maximum capacity, and it takes a while before the device is updated. For example, if the device has a virus, and it's not aligned to connect to the network, even after you've scanned the device, and cleaned out the virus, once the management clears the system to allow it back on the network it takes some time. It can be frustrating when you have your line manager or in management affected trying to access the network."
 

Pricing and Cost Advice

"From a pricing perspective, they are pretty expensive."
"Check Point CloudGuard Posture Management is always known as a good solution but an expensive one. When you're using Cisco, Check Point, or Palo Alto, you know that you will pay more, but you know that it will work."
"Licensing and costs are straightforward, as they have a baseline of 100 workloads within one license and no additional charges."
"I suggest that you pay attention to the product pricing because while there are no tricks, and the licensing model is transparent, the final numbers may surprise you."
"​They support either annual licensing or hourly. At the time of our last negotiation, it was either one or the other, you could not mix or match. I would have liked to mix/match. ​"
"The licensing and costs are straightforward, as they have a baseline of 100 workloads (number of instances) within one license with no additional nor hidden charges. If you want to have 200 workloads under Dome9, then you need to take out two licenses for that. Also, it does not have any impact on cloud billing, as data is shared using the API call. This is well within the limit of free API calls provided by the cloud provider."
"It is a very straightforward licensing model that is based on the number of assets you are discovering and managing with the solution."
"Right now, we have licenses on 500 machines, and they are not cheap."
"Regarding the pricing for Sophos Cloud Optix, I would say that it was a very good price."
report
Use our free recommendation engine to learn which Cloud Security Posture Management (CSPM) solutions are best for your needs.
865,164 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Financial Services Firm
11%
Manufacturing Company
8%
Educational Organization
5%
Government
8%
Computer Software Company
8%
Comms Service Provider
6%
Financial Services Firm
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What needs improvement with Sophos Cloud Optix?
Sophos should enhance its AI-driven detection features and anomaly detection. The solution focuses on cloud security posture management. Fortinet, having acquired Lacework, seems to be a step ahead...
What is your primary use case for Sophos Cloud Optix?
One primary use case for Sophos Cloud Optix is cloud visibility. I use it for compliance requirements and improving end user experience. The solution provides a unified dashboard for multi-cloud en...
What advice do you have for others considering Sophos Cloud Optix?
I rate Sophos Cloud Optix seven out of ten overall. I recommend it for any size of company, considering their current ecosystem and workload. It's particularly suited for those in a Sophos ecosyste...
 

Also Known As

Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence
No data available
 

Overview

 

Sample Customers

Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners
Information Not Available
Find out what your peers are saying about Check Point CloudGuard CNAPP vs. Sophos Cloud Optix and other solutions. Updated: July 2025.
865,164 professionals have used our research since 2012.