Check Point CloudGuard CNAPP vs SUSE NeuVector comparison

Cancel
You must select at least 2 products to compare!
Check Point Software Technologies Logo
4,416 views|2,643 comparisons
93% willing to recommend
SUSE Logo
1,748 views|1,244 comparisons
85% willing to recommend
Comparison Buyer's Guide
Executive Summary
Updated on Jul 2, 2023

We performed a comparison between Check Point CloudGuard Posture Management and SUSE NeuVector based on our users’ reviews in five categories. After reading all of the collected data, you can find our conclusion below.

  • Features: Check Point CloudGuard Posture Management provides robust data security measures, incident detection, and detailed reporting. It offers IAM role control, training features, and governance support. On the other hand, SUSE NeuVector stands out for its user-friendly interface and automation. NeuVector seamlessly integrates with CI/CD pipelines and supports ISO certification checks. Check Point CloudGuard could be more customizable and improve its vulnerability. NeuVector needs improvements in monitoring, reporting, and hybrid environment integration.

  • Service and Support: Customers generally have positive experiences with Check Point CloudGuard Posture Management's customer service, citing quick response times and good support. However, some say technical support needs improvement. In contrast, SUSE NeuVector is praised for its helpful and responsive support, although the process can sometimes be complicated.

  • Ease of Deployment: The setup process for Check Point CloudGuard Posture Management is quick and easy, typically taking only a few minutes. On the other hand, the setup for SUSE NeuVector can be more challenging, with varying levels of difficulty reported by users. Some users find it easy, while others find it complex. One specific challenge with NeuVector is integrating it with pipelines.

  • Pricing: Some users consider Check Point CloudGuard Posture Management affordable, while others say the licensing model is a barrier to scaling and suggest a more flexible licensing model. While some SUSE NeuVector users say the price is low, others believe there is room for improvement.

  • ROI: Check Point CloudGuard Posture Management provides effective cloud management, streamlines compliance, and decreases administrative workload, resulting in a notable return on investment. SUSE NeuVector is particularly advantageous for industries with significant risk and exposure, but other sectors like retail might not see the same return.

Comparison Results: Our users prefer Check Point CloudGuard Posture Management over SUSE NeuVector. It is highly regarded for its strong data protection and comprehensive coverage of cloud infrastructure. Users appreciate its intuitive dashboard and powerful reporting capabilities. SUSE NeuVector users say the initial setup is a chore and the solution offers limited support for scanning IaaS and virtual machines.

To learn more, read our detailed Check Point CloudGuard CNAPP vs. SUSE NeuVector Report (Updated: March 2024).
768,924 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"Dome9 has improved our organization; we have a centralized view of all of our assets, our visible assets our ECs, our inventories. And then all the policies are centralized, and it is easier to manage because everything is one component console.""The dashboard is intuitive. You know if you're compliant or not, and then it gives you a remediation plan.""On Dome9, you can have reports on compliance, users created, and EAM access to the cloud infrastructure. For example, if some machine is exposed to the Internet, importing and exporting to the Internet when it shouldn't, we get immediate alerts if someone does this type of configuration by mistake. Dome9 is very important because AWS doesn't protect us for this. It is the client's responsibility to make sure that we don't export things to the Internet. This solution helps us ensure that we comply with our security measures.""We like the GSL Builder feature. When you're running a security operations center, you spend a lot of time monitoring endpoint activity to ensure there is no malicious traffic or anonymous access in the environment. The GSL Builder is helpful for deep investigations of a particular reason for an incident. You can use it to get more information.""The reporting is quite good. It is the most powerful aspect of this solution.""The rulesets and the findings are valuable. The actual core functionality of it and the efficacy of events are great.""This solution provides threat prevention and detection of anomalies automatically and investigates the activity of each one of them.""The two most valuable features for us are the central firewall administrator and the real-time cloud compliance monitoring."

More Check Point CloudGuard CNAPP Pros →

"When it comes to the price, we got a really good deal from the vendor instantly.""The most valuable feature of SUSE NeuVector is the performance, deployment, and cost.""The most valuable feature of SUSE NeuVector is its run-time security.""The tool's deployment is simple. Also, I am impressed with its risk capabilities.""The UI has a lot of features.""The initial setup is quite good, it's straightforward.""The features of image scanning and anti-malware are really valuable."

More SUSE NeuVector Pros →

Cons
"CloudGuard CNAPP could be enhanced by increasing the number of components that run natively on Azure.""The license cost is expensive and has room for improvement.""I'd like to see more advanced encryption for local features, which is not present right now.""Compliance checks on cloud resources against various industry standards and compliance framework templates need to be improved.""Check Point tools need to improve the latency in the portal since they take a long time to load.""Almost all features are good, however, they still require improvements to the code security portion on which integration with the major source code repository is required.""The rules are not well-tuned, and many of them generate false positives or nonsensical results.""The software configurations theory is complicated, and without proper planning and a well-skilled technical team, it cannot perform its tasks properly."

More Check Point CloudGuard CNAPP Cons →

"The image-scanning features need improvement.""The documentation needs to improve a bit.""The tool should offer seamless integration of other security tools while in a hybrid environment.""SUSE NeuVector could improve by increasing its visibility into other elements of the DevSecOps pipeline. Additionally, scanning around infrastructure would be helpful.""SUSE NeuVector should provide more security protection rules and better container image scanning.""We are also working with IaaS VMS, but NeuVector doesn't support virtual machines.""I would say that this solution should improve monitoring and reporting. I would also like to see more integrations so that we could essentially make it a part of a developing pipeline."

More SUSE NeuVector Cons →

Pricing and Cost Advice
  • "​They support either annual licensing or hourly. At the time of our last negotiation, it was either one or the other, you could not mix or match. I would have liked to mix/match. ​"
  • "I would advise taking into account the existing number of devices and add a forecast of the number of devices to be added in the coming year or two, to obtain better pricing."
  • "It is a very straightforward licensing model that is based on the number of assets you are discovering and managing with the solution."
  • "The licensing and costs are straightforward, as they have a baseline of 100 workloads (number of instances) within one license with no additional nor hidden charges. If you want to have 200 workloads under Dome9, then you need to take out two licenses for that. Also, it does not have any impact on cloud billing, as data is shared using the API call. This is well within the limit of free API calls provided by the cloud provider."
  • "I suggest that you pay attention to the product pricing because while there are no tricks, and the licensing model is transparent, the final numbers may surprise you."
  • "Right now, we have licenses on 500 machines, and they are not cheap."
  • "The pricing is tremendous and super cheap. It is shockingly cheap for what you get out of it. I am happy with that. I hope that doesn't get reported back and they increase the prices. I love the pricing and the licensing makes sense. It is just assets: The more stuff that you have, the more you pay."
  • "Licensing and costs are straightforward, as they have a baseline of 100 workloads within one license and no additional charges."
  • More Check Point CloudGuard CNAPP Pricing and Cost Advice →

  • "Licensing fees are paid yearly."
  • "The solution's pricing could be better. The cost of a subscription is calculated on the basis of work."
  • "The price of SUSE NeuVector is low. There is an additional cost for support."
  • "SUSE NeuVector is an open-source solution."
  • More SUSE NeuVector Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Cloud Workload Protection Platforms (CWPP) solutions are best for your needs.
    768,924 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:The visibility in our cloud environment is the most valuable feature.
    Top Answer:We have concerns regarding the pricing and would appreciate seeing some improvements.
    Top Answer:The most valuable feature of SUSE NeuVector is its run-time security.
    Top Answer:SUSE NeuVector is an open-source solution. You have to pay for the support.
    Top Answer:SUSE NeuVector should provide more security protection rules and better container image scanning.
    Ranking
    Views
    4,416
    Comparisons
    2,643
    Reviews
    48
    Average Words per Review
    651
    Rating
    8.5
    Views
    1,748
    Comparisons
    1,244
    Reviews
    6
    Average Words per Review
    399
    Rating
    7.8
    Comparisons
    Also Known As
    Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence
    NeuVector
    Learn More
    Overview

    Check Point CloudGuard CNAPP is a robust cloud security solution, offering comprehensive protection for cloud workloads and applications against cyberattacks. This platform encompasses cloud security posture management, threat prevention, and efficient incident response, providing organizations with a unified defense against threats. Key features include continuous visibility and remediation of misconfigurations, threat prevention through various techniques like intrusion prevention and malware detection, and rapid, cost-effective incident response. With CloudGuard CNAPP, you can safeguard cloud-native applications, cloud infrastructure, and sensitive data, enhancing your overall cloud security posture. This solution is a powerful asset for organizations seeking to fortify their cloud environments against a range of cyber threats.

    SUSE NeuVector is a full lifecycle container security solution that helps your organization secure its container infrastructures, manage Kubernetes security risks, and block threats. The NeuVector continuous container security and compliance platform simplifies data protection from pipeline to production, enforces compliance, and provides complete visibility and automated controls for protection against known and unknown threats. In addition, NeuVector is the only Kubernetes-native container security solution that offers a comprehensive risk profile of known vulnerabilities and also delivers immediate protection from all vulnerabilities.

    SUSE NeuVector Features

    SUSE NueVector has many valuable key features. Some of the most useful ones include:

    • Container incident detection and prevention
    • Network security
    • Runtime security
    • Supply chain security
    • Container firewall
    • Host and platform security
    • Cloud-native automation and integration
    • Resource monitoring
    • Visualization and reporting
    • High availability
    • Security
    • Vulnerability management
    • Compliance and auditing
    • Alerting
    • Logging and Response

    SUSE NeuVector Benefits

    There are many benefits to implementing NeuVector. Some of the biggest advantages the solution offers include:

    • Deep packet inspection (DPI): NeuVector applies DPI to identify attacks, detect sensitive data, or verify application access to further reduce the attack surface. Only network layer analysis enables security to detect and verify the allowed protocols, helping security teams enforce business policy.
    • Real-time protection: NeuVector provides inspection, segmentation, and protection of all traffic into and out of a container. This includes container to container traffic, and ingress from external sources to containers, as well as egress from containers to external applications and the internet. The solution aims to protect your applications from internal application level attacks such as DDoS and DNS.
    • Capture packets for debugging and threat investigation: WIth NeuVector, you can view summary connection data and drill down into actual packet details for each container, as they scale up and down. When a threat is detected, NeuVector is able to automatically capture and display the packet info, making it easy for you to investigate.
    • Automated security policies: The NeuVector solution allows you to automate the creation of security policies to protect application workloads in production. The solution also enables you to automate and maintain run-time security policies using Kubernetes custom resource definitions (CRDs), and gives you the option to declare an application security policy at any stage in the pipeline.
    • Compliance: NeuVector offers detection capabilities and security policy enforcement that prevent PHI and PII exposure, exceed requirements, and simplify reporting for PCI-DSS, GDPR, HIPAA, and more. The solution helps you track critical vulnerabilities and compliance violations so you can quickly identify any that require immediate patching or followup alerts. It also makes it possible for you to manage vulnerability and compliance scan results, with no required integration to external workflow tools.

    Reviews from Real Users

    A Platform Solution Architect at a tech services company says, “The solution is feature-rich, easy to set up, and has good support.”

    Sample Customers
    Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners
    Figo, Clear Review, Arvato Bertelsmann, Experian, Chime
    Top Industries
    REVIEWERS
    Security Firm22%
    Financial Services Firm18%
    Computer Software Company11%
    Cloud Provider8%
    VISITORS READING REVIEWS
    Financial Services Firm17%
    Computer Software Company15%
    Security Firm8%
    Manufacturing Company7%
    VISITORS READING REVIEWS
    Computer Software Company17%
    Financial Services Firm13%
    Manufacturing Company9%
    Government8%
    Company Size
    REVIEWERS
    Small Business44%
    Midsize Enterprise13%
    Large Enterprise44%
    VISITORS READING REVIEWS
    Small Business27%
    Midsize Enterprise11%
    Large Enterprise62%
    REVIEWERS
    Small Business57%
    Midsize Enterprise14%
    Large Enterprise29%
    VISITORS READING REVIEWS
    Small Business24%
    Midsize Enterprise11%
    Large Enterprise65%
    Buyer's Guide
    Check Point CloudGuard CNAPP vs. SUSE NeuVector
    March 2024
    Find out what your peers are saying about Check Point CloudGuard CNAPP vs. SUSE NeuVector and other solutions. Updated: March 2024.
    768,924 professionals have used our research since 2012.

    Check Point CloudGuard CNAPP is ranked 5th in Cloud Workload Protection Platforms (CWPP) with 60 reviews while SUSE NeuVector is ranked 15th in Cloud Workload Protection Platforms (CWPP) with 7 reviews. Check Point CloudGuard CNAPP is rated 8.6, while SUSE NeuVector is rated 7.8. The top reviewer of Check Point CloudGuard CNAPP writes "Threat intel integration provides us visibility in case any workload is communicating with suspicious or blacklisted IPs". On the other hand, the top reviewer of SUSE NeuVector writes "Good value for money; great for policy management". Check Point CloudGuard CNAPP is most compared with Prisma Cloud by Palo Alto Networks, AWS GuardDuty, Wiz, Microsoft Defender for Cloud and Qualys VMDR, whereas SUSE NeuVector is most compared with Prisma Cloud by Palo Alto Networks, Red Hat Advanced Cluster Security for Kubernetes, Aqua Cloud Security Platform, Sysdig Falco and Sysdig Secure. See our Check Point CloudGuard CNAPP vs. SUSE NeuVector report.

    See our list of best Cloud Workload Protection Platforms (CWPP) vendors.

    We monitor all Cloud Workload Protection Platforms (CWPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.