Check Point CloudGuard CNAPP vs Tanium comparison

Check Point Software Technologies and Tanium are both solutions in the Vulnerability Management category. Check Point Software Technologies is ranked #9 with an average rating of 8.5, while Tanium is ranked #24 with an average rating of 8.0. Check Point Software Technologies holds a 1.5% mindshare in VM, compared to Tanium’s 2.6% mindshare. Additionally, 95% of Check Point Software Technologies users are willing to recommend the solution, compared to 75% of Tanium users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 9, 2024

Check Point CloudGuard CNAPP and Tanium are key players in cybersecurity management, focusing on cloud security and endpoint management, respectively. CloudGuard takes the lead with its strong compliance and security visualization tools, appealing to organizations prioritizing cloud security and compliance.

Features: Check Point CloudGuard CNAPP concentrates on compliance, centralized management, and predictive visualization tools. It offers detailed IAM control and robust threat intelligence. Tanium is strong in patch management, endpoint discovery, and security posture, with capabilities like advanced interrogation and instant discovery, essential for managing large networks.

Room for Improvement: CloudGuard users indicate the need for improved documentation, third-party tool integration, and technical support responsiveness. Enhancements in automation features and a reduction in false positives are also desired. Tanium users point out UI complexity, generating false positives, and scalability issues as areas for improvement. Simplifying its architecture would also enhance user experiences.

Ease of Deployment and Customer Service: Check Point CloudGuard CNAPP receives praise for its cloud environment support and effectiveness in public and hybrid clouds. Users find customer service generally supportive, though some propose better responsiveness. Tanium's support is knowledgeable and efficient, yet its complex interface can lead to deployment challenges, especially in on-premises and private cloud settings.

Pricing and ROI: Check Point CloudGuard CNAPP is perceived as costly but justified by its features, ensuring long-term ROI through reduced vulnerabilities and improved compliance. It offers flexible licensing, though users seek cost reductions. Tanium may have a higher price tag, particularly in some regions, but it is deemed a valuable investment due to its endpoint management strength. The ROI is reflected in reduced manual security management, saving significant time and costs.

To learn more, read our detailed Check Point CloudGuard CNAPP vs. Tanium Report (Updated: September 2025).

Buyer's Guide

Check Point CloudGuard CNAPP vs. Tanium

September 2025

Download the complete report

Helped 868,288 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Zafran Security

Mindshare comparison

As of September 2025, in the Vulnerability Management category, the mindshare of Zafran Security is 1.0%, up from 0.1% compared to the previous year. The mindshare of Check Point CloudGuard CNAPP is 1.5%, up from 1.4% compared to the previous year. The mindshare of Tanium is 2.6%, up from 2.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Vulnerability Management Market Share Distribution
Product	Market Share (%)
Check Point CloudGuard CNAPP	1.5%
Zafran Security	1.0%
Tanium	2.6%
Other	94.9%

Vulnerability Management

Featured Reviews

Israel Cavazos Landini

Associate Director IT Security Operations at a pharma/biotech company with 10,001+ employees

Weekly insights and risk analysis facilitate informed security decisions

I appreciate the weekly insights Zafran provides, which include critical topics for networks and IT security, allowing us to evaluate which insights apply to our environment. The organization score feature is valuable to keep the leadership team updated on how our infrastructure fares security-wise. The applicable risk level versus base risk level feature is beneficial because prior to Zafran, we only used the base risk level, but now understand that risk depends on the asset itself. Zafran is an excellent tool.

Read full review

Bart Coddens

Cloud Engineer at Cloudar

Evolved cloud security with active monitoring but needs interface consistency

The user interface needs work. Sometimes, it is a transition from the old tool to the new CNAPP Two that I currently have, and remnants of the old environment can still be detected. I require consistency in the user interface to ensure everything is streamlined into the same look and feel. More work is needed in fine-tuning the threat data towards your CSPM and activity logs, aligning them with business intelligence, which requires a cohesive console interface. My assessment of CloudGuard CDRs in intrusion detection and threat hunting capabilities is that it still needs some work. All the threat data that comes in, you need to fine tune it a bit.

Read full review

NitinKushwaha

Product Manager at OakNorth

Stable product with an ability to build complex roles

We use Tanium as an EDR solution for managing end-user devices and servers The product is granular and can build complex roles compared to other EDR vendors. Tanium's dashboard UI could be similar to CrowdStrike. We have been using Tanium for two and a half years. The product is stable. I rate…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Overall, we have seen about eighty-seven percent reduction of the number of vulnerabilities that require urgency to remediate, specifically the number of criticals."

"We saw benefits from Zafran Security almost immediately after deploying it."

"We are able to see the real risk of a vulnerability on our environment with our security tools."

"Zafran has become an indispensable tool in our cybersecurity arsenal."

"Zafran is an excellent tool."

"We have more visibility than ever before, appreciating the valuable and proactive insight that we receive from the platform."

"People implementing this solution are concerned with addressing a significant risk, and within the AWS realm, this tool does de-risk substantially."

"My overall product rating is ten out of ten."

"We like the GSL Builder feature. When you're running a security operations center, you spend a lot of time monitoring endpoint activity to ensure there is no malicious traffic or anonymous access in the environment. The GSL Builder is helpful for deep investigations of a particular reason for an incident. You can use it to get more information."

"The feature that I find most valuable is the blocking feature."

"The comprehensive security for IaaS and PaaS cloud assets provides efficient security awareness to all the teams."

"It offers security insights and recommendations to assist organizations in acting and remediating issues swiftly."

"This product provides a really nice visualization of the infrastructure, including network topology, firewalls, etc."

More Check Point CloudGuard CNAPP pros

"I'm not so familiar with the tool but I like the interaction of the console to the picture. Patching is the primary model I have been focusing on for the last couple of weeks. So I have created a proof of concept environment and have been checking the available features."

"The product is granular and can build complex roles compared to other EDR vendors."

"I find the inventory and compliance features of Tanium to be the most impressive."

"I like the fact that you can create patching campaigns depending on the area of your network that you want to address first. I like the ability it has to make several campaigns that work in parallel."

"The security features are very valuable."

"Tanium has made the process of detecting threats more proactive with its detection. So, the process is easier and more efficient."

"The interrogation piece was the most valuable feature because it was very detailed."

"I would say Tanium is the best tool for vulnerability management."

More Tanium pros

Cons

"I think the ability to have some enhanced reporting capabilities is something they can improve on, as they have good reports but we have asked for some specific reporting enhancements."

"The dashboarding and reporting functionality of Zafran Security is an area that definitely could use some improvements."

"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."

"It should have some options to activate API calls to the platform in the cloud, another improvement would be that when the rules are colonized and they want to be published."

"The support it provides is not very good. They should improve it since we have had several setbacks due to support issues."

"The platform would be significantly enhanced by incorporating data security management capabilities."

"I am not a technical person, but generically, the user interface can be a little more intuitive. Our staff has trained network security and cloud security professionals, and they get it, but when you are trying to get to the customers to be able to pick it up and maintain it, it can be a bit difficult."

"The reporting dashboard responds slowly, which leads to late report compilation."

"The impact analysis that they perform can be improved. It is currently lacking. It should be more detailed."

"Down the road, we would like to see automation. That is probably a feature that most people want. If they can automate patching a vulnerability, it will be much easier."

"The dashboard customization has room for improvement."

More Check Point CloudGuard CNAPP cons

"The performance could improve in future releases. We have had performance issues in specialized web environments, but overall I think the problems are less than 2% of the computer systems being used."

"The most painful thing is the interface. It's a bit unclear sometimes."

"Tanium required local admin or root rights on Mac devices, which did not comply with our security policies. This made the solution less suitable for our restrictive environment."

"Tanium's limitations should be improved because although it is a great tool, it is limited to only a few classes during a session."

"Tanium’s scalability could be improved."

"When working with Tanium, there are some older devices that haven't been patched for a long time, and certain patches are not included in Tanium."

"We had some issues with the solution's OS upgrade."

"It is not really additional functions, or the features that are needed, rather the complexity would be reduced based on the number of modules required to put together a comprehensive operational security and risk compliance model."

More Tanium cons

Pricing and Cost Advice

Information not available

"The licensing and costs are straightforward, as they have a baseline of 100 workloads (number of instances) within one license with no additional nor hidden charges. If you want to have 200 workloads under Dome9, then you need to take out two licenses for that. Also, it does not have any impact on cloud billing, as data is shared using the API call. This is well within the limit of free API calls provided by the cloud provider."

"In the beginning, the price of Dome9 was cheap, whereas now it is not."

"The pricing is tremendous and super cheap. It is shockingly cheap for what you get out of it. I am happy with that. I hope that doesn't get reported back and they increase the prices. I love the pricing and the licensing makes sense. It is just assets: The more stuff that you have, the more you pay."

"From a pricing perspective, they are pretty expensive."

"Everything in this field is very expensive."

"The pricing is extremely competitive."

"The price is on the higher end."

"We have the enterprise-level license and we renew it annually because it is worth the cost."

More Check Point CloudGuard CNAPP pricing and cost advice

"The solution is expensive but it's a good investment."

"It's an expensive solution. It would be nice if the cost were lower."

"There is an annual license required to use this solution."

"The product's pricing differs from region to region depending on negotiations and the number of endpoints."

"It is higher than some competitors in the market."

"Tanium is a more expensive solution in Latin America than some of the competitors, such as BigFix."

"The solution offers value for money."

See which vendors are best for you

Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.

See recommendations

868,288 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

11%

Computer Software Company

Manufacturing Company

Government

Computer Software Company

12%

Financial Services Firm

11%

Manufacturing Company

Educational Organization

Financial Services Firm

16%

Government

12%

Manufacturing Company

Computer Software Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

By reviewers
Company Size	Count
Small Business	54
Midsize Enterprise	17
Large Enterprise	57

By reviewers
Company Size	Count
Small Business	4
Midsize Enterprise	3
Large Enterprise	10

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?

Since we stood Zafran Security up in our private cloud, we handle the maintenance on our side. As we opted not to use...

See all answers

What needs improvement with Zafran Security?

In terms of areas for improvement, Zafran Security is doing a really great job as a new and emerging company. Oftenti...

See all answers

What is your primary use case for Zafran Security?

My use cases for Zafran Security revolve around two primary areas. One is around vulnerability management and priorit...

See all answers

What is your experience regarding pricing and costs for CloudGuard Workload Protection?

My experience with pricing, setup cost, and licensing is that the pricing model is flexible and consumption-based, wh...

See all answers

What do you like most about CloudGuard for Cloud Intelligence?

The new scanning function is a valuable feature that wasn't available until recently.

See all answers

What needs improvement with CloudGuard for Cloud Intelligence?

There is a lack of functionalities and usability. I used to compare it with another solution that is focused on speci...

See all answers

What do you like most about Tanium?

The product is granular and can build complex roles compared to other EDR vendors.

See all answers

What needs improvement with Tanium?

While there is always room for improvement, I am pleased with Tanium.

See all answers

What is your primary use case for Tanium?

The primary use case for Tanium ( /products/tanium-reviews ) is compliance, patching, and inventory as part of the co...

See all answers

Comparisons

Wiz Code vs Zafran Security

Compared 35% of the time

Vulcan Cyber vs Zafran Security

Compared 15% of the time

Tenable Vulnerability Management vs Zafran Security

Compared 8% of the time

Nucleus vs Zafran Security

Compared 6% of the time

Qualys VMDR vs Zafran Security

Compared 6% of the time

More Zafran Security Competitors

Wiz vs Check Point CloudGuard CNAPP

Compared 15% of the time

Prisma Cloud by Palo Alto Networks vs Check Point CloudGuard CNAPP

Compared 14% of the time

SentinelOne Singularity Cloud Security vs Check Point CloudGuard CNAPP

Compared 7% of the time

AWS GuardDuty vs Check Point CloudGuard CNAPP

Compared 5% of the time

Cloudflare vs Check Point CloudGuard CNAPP

Compared 5% of the time

More Check Point CloudGuard CNAPP Competitors

CrowdStrike Falcon vs Tanium

Compared 11% of the time

Microsoft Configuration Manager vs Tanium

Compared 8% of the time

Microsoft Defender for Endpoint vs Tanium

Compared 8% of the time

ServiceNow Discovery vs Tanium

Compared 6% of the time

BigFix vs Tanium

Compared 5% of the time

More Tanium Competitors

Product Reports

Buyer's Guide

Zafran Security

September 2025

Download Zafran Security product report

Buyer's Guide

Check Point CloudGuard CNAPP

September 2025

Download Check Point CloudGuard CNAPP product report

Buyer's Guide

Tanium

September 2025

Download Tanium product report

Also Known As

No data available

Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence

No data available

Overview

Zafran Security integrates with existing security tools to identify and mitigate vulnerabilities effectively, proving that most critical vulnerabilities are not exploitable, optimizing threat management.

Zafran Security introduces an innovative operating model for managing security threats and vulnerabilities. By leveraging the threat exposure management platform, it pinpoints and prioritizes exploitable vulnerabilities, reducing risk through immediate remediation. This platform enhances your hybrid cloud security by normalizing vulnerability signals and integrating specific IT context data, such as CVE runtime presence and internet asset reachability, into its analysis. No longer reliant on patch windows, Zafran Security allows you to manage risks actively.

What are the key features of Zafran Security?

Threat Exposure Management: Utilizes existing tools to prioritize vulnerabilities and manage threats.
Integrative Analysis: Combines security data with IT context for precise vulnerability management.
Real-time Risk Reduction: Enables immediate risk management without waiting for patches.
Hybrid Cloud Compatibility: Functions across diverse cloud environments for comprehensive security.

What benefits can users expect from Zafran Security?

Improved Security: Enhances protection by efficiently identifying and mitigating risks.
Cost Efficiency: Reduces unnecessary patching expenses by confirming non-exploitable vulnerabilities.
Time Savings: Frees developers to focus on root causes by handling immediate threats.
Comprehensive Insight: Offers a holistic view of security threats and vulnerabilities.

In industries where security is paramount, such as finance and healthcare, Zafran Security provides invaluable protection by ensuring that only exploitable vulnerabilities are addressed. It allows entities to maintain robust security measures while allocating resources efficiently, fitting seamlessly into existing security strategies.

Zafran Security

Check Point CloudGuard CNAPP offers comprehensive cloud security with features like dynamic access control, asset protection, and compliance checks, tailored for organizations seeking enhanced governance across AWS, Azure, and GCP platforms.

Check Point CloudGuard CNAPP provides robust capabilities, including centralized firewall management, IAM scanning, and real-time visibility. Its strengths lie in predictive visualization, threat intelligence, and auto-remediation, making it a valuable tool for risk mitigation and compliance management. The platform's integration and responsiveness enhance cloud security, ensuring alignment with industry standards and effective threat protection.

What are the key features of Check Point CloudGuard CNAPP?

Dynamic Access Control: Enables granular security permissions for cloud resources.
Asset Protection: Safeguards cloud assets from unauthorized access and threats.
Compliance Checks: Ensures alignment with industry regulations like PCI DSS and SOC 2.
Centralized Firewall Management: Simplifies firewall rule configuration across cloud environments.
IAM Scanning: Audits and secures identity and access management configurations.
Real-Time Visibility: Provides insights into cloud environments for proactive threat detection.

What benefits and ROI should you expect from Check Point CloudGuard CNAPP?

Threat Intelligence: Identifies and mitigates potential risks before exploitation.
Auto-Remediation: Automates responses to security incidents, reducing manual intervention.
Intuitive Interface: Simplifies management and enhances operational efficiency.
Posture Management: Maintains strong security posture through continuous assessment.

Organizations in finance, healthcare, and retail frequently implement Check Point CloudGuard CNAPP for compliance and security across cloud environments. It assists with workload protection, threat detection, and regulatory obligation fulfillment, proving effective for securing applications and monitoring API interactions.

Check Point Software Technologies

Tanium Endpoint Platform reduces security risk, improves agility & increases efficiency, a fundamentally new approach to endpoint security's threat detection, indicent response, vulnerability assessment and configuration compliance & with management's software distribution, asset utilization, asset inventory and patch management.

Tanium

Sample Customers

Information Not Available

Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners

JPMorgan Chase, eBay, Amazon, US Bank, MetLife, pwc, Cerner, Delphi, MGM Grand, New York Life

Buyer's Guide

Check Point CloudGuard CNAPP vs. Tanium

September 2025

Free Report: Check Point CloudGuard CNAPP vs. Tanium

Find out what your peers are saying about Check Point CloudGuard CNAPP vs. Tanium and other solutions. Updated: September 2025.

DOWNLOAD NOW

868,288 professionals have used our research since 2012.

See our Check Point CloudGuard CNAPP vs. Tanium report.

See our list of best Vulnerability Management vendors.

We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.