Try our new research platform with insights from 80,000+ expert users

Check Point CloudGuard CNAPP vs Trivy comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Check Point CloudGuard CNAPP
Ranking in Container Security
10th
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
72
Ranking in other categories
Vulnerability Management (9th), Cloud and Data Center Security (9th), Cloud Workload Protection Platforms (CWPP) (5th), Cloud Security Posture Management (CSPM) (5th), Cloud-Native Application Protection Platforms (CNAPP) (5th), Data Security Posture Management (DSPM) (6th), Compliance Management (6th)
Trivy
Ranking in Container Security
5th
Average Rating
8.6
Reviews Sentiment
7.5
Number of Reviews
12
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of August 2025, in the Container Security category, the mindshare of Check Point CloudGuard CNAPP is 1.9%, down from 2.0% compared to the previous year. The mindshare of Trivy is 5.7%, up from 1.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Container Security
 

Featured Reviews

Bart Coddens - PeerSpot reviewer
Evolved cloud security with active monitoring but needs interface consistency
The user interface needs work. Sometimes, it is a transition from the old tool to the new CNAPP Two that I currently have, and remnants of the old environment can still be detected. I require consistency in the user interface to ensure everything is streamlined into the same look and feel. More work is needed in fine-tuning the threat data towards your CSPM and activity logs, aligning them with business intelligence, which requires a cohesive console interface. My assessment of CloudGuard CDRs in intrusion detection and threat hunting capabilities is that it still needs some work. All the threat data that comes in, you need to fine tune it a bit.
Utsav Sharma - PeerSpot reviewer
Maintain operational efficiency by detecting misconfigurations and vulnerabilities
The vulnerability scanning feature is excellent as it supports various container capabilities like Docker and Sharma. It also offers repository scanning in the source code domain, allowing pre-push code scans. The misconfiguration detection works well for CloudFormation, Docker files, and Terraform. Its compliance support, like NIST, ensures that configurations align with standards. Trivy helps me significantly detect misconfigurations missed by the ops engineers or in Terraform by the naked eye. It ensures that my deployments are free of misconfigurations and vulnerabilities.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It has an analytics service that does research for us."
"The most valuable feature is the ability to apply common tools across all accounts."
"The identification of misconfigurations, maintenance of compliance in a centralized way, and visibility across all the multi-cloud tenants are the key functionalities."
"The automatic learning and an AI engine help to find more modern vulnerability problems."
"Good interface and visibility."
"Alerts of cloud activity happening across all accounts is helpful."
"The visibility in our cloud environment is the most valuable feature."
"The most valuable feature of Check Point CloudGuard Posture Management is the training."
"Trivy is easy to integrate with CI/CD and can be installed on desktops to scan images."
"One of the great features of Trivy is that it helps me scan items such as AWS credentials and GCP service accounts."
"I can see vulnerabilities in the images of any applications deployed in the Kubernetes environment or as container applications."
"Overall, I would rate Trivy a ten out of ten."
"Trivy is particularly useful for checking if Docker images have critical vulnerabilities before they reach production."
"Trivy is most valuable for its ability to scan all repository files and dependencies."
"Trivy is very reliable and always has an up-to-date database to scan images and identify vulnerabilities."
"Trivy's ability to scan files, images, GitHub repositories, Infrastructure as Code like Terraform, and Kubernetes is valuable."
 

Cons

"Sometimes, the solution provides us with false alerts of vulnerabilities that are not present in our cloud environment."
"Timely updates and upgrades to meet modern technological changes could help improve performance and limit the chances of downtime."
"It does not support on-premise deployments such as VMware Tanzu, and this has been a major drawback when it comes to integrations with some applications."
"There are opportunities for improvement that can be addressed through a roadmap."
"The tool should incorporate more use cases like improving security scores. It should also improve documentation."
"The costs are high."
"They take time to respond or coordinate a meeting since they maintain a schedule that does not fit Latin America very well."
"The guidelines to implement or to link with the clouds are not complete."
"For malware detection, I need to use two tools: Trivy as my anomaly scanner and ClamAV. I am integrating these two tools into the CI pipeline. If both malware and anomaly detection could be managed by one tool, I would not need to depend on two tools. That would be my suggestion."
"Having little experience can hinder the ability to connect it to a user-friendly UI effectively."
"In our CI/CD pipelines, Trivy lacks built-in functionality for report analysis."
"Trivy can improve by providing an output in PDF format. Additionally, it takes longer to scan container images built with many layers."
"One drawback I have observed with Trivy is the difficulty in building or integrating a UI, particularly for an operator in the NetSuite example."
"The main area for improvement is in differentiating between OS and application-based vulnerabilities."
"The reporting could be a little better. When integrating Trivy with CI, the interpretation of the reports could be improved."
"The reporting could be a little better."
 

Pricing and Cost Advice

"The price is on the higher end."
"It is difficult to contextualize the pricing because we are used to Indian pricing and licensing."
"From a pricing perspective, they are pretty expensive."
"The solution’s pricing is a little bit high."
"The tool's pricing is moderate. Its licensing costs are yearly."
"The license fee is high."
"​They support either annual licensing or hourly. At the time of our last negotiation, it was either one or the other, you could not mix or match. I would have liked to mix/match. ​"
"Its price is very fair."
Information not available
report
Use our free recommendation engine to learn which Container Security solutions are best for your needs.
865,384 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Financial Services Firm
11%
Manufacturing Company
8%
Educational Organization
5%
Computer Software Company
15%
Financial Services Firm
14%
Manufacturing Company
11%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What needs improvement with Trivy?
Trivy's marketing and awareness need improvement. Not everyone knows about it, which isn't ideal given its capabilities. There's potential to integrate AI and machine learning for enhanced function...
What is your primary use case for Trivy?
I use Trivy ( /products/trivy-reviews ) to scan code for vulnerabilities before deployment. Our projects, which are developed by different developers, involve various dependencies and third-party c...
What advice do you have for others considering Trivy?
I recommend Trivy to others due to its powerful and useful features. However, I suggest increasing its marketing to raise awareness. I rate Trivy an eight out of ten.
 

Also Known As

Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence
No data available
 

Overview

 

Sample Customers

Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners
Information Not Available
Find out what your peers are saying about Check Point CloudGuard CNAPP vs. Trivy and other solutions. Updated: July 2025.
865,384 professionals have used our research since 2012.