Check Point CloudGuard CNAPP vs Veracode comparison

Check Point CloudGuard CNAPP

Read 208 Veracode reviews

18,744 Views
4,686 Comparison Views

89% willing to recommend

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 16, 2024

Veracode and Check Point CloudGuard CNAPP are two notable solutions in cloud security. Veracode has the upper hand in pricing and support, while Check Point CloudGuard CNAPP stands out for its comprehensive features which users feel justify its cost.

Features: Veracode's valuable features include broad language support, detailed reporting, and competitive pricing. Check Point CloudGuard CNAPP users appreciate its robust threat prevention, seamless integration capabilities, and extensive feature set which appeals to users looking for an all-encompassing solution.

Room for Improvement: Veracode could enhance its scanning speed, update its policy libraries more frequently, and improve performance optimizations. Check Point CloudGuard CNAPP users desire better documentation, more intuitive configuration, and enhanced usability resources.

Ease of Deployment and Customer Service: Veracode receives praise for its straightforward deployment model but faces criticism for the occasional complexity in troubleshooting. Check Point CloudGuard CNAPP has a more complex deployment but garners high marks for effective customer service and post-deployment support.

Pricing and ROI: Veracode is viewed favorably for its competitive setup costs and quicker ROI. Check Point CloudGuard CNAPP has higher setup costs, but users find the investment worthwhile due to the extensive security benefits and long-term ROI.

To learn more, read our detailed Check Point CloudGuard CNAPP vs. Veracode Report (Updated: December 2025).

Check Point CloudGuard CNAPP vs. Veracode

December 2025

Download the complete report

Helped 881,082 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

ROI

Sentiment score

7.3

Check Point CloudGuard CNAPP improves security and compliance, reduces manual tasks, boosting efficiency and ROI with automation.

Sentiment score

6.5

Veracode optimizes development by automating vulnerability detection, reducing costs, improving security, compliance, and enhancing software reliability.

The compliance has improved as our overall compliance score against CIS benchmark has improved from around 72 to 92% within the first three months of adoption.

Assistant Manager at a computer software company with 201-500 employees

This helped my team cut manual review time by roughly twenty to twenty-five percent, allowing me to reallocate effort to proactive cloud security improvements.

Pedro Leão

Networking and System Consultant at Orbcom,Lda.

Monitoring cloud security automatically ensures a return on investment.

For more quotes and insights, download the Check Point CloudGuard CNAPP report

Cloud Engineer at Cloudar

The scanners of Veracode bring status of the weaknesses in the current infrastructure. It scans and provides reports regarding the servers, the network, and the applications running on those servers.

AlejandroMosso

Senior Solutions Architect at IDS Comercial

Regarding price, the evaluation should focus on how efficiently they will recover their investment, considering the time saved through the use of Veracode Fix, for example, and the ability to fix code at dev time compared to the problems faced when fixing after the product is already deployed.

reviewer2703864

Head of Security Architecture at a healthcare company with 5,001-10,000 employees

We did see a return on investment with Veracode, as we segregated our remediation efforts, which reduced our time to delivery as well as the number of engineers needed to help us in delivering a secure solution.

reviewer2774562

DevSecOps Engineer at a tech services company with 11-50 employees

For more quotes and insights, download the Veracode report

Customer Service

Sentiment score

6.6

Check Point CloudGuard CNAPP offers excellent, knowledgeable support but could improve initial response times at the basic support level.

Sentiment score

7.2

Veracode's support is praised for responsiveness and expertise, though some experience delays with complex issues.

When I need help or have open questions, or if I require the capability to deploy a quick test environment, there are always people I can contact at Check Point to get my information or the environment as fast as I need it.

Cloud Security Architect at controlware

I have a dedicated support engineer and a presales engineer dedicated to me.

Cloud Engineer at Cloudar

Customer support for Check Point CloudGuard CNAPP has been responsive and knowledgeable.

For more quotes and insights, download the Check Point CloudGuard CNAPP report

Assistant Manager at a computer software company with 201-500 employees

Access to the engineering team is crucial for faster feedback on the product fix process.

SrikanthRaghavan

Principal Architect at a consultancy with 11-50 employees

I have communicated with the technical support of Veracode a couple of times, and this was a really great experience because these professionals know their material.

Andrei Kriukov

Application Security Specialist at Herrenknecht

They share detailed information via email, including screenshots or further clarification about the issue.

reviewer2753535

DevSecOps Engineer at a tech services company with 1,001-5,000 employees

For more quotes and insights, download the Veracode report

Scalability Issues

Sentiment score

7.7

Check Point CloudGuard CNAPP scales well across clouds, with reliable performance and strong security compliance, despite licensing concerns.

Sentiment score

7.4

Veracode offers efficient scalability with cloud architecture, supporting diverse applications and user roles across industries despite minor scan delays.

Visibility scales without performance issues as my environment expands.

Pedro Leão

Networking and System Consultant at Orbcom,Lda.

Check Point CloudGuard CNAPP scales efficiently in the multi-cloud environment.

Assistant Manager at a computer software company with 201-500 employees

I never had any performance-related issues.

For more quotes and insights, download the Check Point CloudGuard CNAPP report

Cloud Security Architect at controlware

Cloud solutions are easier to scale than on-premise solutions.

AlejandroMosso

Senior Solutions Architect at IDS Comercial

It has a good capacity to scale effectively.

Brintha Prabakar

Lead Automation Quality Engineer in Leading UK Bank at a consultancy with 10,001+ employees

Implementing these features into our normal CI/CD was good, so I can say that scalability is really good.

Andrei Kriukov

Application Security Specialist at Herrenknecht

For more quotes and insights, download the Veracode report

Stability Issues

Sentiment score

8.1

Check Point CloudGuard CNAPP is reliable and efficient, handling large-scale workloads with minimal downtime despite occasional minor latency issues.

Sentiment score

7.8

Veracode is praised for stability and performance despite minor glitches, with continuous improvements ensuring reliability and minimal downtime.

If there are errors, it is sometimes challenging to elaborate or troubleshoot since it is not transparent enough to understand what to search for.

Cloud Security Architect at controlware

It is rapidly evolving, and sometimes mistakes occur, necessitating testing.

For more quotes and insights, download the Check Point CloudGuard CNAPP report

Cloud Engineer at Cloudar

If the Veracode server is down, we experience many issues during the scan.

Brintha Prabakar

Lead Automation Quality Engineer in Leading UK Bank at a consultancy with 10,001+ employees

I have observed that it is not that reliable in terms of security because Veracode was not able to find some security threats in our application that existed since the product was developed.

Yash Shende

Software Development Engineer II at Rocket Software

It's not that easy to onboard, but once they have been onboarded on the platform, and the pipeline configured alongside the product configured, it works effectively.

reviewer2703864

Head of Security Architecture at a healthcare company with 5,001-10,000 employees

For more quotes and insights, download the Veracode report

Room For Improvement

Check Point CloudGuard CNAPP needs better integrations, user interfaces, support, automation, and documentation to enhance functionality and user satisfaction.

Veracode requires improvements in reducing false positives, enhancing speed, improving integration, flexibility, support, UI, and customer service.

I need more integration from the code-to-cloud principle.

Cloud Security Architect at controlware

It would be nice to have periodic updates on what people should do, maybe with some analysis or something.

Stefan Zara

Information Security Officer at Cargus

I require consistency in the user interface to ensure everything is streamlined into the same look and feel.

For more quotes and insights, download the Check Point CloudGuard CNAPP report

Cloud Engineer at Cloudar

If it could be integrated directly with code repositories such as Bitbucket or GitHub, without the need to create a pipeline to upload and decode code, it would simplify the code scan process significantly.

Himadri Subudhi

Works

We had issues with scanning large applications. Scanning took a lot of time, so we kept it outside the DevOps pipeline to avoid delaying deployments.

Brintha Prabakar

Lead Automation Quality Engineer in Leading UK Bank at a consultancy with 10,001+ employees

A nice addition would be if it could be extended for scenarios with custom cleansers.

reviewer2700198

IT App Security Senior Analyst at a transportation company with 10,001+ employees

For more quotes and insights, download the Veracode report

Setup Cost

Check Point CloudGuard CNAPP offers flexible licensing with varied costs, seen as high but valuable for security management.

Veracode's higher pricing offers comprehensive security for enterprises, posing challenges for smaller businesses, with negotiable licensing options.

In terms of ROI, we can see time savings for audit preparation of at least 30-40%.

Assistant Manager at a computer software company with 201-500 employees

It is not cheap, of course, yet it is a necessity.

Cloud Security Architect at controlware

From a licensing and cost perspective, it is really competitive.

For more quotes and insights, download the Check Point CloudGuard CNAPP report

Cloud Engineer at Cloudar

It's not the most expensive solution.

AlejandroMosso

Senior Solutions Architect at IDS Comercial

Overall, Veracode's pricing is lower and more scalable than many alternatives in the market.

reviewer2753535

DevSecOps Engineer at a tech services company with 1,001-5,000 employees

If there's a security gap, you'll never know the cost or effect.

Himadri Subudhi

Works

For more quotes and insights, download the Veracode report

Valuable Features

Check Point CloudGuard CNAPP offers visibility, compliance, and threat intelligence, enhancing security management and governance across multi-cloud environments.

Veracode offers comprehensive code analysis, seamless integration, and efficient vulnerability detection, improving security and development speed with minimal manual effort.

One of the main reasons we use the solution is that it is great at identifying risks that are critical to our business.

Stefan Zara

Information Security Officer at Cargus

The CDR helps detect anomalous behavior and respond to threats before they become an issue.

Cloud Engineer at Cloudar

Check Point CloudGuard CNAPP offers a unified, modular platform that combines CSPM, CWPP, CIEM, code security, and cloud detection and response.

For more quotes and insights, download the Check Point CloudGuard CNAPP report

Assistant Manager at a computer software company with 201-500 employees

It offers confidence by preventing exposure to vulnerabilities and helps ensure that we are not deploying vulnerable code into production.

Kv Rao

Site Leader (India) at Industrial Scientific

The best features in Veracode include static analysis and the early detection of vulnerable libraries; it integrates with tools such as Jenkins.

Himadri Subudhi

Works

It fixes issues directly in the IDE while you're doing it.

reviewer2700198

IT App Security Senior Analyst at a transportation company with 10,001+ employees

For more quotes and insights, download the Veracode report

Categories and Ranking

Check Point CloudGuard CNAPP

Ranking in Container Security

10th

Average Rating

8.6

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

Vulnerability Management (11th), Cloud and Data Center Security (9th), Cloud Workload Protection Platforms (CWPP) (6th), Cloud Security Posture Management (CSPM) (6th), Cloud-Native Application Protection Platforms (CNAPP) (5th), Data Security Posture Management (DSPM) (7th), Compliance Management (6th)

Veracode

Ranking in Container Security

8th

Average Rating

8.0

Reviews Sentiment

6.9

Number of Reviews

208

Ranking in other categories

Application Security Tools (2nd), Static Application Security Testing (SAST) (2nd), Software Composition Analysis (SCA) (3rd), Static Code Analysis (1st), Dynamic Application Security Testing (DAST) (1st), Application Security Posture Management (ASPM) (1st)

Mindshare comparison

As of January 2026, in the Container Security category, the mindshare of Check Point CloudGuard CNAPP is 2.2%, up from 1.9% compared to the previous year. The mindshare of Veracode is 3.1%, down from 4.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Container Security Market Share Distribution
Product	Market Share (%)
Veracode	3.1%
Check Point CloudGuard CNAPP	2.2%
Other	94.7%

Container Security

Featured Reviews

Boosts security and compliance in multi-cloud environments while real-time threat detection enhances risk management

Assistant Manager at a computer software company with 201-500 employees

Check Point CloudGuard CNAPP flagged a misconfiguration in our AWS S3 bucket that had overly permissive access settings. That configuration could have exposed our sensitive data to the public internet. The platform not only identified the issue but also provided remediation that our team was able to apply immediately. This prevented a potential data exposure. Check Point CloudGuard CNAPP offers a unified, modular platform that combines CSPM, CWPP, CIEM, code security, and cloud detection and response. The agentless workload posture, real-time threat detection and response, multi-cloud coverage and visibility, compliance automation, and one-click remediations stand out as its best features. I find myself relying on the risk management engine and prioritization the most day-to-day. In any cloud environment, you are flooded with findings, misconfigurations, vulnerabilities, and compliance gaps. Without prioritization, it is overwhelming for our team to take care of the posture. CloudGuard's risk scoring helps us cut through incidents. This makes remediation faster and focused instead of wasting time checking every alert. We get to fix the issues that pose real business risks. Check Point CloudGuard CNAPP has positively impacted our organization at a significant level. We get greater visibility and control across all our cloud environments. Some biggest benefits we have seen are faster detection and remediation of misconfigurations, improved compliance posture, reduced risk exposure, operational efficiency, and cost savings. Overall, it has made our cloud environment more secure, compliant, and easier to manage while freeing up our teams to focus on projects instead of chasing alerts.

Read full review

reviewer2703864

Head of Security Architecture at a healthcare company with 5,001-10,000 employees

Onboarding developers successfully while improving code security through IDE integration

Regarding room for improvement, we have some problems when onboarding new projects because the build process has to be done in a certain way, as Veracode analyzes the binaries and not the code by itself alone. If the process is not configured correctly, it doesn't work. That's one of the things that we are discussing with Veracode. Something positive that we've been able to do is submit formal feature requests to them, and they are working on them; they've already solved some of them. This encourages us to propose new ideas and improvements. Another improvement that we asked for this use case is to be able to configure how Veracode Fix proposes and fixes because sometimes it makes proposals using libraries that go against our architecture design made by the enterprise architecture team. For example, we want them to propose using another library, and that's something we already asked Veracode, and they are working on it. We want to specify when you see this kind of vulnerability, you can only propose these two options.

Read full review

See which vendors are best for you

Use our free recommendation engine to learn which Container Security solutions are best for your needs.

See recommendations

881,082 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

11%

Manufacturing Company

10%

Computer Software Company

Outsourcing Company

Financial Services Firm

17%

Computer Software Company

13%

Manufacturing Company

10%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	55
Midsize Enterprise	17
Large Enterprise	57

By reviewers
Company Size	Count
Small Business	69
Midsize Enterprise	44
Large Enterprise	115

Questions from the Community

What is your experience regarding pricing and costs for CloudGuard Workload Protection?

My experience with pricing, setup cost, and licensing has been reasonable for the value it delivers. The initial setup cost was fair. Understanding the right modules and tiers took a bit of plannin...

What do you like most about CloudGuard for Cloud Intelligence?

The new scanning function is a valuable feature that wasn't available until recently.

What needs improvement with CloudGuard for Cloud Intelligence?

One area that Check Point CloudGuard CNAPP could use improvement is the navigation when switching between modules. A more streamlined interface and a quicker drill-down into findings would make the...

Which gives you more for your money - SonarQube or Veracode?

SonarQube is easy to deploy and configure, and also integrates well with other tools to do quality code analysis. SonarQube has a great community edition, which is open-source and free. Easy to use...

What do you like most about Veracode Static Analysis?

I like its integration with GitHub. I like using it from GitHub. I can use the GitHub URL and find out the vulnerabilities.

What is your experience regarding pricing and costs for Veracode Static Analysis?

My experience with pricing, setup cost, and licensing for Veracode is that it is fairly moderate.

Prisma Cloud by Palo Alto Networks vs Check Point CloudGuard CNAPP

Comparisons

Compared 24% of the time

Wiz vs Check Point CloudGuard CNAPP

Compared 7% of the time

Cloudflare vs Check Point CloudGuard CNAPP

Compared 5% of the time

AWS Security Hub vs Check Point CloudGuard CNAPP

Compared 4% of the time

Microsoft Defender for Cloud vs Check Point CloudGuard CNAPP

Compared 4% of the time

More Check Point CloudGuard CNAPP Competitors

SonarQube vs Veracode

Compared 12% of the time

Checkmarx One vs Veracode

Compared 8% of the time

GitHub Advanced Security vs Veracode

Compared 5% of the time

Coverity Static vs Veracode

Compared 4% of the time

OWASP Zap vs Veracode

Compared 3% of the time

More Veracode Competitors

Product Reports

Check Point CloudGuard CNAPP

January 2026

Download Check Point CloudGuard CNAPP product report

Download Veracode product report

January 2026

Also Known As

Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence

Crashtest Security , Veracode Detect

Overview

Check Point CloudGuard CNAPP offers comprehensive cloud security with features like dynamic access control, asset protection, and compliance checks, tailored for organizations seeking enhanced governance across AWS, Azure, and GCP platforms.

Check Point CloudGuard CNAPP provides robust capabilities, including centralized firewall management, IAM scanning, and real-time visibility. Its strengths lie in predictive visualization, threat intelligence, and auto-remediation, making it a valuable tool for risk mitigation and compliance management. The platform's integration and responsiveness enhance cloud security, ensuring alignment with industry standards and effective threat protection.

What are the key features of Check Point CloudGuard CNAPP?

Dynamic Access Control: Enables granular security permissions for cloud resources.
Asset Protection: Safeguards cloud assets from unauthorized access and threats.
Compliance Checks: Ensures alignment with industry regulations like PCI DSS and SOC 2.
Centralized Firewall Management: Simplifies firewall rule configuration across cloud environments.
IAM Scanning: Audits and secures identity and access management configurations.
Real-Time Visibility: Provides insights into cloud environments for proactive threat detection.

What benefits and ROI should you expect from Check Point CloudGuard CNAPP?

Threat Intelligence: Identifies and mitigates potential risks before exploitation.
Auto-Remediation: Automates responses to security incidents, reducing manual intervention.
Intuitive Interface: Simplifies management and enhances operational efficiency.
Posture Management: Maintains strong security posture through continuous assessment.

Organizations in finance, healthcare, and retail frequently implement Check Point CloudGuard CNAPP for compliance and security across cloud environments. It assists with workload protection, threat detection, and regulatory obligation fulfillment, proving effective for securing applications and monitoring API interactions.

Check Point Software Technologies

Veracode is a leading provider of application security solutions, offering tools to identify, mitigate, and prevent vulnerabilities across the software development lifecycle. Its cloud-based platform integrates security into DevOps workflows, helping organizations ensure that their code remains secure and compliant with industry standards.

Veracode supports multiple application security testing types, including static analysis (SAST), dynamic analysis (DAST), software composition analysis (SCA), and manual penetration testing. These tools are designed to help developers detect vulnerabilities early in development while maintaining speed in deployment. Veracode also emphasizes scalability, offering features for enterprises that manage a large number of applications across different teams. Its robust reporting and analytics capabilities allow organizations to continuously monitor their security posture and track progress toward remediation.

What are the key features of Veracode?

Static Analysis (SAST) - Scans source code for vulnerabilities before deployment.
Dynamic Analysis (DAST) - Examines applications in a running state to detect flaws in real-time.
Software Composition Analysis (SCA) - Identifies risks in open-source libraries and third-party components.
Manual Penetration Testing - Offers expert analysis for more complex vulnerabilities.
Integrations with DevOps tools - Seamlessly integrates with CI/CD pipelines for automated security checks.

What benefits should users consider in Veracode reviews?

Early detection of vulnerabilities - Helps developers fix security issues early in the development process.
Scalability - Supports organizations with large-scale application portfolios.
Compliance support - Ensures applications meet various security standards and regulations.
Developer training - Provides tools for educating developers on secure coding practices.
Comprehensive reporting - Offers detailed reports that track remediation and risk trends.

Veracode is widely adopted in industries like finance, healthcare, and government, where compliance and security are critical. It helps these organizations maintain strict security standards while enabling rapid development through its integration with Agile and DevOps methodologies.

Veracode helps businesses secure their applications efficiently, ensuring they can deliver safe and compliant software at scale.

Sample Customers

Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners

Manhattan Associates, Azalea Health, Sabre, QAD, Floor & Decor, Prophecy International, SchoolCNXT, Keap, Rekner, Cox Automotive, Automation Anywhere, State of Missouri and others.