We performed a comparison between Check Point CloudGuard Posture Management and Microsoft Defender for Cloud based on real PeerSpot user reviews.
Find out in this report how the two Cloud-Native Application Protection Platforms (CNAPP) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."It has been great for us. Previously, we didn't have a solution to protect us, especially from malware, whereas now, we are getting protection up front, especially from the malware attacks coming through emails or endpoints."
"It's a very scalable tool that can be used in a very small environment or in a very large environment. Everything can be managed from a simple dashboard and can be scaled up or down depending on the customer's environment."
"Within advanced threat hunting, the tables that have already been defined by Microsoft are helpful. In the advanced threat hunting tab, there were different tables, and one of the tables was related to device info, device alert, and device events. That was very helpful. Another feature that I liked but didn't have access to was deep analysis."
"The EDR features are valuable. By getting the EDR features, we have more control over the device. We have information about events in real-time and more protection against zero-day threats and zero-day vulnerabilities. We can monitor every event or action that a device is going through. We can get an idea if it is something malicious or if we have to take any actions."
"We can automate routine tasks and write scripts to carry out difficult tasks, which makes things easier for us."
"Many people don't realize that Microsoft Azure, Exchange Online, and the security and compliance portal all sync together. For instance, within the Azure portal you can set security restrictions and policies to help secure your tenants... The good part of it is that these products have already been integrated. When you sign on as an admin you have global admin rights and that gives you access to all these features."
"Microsoft 365 Defender is simple to upgrade."
"The solution is well integrated with applications. It is easy to maintain and administer."
"We really liked its ease of implementation against our Microsoft Azure environment."
"Good interface and visibility."
"It presents great visibility of the traffic flow of our cloud, providing information on what data and users are circulating and in the event of a threat, it immediately identifies them by providing detailed and granular information from our entire environment."
"This solution has saved the company from unnecessary data loss that occurs due to cyber attacks."
"Its easy implementation against Microsoft Azure was quite satisfactory."
"The dashboard is intuitive. You know if you're compliant or not, and then it gives you a remediation plan."
"The two most valuable features for us are the central firewall administrator and the real-time cloud compliance monitoring."
"The most valuable feature of Check Point CloudGuard Posture Management is the training."
"Everything is built into Azure, and if we go for cross-cloud development with Azure Arc, we can use most of the features. While it's possible to deploy and convert third-party applications, it is difficult to maintain, whereas Azure deployments to the cloud are always easier. Also, Microsoft is a big company, so they always provide enough support, and we trust the Microsoft brand."
"Defender lets you orchestrate the roll-out from a single pane. Using the Azure portal, you can roll it out over all the servers covered by the entire subscription."
"Threat protection is comprehensive and simple."
"The integration with Logic Apps allows for automated responses to incidents."
"It is very intuitive when it comes to policy administration, alerts and notifications, and ease of setting up roles at different hierarchies. It has also been good in terms of the network technology maps. It provides a good overview, but it also depends on the complexity of your network."
"The first valuable feature was the fact that it gave us a list of everything that users were surfing on the web. Having the list, we could make decisions about those sites."
"One of the features that I like about the solution is it is both a hybrid cloud and also multi-cloud. We never know what company we're going to buy, and therefore we are ready to go. If they have GCP or AWS, we have support for that as well. It offers a single-panel blast across multiple clouds."
"The main feature is the security posture assessment through the security score. I find that to be very helpful because it gives us guidance on what needs to be secured and recommendations on how to secure the workloads that have been onboarded."
"This solution could be improved if it included features such as those offered by Malwarebytes."
"The documentation on their website is somewhat outdated and doesn't show properly. I wanted to try a query in Microsoft Defender 365. When I opened the related documentation from the security blog on the Microsoft website, the figures were not showing. It was difficult to understand the article without having the figures. The figures were there in the article, but they were not getting loaded, which made the article obsolete."
"The solution could improve by having better machine learning and AI. Additionally, the interface, documentation, and integration could be better."
"The data recovery and backup could be improved."
"Correctly updated records are the most significant area for improvement. There have been times when we were notified of a required fix; we would carry out the fix and confirm it but still get the same notification a week later. This seems to be a delay in records being updated and leads to false reporting, which is something that needs to be fixed."
"The support from Microsoft could improve. There are times I have to wait for a response from a qualified specialist."
"Microsoft 365 Defender does not have a unique package with emerging endpoint security technologies, such as EDR and XDR."
"The logs could be better."
"The false positives can be annoying at times."
"We're looking for a solution that can incorporate legacy infrastructure for some of our business needs."
"Reporting should have more options."
"CloudGuard could be more customizable. It has built-in standards for things like GDPR compliance. But depending on your business lane, you might want to build your own controls based on your own standards."
"Currently, I would like this solution extended to cellular devices or tablets."
"The guidelines to implement or to link with the clouds are not complete."
"The entire system is complicated, and the setup process may not cater to the company's demands."
"I would like to see improvements in the vulnerability assessments in terms of how the solution discovers vulnerabilities or compromised workloads. Also, customizable reports would be nice."
"The solution could improve by being more intuitive and easier to use requiring less technical knowledge."
"Another thing is that Defender for Cloud uses more resources than CrowdStrike, which my current company uses. Defender for Cloud has two or three processes running simultaneously that consume memory and processor time. I had the chance to compare that with CrowdStrike a few days ago, which was significantly less. It would be nice if Defender were a little lighter. It's a relatively large installation that consumes more resources than competitors do."
"Most of the time, when we log into the support, we don't get a chance to interact with Microsoft employees directly, except having it go to outsource employees of Microsoft. The initial interaction has not been that great because outsourced companies cannot provide the kind of quality or technical expertise that we look for. We have a technical manager from Microsoft, but they are kind of average unless we make noise and ask them to escalate. We then can get the right people and the right solution, but it definitely takes time."
"Azure's system could be more on point like AWS support. For example, if I have an issue with AWS, I create a support ticket, then I get a call or a message. With Azure support, you raise a ticket, and somebody calls back depending on their availability and the priority, which might not align with your business priority."
"We would like to have better transparency as to how the security score is calculated because as it is now, it is difficult to understand."
"Microsoft sources most of their threat intelligence internally, but I think they should open themselves up to bodies that provide feel intelligence to build a better engine. There may be threats out there that they don't report because their team is not doing anything on that and they don't have arrangements with another party that is involved in that research."
"One of the main challenges that we have been facing with Azure Security Center is the cost. The costs are really a complex calculation, e.g., to calculate the monthly costs. Azure is calculating on an hourly basis for use of the resource. Because of this, we found it really complex to promote what will be our costs for the next couple of months. I think if Azure could reduce the complex calculation and come up with straightforward cost mapping that would be very useful from a product point of view."
"Azure is a complex solution. You have so many moving parts."
More Check Point CloudGuard Posture Management Pricing and Cost Advice →
Check Point CloudGuard Posture Management is ranked 4th in Cloud-Native Application Protection Platforms (CNAPP) with 20 reviews while Microsoft Defender for Cloud is ranked 2nd in Cloud-Native Application Protection Platforms (CNAPP) with 33 reviews. Check Point CloudGuard Posture Management is rated 8.4, while Microsoft Defender for Cloud is rated 8.2. The top reviewer of Check Point CloudGuard Posture Management writes "A non-technical person can start creating custom rules using GSL Builder in about a week, but the vendor is slow to fix bugs". On the other hand, the top reviewer of Microsoft Defender for Cloud writes "Provides good recommendations and makes policy administration easy". Check Point CloudGuard Posture Management is most compared with Prisma Cloud by Palo Alto Networks, Amazon GuardDuty, Qualys VM, Wiz and Threat Stack Cloud Security Platform, whereas Microsoft Defender for Cloud is most compared with Prisma Cloud by Palo Alto Networks, Amazon GuardDuty, Trend Micro Cloud One Workload Security, Cortex XDR by Palo Alto Networks and Trend Micro XDR. See our Check Point CloudGuard Posture Management vs. Microsoft Defender for Cloud report.
See our list of best Cloud Security Posture Management (CSPM) vendors, best Cloud-Native Application Protection Platforms (CNAPP) vendors, and best CWPP (Cloud Workload Protection Platforms) vendors.
We monitor all Cloud-Native Application Protection Platforms (CNAPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
