Try our new research platform with insights from 80,000+ expert users

Check Point CloudGuard CNAPP vs Skyhigh Security comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 17, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Zafran Security
Sponsored
Average Rating
9.6
Reviews Sentiment
7.8
Number of Reviews
6
Ranking in other categories
Vulnerability Management (18th), Continuous Threat Exposure Management (CTEM) (3rd)
Check Point CloudGuard CNAPP
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
72
Ranking in other categories
Vulnerability Management (11th), Cloud and Data Center Security (8th), Container Security (10th), Cloud Workload Protection Platforms (CWPP) (6th), Cloud Security Posture Management (CSPM) (6th), Cloud-Native Application Protection Platforms (CNAPP) (5th), Data Security Posture Management (DSPM) (7th), Compliance Management (6th)
Skyhigh Security
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
56
Ranking in other categories
Secure Web Gateways (SWG) (18th), Data Loss Prevention (DLP) (33rd), Cloud Access Security Brokers (CASB) (12th), ZTNA as a Service (16th), Secure Access Service Edge (SASE) (19th)
 

Mindshare comparison

Vulnerability Management Market Share Distribution
ProductMarket Share (%)
Check Point CloudGuard CNAPP1.2%
Wiz8.6%
Tenable Nessus5.9%
Other84.3%
Vulnerability Management
Secure Access Service Edge (SASE) Market Share Distribution
ProductMarket Share (%)
Skyhigh Security1.8%
Prisma Access by Palo Alto Networks14.3%
Netskope11.9%
Other72.0%
Secure Access Service Edge (SASE)
 

Featured Reviews

Reviewer6233 - PeerSpot reviewer
Works at a healthcare company with 10,001+ employees
Has become an indispensable tool in our cybersecurity arsenal
While Zafran Security is already a powerful tool, there are areas where it could be further improved to provide even greater value. One key area for enhancement is the searching capabilities within its vulnerabilities module. By incorporating the ability to create Boolean searches, users would gain the ability to apply more complex filters and customize their search criteria. This would greatly enhance the precision and efficiency with which security teams can identify and prioritize vulnerabilities. Having such tailored search capabilities would save time and resources by narrowing down vast lists of vulnerabilities to those that meet specific parameters relevant to our unique risk environment. Additionally, integrating more robust reporting and visualization tools would be advantageous. Enhanced dashboards that offer customizable visual representations of risk configurations and threat landscapes would facilitate better communication with stakeholders, making it easier to explain vulnerabilities and the rationale behind certain security measures. This would also aid in demonstrating the improvements and value derived from existing security investments to leadership and non-technical team members.
reviewer2751468 - PeerSpot reviewer
Assistant Manager at a computer software company with 201-500 employees
Boosts security and compliance in multi-cloud environments while real-time threat detection enhances risk management
Check Point CloudGuard CNAPP flagged a misconfiguration in our AWS S3 bucket that had overly permissive access settings. That configuration could have exposed our sensitive data to the public internet. The platform not only identified the issue but also provided remediation that our team was able to apply immediately. This prevented a potential data exposure. Check Point CloudGuard CNAPP offers a unified, modular platform that combines CSPM, CWPP, CIEM, code security, and cloud detection and response. The agentless workload posture, real-time threat detection and response, multi-cloud coverage and visibility, compliance automation, and one-click remediations stand out as its best features. I find myself relying on the risk management engine and prioritization the most day-to-day. In any cloud environment, you are flooded with findings, misconfigurations, vulnerabilities, and compliance gaps. Without prioritization, it is overwhelming for our team to take care of the posture. CloudGuard's risk scoring helps us cut through incidents. This makes remediation faster and focused instead of wasting time checking every alert. We get to fix the issues that pose real business risks. Check Point CloudGuard CNAPP has positively impacted our organization at a significant level. We get greater visibility and control across all our cloud environments. Some biggest benefits we have seen are faster detection and remediation of misconfigurations, improved compliance posture, reduced risk exposure, operational efficiency, and cost savings. Overall, it has made our cloud environment more secure, compliant, and easier to manage while freeing up our teams to focus on projects instead of chasing alerts.
EK
Secure at ESCARE COLtd
Secure web access has improved threat protection while certificate management still needs work
It depends on the environment, I think, and I am saying that not all, but in Korea, most of the customers prefer on-premise. The setup and configuration process for Skyhigh Security can be short as a month, but regularly three months, and long as six months. The deployment may last up to half a year. I think analytics are better for understanding security posture, but actually, I was using the Web Gateway, so all the analysis and logs were made by Linux, which I do not prefer because they have so many things to do. It is good for the customer, but not for me. I think with the cloud, cloud SWG, anyone can access through the proxy, which is the good part, and it is something they can tell someone that is their strength. My overall rating for this product is seven out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We saw benefits from Zafran Security almost immediately after deploying it."
"Overall, we have seen about eighty-seven percent reduction of the number of vulnerabilities that require urgency to remediate, specifically the number of criticals."
"Zafran has become an indispensable tool in our cybersecurity arsenal."
"Zafran is an excellent tool."
"We are able to see the real risk of a vulnerability on our environment with our security tools."
"With Zafran Security, it integrates with your security controls, allowing you to take that risk score and reduce it based on the controls in place or increase the risk based on different factors, such as if the issue is internet reachable or if there's an exploit in the wild."
"The solution has intelligence that integrates with a range of threat intelligence feeds, including Check Point's ThreatCloud, to provide real-time intelligence on emerging threats."
"This solution has saved the company from unnecessary data loss that occurs due to cyber attacks."
"It offers security insights and recommendations to assist organizations in acting and remediating issues swiftly."
"Check Point CloudGuard CNAPP delivers strong visibility, clear risk prioritization, and real value in daily cloud security work."
"The most valuable feature is the single dashboard that enables us to manage the entire cloud environment from one place."
"The automatic learning and an AI engine help to find more modern vulnerability problems."
"It provides critical insights that enable the IT team to plan and launch smart investigations when there are security breaches."
"Check Point CloudGuard CNAPP has positively impacted my organization by making a clear difference in reducing the time spent tracking down cloud misconfigurations and helping teams focus on the issues that matter most."
"The support is excellent."
"The most valuable features of MVISION Cloud are the automatic reports and modification incidents."
"The most valuable features of McAfee Web Gateway are anti-malware, reports, and powerful categorization of web pages."
"Data loss prevention and user behavior analysis are two valuable features."
"Box API features with DLP capabilities."
"I found the solution to be stable."
"A stable solution with good support."
"Skyhigh performs well, and we can choose from virtual and hardware plans. We can deploy the ISO on as many virtual machines as possible and easily set up high availability on the web proxy. The location doesn't matter. The user at a site will always access the web proxy for that location. It's suitable for an organization distributed across multiple regions."
 

Cons

"I think the ability to have some enhanced reporting capabilities is something they can improve on, as they have good reports but we have asked for some specific reporting enhancements."
"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."
"The dashboarding and reporting functionality of Zafran Security is an area that definitely could use some improvements."
"Currently, I would like this solution extended to cellular devices or tablets."
"The accuracy of its remediation is a 7.5 out of 10. Before, I would have given it a ten but now, to handle remediation for fully qualified domain names, it's not working as it did in the past. We're finding some difficulties there."
"The dashboard customization has room for improvement."
"The user interface needs work."
"CloudGuard's reporting could be better. It's good now, but there is room for improvement. If you're looking for a centralized platform, there are a lot of features that can be appreciated. However, you want complete security integration with SaaS, DAST, secret scanning, etc., and a single platform for all these features."
"I would like to see some AI on the back-end, just to assist with doing analysis and making recommendations."
"It feels somewhat fractured to me. I haven't grasped all the parts yet, and better integration would make CNAPP most valuable."
"The platform would be significantly enhanced by incorporating data security management capabilities."
"McAfee Web Gateway could improve the reporting. We have the reporting on a separate server and sometimes the database becomes full. These aspects could improve."
"The solution has room for improvement in its DDoS protection."
"The biggest challenge we have with McAfee is their cross-cloud support."
"The only thing we have faced is that sometimes, randomly, the portal becomes too slow."
"The Skyhigh for Google Drive interface and policy engine is a bit confusing and limited when compared against other Google Drive CASB capabilities."
"I would like to see more power being given to the admin. In the sense that in case an employee is facing an issue and they want to configure a service, like attaching an email in Gmail, for example, they should be given the option to make the service request and get that configured on the go."
"It is an expensive solution."
"McAfee needs to add more products that could be managed from the cloud."
 

Pricing and Cost Advice

Information not available
"It is a very straightforward licensing model that is based on the number of assets you are discovering and managing with the solution."
"Licensing and costs are straightforward, as they have a baseline of 100 workloads within one license and no additional charges."
"The price is on the higher end."
"From a pricing perspective, they are pretty expensive."
"The licensing part still needs some work. The issue that I have is that we do not use all the services in the cloud, but sometimes, CloudGuard identifies them as an asset."
"The solution’s pricing is a little bit high."
"The pricing is extremely competitive."
"We have the enterprise-level license and we renew it annually because it is worth the cost."
"Pricing for Skyhigh Security is fine."
"There is an annual licensing cost to use McAfee Web Gateway. The purchasing of licensing can be difficult for the government sector."
"Skyhigh provided a FedRAMP solution, tokenization, a better shadow IT capability, and lower cost."
"Pricing is not out of reach."
"The price of the solution is good and we pay an annual license."
"There is a license required to use this solution and it is paid annually. The price is reasonable."
"They definitely charge a huge amount. All the security service providers charge a huge amount."
"This is an expensive product, although it is made for larger enterprises and not for small organizations."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
879,371 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Computer Software Company
8%
Manufacturing Company
8%
Outsourcing Company
5%
Financial Services Firm
11%
Computer Software Company
11%
Manufacturing Company
9%
Outsourcing Company
6%
Financial Services Firm
14%
Manufacturing Company
11%
Government
10%
Computer Software Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business55
Midsize Enterprise17
Large Enterprise57
By reviewers
Company SizeCount
Small Business30
Midsize Enterprise4
Large Enterprise37
 

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?
Since we stood Zafran Security up in our private cloud, we handle the maintenance on our side. As we opted not to use...
What needs improvement with Zafran Security?
In terms of areas for improvement, Zafran Security is doing a really great job as a new and emerging company. Oftenti...
What is your primary use case for Zafran Security?
My use cases for Zafran Security revolve around two primary areas. One is around vulnerability management and priorit...
What is your experience regarding pricing and costs for CloudGuard Workload Protection?
My experience with pricing, setup cost, and licensing is that the pricing model is flexible and consumption-based, wh...
What do you like most about CloudGuard for Cloud Intelligence?
The new scanning function is a valuable feature that wasn't available until recently.
What needs improvement with CloudGuard for Cloud Intelligence?
There is a lack of functionalities and usability. I used to compare it with another solution that is focused on speci...
What needs improvement with McAfee Web Gateway?
So far, only the certification part caused me some issues and some challenges. The certification requires some improv...
What is your primary use case for McAfee Web Gateway?
I am familiar with Skyhigh and Symantec. The customer's AWS environment is being used, so that understanding is corre...
What advice do you have for others considering McAfee Web Gateway?
It depends on the environment, I think, and I am saying that not all, but in Korea, most of the customers prefer on-p...
 

Also Known As

No data available
Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence
McAfee MVISION Cloud, McAfee MVISION Unified Cloud Edge, McAfee Web Gateway, McAfee MVISION CNAPP, and Skyhigh Networks, McAfee Web Gateway
 

Interactive Demo

 

Overview

 

Sample Customers

Information Not Available
Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners
Western Union.Aetna.DirecTV.Adventist.Equinix.Perrigo.Goodyear.HP.Cargill.Sony.Bank of the West.Prudential.
Find out what your peers are saying about Check Point CloudGuard CNAPP vs. Skyhigh Security and other solutions. Updated: April 2025.
879,371 professionals have used our research since 2012.