

PortSwigger Burp Suite Professional and Check Point WAF compete in the application security category. While Burp Suite stands out in penetration testing features, Check Point WAF offers a comprehensive automated security framework, indicating its broader applicability in enterprise settings.
Features: PortSwigger Burp Suite Professional includes the Proxy, Repeater, and Intruder tools, which are essential for intercepting and analyzing requests to detect vulnerabilities. It supports community-developed plug-ins for extended functionality. In contrast, Check Point WAF offers advanced AI-based threat protection, API security, and compliance features such as OWASP Top 10 protection, ensuring automated detection and blocking of threats.
Room for Improvement: Users of PortSwigger Burp Suite Professional report challenges with false positives, complex authentication, and a need for better integration and documentation. Check Point WAF faces issues with its pricing model, slow support, and API security features, along with latency concerns impacting small businesses.
Ease of Deployment and Customer Service: PortSwigger Burp Suite is versatile for on-premises use and praised for its responsive technical support, although it relies heavily on documentation. Check Point WAF excels in cloud and hybrid environments but has been criticized for personalization and support response issues.
Pricing and ROI: PortSwigger Burp Suite Professional is lauded for its cost-effectiveness with lower annual license fees, providing a strong ROI for organizations. Check Point WAF’s higher price can be a barrier for smaller enterprises, though its advanced security features are seen as a valid justification for the cost.
When we are attacked, we can understand how important the solution is.
When you migrate to the cloud, it feels like saving 90% of your time.
Most of the operations happen in the background, so I do not spend much time on it.
They need to increase the number of people for 24/7 support.
They were responsive even before we committed to buying their solution.
I also received full technical support, especially during the implementation.
The technical support from PortSwigger is excellent.
The technical support for PortSwigger Burp Suite Professional is pretty good, and I would give it a nine.
If I need to scale, I open a Whatsapp group with the director and the team, and we quickly proceed to do so.
They have sufficient resources, and there are no challenges from a scalability perspective.
Check Point CloudGuard WAF's scalability is very good.
It is very stable.
It is very stable, never crashing or giving me an error that I can see.
I did not have any issues in the last three years during which I had more than ten critical services running on CloudGuard.
PortSwigger Burp Suite Professional is very stable.
PortSwigger Burp Suite Professional is a very stable tool, and I would rate its stability as eight out of ten.
The provider could improve by providing better guidance and support during the configuration process.
Future releases should include better bot mitigation, behavioral anomaly detection, compliance templates, advanced threat intel integration, and streamlined multi-cloud support to boost protection and usability.
A machine learning-based adaptive mode could help the WAF learn over time and auto-tune policies.
Perhaps they could add some automation to things, to see what we do manually, which it has the tools to do manually, and perhaps enable with a click of a button to do things automatically.
Some AI features might be added.
The dashboard of PortSwigger Burp Suite Professional could be made more user-friendly.
It is more expensive than f5, where we purchased everything as bundles, and Check Point costs more, but it is worth the money.
It is less costly than Cloudflare, Fortinet, and other vendors.
I know that its price is relatively expensive compared to other products but it gives benefits that are worth it.
The pricing for PortSwigger is very cheap, and there are benefits in terms of time and cost savings.
I find the price of PortSwigger Burp Suite Professional to be very cost-efficient.
Upon implementation and evaluation with third-party penetration testing, it meets rigorous security standards required for dealing with financial institutions.
It can protect against zero-day attacks and hidden anomalies.
The solution preemptively blocks zero-day attacks and detects hidden anomalies effectively.
The most valuable feature of Burp Suite Professional is its ability to schedule tasks for scanning websites.
I especially value the features for penetration testing.
The most valuable features of PortSwigger Burp Suite Professional are its ease of use and its cost efficiency.
| Product | Mindshare (%) |
|---|---|
| Check Point CloudGuard WAF | 0.6% |
| PortSwigger Burp Suite Professional | 2.8% |
| Other | 96.6% |
| Company Size | Count |
|---|---|
| Small Business | 35 |
| Midsize Enterprise | 20 |
| Large Enterprise | 19 |
| Company Size | Count |
|---|---|
| Small Business | 17 |
| Midsize Enterprise | 14 |
| Large Enterprise | 35 |
Check Point WAF uses AI-driven threat prevention with seamless API integration, offering advanced DDoS protection. It auto-learns attack patterns, updates protection, and minimizes false positives. Its interface simplifies policy management for secure web applications across cloud environments.
Check Point WAF combines AI-driven threat detection with streamlined policy management to provide effective security for web applications and APIs. It offers zero-day protection, threat intelligence, and advanced DDoS protection. Users enjoy robust logging and compliance management across multi-cloud environments. Integration is smooth, with reduced reliance on signatures, facilitating multi-layer security. Despite its strengths, users note areas for improvement, such as latency and pricing, and call for enhancements in API security, real-time monitoring, and reporting. Challenges include integration complexity and limited technical support accessibility. Effective application security across dynamic environments is a key offering.
What are Check Point WAF's key features?Check Point WAF finds particular relevance in industries requiring robust cybersecurity measures such as finance, healthcare, and e-commerce. These sectors benefit from its advanced threat detection and adaptive security policy management, crucial for securing sensitive data across multi-cloud infrastructures. By managing API usage efficiently, it helps maintain regulatory compliance while ensuring optimal operation. Enhanced traffic logging and malware threat management add to its appeal for organizations focusing on securing transactions and sensitive information.
Burp Suite Professional, by PortSwigger, is the world’s leading toolkit for web security testing. Over 52,000 users worldwide, across all industries and organization sizes, trust Burp Suite Professional to find more vulnerabilities, faster. With expertly-engineered manual and automated tooling, you're able to test smarter - not harder.
PortSwigger is the web security company that is enabling the world to secure the web. Over 50,000 security engineers rely on our software and expertise to secure their world.
We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.