Try our new research platform with insights from 80,000+ expert users

Check Point CloudGuard WAF vs Sucuri comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
77
Ranking in other categories
CDN (1st), WAN Optimization (4th), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Domain Name System (DNS) Security (5th), Cloud Security Posture Management (CSPM) (12th)
Check Point CloudGuard WAF
Average Rating
8.8
Reviews Sentiment
7.2
Number of Reviews
51
Ranking in other categories
Application Security Tools (5th), Web Application Firewall (WAF) (9th)
Sucuri
Average Rating
8.4
Reviews Sentiment
7.5
Number of Reviews
6
Ranking in other categories
Web Application Firewall (WAF) (37th), Distributed Denial-of-Service (DDoS) Protection (26th), Domain Name System (DNS) Security (22nd)
 

Featured Reviews

HA
Owner at Hga consulting
Has helped manage client domains with streamlined access control and threat visibility
I don't know what areas could be improved with Cloudflare WAF; Cloudflare is constantly improving and adding features to their feature set. They're doing a good job, and as far as DNS and support for any domains that I create or my clients create, it's mandatory for me to make sure that they have Cloudflare as their DNS provider. The Cloudflare load balancing capability hasn't really helped in enhancing my website's uptime and resiliency because we don't really get that much traffic; it's mostly remote users, and web hosting is done by a web hosting service. It doesn't pay to try to host your own website.
reviewer2751468 - PeerSpot reviewer
Assistant Manager at a computer software company with 201-500 employees
Robust threat protection improves security and operational efficiency
Areas where Check Point CloudGuard WAF can improve include simple policy tuning, as the protection seems strong, though initial rule tuning can be complex. More guided workflows or templates would help speed up deployment, along with deeper integration with the DevOps pipeline, and while it handles API well, more dedicated API security would add value. In addition, it could be improved with better integration with the DevOps pipeline, more granular reporting, as the dashboards provide good high-level visibility, but sometimes digging into specific attack patterns or trends requires manual effort, and simple tuning of the ML models would be beneficial.
JS
Hardware Engineer at Ministry of Defense
A cost-effective choice for website security and informative support with issues related to CDN quality
One area where they could improve is in providing real-time support options because now you need to open a support ticket and wait for their response. It would greatly benefit customers if they implemented an online chat or messaging system for quicker assistance. I have found their Content Delivery Network service to be lacking in quality, and it could certainly be enhanced to provide better performance. I would also like to see improvements in the deployment process, as it currently takes more time than desirable. Another significant concern is that their service when your website is down, turns it into a static site. This means that if customers try to visit your site during downtime, they will see old content from the static site, which is not ideal. The CDN and tracking services are areas that need improvement, as well as addressing their bandwidth limitations.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution is stable, and the DNS servers are simple to use."
"Smaller businesses have seen great ROI due to the low investment and strong performance."
"Even when there is a high load on our servers, Cloudflare is able to cache the data and serve it to users, ensuring they can still access the website."
"There are key things that are used for our enterprise customers, such as Lambda and DNS."
"Easier http to https redirect using page rules"
"The most valuable feature of Cloudflare is that it has a free version. They give us the free version with the anti-DDoS features and also the load balancing solution."
"The solution offers the flexibility to control configuration rules."
"We're using dynamic components to build flexible pages to create and manage Git merge requests for code and reviews."
"Check Point CloudGuard WAF works well for preemptively blocking Zero Day attacks and detecting hidden anomalies."
"The solution's strongest point is that you can connect everything to it, giving you a full view of what's connected."
"It provides security for our customers and our products."
"It offers good functionality of the application that is currently running."
"User attitude reviews help us keep all online users compliant with company regulations and policies."
"I rate it ten out of ten."
"It helps me sleep at night, providing peace of mind."
"The main benefits that I have seen from using Check Point CloudGuard WAF is that the security posture is very good, it analyzes and delivers the threats, enriches the intelligence, and I get proper clarity in my organization."
"Domain name scanning since it allows us to scan all our domain names and determine whether it has malware or if is reported as phishing."
"The most valuable part is the analytics and visualization."
"The initial setup was very easy."
"It significantly eases the workload and streamlines the initial setup required to protect a website."
"The initial setup was straightforward. Straight forward because the plugin can simply be installed and then it does its job. It's not complex, there is no learning curve. The online scan is simple, you put in the website address and the scan gives us a report on the browser itself. It's simple to use."
"I use it as a WAF, which is basically a web firewall to monitor and block traffic to our web server."
 

Cons

"Eventually, things go sideways and require fixes when it would have been easier to prevent the issue initially."
"An integrated SSO feature would be useful for Cloudflare DNS."
"There could be more courses with engineers. I like e-learning, however, having a specialist in a classroom is more comfortable for me."
"Cloudflare's console should be made more user-friendly."
"The solution could be more user-friendly."
"Technical support is not well developed. While there are good engineers, Cloudflare does not offer hands-on technical support to fix customer problems but rather a self-service model."
"We are a product integrator and reseller, and we would like to have a better partner relationship, similar to a channel sales relationship. Sometimes we are on our own or get diverted by Cloudflare because they have direct sales, which competes with us and makes it difficult to build a relationship with this company since we want to be an MSP or a managed service provider for the solution."
"For the free and Pro plans, Cloudflare could use a simple bot to provide information to users. This would improve support, especially for less advanced users who utilize the free components."
"In terms of features, I do not have any negatives. Their integration is extremely quick. It is better than others I have been involved with in the past. Their pricing model, however, can be better."
"For the next release, I would suggest considering features like enhanced threat intelligence integration."
"They need improved latency in the main window."
"The UI interface needs improvement because there are a number of bugs. Integration with the SIEM platform is currently one of the key challenges that need to be addressed."
"A feature we'd like to see in the future is something that could protect against other attack vectors, with a focus on application protection."
"Support could be improved, particularly in terms of availability."
"One of the big problems we found in Check Point, in general, is the support."
"Pricing and licensing are really expensive for this product. While it provides a very good security level, the price for each service is high."
"I would rate this solution an eight out of ten. The reason is that we have found sometimes customers or Google saying that there is something wrong with the website but Sucuri says that the site is clean so we do have to look at the site manually which means that the Sucuri scan does not pick up anything and everything."
"The main improvement I would like to see is support for .NET applications. If they could include this feature, I would include more sites in the protection."
"In terms of improvement, the cost factor is always there."
"Confident score: Currently it does not have one and there are cases that most websites flagged are false-positives."
"It would greatly benefit customers if they implemented an online chat or messaging system for quicker assistance."
"Sucuri could provide help for specific security alerts in-line instead of requiring users to search for it in the help section."
 

Pricing and Cost Advice

"The pricing for the service is reasonable, neither excessively cheap nor prohibitively expensive. It aligns well with the value of their solution."
"I give the price a five out of ten."
"The price is reasonable."
"We are using the free version."
"The product's pricing is cheap."
"We don't have any issues with the price."
"The product's pricing is minimal compared to other products."
"A free version of the solution is available."
"I work for an Indian banking client. In India, companies are on a budget. The company liked Check Point very much, but it was a little bit costly compared to FortiWeb. However, it had more features compared to FortiWeb."
"The sales team or account managers from Check Point are top-notch. As I am using other products as well, my pricing was competitive compared to others."
"The tool's licensing costs are yearly and competitive."
"It is not cheap, but it is worth it."
"I find the pricing to be reasonable."
"Considering all the benefits we've observed, we find the price to be satisfactory."
"The pricing is competitive compared to other solutions on the market. So, the licensing cost is average."
"Check Point CloudGuard Application Security's pricing is not friendly."
"I’d simply say it’s really worth it."
"Sucuri offers different plans, both the standard plan and an advanced plan. So there are different plans to choose from."
"The ROI has been very good. Because of the solution, I have a tax break. The site developers were not always experienced people. We used to pay more for cleaning up the site when it was infected. Now, we have peace of mind knowing that the solution will clean up the site and that we won't have to go through the unnecessary process of restoring it from a backup. The protection on the WAF and the measures for backups have also prevented our site from going down."
"It stands out as a more cost-effective option compared to other cloud-based security services like Cloudflare or JetPass."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
879,853 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Financial Services Firm
10%
Comms Service Provider
10%
Manufacturing Company
8%
Computer Software Company
19%
Manufacturing Company
15%
Financial Services Firm
8%
Security Firm
6%
Comms Service Provider
10%
Computer Software Company
9%
Financial Services Firm
7%
Real Estate/Law Firm
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise8
Large Enterprise25
By reviewers
Company SizeCount
Small Business32
Midsize Enterprise19
Large Enterprise16
No data available
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about CloudGuard for Application Security?
We have not had any incidents. We could realize its benefits immediately. We watched and monitored the traffic, and i...
What is your experience regarding pricing and costs for CloudGuard for Application Security?
The setup cost was taken with the head of the department, who handled the pricing and everything.
What needs improvement with CloudGuard for Application Security?
Currently, there is nothing in the areas of Check Point CloudGuard WAF that I would like to see improved or enhanced ...
Ask a question
Earn 20 points
 

Also Known As

Cloudflare DNS
Check Point CloudGuard Application Security, CloudGuard Application Security, CloudGuard AppSec
No data available
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Orange España, Paschoalotto
The Loft Salon, Tom McFarlin, WPBeginner, Taylor Town, Everything Everywhere, Financial Ducks in a Row, Chubstr, Real Advice Gal, Sujan Patel, Wallao, List25, School the World
Find out what your peers are saying about Check Point CloudGuard WAF vs. Sucuri and other solutions. Updated: December 2025.
879,853 professionals have used our research since 2012.