No more typing reviews! Try our Samantha, our new voice AI agent.

Check Point CloudGuard WAF vs Xygeni comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Check Point CloudGuard WAF
Ranking in Application Security Tools
4th
Average Rating
8.8
Reviews Sentiment
7.1
Number of Reviews
55
Ranking in other categories
Web Application Firewall (WAF) (8th)
Xygeni
Ranking in Application Security Tools
21st
Average Rating
9.0
Reviews Sentiment
7.0
Number of Reviews
4
Ranking in other categories
Software Composition Analysis (SCA) (13th), Software Supply Chain Security (12th), Application Security Posture Management (ASPM) (10th)
 

Mindshare comparison

As of April 2026, in the Application Security Tools category, the mindshare of Check Point CloudGuard WAF is 0.5%, up from 0.1% compared to the previous year. The mindshare of Xygeni is 0.5%, up from 0.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools Mindshare Distribution
ProductMindshare (%)
Check Point CloudGuard WAF0.5%
Xygeni0.5%
Other99.0%
Application Security Tools
 

Featured Reviews

MK
CISO at Pink Solutions
Cloud security has strengthened risk posture and improved advanced threat visibility
There are some API gateway and API securities I mentioned. If these are incorporated with AI-related features, particularly those seven key vulnerabilities I mentioned—token theft and tool poisoning—that would be beneficial. AI-related features are not included yet in Check Point CloudGuard WAF. However, they are present in FortiGate. That is the advantage of FortiGate now. FortiGate is stopping all AI-related vulnerabilities now. FortiGate has this capability. It is unfortunate that even Palo Alto also lacks one or two of these features. Check Point Quantum is very good, without a doubt. However, their capabilities are not in comparison with Palo Alto. There are some features, but there are some gaps in comparison with Palo Alto.
AI
Business development manager at RSsecurity
Unified monitoring has reduced alert noise and provides accurate, proactive application security
Xygeni was highly effective for us, but there are areas where improvements could be made. More customization options for dashboards and reports would help teams tailor the platform to their specific metrics and workflows. I also occasionally encounter DevOps tools that are not yet supported natively. Expanded coverage for niche or emerging tools would make onboarding even smoother. These points, however, are minor compared to the overall value the platform delivers, especially given the strength of its AI-driven detection, remediation, and supply chain protection capabilities. It would also be an improvement for licensing with regard to on-premise variants. Perhaps we could have an on-premise option for standard subscription.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Check Point CloudGuard WAF has positively impacted my organization by significantly improving both security and operational efficiency, with a noticeable reduction in web-based threats, especially automated attacks and vulnerability exploits, thanks to its real-time prevention and reputation filter that has streamlined my workflow through automatic policy updates and integration smoothly with my CI/CD pipelines, allowing my DevOps teams to deploy security without delays."
"With CloudGuard WAF, I have peace of mind, because most of the features are AI-based, and there is not much configuration that needs to be done on my side."
"The tool helps us to block IPs and applications."
"Check Point CloudGuard WAF has improved our organization by providing protection against web application attacks such as SQL injection, cross-site scripting, and bot threats."
"One of the best features of CloudGuard WAF is its user-friendly GUI dashboard."
"Among its most outstanding features is the powerful AI in container security; above all, it is one of the most powerful and easy-to-manage solutions."
"The most valuable features are its ease of use and multiple functionalities."
"The most valuable feature we have found in Check Point CloudGuard WAF is its rich logging capabilities."
"The visibility of our open-source supply chain dependencies and real-time detection of vulnerabilities have been invaluable."
"Since using Xygeni, the time to review vulnerabilities has decreased."
"Xygeni provides a comprehensive and developer-friendly approach to securing the entire software supply chain."
"The best Xygeni feature is the ability to filter what is truly important, which really helps me focus on the key vulnerabilities in the software that I am building."
 

Cons

"For the next release, I would suggest considering features like enhanced threat intelligence integration."
"We are satisfied with the product because it does what we need it to do, but one thing that I would like to see improved in the product is the protection of our mobile applications. When I migrate the traffic from our mobile application to CloudGuard, we are not getting what we expected."
"The documentation of each of the tools that they offer needs to be better."
"CloudGuard for Application Security, like the other Check Point applications, has been presenting major latency problems when entering their administrative portal."
"If the price could come down, I would be very happy with the product."
"I see areas for improvement primarily on the reporting functionality front, as there are very limited functions in the reporting section."
"Check Point CloudGuard WAF's support is only available in English."
"CloudGuard for Application Security, like the other Check Point applications, has been presenting major latency problems when entering their administrative portal."
"Xygeni could be improved if on-premise options were available starting from the starter packages, not only the enterprise models."
"Xygeni was highly effective for us, but there are areas where improvements could be made."
"Xygeni can be more automated."
"There should be more configuration options that make it easier to target the issues that are more important in your organization's context."
 

Pricing and Cost Advice

"The base solution costs approximately 30,000 euros, with an additional 2,000 euros per year for licenses and support."
"Check Point CloudGuard Application Security's pricing is comparable to other products in the market."
"The pricing is competitive compared to other solutions on the market. So, the licensing cost is average."
"If the pricing for the Infinity platform covers everything, it would be more straightforward. I had a hard time selling it to our CEO as a former CFO because of the differentials. There are different deltas year to year over a five-year period. It is very difficult to explain. It would be easier to digest for our executives if there was a flatter scale"
"Check Point CloudGuard WAF is expensive compared to Azure WAF."
"Check Point CloudGuard Application Security's pricing is not friendly."
"I find the pricing to be reasonable."
"Considering all the benefits we've observed, we find the price to be satisfactory."
Information not available
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
885,444 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
26%
Manufacturing Company
11%
Financial Services Firm
7%
Comms Service Provider
6%
Comms Service Provider
24%
Security Firm
13%
Construction Company
11%
Retailer
11%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business36
Midsize Enterprise20
Large Enterprise19
No data available
 

Questions from the Community

What do you like most about CloudGuard for Application Security?
We have not had any incidents. We could realize its benefits immediately. We watched and monitored the traffic, and it was amazing to see the results.
What is your experience regarding pricing and costs for CloudGuard for Application Security?
Check Point CloudGuard WAF is expensive. It is a little bit expensive. You cannot avoid this from an Israeli product. Israeli products follow a certain pricing model. If they could reduce the cost ...
What needs improvement with CloudGuard for Application Security?
There are some API gateway and API securities I mentioned. If these are incorporated with AI-related features, particularly those seven key vulnerabilities I mentioned—token theft and tool poisonin...
What is your experience regarding pricing and costs for Xygeni?
The pricing is reasonable. Xygeni provided me with the pricing list that is already public on the web, so it is very clear.
What needs improvement with Xygeni?
Xygeni can be more automated. The team is currently working on auto-remediation pipelines, which could be really helpful. There is probably room for improvement, but for me, it is one of the best t...
What is your primary use case for Xygeni?
I use Xygeni to perform SAST and SCA analysis, and to gain better understanding of how my deployment pipelines are configured. Xygeni helps me understand what I am deploying and the level of integr...
 

Also Known As

Check Point CloudGuard Application Security, CloudGuard Application Security, CloudGuard AppSec
No data available
 

Interactive Demo

 

Overview

 

Sample Customers

Orange España, Paschoalotto
BKool, Onum, Napptive, Fintonic, Adaion, Metricool, Arexdata, ...
Find out what your peers are saying about Check Point CloudGuard WAF vs. Xygeni and other solutions. Updated: March 2026.
885,444 professionals have used our research since 2012.