Check Point WAF (formerly CloudGuard WAF) vs Contrast Security Assess comparison

Check Point WAF (formerly CloudGuard WAF) vs. Contrast Security Assess

Download the complete report

Helped 909,725 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

ROI

Sentiment score

6.2

Check Point WAF boosts cost savings, efficiency, and security, enhancing ROI through reduced ownership costs and streamlined operations.

Sentiment score

6.8

Contrast Security Assess improves code quality, reduces costs, and enhances security by automating vulnerability identification and resolution.

When we are attacked, we can understand how important the solution is.

For more quotes and insights, download the Check Point WAF (formerly CloudGuard WAF) report

Cyber security manager at a government with 1,001-5,000 employees

When you migrate to the cloud, it feels like saving 90% of your time.

Thanos Constantopoulos

Manager, Managed Security Services at a tech vendor with 51-200 employees

Most of the operations happen in the background, so I do not spend much time on it.

Dialungana Malungo

Principal Cybersecurity Specialist at Unitel S.A.

Contrast has probably saved us a couple hundred hours over the past six years.

Threat & Vulnerability Management Senior Analyst at a tech vendor with 10,001+ employees

In the past, my company employed five security engineers, but with Contrast Security Assess, we only have two people.

Dev Ops Engineer at a tech vendor with 1,001-5,000 employees

The speed of fixing issues is significantly improved due to the vast amount of information provided by Contrast Security Assess, making it quite essential for finding the root cause of problems in the source code.

For more quotes and insights, download the Contrast Security Assess report

Management Of Quality Managers at a tech vendor with 1,001-5,000 employees

Customer Service

Sentiment score

6.5

Check Point WAF support is responsive and knowledgeable but occasionally delayed, needing improvement in service proficiency and availability.

Sentiment score

8.4

Contrast Security Assess offers highly responsive, detailed customer support, praised for swift resolutions and commitment to continuous improvement.

They need to increase the number of people for 24/7 support.

Dialungana Malungo

Principal Cybersecurity Specialist at Unitel S.A.

They were responsive even before we committed to buying their solution.

Stilian Elenkov

Infrastructure Manager at FPMH

I also received full technical support, especially during the implementation.

For more quotes and insights, download the Check Point WAF (formerly CloudGuard WAF) report

Cyber security manager at a government with 1,001-5,000 employees

They go out of their way to respond quickly and very knowledgeably.

Threat & Vulnerability Management Senior Analyst at a tech vendor with 10,001+ employees

Customer support is one of the strongest points of Contrast Security Assess, as they are really responsive and answer tickets in less than one hour.

Management Of Quality Managers at a tech vendor with 1,001-5,000 employees

Contrast Security's customer support is very active and overall incredible.

For more quotes and insights, download the Contrast Security Assess report

Dev Ops Engineer at a tech vendor with 1,001-5,000 employees

Scalability Issues

Sentiment score

7.2

Check Point WAF excels with scalable, cloud-native design, seamless AWS integration, and adaptable SaaS deployment for multi-cloud support.

Sentiment score

8.0

Contrast Security Assess scales well across environments, with flexible licensing and integration, though automation and developer engagement remain challenging.

If I need to scale, I open a Whatsapp group with the director and the team, and we quickly proceed to do so.

For more quotes and insights, download the Check Point WAF (formerly CloudGuard WAF) report

Cyber security manager at a government with 1,001-5,000 employees

They have sufficient resources, and there are no challenges from a scalability perspective.

Mantu Shaw

Project Manager at a outsourcing company with 1,001-5,000 employees

Check Point CloudGuard WAF's scalability is very good.

Ruben Ruiz

Sr. VP of Creative & Development at a non-tech company with 51-200 employees

It is fairly simple to install the agents for Contrast Security Assess and keep them updated.

Threat & Vulnerability Management Senior Analyst at a tech vendor with 10,001+ employees

Contrast Security Assess's scalability is not an issue at all.

For more quotes and insights, download the Contrast Security Assess report

Management Of Quality Managers at a tech vendor with 1,001-5,000 employees

Stability Issues

Sentiment score

8.2

Check Point WAF is praised for its exceptional stability and reliability, with users rating it highly for performance and robustness.

Sentiment score

7.9

Contrast Security Assess is stable and reliable, with accurate assessments, easy maintenance, but may impact resources in production.

It is very stable.

RicardoFernandes1

Team Leader, Cloudops & Cloud Architect at a consultancy with 501-1,000 employees

It is very stable, never crashing or giving me an error that I can see.

Rui Dias

Sysadmin at a government with 501-1,000 employees

I did not have any issues in the last three years during which I had more than ten critical services running on CloudGuard.

Charalampos Symeou

Information Technology - Infrastructure and Security at Cyprus Development Bank

For more quotes and insights, download the Check Point WAF (formerly CloudGuard WAF) report

Contrast Security Assess is genuinely more accurate than most tools I have worked with because it uses instrumentation from inside the application.

Dev Ops Engineer at a tech vendor with 1,001-5,000 employees

We opened a ticket to customer support and experienced four weeks of disruption due to the extension malfunctioning in some of the .NET servers running Contrast Security Assess.

For more quotes and insights, download the Contrast Security Assess report

Management Of Quality Managers at a tech vendor with 1,001-5,000 employees

Room For Improvement

Check Point WAF requires improvements in customization, integration, pricing, and support, with users desiring simplified setup and enhanced features.

Contrast Security requires AI enhancements and improved support for integrations, documentation, reporting, and more intuitive functionalities.

The provider could improve by providing better guidance and support during the configuration process.

Stilian Elenkov

Infrastructure Manager at FPMH

Future releases should include better bot mitigation, behavioral anomaly detection, compliance templates, advanced threat intel integration, and streamlined multi-cloud support to boost protection and usability.

Kresimir Mikolcevic

Senior Cyber Security Engineer at a computer software company with 501-1,000 employees

A machine learning-based adaptive mode could help the WAF learn over time and auto-tune policies.

reviewer2702679

Technical Support Executive at a computer software company with 501-1,000 employees

For more quotes and insights, download the Check Point WAF (formerly CloudGuard WAF) report

Regarding Contrast Security Assess's AI capabilities, I think they are missing a huge opportunity because they could lead the way in automatic testing and AI security testing.

Management Of Quality Managers at a tech vendor with 1,001-5,000 employees

I would love to see more customizable, out-of-the-box reporting that speaks to both technical and non-technical people without extra configuration.

Dev Ops Engineer at a tech vendor with 1,001-5,000 employees

Contrast support has been great in fixing any issues or getting back to us with questions.

For more quotes and insights, download the Contrast Security Assess report

Threat & Vulnerability Management Senior Analyst at a tech vendor with 10,001+ employees

Setup Cost

Check Point WAF is seen as costly but justified by its robust features, flexible licensing, and ease of renewal.

Contrast Security Assess offers tiered licensing from $20,000 to $100,000 annually, appreciated for simplicity and industry-standard pricing.

It is more expensive than f5, where we purchased everything as bundles, and Check Point costs more, but it is worth the money.

For more quotes and insights, download the Check Point WAF (formerly CloudGuard WAF) report

Cyber security manager at a government with 1,001-5,000 employees

It is less costly than Cloudflare, Fortinet, and other vendors.

Mantu Shaw

Project Manager at a outsourcing company with 1,001-5,000 employees

I know that its price is relatively expensive compared to other products but it gives benefits that are worth it.

Baruch Peretz

Ciso at a government with 1,001-5,000 employees

The annual licensing for Contrast Security Assess costs about $20,000 to $100,000 per year, and per application, it costs about $5,000 to $15,000 per year.

Dev Ops Engineer at a tech vendor with 1,001-5,000 employees

Licensing costs are fairly high compared to other DAST and SAST tools, but it seems to be worth the money.

For more quotes and insights, download the Contrast Security Assess report

Threat & Vulnerability Management Senior Analyst at a tech vendor with 10,001+ employees

Valuable Features

Check Point WAF offers AI-driven protection with easy deployment, low false positives, scalability, and integration with Azure, enhancing security.

Contrast Security Assess is praised for integration, real-time detection, accuracy, and collaboration, enhancing security with IAST and CI/CD support.

Upon implementation and evaluation with third-party penetration testing, it meets rigorous security standards required for dealing with financial institutions.

Stilian Elenkov

Infrastructure Manager at FPMH

It can protect against zero-day attacks and hidden anomalies.

Domenico Cacciari

Amministratore Della Sicurezza Di Rete at a government with 1,001-5,000 employees

The solution preemptively blocks zero-day attacks and detects hidden anomalies effectively.

Charalampos Symeou

Information Technology - Infrastructure and Security at Cyprus Development Bank

For more quotes and insights, download the Check Point WAF (formerly CloudGuard WAF) report

The real-time detection feature of Contrast Security Assess helps us very well compared to traditional SAST tools. Traditional tools scan from the outside and guess where problems might be. Contrast Security Assess works from the inside because it is embedded into the application.

Dev Ops Engineer at a tech vendor with 1,001-5,000 employees

The ability to see what is going on and what has been going on in a given application and basically get to see what is coming across it in real time is helpful in finding vulnerabilities to remediate before production deployments.

Threat & Vulnerability Management Senior Analyst at a tech vendor with 10,001+ employees

Instead of fixing each vulnerability reported independently, you can group them and fix them in a single point in the source code, resolving several vulnerabilities at once.

For more quotes and insights, download the Contrast Security Assess report

Management Of Quality Managers at a tech vendor with 1,001-5,000 employees

Categories and Ranking

Check Point WAF (formerly C...

Ranking in Application Security Tools

5th

Average Rating

8.6

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Data Loss Prevention (DLP) (8th), Web Application Firewall (WAF) (5th), DevSecOps (2nd)

Contrast Security Assess

Ranking in Application Security Tools

25th

Average Rating

8.6

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Static Application Security Testing (SAST) (21st)

Mindshare comparison

As of August 2026, in the Application Security Tools category, the mindshare of Check Point WAF (formerly CloudGuard WAF) is 0.9%, up from 0.2% compared to the previous year. The mindshare of Contrast Security Assess is 1.7%, up from 0.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Security Tools Mindshare Distribution
Product	Mindshare (%)
Check Point WAF (formerly CloudGuard WAF)	0.9%
Contrast Security Assess	1.7%
Other	97.4%

Application Security Tools

Featured Reviews

Krishnakumar Mahadevan

CISO at Spink Solutions Private Limited

Cloud security has strengthened risk posture and improved advanced threat visibility

There are some API gateway and API securities I mentioned. If these are incorporated with AI-related features, particularly those seven key vulnerabilities I mentioned—token theft and tool poisoning—that would be beneficial. AI-related features are not included yet in Check Point CloudGuard WAF. However, they are present in FortiGate. That is the advantage of FortiGate now. FortiGate is stopping all AI-related vulnerabilities now. FortiGate has this capability. It is unfortunate that even Palo Alto also lacks one or two of these features. Check Point Quantum is very good, without a doubt. However, their capabilities are not in comparison with Palo Alto. There are some features, but there are some gaps in comparison with Palo Alto.

Read full review

Continuous in-app security has transformed our development workflow and has reduced manual checks

Dev Ops Engineer at a tech vendor with 1,001-5,000 employees

Contrast Security Assess changes how the team thinks about security. Instead of us waiting for a security audit at the end of any sprint, vulnerabilities surface as developers are writing and testing code. That shift is significant because fixing a bug in development costs more than fixing it later. It captures everything right there and remediates it because it catches vulnerability and remediates immediately while the application is running. It improves our collaboration between development and security teams, as developers get clear actionable findings immediately. We get continuous visibility into our application risk posture. Ultimately, it helps us to shift fast and save money, which is usually a trade-off, but Contrast Security Assess makes both possible. The feature that stands out most to me in Contrast Security Assess is the ability to capture vulnerability while the application is running. Another standout feature is the real-time detection that finds vulnerabilities as code runs. It has fewer false positives and works continuously in the application; you install it and it is there. It captures issues during development quickly and is easily integrated with a CI/CD pipeline, especially if you are using GitLab or GitHub. The real-time detection feature of Contrast Security Assess helps us very well compared to traditional SAST tools. Traditional tools scan from the outside and guess where problems might be. Contrast Security Assess works from the inside because it is embedded into the application. The agent lives inside the running application, allowing it to see exactly what is happening in real-time. This means we are getting accurate alerts instead of a long list of potential issues that require manual investigation. When it comes to the CI/CD pipeline, Contrast Security Assess really shines for our daily work, as it plugs directly into tools like Jenkins, GitHub, or Azure DevOps. When a developer commits code and triggers a build, Contrast Security Assess is already testing it in the background. If there is any vulnerability, the pipeline automatically flags or stops the application before bad code reaches production. This means security becomes everyone's responsibility, not just the security team's, and it gives us real-time, accurate security that fits into how our team already works.

Read full review

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.

See recommendations

909,725 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

18%

Outsourcing Company

13%

Financial Services Firm

Construction Company

Financial Services Firm

15%

Manufacturing Company

10%

Comms Service Provider

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	54
Midsize Enterprise	23
Large Enterprise	34

By reviewers
Company Size	Count
Small Business	3
Midsize Enterprise	3
Large Enterprise	10

Questions from the Community

What is your experience regarding pricing and costs for CloudGuard for Application Security?

It is a little bit expensive, but the pricing model is acceptable, though a reduction would make it more competitive with leaders such as Palo Alto.

What needs improvement with CloudGuard for Application Security?

The false positive rate is a concern, but I could recommend improvements where false positives have to be minimized better. This all depends on how the rules are customized and configured, and it c...

What is your primary use case for CloudGuard for Application Security?

The main purpose is to have network security through machine learning, which can offer threat detection and intelligence for my endpoints, and I am looking for application security. I am looking fo...

What is your experience regarding pricing and costs for Contrast Security Assess?

I was not involved in the negotiation of pricing for Contrast Security Assess, but I am somewhat familiar with setup cost and licensing. Licensing costs are fairly high compared to other DAST and S...

What needs improvement with Contrast Security Assess?

I do find that here and there with Contrast Security Assess there are user interface issues, particularly with how they work with libraries. The way that it works is people have access to library d...

What advice do you have for others considering Contrast Security Assess?

I would give Contrast Security Assess a score of 8 out of 10. That is a small little issue, but it is a great product and I would recommend it to others. There are a couple things that could be imp...

OpenText Dynamic Application Security Testing vs Check Point WAF (formerly CloudGuard WAF)

Comparisons

Compared 7% of the time

Palo Alto Networks Enterprise Data Loss Prevention vs Check Point WAF (formerly CloudGuard WAF)

Compared 7% of the time

AWS WAF vs Check Point WAF (formerly CloudGuard WAF)

Compared 6% of the time

Cloudflare Web Application Firewall vs Check Point WAF (formerly CloudGuard WAF)

Compared 6% of the time

Prisma Cloud by Palo Alto Networks vs Check Point WAF (formerly CloudGuard WAF)

Compared 6% of the time

More Check Point WAF (formerly CloudGuard WAF) Competitors

Veracode vs Contrast Security Assess

Compared 8% of the time

SonarQube vs Contrast Security Assess

Compared 6% of the time

Quotium Seeker vs Contrast Security Assess

Compared 5% of the time

Oligo vs Contrast Security Assess

Compared 5% of the time

Mend.io vs Contrast Security Assess

Compared 5% of the time

More Contrast Security Assess Competitors

Product Reports

Check Point WAF (formerly CloudGuard WAF)

Download Check Point WAF (formerly CloudGuard WAF) product report

Check Point WAF (formerly CloudGuard WAF) report

Contrast Security Assess

Download Contrast Security Assess product report

Also Known As

Check Point CloudGuard Application Security, CloudGuard Application Security, CloudGuard AppSec, Check Point CloudGuard Code Security

Contrast Assess

Overview

Check Point WAF offers a robust security framework with AI-driven threat detection and seamless integration, protecting applications and APIs in multi-cloud environments.

Effective in preemptively blocking threats through AI and machine learning, Check Point WAF reduces false positives and operational workload. Its integration capabilities and threat intelligence provide comprehensive protection against zero-day attacks, while centralized management facilitates cost-effective and insightful threat reporting.

What are the main features of Check Point WAF?

AI and Machine Learning: Preemptively blocks threats without signature reliance.
Centralized Management: Simplifies oversight and reduces costs.
Threat Intelligence: Enhances security posture against zero-day attacks.
Ease of Deployment: Quick setup with user-friendly interface.
Comprehensive Protection: Guards against SQL injection and DDoS attacks.

What benefits should be considered by users?

Reduced False Positives: Minimizes operational interruptions.
Cost-effectiveness: Reduces management overhead.
Insightful Reporting: Enables swift response to threats.
Seamless Integration: Enhances security processes with existing tools.

Check Point WAF is employed in industries securing web applications and APIs, especially in multi-cloud environments. It effectively protects backend services, prevents unauthorized access, and monitors traffic, making it suitable for businesses with diverse infrastructures. It ensures compliance with security standards and adapts to fluctuating traffic patterns.

Check Point Software Technologies

Contrast Security Assess is an IAST platform known for accurate vulnerability detection. It integrates into development workflows, offering real-time insights into security issues with minimal false positives, supporting legacy applications and enhancing code security visibility.

Designed to integrate seamlessly into DevOps workflows, Contrast Security Assess automates real-time vulnerability detection and reduces false positives through its powerful IAST features. By continuously monitoring vulnerabilities, it provides a robust option for securing legacy applications and identifying vulnerabilities without lengthy scans. This cloud-hosted platform supports numerous programming languages, making it versatile for security testing across enterprise environments. Users benefit from detailed reports that pinpoint exact code locations requiring remediation, enhancing speed and efficiency in addressing security concerns.

What are the key features of Contrast Security Assess?

IAST Technology: Delivers accurate vulnerability detection with reduced false positives.
Seamless Integration: Integrates into development processes, supporting real-time vulnerability detection.
Open Source Security: Analyzes third-party libraries for vulnerabilities.
Continuous Monitoring: Provides valuable insights with real-time security feedback for developers.
API Interface: Enhances operational efficiency and streamlining with minimal false positives.

What benefits should users look for in reviews?

Enhanced Security Visibility: Offers comprehensive insights across application environments.
Speed and Efficiency: Quick identification and remediation of vulnerabilities accelerate development.
Operational Streamlining: Seamless integration into DevOps workflows improves productivity.
Legacy Application Support: Effective for securing existing applications with ongoing monitoring.

Companies in industries requiring high levels of application security, such as finance and healthcare, implement Contrast Security Assess for its ability to enhance visibility and detect vulnerabilities early in the development lifecycle. Its seamless integration with DevOps processes makes it ideal for environments that prioritize agility while maintaining stringent security standards.

Contrast Security

Sample Customers

Orange España, Paschoalotto

Williams-Sonoma, Autodesk, HUAWEI, Chromeriver, RingCentral, Demandware.

Check Point WAF (formerly CloudGuard WAF) vs. Contrast Security Assess