Check Point WAF (formerly CloudGuard WAF) vs Fortinet FortiAppSec Cloud comparison

Check Point WAF (formerly CloudGuard WAF) vs. Fortinet FortiAppSec Cloud

Download the complete report

Helped 909,725 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Check Point WAF (formerly C...

Ranking in Web Application Firewall (WAF)

5th

Average Rating

8.6

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Application Security Tools (5th), Data Loss Prevention (DLP) (8th), DevSecOps (2nd)

Fortinet FortiAppSec Cloud

Ranking in Web Application Firewall (WAF)

26th

Average Rating

9.0

Reviews Sentiment

6.6

Number of Reviews

Ranking in other categories

CDN (11th), Distributed Denial-of-Service (DDoS) Protection (18th), API Security (17th), Dynamic Application Security Testing (DAST) (9th)

Mindshare comparison

As of August 2026, in the Web Application Firewall (WAF) category, the mindshare of Check Point WAF (formerly CloudGuard WAF) is 2.0%, up from 1.5% compared to the previous year. The mindshare of Fortinet FortiAppSec Cloud is 1.4%. It is calculated based on PeerSpot user engagement data.

Web Application Firewall (WAF) Mindshare Distribution
Product	Mindshare (%)
Check Point WAF (formerly CloudGuard WAF)	2.0%
Fortinet FortiAppSec Cloud	1.4%
Other	96.6%

Web Application Firewall (WAF)

Featured Reviews

Krishnakumar Mahadevan

CISO at Spink Solutions Private Limited

Cloud security has strengthened risk posture and improved advanced threat visibility

There are some API gateway and API securities I mentioned. If these are incorporated with AI-related features, particularly those seven key vulnerabilities I mentioned—token theft and tool poisoning—that would be beneficial. AI-related features are not included yet in Check Point CloudGuard WAF. However, they are present in FortiGate. That is the advantage of FortiGate now. FortiGate is stopping all AI-related vulnerabilities now. FortiGate has this capability. It is unfortunate that even Palo Alto also lacks one or two of these features. Check Point Quantum is very good, without a doubt. However, their capabilities are not in comparison with Palo Alto. There are some features, but there are some gaps in comparison with Palo Alto.

Read full review

Eluma Oche

CIO at a financial services firm with 51-200 employees

Advanced threat protection has reduced financial risk and improves application security visibility

The issue I have with Fortinet FortiAppSec Cloud is that the real-time analysis is not robust; I am unable to see all the logs of everything that happened, including what is passive. It only logs when there are suspicious activities, which means if something is not considered suspicious by Fortinet, I will not see the full picture. That is a disadvantage because it will not log unless it identifies an IOC or attacks, meaning I cannot see traffic information in a way that helps build more intelligence. The biggest issue I have with Fortinet FortiAppSec Cloud is that the logging is not as extensive as I would prefer. For instance, if there was an issue two days ago and Fortinet FortiAppSec Cloud did not mark it as a concern, I will not see any information about that, making it challenging to explain to customers if their request did not reach us. It hampers visibility from an API perspective. They need to enhance monitoring and logging to be more extensive and capture even passive activities. The AI integration in Fortinet FortiAppSec Cloud is still new. The generative models are good, but there is much work left to improve. It is not as intelligent as it could be; thus, enhancements around the AI co-assistant would be beneficial. Additionally, logging and monitoring need improvement as I can capture traffic and investigate offline on my Fortinet firewall, including full traffic view, but Fortinet FortiAppSec Cloud currently focuses only on security concerns, which does not give the complete picture.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It offers good functionality of the application that is currently running."

"Check Point CloudGuard Application Security is the one-stop solution for the security of applications and providing API protection to servers and facilities 24/7."

"I rate it ten out of ten."

"Check Point WAF (formerly CloudGuard WAF) helps my clients reduce total cost of ownership, and the return on investment was really high for Check Point WAF (formerly CloudGuard WAF), and it was the only product with GenAI security features compared to other WAF products."

"The DirectStorage gives me a vision that I did not have of the check that occurs on the web servers."

"Check Point CloudGuard WAF has positively impacted my organization by significantly improving both security and operational efficiency, with a noticeable reduction in web-based threats, especially automated attacks and vulnerability exploits, thanks to its real-time prevention and reputation filter that has streamlined my workflow through automatic policy updates and integration smoothly with my CI/CD pipelines, allowing my DevOps teams to deploy security without delays."

"The most effective CloudGuard feature for threat prevention is its web app protection."

"Check Point WAF (formerly CloudGuard WAF) is especially valuable because of its cloud-native architecture and AI autonomous protection capabilities."

More Check Point WAF (formerly CloudGuard WAF) pros

"We have seen a reduction in incidents and a good return on investment from Fortinet FortiAppSec Cloud, with our return on investment around 60%."

"My favorite Fortinet device is the FortiGate next-gen firewall itself; it is a complete suite with intrusion prevention, intrusion detection, anti-malware, anti-DDoS, and SD-WAN functionalities."

Cons

"The user interface, SmartConsole, sometimes malfunctions and requires a restart."

"The creation of security profiles for each application takes a lot of time."

"Check Point CloudGuard WAF is a strong solution, but there are a few areas where it could be improved, particularly the user interface for managing custom rules and exceptions, which could be more intuitive and streamlined to reduce the learning curve for new users, especially when deploying for the first time."

"While Check Point CloudGuard WAF is a strong solution, it could be improved in a few areas such as simplifying and customizing the user interface and reporting database."

"Deeper and more transparent integration between Cloud Application Security and analysis monitoring tools could be very valuable - although the solution currently offers integrations with third-party security tools."

"I would like it to be able to analyze more complex functions, although I did not examine the case study of more complex implementations. Things like forum fields, etc seem to need a little more focused protection of the fields scheme validation."

"I feel like I need more clarity in understanding pricing for DDoS protection."

"The negative side I see is that while most things about Check Point CloudGuard WAF are really good, there is some latency and performance issues, as it can be slow to log in, especially from different regions."

More Check Point WAF (formerly CloudGuard WAF) cons

"Real-time traffic analysis has posed an issue for us because we did not see logs for legitimate traffic."

"The issue I have with Fortinet FortiAppSec Cloud is that the real-time analysis is not robust; I am unable to see all the logs of everything that happened, including what is passive."

Pricing and Cost Advice

"It is extremely affordable and high value for cost."

"Check Point CloudGuard WAF is expensive compared to Azure WAF."

"I find the pricing to be reasonable."

"As Infiniti customers, the pricing is manageable, as we have allowances dedicated to each Check Point product. The price is not as high compared to other options I have dealt with in the past."

"The base solution costs approximately 30,000 euros, with an additional 2,000 euros per year for licenses and support."

"The tool's licensing costs are yearly and competitive."

"The sales team or account managers from Check Point are top-notch. As I am using other products as well, my pricing was competitive compared to others."

"If the pricing for the Infinity platform covers everything, it would be more straightforward. I had a hard time selling it to our CEO as a former CFO because of the differentials. There are different deltas year to year over a five-year period. It is very difficult to explain. It would be easier to digest for our executives if there was a flatter scale"

More Check Point WAF (formerly CloudGuard WAF) pricing and cost advice

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.

See recommendations

909,725 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

18%

Outsourcing Company

13%

Financial Services Firm

Construction Company

22%

Financial Services Firm

11%

Healthcare Company

11%

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	54
Midsize Enterprise	23
Large Enterprise	34

No data available

Questions from the Community

What is your experience regarding pricing and costs for CloudGuard for Application Security?

It is a little bit expensive, but the pricing model is acceptable, though a reduction would make it more competitive with leaders such as Palo Alto.

What needs improvement with CloudGuard for Application Security?

The false positive rate is a concern, but I could recommend improvements where false positives have to be minimized better. This all depends on how the rules are customized and configured, and it c...

What is your primary use case for CloudGuard for Application Security?

The main purpose is to have network security through machine learning, which can offer threat detection and intelligence for my endpoints, and I am looking for application security. I am looking fo...

What needs improvement with Fortinet FortiAppSec Cloud?

Real-time traffic analysis has posed an issue for us because we did not see logs for legitimate traffic. A separate license is needed for Fortinet FortiAppSec Cloud to send logs to other cloud serv...

What is your primary use case for Fortinet FortiAppSec Cloud?

Fortinet FortiAppSec Cloud is used as a WAF solution.

What advice do you have for others considering Fortinet FortiAppSec Cloud?

We are a customer running Fortinet FortiAppSec Cloud for both our organization and one for our customer. Three users use Fortinet FortiAppSec Cloud. As administrators, it is easy to maintain. Using...

OpenText Dynamic Application Security Testing vs Check Point WAF (formerly CloudGuard WAF)

Comparisons

Compared 7% of the time

Palo Alto Networks Enterprise Data Loss Prevention vs Check Point WAF (formerly CloudGuard WAF)

Compared 7% of the time

AWS WAF vs Check Point WAF (formerly CloudGuard WAF)

Compared 6% of the time

Cloudflare Web Application Firewall vs Check Point WAF (formerly CloudGuard WAF)

Compared 6% of the time

Prisma Cloud by Palo Alto Networks vs Check Point WAF (formerly CloudGuard WAF)

Compared 6% of the time

More Check Point WAF (formerly CloudGuard WAF) Competitors

Cloudflare vs Fortinet FortiAppSec Cloud

Compared 14% of the time

Aryaka Unified SASE Platform vs Fortinet FortiAppSec Cloud

Compared 13% of the time

Fortinet FortiWeb vs Fortinet FortiAppSec Cloud

Compared 12% of the time

OpenText Dynamic Application Security Testing vs Fortinet FortiAppSec Cloud

Compared 10% of the time

Cloudflare Web Application Firewall vs Fortinet FortiAppSec Cloud

Compared 7% of the time

More Fortinet FortiAppSec Cloud Competitors

Product Reports

Check Point WAF (formerly CloudGuard WAF)

Download Check Point WAF (formerly CloudGuard WAF) product report

Check Point WAF (formerly CloudGuard WAF) report

Web Application Firewall (WAF)

Download Fortinet FortiAppSec Cloud product report

Also Known As

Check Point CloudGuard Application Security, CloudGuard Application Security, CloudGuard AppSec, Check Point CloudGuard Code Security

No data available

Overview

Check Point WAF offers a robust security framework with AI-driven threat detection and seamless integration, protecting applications and APIs in multi-cloud environments.

Effective in preemptively blocking threats through AI and machine learning, Check Point WAF reduces false positives and operational workload. Its integration capabilities and threat intelligence provide comprehensive protection against zero-day attacks, while centralized management facilitates cost-effective and insightful threat reporting.

What are the main features of Check Point WAF?

AI and Machine Learning: Preemptively blocks threats without signature reliance.
Centralized Management: Simplifies oversight and reduces costs.
Threat Intelligence: Enhances security posture against zero-day attacks.
Ease of Deployment: Quick setup with user-friendly interface.
Comprehensive Protection: Guards against SQL injection and DDoS attacks.

What benefits should be considered by users?

Reduced False Positives: Minimizes operational interruptions.
Cost-effectiveness: Reduces management overhead.
Insightful Reporting: Enables swift response to threats.
Seamless Integration: Enhances security processes with existing tools.

Check Point WAF is employed in industries securing web applications and APIs, especially in multi-cloud environments. It effectively protects backend services, prevents unauthorized access, and monitors traffic, making it suitable for businesses with diverse infrastructures. It ensures compliance with security standards and adapts to fluctuating traffic patterns.

Check Point Software Technologies

Fortinet FortiAppSec Cloud is a comprehensive security offering, designed to protect applications across cloud environments. It focuses on providing advanced security measures that cater to the needs of enterprises looking for robust application protection.

Fortinet FortiAppSec Cloud leverages an array of sophisticated technologies to offer top-tier security for cloud applications. It safeguards against threats by implementing features such as cutting-edge machine learning models and real-time threat intelligence. This ensures data integrity and application availability, crucial for maintaining normal business operations. By integrating seamlessly into cloud environments, Fortinet FortiAppSec Cloud offers a user-friendly experience that does not compromise on security.

What are the key features of Fortinet FortiAppSec Cloud?

Machine Learning Models: Employs AI for threat detection and prevention, enhancing security efficiency.
Real-Time Threat Intelligence: Offers timely updates to combat emerging threats.
Seamless Cloud Integration: Ensures easy deployment and operation within cloud infrastructures.
Scalability: Adapts to growing business needs, providing consistent security coverage.

What benefits should users expect when evaluating Fortinet FortiAppSec Cloud?

Cost Efficiency: Reduces expenses by preventing security breaches and minimizing downtime.
Enhanced Security Posture: Provides improved protection, reducing vulnerability exposure.
Operational Efficiency: Streamlines management, allowing IT teams to focus on strategic tasks.
Future-Proof Investment: Offers scalable security to meet evolving business demands.

Fortinet FortiAppSec Cloud is widely implemented across industries such as finance, healthcare, and e-commerce. Organizations in these fields benefit from its ability to secure sensitive data and maintain compliance with rigorous industry standards. Its adaptive design ensures that businesses can provide secure and reliable services to their customers at all times.

Fortinet

Sample Customers

Orange España, Paschoalotto

Information Not Available

Check Point WAF (formerly CloudGuard WAF) vs. Fortinet FortiAppSec Cloud