No more typing reviews! Try our Samantha, our new voice AI agent.

Check Point WAF (formerly CloudGuard WAF) vs Sucuri comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 13, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Check Point WAF (formerly C...
Ranking in Web Application Firewall (WAF)
5th
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
81
Ranking in other categories
Application Security Tools (4th), Data Loss Prevention (DLP) (6th), DevSecOps (2nd)
Sucuri
Ranking in Web Application Firewall (WAF)
36th
Average Rating
8.4
Reviews Sentiment
7.5
Number of Reviews
6
Ranking in other categories
Distributed Denial-of-Service (DDoS) Protection (25th), Domain Name System (DNS) Security (24th)
 

Mindshare comparison

As of October 2026, in the Web Application Firewall (WAF) category, the mindshare of Check Point WAF (formerly CloudGuard WAF) is 2.0%, up from 1.5% compared to the previous year. The mindshare of Sucuri is 1.6%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Web Application Firewall (WAF) Mindshare Distribution
ProductMindshare (%)
Check Point WAF (formerly CloudGuard WAF)2.0%
Sucuri1.6%
Other96.4%
Web Application Firewall (WAF)
 

Featured Reviews

Krishnakumar Mahadevan - PeerSpot reviewer
CISO at Spink Solutions Private Limited
Cloud security has strengthened risk posture and improved advanced threat visibility
There are some API gateway and API securities I mentioned. If these are incorporated with AI-related features, particularly those seven key vulnerabilities I mentioned—token theft and tool poisoning—that would be beneficial. AI-related features are not included yet in Check Point CloudGuard WAF. However, they are present in FortiGate. That is the advantage of FortiGate now. FortiGate is stopping all AI-related vulnerabilities now. FortiGate has this capability. It is unfortunate that even Palo Alto also lacks one or two of these features. Check Point Quantum is very good, without a doubt. However, their capabilities are not in comparison with Palo Alto. There are some features, but there are some gaps in comparison with Palo Alto.
JS
Hardware Engineer at Ministry of Defense
A cost-effective choice for website security and informative support with issues related to CDN quality
One area where they could improve is in providing real-time support options because now you need to open a support ticket and wait for their response. It would greatly benefit customers if they implemented an online chat or messaging system for quicker assistance. I have found their Content Delivery Network service to be lacking in quality, and it could certainly be enhanced to provide better performance. I would also like to see improvements in the deployment process, as it currently takes more time than desirable. Another significant concern is that their service when your website is down, turns it into a static site. This means that if customers try to visit your site during downtime, they will see old content from the static site, which is not ideal. The CDN and tracking services are areas that need improvement, as well as addressing their bandwidth limitations.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I would definitely recommend this solution because I do not want to implement one more traffic function as I can eliminate the firewall and use Check Point WAF (formerly CloudGuard WAF) alone, thus eliminating Layer 3 traffic directly connecting to my Web Application Firewall."
"Compared to other WAF solutions, Check Point WAF (formerly CloudGuard WAF) is user-friendly and very visible."
"I have thousands of exposed websites and APIs. Being able to control what is happening and try to prevent any attack is the best feature."
"We can ensure that by following and adapting our needs based on these guidelines we will be a great organization with a strong vision and a great security framework established to protect us."
"With CloudGuard WAF, I have peace of mind, because most of the features are AI-based, and there is not much configuration that needs to be done on my side."
"The DirectStorage gives me a vision that I did not have of the check that occurs on the web servers."
"It offers good functionality of the application that is currently running."
"With the introduction of AI in general, Check Point CloudGuard WAF provides very high accuracy on the data, allowing me to avoid a lot of false positives and saving me time in determining if what I'm seeing is a possible attack."
"The initial setup was very easy."
"It significantly eases the workload and streamlines the initial setup required to protect a website."
"I use it as a WAF, which is basically a web firewall to monitor and block traffic to our web server."
"Domain name scanning since it allows us to scan all our domain names and determine whether it has malware or if is reported as phishing."
"Rather than locate some things manually, the Sucuri plugin scans and allows us to pinpoint whether there is malware or some problem in the site."
"For people who own a personal website, this solution is worth trying out since their security solution is somewhat full-fledged."
"The most valuable part is the analytics and visualization."
"The initial setup was straightforward. Straight forward because the plugin can simply be installed and then it does its job. It's not complex, there is no learning curve. The online scan is simple, you put in the website address and the scan gives us a report on the browser itself. It's simple to use."
 

Cons

"While the GUI allows configuration for application-related features, specific definitions cannot be modified through the code."
"One area for improvement would be making the policy configuration and troubleshooting experience simpler, especially for complex applications and APIs."
"You need to know exactly the system. You cannot have someone running the system if they don't have the knowledge to do so."
"The User interface can be improved, especially for 1st time user."
"I would like to be able to integrate the theme of Artificial Intelligence to help review issues and to monitor and view the security issue while also suggesting and interpreting and additionally configuring solutions - basically, acting as an interpreter."
"In terms of features, I do not have any negatives. Their integration is extremely quick. It is better than others I have been involved with in the past. Their pricing model, however, can be better."
"A gap for improvement for Check Point WAF (formerly CloudGuard WAF) is the learning curve, as better training modules could help end customers, and pricing and reporting functionality could also be improved."
"The trial version should be extended further so that QA test engineers can actually test the utilities in a real sense and can provide the maximum amount of feedback for enhancements."
"The main improvement I would like to see is support for .NET applications. If they could include this feature, I would include more sites in the protection."
"It would greatly benefit customers if they implemented an online chat or messaging system for quicker assistance."
"Confident score: Currently it does not have one and there are cases that most websites flagged are false-positives."
"Sucuri could provide help for specific security alerts in-line instead of requiring users to search for it in the help section."
"I would rate this solution an eight out of ten. The reason is that we have found sometimes customers or Google saying that there is something wrong with the website but Sucuri says that the site is clean so we do have to look at the site manually which means that the Sucuri scan does not pick up anything and everything."
"In terms of improvement, the cost factor is always there."
 

Pricing and Cost Advice

"It is extremely affordable and high value for cost."
"Considering all the benefits we've observed, we find the price to be satisfactory."
"As Infiniti customers, the pricing is manageable, as we have allowances dedicated to each Check Point product. The price is not as high compared to other options I have dealt with in the past."
"The base solution costs approximately 30,000 euros, with an additional 2,000 euros per year for licenses and support."
"The pricing is competitive compared to other solutions on the market. So, the licensing cost is average."
"Check Point CloudGuard WAF is expensive compared to Azure WAF."
"Check Point CloudGuard Application Security's pricing is not friendly."
"The sales team or account managers from Check Point are top-notch. As I am using other products as well, my pricing was competitive compared to others."
"Sucuri offers different plans, both the standard plan and an advanced plan. So there are different plans to choose from."
"The ROI has been very good. Because of the solution, I have a tax break. The site developers were not always experienced people. We used to pay more for cleaning up the site when it was infected. Now, we have peace of mind knowing that the solution will clean up the site and that we won't have to go through the unnecessary process of restoring it from a backup. The protection on the WAF and the measures for backups have also prevented our site from going down."
"It stands out as a more cost-effective option compared to other cloud-based security services like Cloudflare or JetPass."
"I’d simply say it’s really worth it."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
915,341 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
15%
Computer Software Company
15%
Financial Services Firm
10%
Construction Company
8%
Comms Service Provider
15%
Construction Company
13%
Outsourcing Company
10%
Manufacturing Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business57
Midsize Enterprise24
Large Enterprise40
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for CloudGuard for Application Security?
It is a little bit expensive, but the pricing model is acceptable, though a reduction would make it more competitive with leaders such as Palo Alto.
What needs improvement with CloudGuard for Application Security?
The false positive rate is a concern, but I could recommend improvements where false positives have to be minimized better. This all depends on how the rules are customized and configured, and it c...
What is your primary use case for CloudGuard for Application Security?
The main purpose is to have network security through machine learning, which can offer threat detection and intelligence for my endpoints, and I am looking for application security. I am looking fo...
Ask a question
Earn 20 points
 

Also Known As

Check Point CloudGuard Application Security, CloudGuard Application Security, CloudGuard AppSec, Check Point CloudGuard Code Security
No data available
 

Overview

 

Sample Customers

Orange España, Paschoalotto
The Loft Salon, Tom McFarlin, WPBeginner, Taylor Town, Everything Everywhere, Financial Ducks in a Row, Chubstr, Real Advice Gal, Sujan Patel, Wallao, List25, School the World
Find out what your peers are saying about Check Point WAF (formerly CloudGuard WAF) vs. Sucuri and other solutions. Updated: September 2026.
915,341 professionals have used our research since 2012.