No more typing reviews! Try our Samantha, our new voice AI agent.

Check Point WAF (formerly CloudGuard WAF) vs Wallarm NG WAF comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 13, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Check Point WAF (formerly C...
Ranking in Web Application Firewall (WAF)
5th
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
81
Ranking in other categories
Application Security Tools (4th), Data Loss Prevention (DLP) (6th), DevSecOps (2nd)
Wallarm NG WAF
Ranking in Web Application Firewall (WAF)
39th
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
5
Ranking in other categories
API Security (14th)
 

Mindshare comparison

As of October 2026, in the Web Application Firewall (WAF) category, the mindshare of Check Point WAF (formerly CloudGuard WAF) is 2.0%, up from 1.5% compared to the previous year. The mindshare of Wallarm NG WAF is 1.1%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Web Application Firewall (WAF) Mindshare Distribution
ProductMindshare (%)
Check Point WAF (formerly CloudGuard WAF)2.0%
Wallarm NG WAF1.1%
Other96.9%
Web Application Firewall (WAF)
 

Featured Reviews

Krishnakumar Mahadevan - PeerSpot reviewer
CISO at Spink Solutions Private Limited
Cloud security has strengthened risk posture and improved advanced threat visibility
There are some API gateway and API securities I mentioned. If these are incorporated with AI-related features, particularly those seven key vulnerabilities I mentioned—token theft and tool poisoning—that would be beneficial. AI-related features are not included yet in Check Point CloudGuard WAF. However, they are present in FortiGate. That is the advantage of FortiGate now. FortiGate is stopping all AI-related vulnerabilities now. FortiGate has this capability. It is unfortunate that even Palo Alto also lacks one or two of these features. Check Point Quantum is very good, without a doubt. However, their capabilities are not in comparison with Palo Alto. There are some features, but there are some gaps in comparison with Palo Alto.
it_user796242 - PeerSpot reviewer
Information Security Engineer at a tech vendor with 51-200 employees
Helps us to monitor attacks to our sites and prevents a lot of them
Set up Wallarm as a reverse proxy. Do not replace your web server. Use Wallarm first in monitoring mode, then learn from Wallarm which type of request is false positive and which type of request is not. This process takes a couple of weeks for very highly-loaded web applications (few millions of unique visitors in one month). Then you can turn Wallarm into blocking mode and everything will be fine. Do not forget to build a monitoring system, the wave, and API for it. Before we started using Wallarm, I already knew Ivan (CEO) and Stepan (COO) from a couple of years before. Ivan had his own security company and Stepan was working on a Russian security magazine called Xakep. They told us that they wanted to create a new WAF and already had a working version of it. They asked me to test it. We did tests, and it was really good. After few month after testing, we signed an agreement. Our choice was made not because we knew these guys for a long time, but because the product was really cool and we were glad to start using it as one of the first on the market!

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The DirectStorage gives me a vision that I did not have of the check that occurs on the web servers."
"The implementation of this tool for security management and control is very simple."
"The tool helps us to block IPs and applications."
"The tool performs device health checkups and updates us. It helps us to be compliant with regulatory policies."
"Check Point WAF (formerly CloudGuard WAF) has positively impacted my organization by reducing security incidents."
"The features I have found most valuable are the comprehensive threat prevention capabilities, automated policy management, and seamless integration with cloud environments."
"Knowing what measures we must take allows us to reduce costs associated with security in the cloud by providing early identification of a risk or a possible security breach."
"The biggest benefit from Check Point CloudGuard WAF that I saw is that it comes with one solution that completely outperforms its competitors."
"The most powerful feature is the ability to first learn what type of query to make to your web application when it is attacked and what type of query creates a false positive to your app."
"They are the only solution that fits our success criteria and business objectives: WAF must have a low (<5%) false negative rate and be ready to protect from all well-known web attacks."
"Vulnerability scanner and WAF are valuable features."
"Helps us to monitor situation in regards to attacks to our sites and prevents a lot of them."
"With active threat detection, we are no longer over-swamped with tons of useless events."
"Perimeter control and active vulnerability scanner are the most valuable features."
 

Cons

"I have not seen a return on investment, as I still have the same number of employees and the same amount of effort and time in hours."
"Deeper and more transparent integration between Cloud Application Security and analysis monitoring tools could be very valuable - although the solution currently offers integrations with third-party security tools."
"You need to know exactly the system. You cannot have someone running the system if they don't have the knowledge to do so."
"While Check Point CloudGuard WAF is a strong solution, it could be improved in a few areas such as simplifying and customizing the user interface and reporting database."
"The User interface can be improved, especially for 1st time user."
"We need to have many of the baselines or development guides providing less complex writing or development."
"Check Point CloudGuard WAF can be improved; initially, the setup is very complicated, and there's not a lot of documentation available, plus it didn't have something for anti-bot, but other than that, it is fine."
"For the next release, I would suggest considering features like enhanced threat intelligence integration."
"Technical support is 6 or 7 out of 10. Sometimes we have had trouble with communication and understanding."
"There were several stability issues during the first pilot."
"It needs more customization in PDF reports."
"Wallarm uses a learning mechanism to detect attacks and to avoid false positives. If Wallarm blocks some illegitimate request, then you can go to the management console and mark this request as false positive, but sometimes this does not work properly."
"The biggest problem for us was the stability and speed using the first version of Wallarm. Now, it is fine."
 

Pricing and Cost Advice

"Check Point CloudGuard WAF is expensive compared to Azure WAF."
"The base solution costs approximately 30,000 euros, with an additional 2,000 euros per year for licenses and support."
"Check Point CloudGuard Application Security's pricing is comparable to other products in the market."
"It is not cheap, but it is worth it."
"If the pricing for the Infinity platform covers everything, it would be more straightforward. I had a hard time selling it to our CEO as a former CFO because of the differentials. There are different deltas year to year over a five-year period. It is very difficult to explain. It would be easier to digest for our executives if there was a flatter scale"
"The pricing is competitive compared to other solutions on the market. So, the licensing cost is average."
"I work for an Indian banking client. In India, companies are on a budget. The company liked Check Point very much, but it was a little bit costly compared to FortiWeb. However, it had more features compared to FortiWeb."
"Check Point CloudGuard Application Security's pricing is not friendly."
"​Pricing must be cheaper than the competition and the licensing must be good.​"
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
919,586 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
15%
Computer Software Company
14%
Financial Services Firm
11%
Construction Company
8%
Financial Services Firm
20%
Government
11%
Manufacturing Company
10%
Insurance Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business57
Midsize Enterprise24
Large Enterprise40
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for CloudGuard for Application Security?
It is a little bit expensive, but the pricing model is acceptable, though a reduction would make it more competitive with leaders such as Palo Alto.
What needs improvement with CloudGuard for Application Security?
The false positive rate is a concern, but I could recommend improvements where false positives have to be minimized better. This all depends on how the rules are customized and configured, and it c...
What is your primary use case for CloudGuard for Application Security?
The main purpose is to have network security through machine learning, which can offer threat detection and intelligence for my endpoints, and I am looking for application security. I am looking fo...
Ask a question
Earn 20 points
 

Also Known As

Check Point CloudGuard Application Security, CloudGuard Application Security, CloudGuard AppSec, Check Point CloudGuard Code Security
Wallarm NG-WAF
 

Overview

 

Sample Customers

Orange España, Paschoalotto
Panasonic. Miro. Rappi. Wargaming. Gannett. Omio. Acronis. Workforce Software. Tipalti. SEMRush.
Find out what your peers are saying about Check Point WAF (formerly CloudGuard WAF) vs. Wallarm NG WAF and other solutions. Updated: September 2026.
919,586 professionals have used our research since 2012.