Sold by: Check Point Software Technologies
Free Trial
CloudGuard Cloud-Native Application Protection Platform (CNAPP) offers industry-leading posture management, workload protection, and security automation throughout the software development lifecycle-from code to cloud. CloudGuard integrates with AWS natively, enhancing visibility by enriching context, provides actionable remediation insights, and speeds up threat mitigation across the software development lifecycle
Sold by: Check Point Software Technologies
Overview
CloudGuard Cloud-Native Application Protection Platform (CNAPP) offers industry-leading posture management, workload protection, and security automation throughout the software development lifecycle-from code to cloud. CloudGuard integrates with AWS natively, enhancing visibility by enriching context, provides actionable remediation insights, and speeds up threat mitigation across the software development lifecycle.
https://www.checkpoint.com/cloudguard/cnapp/
CloudGuard CNAPP provides intelligent risk prioritization, agentless scanning, entitlement management, and pipeline security capabilities--delivering more context, actionable security, and smarter prevention.
CloudGuard CNAPP features:
- Security posture management, cloud compliance automation, and policy orchestration
- Auto-remediation of dangerous misconfigurations and threats
- Advanced cloud security intelligence with real-time monitoring, simplified traffic visualization, and analytics
- Cloud Infrastructure Entitlement Management (CIEM) to understand permissions and enforce least privilege across AWS
- Agentless scanning for deep visibility and runtime workload protection across containers, serverless, and virtual machines
- Pipeline security to shift security left, as well as detect and fix misconfigurations, secrets, and vulnerabilities in CloudFormation, Kubernetes, and other IaC templates early in the pipeline
- Effective Risk Management (ERM) to prioritize risks and provide actionable remediation guidance based on full context including workload posture, network exposure, identity permissions, attack path analysis, and the application business value
- 24/7 monitoring and auto-reversion of unauthorized modifications
- Automated Compliance and Governance
Highlights
- More Context. Deeper visibility from code to cloud across configurations, identities, vulnerabilities, network exposure and real time security monitoring
- Actionable Security. Intelligently prioritize critical risks based on contextual analysis of all elements to focus on the threats that matter most
- Smarter Prevention. Prevent risks early in the dev pipeline, or stop them in production, while providing actionable remediation guidance for misconfigurations and permissions
Details
Categories
Delivery method
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free according to the free trial terms set by the vendor.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Dimension | Description | Cost/month |
|---|---|---|
CP-CGD9-CNP-100 | CloudGuard CNAPP Compliance & Network Security, 100 Assets | $2,235.00 |
CP-CGD9-CNX-100 | CloudGuard CNAPP Compliance, Network Sec. & IAM Safety, 100 Assets | $2,925.00 |
CP-CGD9-CNP-25 | CloudGuard CNAPP Compliance & Network Security, 25 Assets | $625.00 |
Vendor refund policy
No Refunds available.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Support
Vendor support
https://supportcenter.checkpoint.com/supportcenter/portal 24x7 email support with emergency phone number. Premier support available for enterprise customers.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Check Point Software Technologies
By Aqua Security Software Inc.
By Orca Security CNAPP
AI generated sentiment from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Cloud Security Posture Management
Comprehensive security posture management with cloud compliance automation and policy orchestration across infrastructure
Cloud Infrastructure Entitlement Management
Advanced permission management and least privilege enforcement across cloud infrastructure using intelligent entitlement analysis
Agentless Workload Protection
Agentless scanning capabilities providing deep visibility and runtime protection across containers, serverless environments, and virtual machines
Pipeline Security
Integrated security scanning and vulnerability detection in infrastructure-as-code templates, including CloudFormation and Kubernetes configurations during development stages
Risk Prioritization
Contextual risk assessment using advanced analytics that evaluates workload posture, network exposure, identity permissions, and attack path analysis
Software Supply Chain Security
Advanced code scanning technology to identify and mitigate risks associated with third-party artifacts, open-source dependencies, and potential malicious actors in development environments
Runtime Protection Mechanism
Real-time behavioral detection and prevention of configuration drift, attacks, and unauthorized actions across virtual machines, containers, and serverless workloads
Multi-Environment Security Coverage
Comprehensive security protection for AWS workloads including EKS, ECS, Fargate, Lambda, and Graviton platforms
Large Language Model Security
Detection and mitigation of unsafe LLM use, runtime protection for LLM-powered applications, and implementation of GenAI assurance policies
Vulnerability Management
Automated discovery, assessment, prioritization, and risk reduction across software development lifecycle with AI-guided remediation capabilities
Cloud Asset Discovery
Agentless scanning technology providing comprehensive visibility across cloud infrastructure and platform assets
Risk Prioritization
Advanced risk scoring mechanism that identifies and correlates potential attack paths and security vulnerabilities
Security Integration
Seamless integration into CI/CD processes for continuous security assessment throughout software development lifecycle
Generative AI Analysis
AI-powered investigation and remediation capabilities for enhanced security threat detection and response
Multi-Domain Security Coverage
Unified platform integrating multiple cloud security domains including CSPM, CWPP, CIEM, DSPM, container and API security
Validated by AWS Marketplace
FedRAMP
GDPR
HIPAA
ISO/IEC 27001
PCI DSS
SOC 2 Type 2
No security profile
-
-
-
-
-
-
-
Standard contract
No
No
No
Customer reviews
Marco D.
Cloudguard IAAS best solution to secure your cloud envirorment
Reviewed on Mar 23, 2025
Review provided by G2
What do you like best about the product?
I have been working with cloudguard IAAS solutions on AWS and Azure clouds for 3 years. I can say that it is a very good solution, dploy are easy to do because of the templates, both for architecture with GWLB and external and internal LB that Checkpoint offers. The solution is scalable and reliable, once the deployment is done you don't have to think about anything else. Upgrades are easy to perform as you simply deploy new CG instances and delete old ones.
At the feature level, cloudguards guarantee as for on-prem solutions the maximum for security up to level 7.
At the feature level, cloudguards guarantee as for on-prem solutions the maximum for security up to level 7.
What do you dislike about the product?
it would be useful to have the ability to configure CME high management with a graphical interface, I know the vendor is working on it.
What problems is the product solving and how is that benefiting you?
enables replication of on-prem security logic, performing east-west and north-south inspection for our customers' environments on cloud providers.
Leave a comment0 comments
Prajwal I.
I can definitely say The Ultimate tool for the Cloud and Network Security
Reviewed on Jan 10, 2025
Review provided by G2
What do you like best about the product?
Best of best features for the Cloud Security.
I got Amaz with the advanced security features such as preventing future attacks to be happened.
Securing our Cloud acceing front door gateways in efficient manner.
I got Amaz with the advanced security features such as preventing future attacks to be happened.
Securing our Cloud acceing front door gateways in efficient manner.
What do you dislike about the product?
Shifting security could be improved.
Real time Support Support could be improved.
Real time Support Support could be improved.
What problems is the product solving and how is that benefiting you?
Preventing vulnerabilities and our Cloud assets.
Computer & Network Security
Recommended for cloud network security
Reviewed on Dec 27, 2024
Review provided by G2
What do you like best about the product?
I am using to mitigate the cloud risk for cloud network security with check point CNAPP.
What do you dislike about the product?
Not at all. Amazing tool and platform. Easy to integrate. Best in class UIUC that is very appealing to me.
What problems is the product solving and how is that benefiting you?
Cdr and cspm
Used in cloud security project for runtime security and prevention monitoring for clients cloud work infrastructure.
Used in cloud security project for runtime security and prevention monitoring for clients cloud work infrastructure.
Computer & Network Security
Perfect tool for the Cloud network security
Reviewed on Nov 13, 2024
Review provided by G2
What do you like best about the product?
I would say we had average experience using this cloud native application protection tool for our few cloud based projects
Features of this tool perticular ly threats detection and prevention for the Cloud application.
Ene to end security features is what outstand from other CNAPP applications.
Features of this tool perticular ly threats detection and prevention for the Cloud application.
Ene to end security features is what outstand from other CNAPP applications.
What do you dislike about the product?
Not used extensively so couldn't incounter downside or nothing as to say dislikes about this CNAPP
What problems is the product solving and how is that benefiting you?
We got benefitted from this tool in terms of Cloud container protection and security.
Computer & Network Security
Excellent and Robust tool CNAPP
Reviewed on Nov 09, 2024
Review provided by G2
What do you like best about the product?
First thing to highlight about this tool and that has also impressed me is it's easy to installation and integration and set up.
Till now what I have experienced is amazing. Talking and highlighting about the best features or things I personally liked about this tool is it's features about protecting and prevention of our cloud based SFDC lifecycle.
Zero trust refrence architecture is one of them security feature.
Till now what I have experienced is amazing. Talking and highlighting about the best features or things I personally liked about this tool is it's features about protecting and prevention of our cloud based SFDC lifecycle.
Zero trust refrence architecture is one of them security feature.
What do you dislike about the product?
Nothing as such to be highlight but overall impressive tool for cloud code review
What problems is the product solving and how is that benefiting you?
To answer this question,Our business or company got benefitted with Cloud Data Security and compliance issues about data.