Check Point CloudGuard Code Security logo

    Check Point CloudGuard Code Security

    CloudGuard Code Security is a blazing-fast language-agnostic scanner for detecting secrets, CVEs, and compliance violations in code and IaC with CI/CD hardening features, which seamlessly integrates into everything from the IDE to git and build machine.

    Ratings and reviews

    4.4
    60 ratings
    3 star
    2 star
    1 star
    60%
    40%
    0%
    0%
    0%
    16 AWS reviews
    |
    44 external reviews
    External reviews are from PeerSpot .

    Filters

    Review type

    AWS Marketplace reviews
    External reviews
    Reviews (60)
    reviewer2108088

    Secure filtering and application control have protected web workloads and simplified deployment

    Reviewed on Jul 29, 2026
    Review provided by PeerSpot

    What is our primary use case?

    I have found features like Cisco ASA and Firepower most valuable. Secure Firewall is a secure firewall with features like WAF and web applications. We have web filtering applications, secure features, and application controls among other features.

    What is most valuable?

    I have found features like Cisco ASA and Firepower most valuable. Secure Firewall is a secure firewall with features like WAF and web applications. We have web filtering applications, secure features, and application controls among other features. I am not using Cisco SecureX with Secure Firewall.

    What needs improvement?

    Currently, I have no suggestions for Cisco Secure Firewall. I am not working on the next-generation firewall of Cisco. As I already mentioned, I have no suggestions regarding the features and improvements. I am not working on Cisco firewall currently.

    For how long have I used the solution?

    Overall, I have been working with Cisco Secure Firewall for almost three to four years.

    How are customer service and support?

    I would rate the technical support by Cisco a nine out of ten.

    How was the initial setup?

    I think the implementation is easy. GUI-based implementation for firewalls is straightforward. Although the command line is a very simple process, next-generation firewalls now come with GUI-based interfaces.

    What's my experience with pricing, setup cost, and licensing?

    In comparison to other vendors, the pricing is reasonable and affordable.

    Which other solutions did I evaluate?

    I am currently using some Cisco products. I am currently using some switches of Cisco. I am working on the ASA series. I stopped working with Cisco Firewall more than one to two years ago. I am currently dealing mostly with other Cisco products. I am not dealing with Cisco Secure Access or Cisco Duo. I am working with different product vendors such as Check Point and Fortinet. I am working with Check Point Web Application Firewalls and using bundles with them. I am using some features such as WAF and UTP bundles with application controls, web filtering, email filtering, and DNS filtering and controls that are implemented with UTP enterprise bundles and other WAF applications. I have been dealing with Check Point for three to four years on different products. I am using other platforms and testing some things for the networks. I am also using some other products with them.

    What other advice do I have?

    I did not have new features or functionalities that I have used recently in Secure Firewall. Check Point WAF is used in my company and my customers are using it. I have seen measurable business and security outcomes since implementation of Check Point WAF (formerly CloudGuard WAF). All vendors design firewalls with application filtering. As per current incident reporting, we implement and update our feature updates and security databases. These databases are updated regularly. Check Point WAF (formerly CloudGuard WAF) works fine for every product like Cisco, Check Point, Fortinet, and Palo Alto. I am currently not using Check Point WAF as a primary solution, just for a specific purpose. Check Point WAF (formerly CloudGuard WAF) is working fine and reports, detects, and stops attacks such as IPS and detection. I would rate Check Point WAF (formerly CloudGuard WAF) a nine out of ten. The existing features are working fine, but new day-to-day attacks and issues arise in the environment globally, dealing with attacks such as phishing and DDoS attacks daily. Check Point WAF (formerly CloudGuard WAF) could improve by addressing the new day-to-day attacks and issues that arise in the environment and globally dealing with attacks. I have been satisfied with pricing, technical support, and performance. I am a customer of Check Point. I have been working in this field for several years. My overall review rating for this product is ten.

    Babu K

    Application security has reduced incidents and now needs UI fixes and shared exception rules

    Reviewed on Jul 22, 2026
    Review provided by PeerSpot

    What is our primary use case?

    We have implemented Check Point WAF (formerly CloudGuard WAF) in our environment. We have been dealing with Check Point WAF (formerly CloudGuard WAF) for three months. We are using Check Point WAF (formerly CloudGuard WAF) for our company only.

    Currently, we are handling only the L7 part with Check Point WAF (formerly CloudGuard WAF), and we are planning to expand to the APIs and rate-limiting capabilities. We are not handling the network part, as we are only taking care of the security part with Check Point WAF (formerly CloudGuard WAF).

    We have a team of 15 people who handle Check Point WAF (formerly CloudGuard WAF) and other security aspects. We have only two administrators dedicated to Check Point WAF (formerly CloudGuard WAF).

    What is most valuable?

    We have seen measurable business and security outcomes since implementation. We have observed reduced incidents with Check Point WAF (formerly CloudGuard WAF).

    Check Point WAF (formerly CloudGuard WAF) has helped us reduce our false positives rate. Compared to other WAF solutions, Check Point WAF (formerly CloudGuard WAF) is user-friendly and very visible. When we review incidents with Check Point WAF (formerly CloudGuard WAF), it is clearly visible where the block occurred and it shows us detailed overview of the incident. In other products, I am not able to get the exact reason for the block, so I can identify where the block happened, and it is very user-friendly for me to add the policy or explicit policy there.

    What needs improvement?

    I face issues with the UI part of Check Point WAF (formerly CloudGuard WAF), as it malfunctions sometimes. Sometimes I do not see the icons in Check Point WAF (formerly CloudGuard WAF), and whenever I refresh the page, the icons remain invisible.

    Additional features I have considered with Check Point WAF (formerly CloudGuard WAF) include the ability to add an exception rule. Since we have multiple projects, I want to add an exception rule to all projects as a shared exception, but when adding it, I am unable to add it individually.

    For how long have I used the solution?

    I have been working in this field for three years.

    How are customer service and support?

    When I raise any TAC ticket for Check Point WAF (formerly CloudGuard WAF), I am satisfied with their points and their support, as I am receiving immediate responses from the TAC. I can easily rate their support for Check Point WAF (formerly CloudGuard WAF) an eight out of ten.

    An incident occurred regarding the Global Accelerator movement from CloudFront to Global Accelerator, and for that, it took one week to respond, which was delayed by five days.

    Which solution did I use previously and why did I switch?

    We considered the F5 WAF, Edge, and Radware before finally choosing Check Point WAF (formerly CloudGuard WAF).

    How was the initial setup?

    Compared to others, it was very easy for us to onboard Check Point WAF (formerly CloudGuard WAF) application.

    What about the implementation team?

    We received nice support from the OEM for Check Point WAF (formerly CloudGuard WAF), so they guided us, and we completed it within a week, onboarding one full project.

    What other advice do I have?

    The main reason why I chose Check Point WAF (formerly CloudGuard WAF) is about the cost, and we have a Check Point firewall and we also use endpoint security and email security, so we wanted to choose this as a one-stop solution.

    I do not have an idea regarding Check Point WAF (formerly CloudGuard WAF)'s ability for preemptively blocking zero-day attacks and detecting hidden anomalies, as it has been only three months, so we are yet to explore things in Check Point WAF (formerly CloudGuard WAF). Currently, we did not check the AI-driven threat detection and prevention capabilities in Check Point WAF (formerly CloudGuard WAF). Are you referring to the Gen AI or the built-in part of the WAF?

    Regarding the built-in AI-driven threat detection and prevention capabilities, I do not see any false positive detection based on the AI part in Check Point WAF (formerly CloudGuard WAF), so everything we are receiving is accurate results only. Based on that learning part, when Check Point WAF (formerly CloudGuard WAF) is in learning mode, the learning part is very helpful for us to filter those things, so after moving it to blocking, we are not receiving any false positive alerts or incidents. If I want to add an exception in Check Point WAF (formerly CloudGuard WAF), I can either add it in the shared one or in a local one.

    I have given this review an overall rating of 7.5 out of 10.

    Nekkala Nagendra

    Ai-driven cloud security has strengthened threat prevention and improved security posture

    Reviewed on Jul 13, 2026
    Review provided by PeerSpot

    What is our primary use case?

    The main purpose is to have network security through machine learning, which can offer threat detection and intelligence for my endpoints, and I am looking for application security.

    I am looking for an AI-based solution that can strengthen my cloud-native security, automate security, and better prevent threats.

    I am looking for an AI-based solution and unified cloud-native security from the SaaS platform to improve my security posture.

    What is most valuable?

    Check Point WAF (formerly CloudGuard WAF) is a SaaS platform that gives unified cloud-native security across my applications, workloads, and network, allowing me to automate security, prevent threats, ensure compliance, and manage my security posture well across all my cloud environments.

    It conducts security scoring and risk scoring, which helps prioritize my security needs, and the advanced threat detection is also very fine, providing actionable information for my current security threats by collecting and analyzing data through threat actors and IOCs, offering tactical, technical, and operational features.

    What needs improvement?

    The false positive rate is a concern, but I could recommend improvements where false positives have to be minimized better.

    This all depends on how the rules are customized and configured, and it can also improve with planning during the initial configuration, including threat intelligence and APIs, so it could enhance how it defends against attacks and prompts injections.

    It can find the threat actors behind it, and I find that strategically and technically it is effective, although the AI-related features could improve, especially as global AI capabilities evolve, which are advancing more than what Check Point WAF (formerly CloudGuard WAF) provides compared to competitors.

    There are no glitches; I believe improvement could be made primarily in API Gateway and API security, especially by enabling enhanced AI-related features for better fine-tuning.

    For how long have I used the solution?

    I have experience of two years with the product.

    What do I think about the stability of the solution?

    It is stable.

    What do I think about the scalability of the solution?

    It is definitely a highly scalable solution without any doubt.

    How are customer service and support?

    The customer support is very good.

    Which solution did I use previously and why did I switch?

    Earlier, we had Microsoft Defender, which we replaced with Check Point WAF (formerly CloudGuard WAF), and we are now ensuring that policy enforcement and threat protection are better.

    How was the initial setup?

    The deployment and initial setup are really straightforward; they provide enough documentation, videos, and deployment documents that are really helpful to complete it faster.

    What was our ROI?

    The return on investment is very good as it has increased my security posture and the operational efficiency of my engineers.

    What's my experience with pricing, setup cost, and licensing?

    It is a little bit expensive, but the pricing model is acceptable, though a reduction would make it more competitive with leaders such as Palo Alto.

    Which other solutions did I evaluate?

    I purchased from a different source.

    What other advice do I have?

    The configurations are pretty easy, and it is plug-and-play, which gives me regular updates.

    I would assess the solution as positive in this regard.

    All the integrations are pretty easy through API connectivity, which I can recommend more, and it also helps with modern AI-based vulnerabilities to conduct token tests and improve detection.

    I would rate this review a 9 out of 10.

    Ejaz Ahmad

    AI-driven protection has strengthened our API security and reduced successful web attacks

    Reviewed on Jul 13, 2026
    Review provided by PeerSpot

    What is our primary use case?

    I am using Check Point WAF (formerly CloudGuard WAF). I am also using multiple FortiGate products. I am using the product for URL filtering, security, WAF, and VRF. Check Point WAF improves our ability to discover, monitor, and protect APIs.

    What is most valuable?

    I appreciate that Check Point WAF (formerly CloudGuard WAF) is an enterprise-grade service and a very good product that we have used. It offers smart AI protection as well. Since implementing Check Point WAF (formerly CloudGuard WAF), I have seen measurable outcomes; it has mostly stopped attacks through bots and API integrations. I see Check Point WAF (formerly CloudGuard WAF) as a good product in blocking zero-day attacks and detecting anomalies. It helps us a lot because the AI engines evaluate behavior on a real-time basis, and it can detect threats without signatures based on historical data.

    I believe AI-driven threat detection and prevention capabilities help in identifying, blocking, and responding to application threats more effectively. The AI helps in Check Point WAF (formerly CloudGuard WAF) because it creates a targeted exclusion list based on its learning period. It can detect and stop or prevent threats based on context tuning and historical data.

    What needs improvement?

    For Check Point WAF (formerly CloudGuard WAF), the negative aspects include the very high price, complex licensing, and the need for specialized trained people to configure it, which is comparatively more complicated than other firewalls like Palo Alto and FortiGate. The two areas for improvement are the price and the complexity of configuration.

    For how long have I used the solution?

    I started using Check Point WAF (formerly CloudGuard WAF) approximately four to five years ago.

    What do I think about the stability of the solution?

    I would give a score of nine for the stability of Check Point WAF (formerly CloudGuard WAF).

    What do I think about the scalability of the solution?

    I perceive scalability as limited due to challenges faced during DNS migration and HA mode.

    How are customer service and support?

    I find Check Point WAF (formerly CloudGuard WAF) support helpful, but it is not proficient. It is often reliant on the site engineer's involvement, and it does not match the support offered by leaders like Fortinet, who deploy their own trained personnel ready to help anytime.

    How was the initial setup?

    I find installation challenging, complex, and not easy, as it requires skilled professionals to configure the rules and threats, including AI configurations. The biggest challenge when deploying it is its architectural constraints, including limited synchronization during configuration, and there are many challenges involved in integration.

    What other advice do I have?

    I am mostly using firewall solutions. I am using a firewall with IT, OT, and enterprise-grade services. We deal with Check Point WAF (formerly CloudGuard WAF) products. I am speaking about Check Point WAF (formerly CloudGuard WAF), Web Application Firewall. We are just a user of Check Point WAF (formerly CloudGuard WAF). A context-based tooling helps more here because while the AI capabilities are learning, they could reduce the false positive rate. I have not integrated Check Point WAF (formerly CloudGuard WAF) with any other products.

    Despite the complex nature and high price, I think the product is worth buying because it is effective. The configuration is complex, so it is not as easy as with other products. However, I believe it is worth the investment because the security is excellent. For security, Check Point WAF (formerly CloudGuard WAF) is a leader without a doubt. Check Point WAF (formerly CloudGuard WAF) is a very good, highly secure enterprise-level product, but it does have limitations, including the price and the need for trained personnel. I also encounter many errors during HA mode configuration, which can be tricky. I have a hybrid model for deployment. I would rate this review an eight overall.

    SreejeshSoman

    Cloud-native protection has secured our web workloads and simplifies autonomous threat defense

    Reviewed on Jun 19, 2026
    Review from a verified AWS customer

    What is our primary use case?

    I typically use Check Point WAF (formerly CloudGuard WAF) for protecting cloud workspaces, which includes cloud applications and websites hosted on cloud platforms, especially Amazon or Azure. My customers are using Check Point WAF (formerly CloudGuard WAF) as a standalone product in the cloud, not in conjunction with any other Check Point products.

    What is most valuable?

    Check Point WAF (formerly CloudGuard WAF) is especially valuable because of its cloud-native architecture and AI autonomous protection capabilities. It does not require extensive administrative skills or experience to operate. Within minutes of redirection, the platform can be up and running, which is one of the key benefits of Check Point WAF (formerly CloudGuard WAF).

    Traditional WAF solutions require rule tuning with manual updates, but Check Point WAF (formerly CloudGuard WAF) includes a self-learning tool that suggests changes automatically. This significantly reduces the need for manual interruption and administrative effort.

    Stability is one of the unique features of Check Point WAF (formerly CloudGuard WAF). I do not have any concerns regarding hardware or security stability, with a reliability rating of 99.9%.

    What needs improvement?

    Check Point WAF (formerly CloudGuard WAF) needs to offer more competitive pricing. There are many other cloud WAF products available, and when comparing costs, other vendors have a significant cost advantage.

    Check Point WAF (formerly CloudGuard WAF) pricing is not as competitive as other original equipment manufacturers like Cloudflare or Array WAF. I feel the pricing is on the higher side compared to these alternatives.

    Application Delivery Controller (ADC) features are limited in Check Point WAF (formerly CloudGuard WAF). While we can integrate with ADC, not all inputs from the forest can be uploaded to Check Point WAF (formerly CloudGuard WAF), which is a practical issue we have encountered in customer use cases.

    For how long have I used the solution?

    I have been using this solution for approximately one and a half years.

    What do I think about the stability of the solution?

    Stability is one of the unique features of Check Point WAF (formerly CloudGuard WAF). I do not have any concerns regarding hardware or security stability.

    What do I think about the scalability of the solution?

    On a cloud platform, I do not foresee any scalability limitations. Check Point WAF (formerly CloudGuard WAF) has explicitly expandable features, so I do not forecast any constraints.

    How are customer service and support?

    I am satisfied with Check Point WAF (formerly CloudGuard WAF) customer support. They have a dedicated Tactics and Operations Center (TAC) team with service level agreements in place. We typically receive business hours or 24/7 support depending on our license level.

    Which solution did I use previously and why did I switch?

    I have not deployed Check Point WAF (formerly CloudGuard WAF) on-premises because their capital expenditure cost is significantly higher than other brands. I have not had the opportunity to deploy an on-premises solution from Check Point.

    How was the initial setup?

    The biggest advantage of Check Point WAF (formerly CloudGuard WAF) is that it is a cloud-native platform. Check Point WAF (formerly CloudGuard WAF) is competitive with other original equipment manufacturers. I am not mentioning low-range products, but when compared with offerings from Cloudflare or Array WAF, I feel Check Point WAF (formerly CloudGuard WAF) pricing is on the higher side.

    What about the implementation team?

    Application Delivery Controller (ADC) features are limited in Check Point WAF (formerly CloudGuard WAF). We can integrate with ADC, but not all inputs from the forest can be uploaded to Check Point WAF (formerly CloudGuard WAF). This is a practical issue we have encountered in customer use cases.

    What was our ROI?

    From my experience and client experience, Check Point WAF (formerly CloudGuard WAF) is a good product for cost of ownership and return on investment.

    Check Point WAF (formerly CloudGuard WAF) offers a subscription-based, pay-as-you-use model with monthly or yearly subscription options. This subscription model helps customers manage their costs as an operational expenditure rather than a capital expenditure.

    What's my experience with pricing, setup cost, and licensing?

    All original equipment manufacturers mention zero-day attacks and the exploitation of previously unknown vulnerabilities, and Check Point WAF (formerly CloudGuard WAF) also includes this feature. As a tool, it is good, but I did not observe any extraordinary service from Check Point WAF (formerly CloudGuard WAF) regarding zero-day attack protection. It is a good feature, but I did not find particularly unique characteristics.

    Which other solutions did I evaluate?

    Application Delivery Controller (ADC) features are limited in Check Point WAF (formerly CloudGuard WAF). We can integrate with ADC, but not all inputs from the forest can be uploaded to Check Point WAF (formerly CloudGuard WAF). This is a practical issue we have encountered in customer use cases.

    Check Point WAF (formerly CloudGuard WAF) does have higher ratings in some areas.

    What other advice do I have?

    Check Point WAF (formerly CloudGuard WAF) is a good product for total cost of ownership and return on investment. From my experience and client experience, Check Point WAF (formerly CloudGuard WAF) offers a subscription-based, pay-as-you-use model with monthly or yearly subscription options. This subscription model helps customers manage their costs as an operational expenditure rather than a capital expenditure. I would rate this product overall as a nine out of ten.

    Which deployment model are you using for this solution?

    Public Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Amazon Web Services (AWS)
    Bala_Krishna

    Security has improved for cloud-native apps and now protects APIs with low latency and minimal tuning

    Reviewed on Jun 01, 2026
    Review provided by PeerSpot

    What is our primary use case?

    Any cloud-native application is where my clients might be using Check Point WAF (formerly CloudGuard WAF) to secure Layer 7 with low latency. It is one of the best in Layer 7 security.

    What is most valuable?

    The biggest advantages of Check Point WAF (formerly CloudGuard WAF) are that it is lightweight and the integration into cloud-native applications is very easy. Check Point WAF (formerly CloudGuard WAF) produces false positives that are minimal. It has a learning process that is unique, adopting an education model approach. Ease of deployment and efficiency, particularly for API security, are phenomenal. The console is key, with Infinity Portal offering access to all kinds of Check Point products and a unique dashboard and reporting system.

    Scaling is easy; once deployed, it takes care of everything without causing any concern for improving hardware or configurations. Check Point WAF (formerly CloudGuard WAF) reduces total cost of ownership, being cheaper compared to any other software.

    What needs improvement?

    As a reseller, the most difficult part is the lack of awareness. Check Point does not provide any kind of awareness programs to the customers, requiring partners to educate customers.

    There are indeed some features missing, particularly connected with integration or with artificial intelligence. Check Point WAF (formerly CloudGuard WAF) faces certain issues with dual ISP tagging on entry-level devices since SD-WAN features were added.

    For how long have I used the solution?

    I have been selling Check Point WAF (formerly CloudGuard WAF) for almost three to four years.

    What do I think about the stability of the solution?

    Regarding stability, I am not finding any issues; it is very stable.

    What do I think about the scalability of the solution?

    Check Point WAF (formerly CloudGuard WAF) is very easy to scale. Once deployed, you forget it; it takes care of everything.

    How are customer service and support?

    My impression of technical support for Check Point WAF (formerly CloudGuard WAF) is that it is adequate. The technical support team is really good.

    If I were to rate support from zero to ten points, I would give them a ten, as they are the best.

    Which solution did I use previously and why did I switch?

    Check Point WAF (formerly CloudGuard WAF) is good; there are no questions asked.

    What was our ROI?

    In terms of pricing, Check Point WAF (formerly CloudGuard WAF) is not expensive; it is worth the investment. If there is no downtime or bottlenecks while accessing your application from the internet, that itself is the return on investment.

    Which other solutions did I evaluate?

    I can tell you specific issues or advantages with products such as FortiGate or Check Point perimeter firewall.

    What other advice do I have?

    From a technical perspective, I do not think Check Point is leading in the web application firewall space. Cloudflare, F5, and Barracuda WAFs are noteworthy. Check Point WAF (formerly CloudGuard WAF) can be configured with no prior training.

    When I compare Check Point WAF (formerly CloudGuard WAF) with traditional WAFs, I find its learning curve to be simple.

    Check Point has an excellent intelligence engine for zero-day attacks, unmatched by Palo Alto. I would rate this review a ten overall.

    NasseerQureshi

    Unified security has reduced alert fatigue and improved zero-day protection for our applications

    Reviewed on May 27, 2026
    Review from a verified AWS customer

    What is our primary use case?

    The customers I have worked with were primarily using Check Point WAF (formerly CloudGuard WAF) as an application security solution, mostly leveraging Check Point CloudGuard for various purposes such as protecting their application servers from the top 10 OWASP attacks and for Zero-Day protection.

    My clients were not working separately with Check Point WAF (formerly CloudGuard WAF); they were receiving a unified platform that included firewall, email security, and endpoint security, so the integration effectively eliminated silos in their environment.

    What is most valuable?

    Check Point WAF (formerly CloudGuard WAF) was valuable primarily because the data center was in Dubai, making it convenient for customers in the region, and the user interface was really helpful and easy to understand.

    Check Point WAF (formerly CloudGuard WAF) helps my clients reduce total cost of ownership, and the return on investment was really high for Check Point WAF (formerly CloudGuard WAF), and it was the only product with GenAI security features compared to other WAF products.

    Check Point WAF (formerly CloudGuard WAF) provides benefits such as reduction in alert fatigue with fewer false positives, Zero-Day protection, and the introduction of GenAI LLM features that customers really appreciate.

    What needs improvement?

    A gap for improvement for Check Point WAF (formerly CloudGuard WAF) is the learning curve, as better training modules could help end customers, and pricing and reporting functionality could also be improved.

    For how long have I used the solution?

    I have been working with Check Point WAF (formerly CloudGuard WAF) for almost two years.

    What do I think about the stability of the solution?

    I can rate stability at approximately 8.5.

    What do I think about the scalability of the solution?

    I can say scalability is a 9.

    How are customer service and support?

    Technical support is rated at 10.

    Which solution did I use previously and why did I switch?

    I am currently working with Palo Alto as the product I replaced Check Point WAF (formerly CloudGuard WAF) with. I totally moved to Palo Alto from Check Point WAF (formerly CloudGuard WAF).

    How was the initial setup?

    The initial setup for Check Point WAF (formerly CloudGuard WAF) is simple; it is not that complex as long as a customer has a basic understanding of how WAF works.

    Deployment was really easy for Check Point WAF (formerly CloudGuard WAF); it does not have any complex deployment requirements.

    Which other solutions did I evaluate?

    Barracuda is the main competitor of Check Point WAF (formerly CloudGuard WAF), along with Fortinet, but Barracuda excels in application security and is doing great in this space.

    What other advice do I have?

    No product can provide 100% protection, but Check Point WAF (formerly CloudGuard WAF) uses multi-method protection with AI machine learning to detect abnormalities, alongside features like ThreatCloud for real-time analysis of potential zero-day threats. I will highly recommend Check Point WAF (formerly CloudGuard WAF) to other users. I have given this review an overall rating of 8.

    Which deployment model are you using for this solution?

    Public Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Amazon Web Services (AWS)
    ІгорКузьменко

    Security has improved for critical web services and supports complex protection needs

    Reviewed on May 26, 2026
    Review from a verified AWS customer

    What is our primary use case?

    Check Point WAF (formerly CloudGuard WAF) is required by customers who have web resources and assets that are important to them and in production. These resources include internet shops, services, and financial services. Without a web application firewall, the business stops, and customers need to implement this solution. Insurance companies, banks, and similar organizations fall into this category.

    What is most valuable?

    Check Point WAF (formerly CloudGuard WAF) is easy to deploy and provides a complete solution.

    Check Point's approach differs from others because it uses artificial intelligence elements and an AI-based approach. The WAF solution operates as a complex solution with multiple functionalities rather than a simple one.

    The solution helps reduce the false positive rate. Productivity shows that only 10 to 25 percent will be false positives.

    What needs improvement?

    The interface and deployment require qualified skills and a qualified engineer who knows this product very well.

    In general, Check Point products load the system somewhat and require more performance and better performance equipment on the customer side.

    When compared to solutions specialized only on WAF, such as Imperva or Cloudflare, Check Point WAF (formerly CloudGuard WAF) is a lighter version and does not have as well-performed a load balancer or anti-DDoS option.

    For how long have I used the solution?

    We started using Check Point WAF (formerly CloudGuard WAF) two years ago.

    What do I think about the scalability of the solution?

    Check Point WAF (formerly CloudGuard WAF) scores eight to nine points on a ten-point scale for scalability. This scalability is one of the top features of Check Point solutions in general and especially for Check Point WAF (formerly CloudGuard WAF). It is a main approach of the Check Point team.

    How are customer service and support?

    I cannot be objective in this question because we have our own service team with engineers on our staff. We handle most tickets and cases ourselves.

    What about the implementation team?

    We operate as a partner company in projects and serve as an integrator for different solutions, including security solutions.

    What's my experience with pricing, setup cost, and licensing?

    Regarding total cost of ownership, I cannot describe this accurately. Concerning the price for Check Point WAF (formerly CloudGuard WAF) and license costs, the pricing is good, and the approach could be better.

    Which other solutions did I evaluate?

    Regarding competitors, Cloudflare is the most popular and best-selling solution on the Ukrainian market now, and this trend will continue.

    What other advice do I have?

    Check Point WAF (formerly CloudGuard WAF) and more Check Point solutions are oriented toward cloud infrastructure, cloud, or hybrid infrastructure. I would give Check Point WAF (formerly CloudGuard WAF) an overall rating of nine points.

    Mohan Janarthanan

    Integrated web protection has reduced breaches and now prevents attacks across critical apps

    Reviewed on May 22, 2026
    Review from a verified AWS customer

    What is our primary use case?

    I want to protect my application hosted in my cloud by preventing attacks against my top OWASP Top 10 threats. I am enabling Check Point WAF (formerly CloudGuard WAF) as my application firewall.

    The integration is straightforward because I am hosting in the cloud, so Check Point WAF (formerly CloudGuard WAF) can be hosted in a public location wherever my cloud vendor is located as a service provider, and I can host the application within a change of DNS.

    What is most valuable?

    I have been using it for six months, and the biggest advantages for me are that Check Point WAF (formerly CloudGuard WAF) offers more than other F5 firewalls, which have only application protection called ASM (Application Security Monitoring). In contrast, Check Point WAF (formerly CloudGuard WAF) provides protection on IPS along with application protection.

    Check Point WAF (formerly CloudGuard WAF) itself provides an IPS function where I can protect against my Layer 7 traffic, which is not available in other vendors. The traditional WAF does not have the capacity of IPS functions.

    The intrusion prevention capability, I can only see in Layer 3 functions and stateful functions, which is the traditional firewall capability. Other vendors are keeping this in their Web Application Firewall, but Check Point WAF (formerly CloudGuard WAF) has integrated it differently.

    False positives are significantly less here compared to traditional Web Application Firewalls because they are more focused on the AI front. Check Point WAF (formerly CloudGuard WAF) integrates an AI platform within the Web Application itself using API protection with AI and what they call GenAI protection.

    They excel at creating the profile itself, which is the basic functionality of WAF. Normally, I deploy in preventive mode, which takes some time for learning, but I prefer to operate in preventing mode only.

    What needs improvement?

    The negative aspect is that Check Point WAF (formerly CloudGuard WAF) uses Check Point Harmony in its management console, which sometimes creates latency when connecting to or opening the platform. This is one function they are lagging in.

    The reporting functions need improvement. For example, I want to calculate traffic metrics, but I cannot see them in the current Check Point WAF (formerly CloudGuard WAF). To know the overall traffic for today on the application, I have to check multiple dashboards instead of one single dashboard.

    For how long have I used the solution?

    I have been using it for six months, and Check Point WAF (formerly CloudGuard WAF) offers more than other F5 firewalls, which have only application protection called ASM (Application Security Monitoring). Check Point WAF (formerly CloudGuard WAF) provides protection on IPS along with application protection. Check Point WAF (formerly CloudGuard WAF) itself provides an IPS function where I can protect against my Layer 7 traffic, which is not available in other vendors.

    What do I think about the stability of the solution?

    It is very stable.

    What do I think about the scalability of the solution?

    Scalability is very good.

    How are customer service and support?

    The support team is providing good support.

    How was the initial setup?

    It is easy to deploy and does not require much effort.

    What was our ROI?

    Return on Investment is a key factor for me in deciding to buy a solution on a major scale, so it is very important for me to consider it. I would say the ROI is about 15 to 20 percent.

    Which other solutions did I evaluate?

    I am comparing it to F5.

    What other advice do I have?

    I would definitely recommend this solution because I do not want to implement one more traffic function. I can eliminate the firewall and use Check Point WAF (formerly CloudGuard WAF) alone, thus eliminating Layer 3 traffic directly connecting to my Web Application Firewall.

    I would say the TCO is reduced by 20 to 22 percent. The reduction in false positives will definitely be more than 30 percent.

    Breach Reduction reduces the false positive part significantly. For example, I have multiple solutions from multiple vendors, and it definitely reduces my false positive alerts and aids in my Breach Reduction efforts. If a person is having a bot attack or if someone attacks with network anomalies on my application, I can identify that.

    I rate Check Point WAF (formerly CloudGuard WAF) overall as an 8 or 8.5 out of 10.

    Which deployment model are you using for this solution?

    Hybrid Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Amazon Web Services (AWS)
    HarishJogadiya

    Cloud security has improved and delivers live threat visibility and reduced attack surface

    Reviewed on May 21, 2026
    Review provided by PeerSpot

    What is our primary use case?

    I have been using Check Point WAF (formerly CloudGuard WAF) on a public cloud.

    What is most valuable?

    The features of Check Point WAF (formerly CloudGuard WAF) relate to addressing global attacks that we require. The threat map, which displays information on a live basis, helps us understand the types of points logs, and that is the best part.

    I utilize Check Point WAF (formerly CloudGuard WAF) alongside other Check Point products. They integrate with internal systems-level security devices, which we are using to communicate internally. The integration makes the tools work better and is helping us significantly.

    Beyond user-level benefits, we are receiving some advantages that are really helping us. Check Point WAF (formerly CloudGuard WAF) did reduce my total cost of ownership for my web application firewall, though not by a substantial amount, but it is acceptable.

    What needs improvement?

    In my opinion, there is some room for improvement regarding pricing, which we require, and much of it relates to the license base and support.

    For how long have I used the solution?

    I have been using it for more than two to three years, and I confirm that I am currently running on it.

    What do I think about the stability of the solution?

    Regarding my experience with the deployment, sometimes we encounter difficulties, but overall it is good, and we achieve our time-based objectives. I would rate the stability as eight to nine.

    How are customer service and support?

    I rate the technical support from one to ten as eight to nine.

    Which solution did I use previously and why did I switch?

    I did not work with other WAFs before Check Point WAF (formerly CloudGuard WAF).

    How was the initial setup?

    The initial setup is simplified, and I confirm that it is good for understanding.

    What about the implementation team?

    As of now, I have not integrated with third-party solutions because it is not required.

    What was our ROI?

    The investment regarding return on investment is not yet realized, but we are considering that investment base.

    What's my experience with pricing, setup cost, and licensing?

    The pricing is reasonable, and I believe it is acceptable. I am satisfied with the timing.

    What other advice do I have?

    Check Point WAF (formerly CloudGuard WAF) is the best option on the market, and it is good for us. The potential attack surface level involves asking about vulnerabilities across the networks, which is why we confirm that it is really helping us.

    I find Check Point WAF (formerly CloudGuard WAF) to be good, though I cannot say it is popular in my region.

    I would recommend Check Point WAF (formerly CloudGuard WAF) to others, but it depends on the environment. I think it is currently suitable for any types of companies, specifically in the database, which we require.

    I confirm that I do not require additional features for Check Point WAF (formerly CloudGuard WAF), and it is currently adequate. I rate this product nine out of ten overall.