Check Point CloudGuard Cloud Intelligence and Threat Hunting Reviews

My main use case for Check Point CloudGuard Cloud Intelligence and Threat Hunting is identifying cloud open vulnerabilities and the latest threats which are exploited in the current scenario.

For handling vulnerabilities or threats in my environment using Check Point CloudGuard Cloud Intelligence and Threat Hunting, I use it by scanning for any open sensitive and critical ports, as CloudGuard helps with threat hunting those particular ports which are open in public. Likewise, all the cloud compliance reports can be scanned for my cloud tenant and can be reported.

The best features that Check Point CloudGuard Cloud Intelligence and Threat Hunting offers include helpful integration for multiple cloud platforms, and it is used for audit compliance. We use features such as CIS Benchmark and cloud compliance, which Check Point CloudGuard provides by default. The integration, such as a read-only feature for reporting, is also very helpful, as it doesn't require any admin rights or changes. The remediation of vulnerabilities or findings or securing cloud configurations is also very helpful for us, allowing me to fix security flaws via Check Point CloudGuard itself.

I find myself relying on the CIS Benchmark feature of Check Point CloudGuard Cloud Intelligence and Threat Hunting the most, as it is very helpful on a day-to-day basis to stay up to the current trend.

Check Point CloudGuard Cloud Intelligence and Threat Hunting has positively impacted my organization by enabling us to keep fixing our cloud security postures, which is a day-to-day progress based on the open points.

I have noticed specific outcomes with Check Point CloudGuard Cloud Intelligence and Threat Hunting, such as a much faster response time, making it easier to address vulnerabilities or security misconfigurations by using reports that help me pinpoint issues, leading to good outputs that keep improving.

Check Point CloudGuard Cloud Intelligence and Threat Hunting made our work much easier as it serves as a centralized platform for all my cloud environment and provides workload protection such as malware protection for my entire cloud environment.

Malware protection for my entire cloud environment is an area where improvements are needed.

I have been using Check Point CloudGuard Cloud Intelligence and Threat Hunting for the past three years.

I did not purchase Check Point CloudGuard Cloud Intelligence and Threat Hunting through the AWS Marketplace.

Check Point CloudGuard Cloud Intelligence and Threat Hunting is stable, and I have not experienced any downtime or reliability issues.

The scalability of Check Point CloudGuard Cloud Intelligence and Threat Hunting is excellent; it is able to grow with our needs and handles increased workloads or more cloud accounts smoothly since it is a one-time deployment.

The customer support for Check Point CloudGuard Cloud Intelligence and Threat Hunting is very impressive, and I can reach out easily, directly to Check Point.

Positive

I did not use a different solution before Check Point CloudGuard Cloud Intelligence and Threat Hunting.

Before choosing Check Point CloudGuard Cloud Intelligence and Threat Hunting, we evaluated using the native solution in AWS.

The pricing was a bit higher than what we expected, although we didn't encounter any issues during the setup or licensing, as it was straightforward.

The experience with pricing for Check Point CloudGuard Cloud Intelligence and Threat Hunting is on the higher side.

My advice to others looking into using Check Point CloudGuard Cloud Intelligence and Threat Hunting is that it is very much advisable.

I think Check Point CloudGuard Cloud Intelligence and Threat Hunting is a very good product, and it is particularly helpful for companies new to the cloud, especially cloud beginners.

On a scale of one to ten, I rate Check Point CloudGuard Cloud Intelligence and Threat Hunting a ten.

I will honestly say that we are just testing Check Point CloudGuard Cloud Intelligence and Threat Hunting in my company. It is just for testing, not production. It has not been experienced for configuration and resolution for a production infrastructure, just testing in my company.

During testing, I mainly used Check Point CloudGuard Cloud Intelligence and Threat Hunting to improve visibility across cloud workload and proactively identify potential threats that traditional security alerts might miss. The goal was to correlate network, identity, and cloud activity logs into a single view for faster investigation.

If I saw a suspicious IP in the login attempt, I could immediately search whether it also touched other assets such as VMs or storage buckets using Check Point CloudGuard Cloud Intelligence and Threat Hunting. I didn't need to normalize log format or correlate timestamp manually. The platform already presented the event in a consistent timeline. That cut out the time it usually takes me to stitch together a full picture of what happened. In practice, during testing, an investigation that might normally take me an hour across separate tools only took about 10 or 15 minutes in CloudGuard, because I could trace from the initial alert, related user or account associated network activity all in the same interface.

Beyond just speeding things up, Check Point CloudGuard Cloud Intelligence and Threat Hunting gave me more context around the alert. For example, during testing, I could see not only that a login attempt was suspicious but also whether the IP address was already on a known malicious list in ThreatCloud and if that same identity interacted with other assets in my environment.

A best feature in Check Point CloudGuard Cloud Intelligence and Threat Hunting is unified visibility across the cloud environment. For example, I could pull in activity from multiple accounts, regions, and services into a single pane of glass. Events were automatically enriched with known bad IP domain and indicator of compromise.

Powerful search and correlation for threat hunting is another valuable feature. The query capability lets me pivot quickly between user, asset, and network activity to trace possible attack paths. Prioritization of alerts with context means instead of being overwhelmed with raw events, CloudGuard brought, grew, and highlighted what was most relevant to investigate first. This stands out because it helped me focus on high-impact issues rather than noise.

I would like to see more flexibility in creating custom and scheduled reports in Check Point CloudGuard Cloud Intelligence and Threat Hunting. For example, being able to generate a weekly threat activity summary to specify business unit or cloud account would make it easier to share insights with management and non-technical stakeholders.

More native integration with SIEM and SOAR platforms like QRadar, ServiceNow, etc., would reduce manual effort. That way, incidents surfaced in CloudGuard could automatically flow into existing workflows without extra connectors.

Adding a way to tag, annotate, or assign investigations inside the platform would make it easier for teams to collaborate without switching to another tool.

In my testing, Check Point CloudGuard Cloud Intelligence and Threat Hunting's scalability is not easy; it is a very challenging experience for me. This is new technology, and that is why I have received many experiences.

Check Point CloudGuard Cloud Intelligence and Threat Hunting is stable in my experience, given that I have only one year of testing.

In my testing, Check Point CloudGuard Cloud Intelligence and Threat Hunting's scalability is not easy; it is a very challenging experience for me. This is new technology, and that is why I have received many experiences.

I am not switching from another vendor; this is just the first time testing Check Point CloudGuard Cloud Intelligence and Threat Hunting.

The payment pricing is a business matter I discuss directly with the key account manager, and it's not something related directly to our technical team. I just go directly to the key account manager itself for pricing.

I considered trying AWS, Azure, or SIEM before choosing Check Point CloudGuard Cloud Intelligence and Threat Hunting.

I advise others looking into using Check Point CloudGuard Cloud Intelligence and Threat Hunting to connect their cloud account, maybe to AWS or Azure, from the start. The real value comes from seeing events across environments in one place, rather than piecemeal. The threat hunting and query are powerful but can be complex at first. Spending time on the tutorial or examples will save hours in the long run.

During testing, I consistently saw a 70 or 75% faster investigation and reduced analyst workload. This is a concrete way it can deliver our work. Overall, Check Point CloudGuard feels a modern, integrated approach to cloud threat hunting, much more efficient than juggling multiple cloud-native consoles or building intelligence manually in SIEM. It's particularly useful for teams that manage multi-cloud environments and want faster, context-rich investigations.

On a scale of one to ten, I rate Check Point CloudGuard Cloud Intelligence and Threat Hunting a seven out of ten.

Check Point CloudGuard Cloud Intelligence and Threat Hunting is primarily designed to provide advanced threat detection and response capabilities for cloud environments. 

The primary use case of this solution is to detect threats, investigate incidents, hunt for threats, and automate responses.

This solution helped me to improve and enhance our security posture. It improves risk management, increases efficiency, and optimizes resource allocation.

The valuable features included in the solution are threat detection and response, cloud security posture management, the cloud workload protection platform and threat hunting.

The product can be improved by optimizing performance, improving user experience, and encouraging integration depth.

Additional features like AI-driven threat hunting, vulnerability management, and XDR would be useful. 

I've used the solution for two years.

The stability is good.

The scalability is good.

Customer service and support have been okay.

Positive

No, I did not use a different solution.

The initial setup is straightforward.

Our internal team handled the implementation. 

The ROI has been okay.

No, I did evaluate other options.