Check Point CloudGuard WAF Reviews

Name: Check Point CloudGuard WAF
Brand: Check Point Software Technologies
Rating: 4.4 (46 reviews)

Vendor: Check Point Software Technologies

4.4 out of 5

46 reviews
100% willing to recommend

What is Check Point CloudGuard WAF?

Check Point CloudGuard WAF (Web Application Firewall) is a cloud-native security solution designed to protect web applications and APIs from known and unknown threats. It employs contextual AI and machine learning to prevent zero-day attacks without relying on traditional signature-based detection methods, ensuring that applications remain secure even as new threats emerge.

Get the Check Point CloudGuard WAF Buyer's Guide and find out what your peers are saying about Check Point CloudGuard WAF, SonarQube Server (formerly SonarQube), Checkmarx One and more!

Check Point CloudGuard WAF is the #9 ranked solution in application security solutions and #11 ranked solution in top Web Application Firewalls. PeerSpot users give Check Point CloudGuard WAF an average rating of 8.8 out of 10. Check Point CloudGuard WAF is most commonly compared to SonarQube Server (formerly SonarQube): Check Point CloudGuard WAF vs SonarQube Server (formerly SonarQube). Check Point CloudGuard WAF is popular among the large enterprise segment, accounting for 55% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 20% of all views.

Buyer's Guide

Check Point CloudGuard WAF

June 2025

Get the report

Helped 860,592 peers since 2012

Featured Check Point CloudGuard WAF reviews

Dialungana Malungo

Principal Cybersecurity Specialist at Unitel S.A.

CloudGuard WAF is a very straightforward solution. I do not have to worry about signatures. Most of the solutions that are out there are mainly based on signatures, and I have to do a lot of maintenance to get the signature updates, and sometimes, due to a lack of resources, I am not able to do so. With CloudGuard WAF, I have peace of mind, because most of the features are AI-based, and there is not much configuration that needs to be done on my side. Once set, I only go to CloudGuard WAF to check. I do not have to worry about signatures or updates. Everything is done perfectly, and I have a sense of peace because I know our applications are safe. It is very important for us that CloudGuard WAF protects our applications against threats without relying on signatures. That is definitely one of the key features I need.

Read full review

Hailemichael Yigrem

Senior Cyber Security Engineer at Deliver ICT and Telecommunication Technology PLC

The best features that Check Point CloudGuard WAF offers are its easy integration with other products and its good threat prevention features. Since it is default in a device, it protects us from zero-day attacks, and first learns traffic before allowing it into our network. It protects us from botnet attacks and many vulnerabilities are discarded by these deployments. The integration process went smoothly for us as it easily integrated with our existing products, and it reduced approximately 90% of attacks after deployment. Check Point CloudGuard WAF also has a comprehensive reporting feature and a well-designed dashboard. Check Point CloudGuard WAF has impacted our organization positively, as after deploying this product it reduces the time to analyze attacks and protects from several attacks, enhancing our security posture. We are now saving approximately four hours per day on analyzing attacks.

Read full review

Baruch Peretz

Ciso at a government with 1,001-5,000 employees

Check Point CloudGuard WAF has helped our organization in time-to-market manners; the time to market is very short. Unlike other products we tested, which were a bit more complex, they would take a day's process. Check Point CloudGuard WAF only takes a few minutes of assimilation and then goes live. Its ability to protect our applications against threats without relying on signatures is one of the benefits I liked about this product. It does not depend on signatures. It looks at the anomaly in behavior. This is what we call a modern application. It saves us the headache of these updates and also the fact that the zero day usually has no signature. The ability to preemptively block zero day attacks and detect hidden anomalies is exactly its advantage. The zero day does not wait for a signature but looks at behavior. This is how a modern app should be. If you wait for the unknown, your application will be affected, but with this solution, even if you don't know where the attack could come from, the product protects it because of the behavior. That's the advantage. The assimilation time is short, about a few minutes only, so it is very simple for us and shortens the time of our functions. I'd say it has lowered 30% of our time. In a product like this, there are not many false positive cases, at least not in our type of implementations, which are not complex. When you do not hear about any false positives, it is a sign that the solution is doing its job.

Read full review

Check Point CloudGuard WAF mindshare

Product category:

As of July 2025, the mindshare of Check Point CloudGuard WAF in the Application Security Tools category stands at 0.1%, up from 0.1% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Application Security Tools

PeerResearch reports based on Check Point CloudGuard WAF reviews

Type	Title	Date
Category	Application Security Tools	Jul 4, 2025	Download
Product	Reviews, tips, and advice from real users	Jul 4, 2025	Download
Comparison	Check Point CloudGuard WAF vs SonarQube Server (formerly SonarQube)	Jul 4, 2025	Download
Comparison	Check Point CloudGuard WAF vs Veracode	Jul 4, 2025	Download
Comparison	Check Point CloudGuard WAF vs Checkmarx One	Jul 4, 2025	Download

Title	Rating	Mindshare	Recommending
SonarQube Server (formerly SonarQube)	4.0	22.7%	81%	116 interviews Add to research
Checkmarx One	3.8	9.9%	87%	71 interviews Add to research

Valuable Features

Check Point CloudGuard WAF boasts powerful features like scalable API integration, advanced Intrusion Prevention System, AI-driven threat analysis, and reduced false positives. Its robust logging, seamless integration with cloud environments, and cost-effective deployment ensure high stability and security. Users appreciate its real-time protection against zero-day attacks and its intuitive, user-friendly dashboard. Automated policy management significantly eases operations, offering comprehensive visibility and proactive protection for web applications and APIs.

"We have saved money by protecting our environment from new vulnerabilities and preventing theft by cybercriminals."
"The integration with other Microsoft products, especially Visual Studio, is seamless."
"Check Point CloudGuard WAF offers comprehensive monitoring and alerting for my entire VMware virtual environment."

Room for Improvement

Check Point CloudGuard WAF needs to address various issues including high costs, complicated integration, and latency problems. Users express concerns about administrative portal slowness, support delays, and insufficient documentation. Customizability and additional features are vital but costly. Improvements in the management interface, pricing clarity, real-time monitoring, and threat protection are necessary. Simplifying configuration and enhancing user interface integration with non-VMware products are areas needing attention. Advanced threat protection and better API discovery could enhance overall effectiveness.

"There are improvements that can be made regarding pricing since it has a high initial cost."
"Check Point CloudGuard WAF could benefit from an enhanced user interface as it can be a bit complex and overwhelming for new users."
"The UI interface needs improvement because there are a number of bugs. Integration with the SIEM platform is currently one of the key challenges that need to be addressed."

ROI

Organizations using Check Point CloudGuard WAF experienced ROI up to 90%, with benefits in security, cost reduction, and time savings. Some companies noticed increased profitability and reduced management time due to fewer servers. CloudGuard WAF consolidated services, eliminating the need for different tools, and improved security posture. Users benefited from decreased costs linked to vulnerabilities and zero-day attacks, enhancing protection and saving both money and time. Some expect long-term gains in budget management and risk reduction.

Pricing

Check Point CloudGuard WAF pricing is generally seen as competitive in the market, though some users find it relatively expensive compared to alternatives like FortiWeb or Azure WAF. The licensing is typically annual, with bundled packages potentially reducing costs. While setup costs are simple, the complexity of pricing structure might be challenging for some. Users indicate that the cost is justified by the robust features and dependable support provided by Check Point.

"The sales team or account managers from Check Point are top-notch. As I am using other products as well, my pricing was competitive compared to others."
"As Infiniti customers, the pricing is manageable, as we have allowances dedicated to each Check Point product. The price is not as high compared to other options I have dealt with in the past."
"The base solution costs approximately 30,000 euros, with an additional 2,000 euros per year for licenses and support."

Popular Use Cases

Organizations primarily use Check Point CloudGuard WAF for securing web applications and APIs against threats like SQL injections and cross-site scripting. It protects cloud-based environments, manages endpoint securities, and optimizes resources. It integrates various platforms, providing API protection and bot prevention, improving application security, and reducing management complexities. Users leverage it for safeguarding both internal and external infrastructures, particularly in complex environments with multiple cloud tenants and dynamic applications.

Service and Support

Check Point CloudGuard WAF's customer service and support are generally positive. Many users appreciate the promptness, knowledge, and efficiency, often rating it highly. However, there are mentions of delays and areas needing improvement, particularly in response times and staffing. Users often interact with knowledgeable engineers and receive effective assistance, but some express the need for enhanced response during weekends. Availability during implementation and problem resolution is frequently noted as satisfactory.

Deployment

Users find Check Point CloudGuard WAF's initial setup largely straightforward, with a simplistic installation process aided by vendor guidance. Implementing APIs makes it easier, yet requires technical expertise and proper training. Onboarding is structured and deployment spans from quick, seamless transitions to longer timelines, especially in complex cloud environments. Third-party assistance simplifies the task. The complexity arises mainly in configuration and knowledge about various security blades, whereas creating virtual machines in cloud settings may add complexity and cost.

Scalability

Check Point CloudGuard WAF exhibits exceptional scalability, impressing users across various environments. Its capability to adapt to different workloads is praised, offering excellent performance without issues. Users appreciate the ease of scaling and the flexibility in managing resources. The SaaS model supports expansion effortlessly, with clients noting the efficient handling of increased traffic. The scalability is rated highly, reflecting its continuous development and robust support for diverse applications.

Stability

Check Point CloudGuard WAF exhibits excellent stability, described by users as stable, robust, and reliable. Users appreciate the lack of downtime, minimal interruptions, and excellent performance during operation. Some minor issues occurred during configuration and licensing, but users reported swift resolutions. The platform's performance remains high, earning ratings of nine or ten out of ten from many users. It has been consistent in different environments, providing a mature and dependable experience.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Check Point CloudGuard WAF Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

20%

Manufacturing Company

12%

Financial Services Firm

11%

Government

Healthcare Company

Comms Service Provider

Educational Organization

Security Firm

Outsourcing Company

University

Construction Company

Performing Arts

Transportation Company

Recruiting/Hr Firm

Logistics Company

Retailer

Energy/Utilities Company

Non Profit

Media Company

Hospitality Company

Wholesaler/Distributor

Insurance Company

Legal Firm

Compare Check Point CloudGuard WAF with alternative products

Learn more about Check Point CloudGuard WAF

CloudGuard WAF offers preemptive protection against vulnerabilities by using machine learning to identify and block zero-day threats like Log4Shell and Spring4Shell. It provides precise detection capabilities, minimizing the need for constant fine-tuning and reducing false positives. Designed for cloud-native environments, CloudGuard WAF integrates seamlessly with CI/CD pipelines, supporting automated deployment and configuration through infrastructure as code (IaC) or APIs.

Key Features of CloudGuard WAF:

ML-Based Threat Prevention: Stops application-layer attacks, including those listed in the OWASP Top 10, with minimal tuning and no reliance on signature updates.
API Discovery and Security: Identifies and secures APIs, preventing misuse and enforcing API schemas to protect against unauthorized access.
Bot and DDoS Prevention: Detects and mitigates automated attacks that can disrupt services or degrade customer experiences.
Intrusion Prevention (IPS): Provides protection against over 2,800 web-related CVEs using Check Point’s award-winning IPS technology.

Benefits of CloudGuard WAF:

Zero-Day Protection: Mitigates risks from newly discovered vulnerabilities without waiting for signature updates.
Reduced Operational Overhead: Eliminates the need for constant manual tuning and exception handling, simplifying security management.
Comprehensive API Security: Enhances control over your attack surface by discovering and securing all APIs, including shadow, rogue, and deprecated endpoints.
Fast and Easy Deployment: Deployable within minutes via WAF as a Service (WAFaaS), requiring only a one-time DNS configuration for immediate protection.

CloudGuard WAF is particularly suitable for organizations using modern, cloud-based architectures that require robust, automated security measures for both applications and APIs. Its capabilities are valuable for industries that handle sensitive data, such as finance or healthcare, where compliance and data protection are critical. Pricing and support are typically customized to the specific needs and scale of the deployment, with options for continuous updates and maintenance through Check Point's managed services.

CloudGuard WAF by Check Point provides advanced, AI-driven protection for web applications and APIs, offering automated, precise threat prevention and easy integration with cloud-native environments, ensuring robust security without the need for extensive manual configuration.

Check Point CloudGuard WAF was previously known as Check Point CloudGuard Application Security, CloudGuard Application Security, CloudGuard AppSec.