Check Point CloudGuard Code Security Reviews

My team and I work with Check Point CloudGuard Code Security and handle all related tasks, including deploying virtual machines and configuring all aspects.

Our security team's roles include networking security, and our responsibility is to deploy all firewalls across our organization's sites, both on-premises and in the cloud.

The most valuable features of Check Point CloudGuard Code Security include our approach to manage it via the management we have on-premises, and we also deploy the same extension management of CloudGuard to manage all the virtual systems on Azure.

We effectively use artificial intelligence with Check Point CloudGuard Code Security, as we have teams that work with AI and we frequently manage our firewalls using AI along with the CloudGuard and all virtual systems.

There are still areas for improvement with Check Point CloudGuard Code Security. All the features we have on the firewall on the on-premises side, we also have under CloudGuard such as IPS, Anti-Bot, and all these blades are set up in our CloudGuard.

The initial setup of Check Point CloudGuard Code Security is very challenging because it requires more preparation, and we need more guides to understand how to set up all aspects.

I would rate the support for Check Point CloudGuard Code Security as good because we can quickly email support about any problems we encounter, and they reply instantly to provide help. I would give it an eight.

Positive

To deploy Check Point CloudGuard Code Security, it requires four people on our team to manage all the Check Point devices.

Some challenges with Check Point CloudGuard Code Security include that we noticed FortiGate is much more efficient on AWS, and our team prefers to deploy FortiGate there instead of CloudGuard due to the management challenges on the cloud.

I do not have experience with CyberArk, we only work with VSX and the family of VSX, which is provided by Check Point.

I can recommend Check Point CloudGuard Code Security to other organizations as it is a good platform to protect our organization. On a scale of one to ten, I rate this solution an eight.

We have so many applications where the code needs to be verified before it can be transferred to production. This scans the code and all the configurations to detect issues. 

We're able to protect APIs from exposure and ensure we have credentials for transactions. If any misconfiguration happens, we can be sure we will not be compromised. 

The security on offer is great. It's secure in terms of testing all the workloads. We can test across any workload or multiple clouds. It offers unified prevention. It also offers posture management by verifying proper scanning. 

We use the GSL builder. It's easy to write customer rules or policies using it. Of course, you do need proper training on the product first. It takes around one week to get trained. 

We've been able to reduce human error, and you can build the rules for better coverage.

It provides functionality across cloud providers.

The solution helps us save time. We've reduced the amount of time spent by 25%.

Its unified security management console is a very complete dashboard. We can see all security threats and can gain visibility into what is happening. We have access to automation and can monitor the security of IT systems.

The product offers role-based access control so that we can set up different privileges for admin users.

Cloud Guard Spectrum is good for automating our organization's security across assets, workloads, and multiple clouds. With it, we have advanced pre-prevention across the cloud security network. It works for on-premises also.

We can easily determine our organization's security posture. It will ensure my application's availability time across the enterprise.

Network security helped us reduce our compliance and audit activities. We've saved about 20% of our time. 

Having a cloud detection response helps to very quickly identify security threats in our environment. It's automated so it saves us time. That way, people can work on other projects. On any given day, we're spending 20% less time in general worrying about detection and response. Our security operations are saving a lot of time using a unified platform.

There needs to be better security around API integration. 

I've been using the solution for two years. 

The stability of the product is very good. 

We have the product deployed to a single location. We have 250 end-users. 

The scalability is good; I find that I can scale up.

Technical support is very good. 

Positive

We did not previously use a different solution. 

I was not involved with the deployment of the product.

The product does not require any maintenance. 

I'm not sure what the exact pricing is. 

We did not evaluate any other solution. 

I'm a customer and end-user. 

With CloudGuard, you can easily secure the workloads and applications running in a hybrid environment or public cloud. It helps mitigate risk and protects against data leakage or breaches. It's a one-stop solution.

I'd rate the solution nine out of ten. I'd recommend the solution to others. 

It was adopted in response to the events of SolarWinds, where API credentials were leaked into Git repositories or other developer tools. We, at the time, had no detective or preventive controls to prevent this sort of disclosure, so CloudGuard Code Security was implemented into the pipelines themselves to detect secrets being disclosed.

We have had a number of real events where developers accidentally made commits of API keys, and we were able to detect and begin response actions in minutes. We had the API key revoked in less than five minutes in such events. If we did not have CloudGuard Code Security, we would not have known about it for who knows how long. There is absolutely a very meaningful difference.

CloudGuard Code Security is great for protecting our code and assets from exposed API keys, tokens, or credentials. It does exactly what is advertised, and it does it reliably. It is a great solution.

The scanning of code throughout development helps save developers time. One of the important attributes of the shift-left movement was getting developer feedback as quickly as possible to reduce cycle time and context switching. CloudGuard Code Security very much improves that by allowing the mistakes to be detected almost immediately and remediation efforts to be implemented. In terms of time saved from not having to redo problematic production code, context switching is about a 30-minute loss for most developers. Each incident is 30 minutes. Hopefully, it is infrequent. There are two pieces. There is secrets detection, which is not an efficiency play. It is risk mitigation because of the enormity of the impact that it could lead to. The other side of it is the configuration management side. That is where you do have ongoing feedback as people use TerraForm or other infrastructure as code languages, and getting that feedback to them quickly is certainly valuable. It saves a lot of time there.

CloudGuard Code Security helps identify high-risk security misconfigurations in our code during the development phase. On the merge event, for the infrastructure as code, it analyzes the configurations. It looks for known adverse configurations and comments on the merge request. It usually prevents the merge request from happening to begin with, and then you have a commit, which hopefully remediates the issue. It probably has had some beneficial impacts on product security, but it did not necessarily create new visibility that did not exist before. CSPM tools from Check Point give us visibility into adverse configurations, but we saw them later on or down the line, and we had to deal with making people go back and fix them, so I do not know if it had a massive change on the outcome, but it has impacted the efficiency of getting to the outcome.

CloudGuard Code Security has helped our development team adopt a security mindset. It keeps security on top of mind when dealing with infrastructure as code or secrets and ensures that it does not get lost or overlooked. If they are aware of security and it is on top of mind, hopefully, they will make better decisions.

The time taken by CloudGuard Code Security to scan our codebase depends on the size of the Git Repo, but on average, it is between ten seconds to a minute.

CloudGuard Code Security does not impede the development flow because the inflection point for the most part is on the merge request creation. In most organizations, especially if they are in any sort of highly regulated space, the creation of the merge request is usually followed by approvals from peers or partners on the merge before it is merged. With a latency of ten seconds to a minute, most of the time, approvers have not even opened the page before the contextually rich security information is already there waiting for them to make a good decision. So, it does not impede the development flow at all. It just means that the approvers have the ability to make rich decisions with all of the information already laid out for them.

Secrets detection is the bread and butter. 

We have used the infrastructure as code as well. It was really early in the market and had comprehensive coverage across Terraform, cloud formation, and ARM. We used that as well but not as heavily. It was more of an ancillary benefit.

There are a lot of opportunities for how they can use their technology to do more. That would be more like sensitive data discovery and other things besides Git Repos, but then you are expanding the scope of what necessarily their product is. If we talk about what problem we are trying to solve, which is secrets disclosure, perhaps even validation of configuration management inside of Git environments, it is a very comprehensive solution. It is what it is, and it does a great job.

We have been using CloudGuard Code Security for three and a half years.

It is bulletproof.

It uses Lambda as its backend, so it is really a question about the scalability of AWS, which is bulletproof.

It is integrated into our Git Repo, so it is a Git-level control. The users of Git exist across locations, departments, and knowledge domains. It is a universally applied control irrespective of the employees. It broadly affects any user of Git across the company.

When we first launched this, it was a brand-new product, and there was very hands-on support. We had a couple of issues that they worked through very effectively and efficiently. They were super responsive. For the last two years, I have not talked to their support at all because it has just worked. 

We have got great service from Check Point. I would rate them a nine out of ten.

Positive

We did not use any other solution previously.

The deployment was very fast. It probably took my team a day to wire in the integration with the Git side. We did a little bit of SOAR work to make sure our response was efficient. It was a very quick and painless setup.

In terms of the deployment model, it is a webhook from a Git Repo into a Lambda function hosted in our AWS account that scans and then replies back. That would be considered a self-hosted public cloud.

It was very simple. It was done three years ago. I am sure things have changed, but at the time, it was a cloud formation stack set that was deployed into an account, and then there were a couple of configuration pieces in Git Repo where you need to point the webhook to the Lambda function you have stood up, and that was it. You were done. I imagine there is a slightly different process today for CloudGuard Code Security than three years ago. It is probably a little bit more fully managed on their end today, but I do not know that for sure.

We did not take any external help. It was very easy.

The thing we are trying to stop is a really bad SolarWinds type of event, which would cost an organization millions of dollars, so the ROI is preventing that outcome. It is a risk mitigation play. There is not necessarily a strong ROI from a non-event.

It is extremely affordable and high value for cost.

When we bought it three years ago, as far as I know, there were no other options. This was the first to market.

To those evaluating CloudGuard Code Security, I would advise doing a PoC. It is easy to integrate. It takes a day to get it all set up and working. Do some testing on merging things that you know would be bad and watch what happens. The product sells itself.

I would rate CloudGuard Code Security a ten out of ten.

Check Point CloudGuard Code Security is a solution tool for cloud environments. It helps a lot to detect malicious activities, and, in addition to that, it provides security in the network and in applications. 

Due to these functionalities, we decided to adopt this technology. Since we are venturing into the cloud area, we needed a tool with the qualities and characteristics set out above. The tool is very efficient in the security functionalities that it provides, which was the main case for which we used and implemented it.

With the characteristics that the tool presents, it helped us a lot in the security of various types of infrastructure, for example.

Through the visibility of the activity in the cloud via monitoring in the administration panel, we can observe everything that is being monitored and which devices need to be attended to with priority, as well as what vulnerabilities we have that are affecting us.

Following compliance policies is easy as we can see which policies we are failing to comply with or which need to be applied in order to comply with the security framework.

Automation has helped a lot to identify and automatically execute policies, rules, and blocks due to its machine learning.

Check Point CloudGuard Code Security has valuable features such as automation and automatic learning. This greatly facilitates security implementation.

It also has excellent monitoring with great visibility of the environment.

The tool has scalability and stability, and it works as a tool for auditing to comply with regulations and standards. It presents solid network protection with VPN connections that help to make secure connections between all users, thus ensuring remote connections from anywhere are easy.

Although it is a cloud-native tool, it needs to make some improvements in certain features, such as integration with SIEM, which should be easier and not have a host involved. 

We'd like integration with third-party security tools. It should generate reports as data and offer better details as well.

They could include web functionalities such as sandboxing. 

Last but not least, they need to improve the support that it provides. The SLA is not met regardless of the type of support that has been acquired. We have had many problems contacting them.

I've used the solution for four years. 

Stability can depend on many factors. The main thing is to make an excellent installation and configuration so that the tool works properly.

Check Point CloudGuard Code Security has excellent scalability. That said, it all depends on the infrastructure configuration..

Technical support must improve since it does not meet the support standards they provide.

We used other applications, however, when migrating to the cloud, we needed a tool that complied with all cloud standards

The installation is easy, fast, and simple and done all through software. The configuration is a bit complicated.

The tool is implemented by the IT team and an engineer provided by the provider.

It is always important to keep in mind what types of features are needed to be able to make a direct investment and not buy excess products.

The cost will depend on the number of users or devices that must be protected and on the specific characteristics and capabilities, everything is also related to the size of the company.

We evaluated some options, including:

• McAfee MVISION Cloud
• Prisma Cloud by Palo Alto Networks
• Trend Micro Cloud One
• Zscaler Cloud Security Platform

Before innovating or acquiring any security tool, it is necessary to evaluate all the needs that the company has in order to make a good acquisition.

We were looking for a solution that could perform analysis on variables that we currently have to achieve real-time analysis of response from the organization and the measures that we must mitigate based on our organizational structure. Additionally, we needed a simplification of compliance with internal regulations based on international regulations and standards to allow us to maintain a standard of security in the industry. Our niche market requires a solution that automatically identifies security risks, compliance problems, or bad configurations. 

Being able to use this solution has given us better visibility. It allows us to manage security in the cloud more efficiently and effectively. This solution has allowed us to automatically identify the services that need configuring and the level of risk they have, thus achieving detailed information on vulnerabilities and security threats. 

We can now take immediate action to protect ourselves based on our infrastructure. Knowing what measures we must take allows us to reduce costs associated with security in the cloud by providing early identification of a risk or a possible security breach.

Its most outstanding characteristic is its ability to quickly identify risks to services. It allows us to generate a behavioral analysis by identifying risks. It allows us to achieve rapid detection of vulnerabilities and threats based on our infrastructure. Now, we are taking immediate measures to mitigate risks, protecting the areas that have been found to have inefficient security. Threat detection gives us a chance to always improve in aspects of security so that our baseline is more robust. 

This is a highly technical solution for users who do not have security experience. It requires specialized knowledge of configurations to use it correctly. 

This is a disadvantage since we must generate investment in training for the users. It takes a while to achieve adequate knowledge and we need to provide training and support resources for users before attempting the implementation of the solution for the first time. 

In addition, they need to additionally provide you with constantly evolving material due to its constant state of updating. It is important that we have these technical skills and requisite documentation in order to have greater confidence when using the tool.

I've used the solution for one year.

We have tried to find and solve problems when developing applications, encouraging each one of our developers to comply with security standards worldwide based on the best practices published so that each one promotes and exposes a robust line of security. Based on this need to achieve the best security guidelines and try to make the development exponents easy, fast, and scalable, we sought solutions for the company. 

This solution has come to generate the baseline of the steps that must be followed to have analysis as well as a robust and perfect development of each of the applications that we are going to put into production. It is giving us a view of the code that is being used. With this visibility, we are achieving standardization of use, development, and production for each of the applications that are being developed in the different innovation groups that we have within the organization. This approach allows us to move faster when establishing lines of security. 

Its fastest and most outstanding characteristic is ensuring a development line that will not lead to applying applications or code development. In the past, people attempted development, leading to bad practices due to ignorance. This is where the solution gives us the possibility of being better, more efficient, and faster. We can test the levels of complexity and protection based on the development, the baseline of the step-by-step recommendations. 

We need to have many of the baselines or development guides providing less complex writing or development. We need to be able to add in the different languages ​​in Latin America. It needs to be multilingual and include languages from our region. One of the agencies promotes, for example, Latino development. 

Other than that, the solution is quite fast. It is scalable and does not need a lot of equipment. Based on the SAS trends, it is seen as important to understand and adopt these types of solutions. 

I've used the solution for one year.

There is a great improvement in the security of the organization. Our assets and infrastructure are enhanced by Check Point CloudGuard Code Security. It shields the organization against exposed API keys and confidential credentials against ransomware attacks. 

It uncovers hidden hiccups in the coding system that can affect our workflow and production ecosystem. Uncovering security blindspots has enabled sectors across the enterprise to plan and set security measures that cannot be compromised easily. 

This product scans the application configurations to enhance compliance.

This application has safeguarded the company from the exposure of data and confidential files. It has given us an opportunity to create cloud computing systems that have replaced manual processes. 

The automated system has enabled the coding team to create robust applications that can be configured efficiently with other applications. Check Point CloudGuard Code Security accelerates code deployment infrastructure to help the company become faster and more productive. 

It has enabled us to plan for available IT resources and allocate efficient time for task implementation.

The data center security system has provided real-time analytics on performance and data configuration processes. 

The threat detection system has advanced our research and coding practices. The platform has prevented secret leaks that occur mostly due to human error and weak security firewalls. 

CloudGuard Code Security has enabled the company to come up with suitable policies and enforce them to enhance the smooth running of programs. 

Data virtualization enables each member to view the hidden sensitive data and control workflows.

The application configuration process is simple, and it cannot be affected by external factors. 

Poor data interpretation during the scanning process can lead to poor decision-making and affect lead to insecurity. This platform has advanced data security and enhanced compliance. 

There is progressive growth and few cases of attacks across the enterprise. This software has safeguarded assets and built secure and reliable infrastructure. 

We have managed to uphold the company and set standard policies during the entire software development lifecycle. 

I am satisfied with the performance and results enhanced by this product since we deployed it.

I've used the solution for 17 months.

Check Point CloudGuard Code Security is stable and highly effective.

I am impressed by the scalability and general performance of this product.

The customer support staff is reliable and always proactive.

Positive

I have only engaged with this solution.

The initial setup was efficient and straightforward.

The vendor team helped us set up the system.

We have witnessed an increased ROI - from 35% to 55%.

The setup cost is suitable for SMEs.

I have not used other similar applications.

The set goals on the performance contract have been achieved.

In recent years, in search of a new strategy, we have tried to strengthen our security and infrastructure posture. It's one of the fundamental pillars of a large organization.

As a result of this situation, we have begun to adapt by using solutions that support us on cloud and on-premise. We have found the solution offers a healthy, strong infrastructure and, above all, is aligned with the legal and regulatory frameworks at an international level.

It's very integrated for emerging infrastructures such as the cloud, and supports us via a new legal framework. It protects us from new methods of attacks. Without this legal framework, in which Check Point supports us, it would become more difficult to protect ourselves, as many organizations are new to the use of the cloud. This solution gives us support from the experts who have been first in this model of infrastructure and services. We can ensure that by following and adapting our needs based on these guidelines we will be a great organization with a strong vision and a great security framework established to protect us.

Among its features, I like the ability to investigate, analyze and generate reports.

Its most notable feature is its capability to extend those analytics to teams in any available cloud. You can maintain a legal framework structure at all times.

The value in the analytics is that this data can guide us towards institutional security. We can support each other to be better and more efficient daily.

I would like this solution to be extended to cellular devices or tablets. In a way, this will be able to support ourselves in order to be more efficient.

I've used the solution for one year.

The primary use case of this solution is to detect vulnerabilities, prevent breaches, accelerate development, and improve code quality.

It helped us to reduce vulnerabilities, improve code quality, enhance security posture, and offer us good cost savings.

The solution's most valuable aspects include its accurate vulnerability detection, deep code analysis, remediation guidance, false positive guidance and customizable rules.

The solution should improve vulnerability in-depth, false-positive reduction, integration with other tools, performance optimization, and the user interface.

I've used the solution for two years. 

The stability is good.

The scalability is good.

Technical support is good but can be improved.

Positive

No, I did not use another solution. 

The initial setup is straightforward.

We implemented the solution with an in-house team.

The ROI is nice.

Pricing and licensing modules need to be improved.

No, I did not evaluate other options. 

Our primary use case involves protecting our internal services hosted within our data center's cloud environment, which includes virtual machines housing critical company resources. Additionally, we safeguard external services used by our customers with Check Point security measures.

The benefits derived from utilizing Check Point solutions for achieving our security objectives primarily lie in bolstering threat prevention and network security measures. This includes safeguarding against various threats, such as vulnerabilities and potential attacks.

It offers robust security capabilities spanning multiple cloud environments, which is highly beneficial. The platform is user-friendly, especially with its multi-domain solution.

We have a strong sense of security assurance when utilizing CloudGuard, as it consistently delivers outstanding protection capabilities.

The most critical features for me revolve around security, as I primarily focus on network engineering.

The enhancements are needed in the logging system and log management processes. Additionally, we encounter issues with geolocation functionality, which is crucial for enforcing access restrictions based on location. While we heavily rely on this feature, it occasionally fails to function correctly, posing challenges to our security measures.

I have been using it for two years.

It provides excellent stability capabilities.

In terms of scalability, our infrastructure comprises a private cloud with eight hundred servers and a public cloud serving our customers. Within this setup, we manage their database applications, application sites, disaster recovery mechanisms, and all security measures without encountering any issues.

The technical support is satisfactory; they respond promptly, and I am pleased with their service. I would rate it nine out of ten.

Positive

In my previous roles, I've gained experience working with FortiGate and Cisco firewalls, each offering its own set of advantages. FortiGate stands out for its user-friendly configuration interface, yet it faces stability issues in certain regions, particularly with routing tables. Cisco, on the other hand, provides a unified management platform for network configuration, which simplifies tasks for some networks. However, I've found Check Point to be my preferred choice over the past two years due to its exceptional stability. Unlike Cisco, which has been prone to crashes in my experience, Check Point has consistently delivered reliability. While FortiGate is known for its ease of use and Cisco for its complexity, Check Point falls somewhere in the middle in terms of usability. Compared to other vendors, Check Point excels in identifying threats effectively.

We selected CloudGuard due to its stability and because our team has extensive experience with it. We are highly satisfied with it.

Configuration is also simple and not overly complex.

For deployment, our integration with NSX is seamless, quick, and efficient.

We've experienced a positive return on investment with its usage, primarily through time savings attributed to its stability and user-friendly administration. Working with it is straightforward and not overly complicated, allowing us ample time for other tasks.

Renewing licenses is relatively simple, though there is room for further streamlining the process.

Overall, I would rate it eight out of ten.