Try our new research platform with insights from 80,000+ expert users

Aqua Cloud Security Platform vs Check Point CloudGuard CNAPP comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SentinelOne Singularity Clo...
Sponsored
Ranking in Cloud and Data Center Security
2nd
Ranking in Container Security
3rd
Ranking in Cloud Workload Protection Platforms (CWPP)
4th
Ranking in Cloud-Native Application Protection Platforms (CNAPP)
3rd
Average Rating
8.8
Reviews Sentiment
7.9
Number of Reviews
114
Ranking in other categories
Vulnerability Management (5th), Cloud Security Posture Management (CSPM) (3rd), Compliance Management (1st)
Aqua Cloud Security Platform
Ranking in Cloud and Data Center Security
12th
Ranking in Container Security
15th
Ranking in Cloud Workload Protection Platforms (CWPP)
16th
Ranking in Cloud-Native Application Protection Platforms (CNAPP)
13th
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
16
Ranking in other categories
Software Supply Chain Security (9th), DevSecOps (9th)
Check Point CloudGuard CNAPP
Ranking in Cloud and Data Center Security
9th
Ranking in Container Security
10th
Ranking in Cloud Workload Protection Platforms (CWPP)
5th
Ranking in Cloud-Native Application Protection Platforms (CNAPP)
5th
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
72
Ranking in other categories
Vulnerability Management (9th), Cloud Security Posture Management (CSPM) (5th), Data Security Posture Management (DSPM) (6th), Compliance Management (6th)
 

Mindshare comparison

As of August 2025, in the Cloud and Data Center Security category, the mindshare of SentinelOne Singularity Cloud Security is 2.1%, up from 0.6% compared to the previous year. The mindshare of Aqua Cloud Security Platform is 0.8%, up from 0.4% compared to the previous year. The mindshare of Check Point CloudGuard CNAPP is 1.3%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cloud and Data Center Security
 

Featured Reviews

Andrew W - PeerSpot reviewer
Tells us about vulnerabilities as well as their impact and helps to focus on real issues
Looking at all the different pieces, it has got everything we need. Some of the pieces we do not even use. For example, we do not have Kubernetes Security. We are not running any K8 clusters, so it is good for us. Overall, we find the solution to be fantastic. There can be additional education components. This may not be truly fair to them because of what the product is going for, but it would be great to see additional education for compliance. It is not a criticism of the tool per se, but anything to help non-development resources understand some of the complexities of the cloud is always appreciated. Any additional educational resources are always helpful for security teams, especially those without a development background.
Burak AKCAGUN - PeerSpot reviewer
A robust and cost-effective solution, excelling in scalability, on-premises support, and responsive technical support, making it well-suited for enterprises navigating stringent regulatory environment
The most crucial aspect is runtime protection, specifically image scanning before preproduction and deployment. Customers find it invaluable to have the ability to check for vulnerabilities in an image before deployment, similar to a sandbox environment. This feature ensures that customers can identify any potential issues with the image, such as misconfigurations or vulnerabilities, before integrating it into their workloads and infrastructure. In their source pipeline, companies can identify issues before deploying changes. This is crucial because customers prefer resolving any problems or misconfigurations before the deployment process. Software change security, including GSPM Cloud, is a key feature customers seek in their infrastructure.
Bart Coddens - PeerSpot reviewer
Evolved cloud security with active monitoring but needs interface consistency
The user interface needs work. Sometimes, it is a transition from the old tool to the new CNAPP Two that I currently have, and remnants of the old environment can still be detected. I require consistency in the user interface to ensure everything is streamlined into the same look and feel. More work is needed in fine-tuning the threat data towards your CSPM and activity logs, aligning them with business intelligence, which requires a cohesive console interface. My assessment of CloudGuard CDRs in intrusion detection and threat hunting capabilities is that it still needs some work. All the threat data that comes in, you need to fine tune it a bit.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Cloud Native Security offers attack path analysis."
"I would rate SentinelOne Singularity Cloud Security a nine out of ten."
"We've seen a reduction in resources devoted to vulnerability monitoring. Before SentinelOne Singularity Cloud Security we spent a lot of time monitoring and fixing these issues. SentinelOne Singularity Cloud Security enabled us to divert more resources to the production environment."
"For Singularity, the task capability is easy to use and it has a very intuitive dashboard, which streamlines the processes."
"The solution helped free other staff to work on other projects or other tasks. We basically just had to do a bunch of upfront configuring. With it, we do not have to spend as much time in the console."
"SentinelOne Singularity Cloud Security is on top of protecting ephemeral workloads."
"The solution saves 40% of my time."
"The ease of use of the platform is very nice."
"The most helpful feature of Aqua Security is Drift Prevention, which is a feature that allows images to be immutable. In addition, one of the main reasons we went with Aqua Security is because it provides strong protection when it comes to runtime security."
"The most valuable features are that it's easy to use and manage."
"Support is very helpful."
"The most valuable feature of Aqua Security is the scanner."
"Their sandboxing service is also really good."
"The container security element of this product has been very valuable to our organization."
"The solution was very user-friendly."
"The CSPM product is great at securing our cloud accounts and I really like the runtime protection for containers and functions too."
"Alerts of cloud activity happening across all accounts is helpful."
"The feature that I value the most about Check Point CloudGuard CNAPP is the possibility of checking compliance with different standards. This compliance check can be performed for each subscription or service that we have on all the different cloud providers that we use."
"It presents a real-time database that is always updated."
"Check Point CloudGuard CNAPP's initial configuration is very easy. It is plug-and-play. It also gives regular updates."
"The posture management and remediation features are the most valuable. We use GSL Builder to build custom rules in alignment with our organization's policies. CloudGuard has canned rules using multiple standard frameworks, but we also have additional rules."
"CloudGuard's best feature is real-time detection. We can detect incidents and vulnerabilities in our code with one click."
"It helps us to analyze vulnerabilities way before they get installed in production and the web. It gives us more security in the production environment."
"We have more visibility than ever before, appreciating the valuable and proactive insight that we receive from the platform."
 

Cons

"SentinelOne Singularity Cloud Security is on the costlier side."
"There is scope for more application security posture management features. Additionally, the runtime protection needs attention."
"I export CSV. I cannot export graphs. Restricting it to the CSV format has its own disadvantages. These are all machine IP addresses and information. I cannot change it to the JSON format. The export functionality can be improved."
"Their search feature could be better."
"The documentation that I use for the initial setup can be more detailed or written in a more user-friendly language to avoid troubles."
"SentinelOne Singularity Cloud Security has limited legacy system support and may not fully support older operating systems or legacy environments."
"While SentinelOne offers robust security features, its higher cost may present a challenge for budget-conscious organizations."
"A beneficial improvement for SentinelOne Singularity Cloud Security would be integration with Jira, allowing for a more streamlined ticketing system."
"Since we are working from home, we would like to have the proper training for Aqua."
"There's room for improvement, particularly in management capabilities as it may not be comprehensive enough for all customers, and it has been lacking in the realm of cloud security posture management."
"Aqua Security could improve the forwarding of logging into Splunk and into other tools, it should be easier."
"Aqua Security could provide more open documentation so that their learning resources can be more easily accessed and searched through online. Right now, a lot of the documentation is closed and not available to the public."
"The integrations on CICD could be improved. If Aqua had more plugins or container images to integrate and automate more easily on CICD, it would be better."
"Aqua Security lacks a lot in reporting."
"They want to release improvements to their product to work with other servers because now there are more focused on the Kubernetes environment. They need to improve the normal servers. I would like to have more options."
"I would like Aqua Security to look into is the development of a web security portal."
"Streamlining the user interface would greatly improve the user experience."
"Check Point must provide a multi-cloud facility where AWS, Azure, and GCP can seamlessly work together and display posture in an integrated manner."
"The user interface could be improved. Sometimes, the visibility is not immediately available for the environment. We have the native servers that come with the solutions, but we cannot see them in the Check Point log. Another issue is with the integrated file monitoring. It would make sense to have stuff like file integrity monitoring and malware scanning available within this module because we don't want to integrate another product."
"The product must provide different features like antivirus."
"The main issue that we found with Dome9 is that we have a default rule set with better recommendations that we want to use. So, you do a clone of that rule set, then you do some tweaks and customizations, but there is a problem. When they activate the default rule set with the recommendations and new security measures, it doesn't apply the new security measures to your clones profile. Therefore, you need to clone the profile again. We are already writing a report to Check Point."
"In general, for the product to be successful, they need to improve security, and configuration detection."
"We want to be able to customize the solution more in order to meet the needs of our company."
"Especially with cloud security, there's too much clutter on the screen and too many things going on."
 

Pricing and Cost Advice

"SentinelOne Singularity Cloud Security is on the costlier side."
"PingSafe is not very expensive compared to Prisma Cloud, but it's also not that cheap. However, because of its features, it makes sense to us as a company. It's fairly priced."
"The tool is cost-effective."
"The features included in PingSafe justify its price point."
"PingSafe is priced reasonably for our workload."
"The pricing for PingSafe in India was more reasonable than other competitors."
"Pricing is based on modules, which was ideal for us."
"SentinelOne is relatively cheap. If ten is the most expensive, I would rate it a seven."
"Aqua Security is not cheap, and it's not very expensive, such as Splunk, they are in the middle."
"It comes at a reasonable cost."
"The pricing of this solution could be improved."
"Dealing with licensing costs isn't my responsibility, but I know that the licenses don't depend on the number of users, but instead are priced according to your workload."
"They were reasonable with their pricing. They were pretty down-to-earth about the way they pitched their product and the way they tried to close the deal. They were one of the rare companies that approached the whole valuation in a way that made sense for our company, for our needs, and for their own requirements as well... They will accommodate your needs if they are able to understand them and they're stated clearly."
"Right now, we have licenses on 500 machines, and they are not cheap."
"Licensing and costs are straightforward, as they have a baseline of 100 workloads within one license and no additional charges."
"In the beginning, the price of Dome9 was cheap, whereas now it is not."
"Check Point CloudGuard Posture Management is always known as a good solution but an expensive one. When you're using Cisco, Check Point, or Palo Alto, you know that you will pay more, but you know that it will work."
"The licensing and costs are straightforward, as they have a baseline of 100 workloads (number of instances) within one license with no additional nor hidden charges. If you want to have 200 workloads under Dome9, then you need to take out two licenses for that. Also, it does not have any impact on cloud billing, as data is shared using the API call. This is well within the limit of free API calls provided by the cloud provider."
"From a pricing perspective, they are pretty expensive."
"Its price is very fair."
"The tool's pricing is moderate. Its licensing costs are yearly."
report
Use our free recommendation engine to learn which Cloud and Data Center Security solutions are best for your needs.
865,164 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Financial Services Firm
14%
Manufacturing Company
9%
Government
6%
Financial Services Firm
23%
Computer Software Company
11%
Manufacturing Company
11%
Government
9%
Computer Software Company
12%
Financial Services Firm
11%
Manufacturing Company
8%
Educational Organization
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about PingSafe?
The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...
What is your experience regarding pricing and costs for PingSafe?
I don't handle the price part, but it isn't more expensive than Palo Alto Prisma Cloud. It's not cheap, but it is wor...
What needs improvement with PingSafe?
There is scope for more application security posture management features. Additionally, the runtime protection needs ...
What do you think of Aqua Security vs Prisma Cloud?
Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valu...
What do you like most about Aqua Security?
Customers find it invaluable to have the ability to check for vulnerabilities in an image before deployment, similar ...
What is your experience regarding pricing and costs for Aqua Security?
It comes at a reasonable cost. When compared to Prisma Cloud, it is more budget-friendly.
 

Also Known As

PingSafe
Aqua Security Platform, CloudSploit, Argon
Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence
 

Overview

 

Sample Customers

Information Not Available
HPE Salesforce Telstra Ellie Mae Cathay Pacific HomeAway
Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners
Find out what your peers are saying about Aqua Cloud Security Platform vs. Check Point CloudGuard CNAPP and other solutions. Updated: July 2025.
865,164 professionals have used our research since 2012.