No more typing reviews! Try our Samantha, our new voice AI agent.

Atomic ModSecurity Rules vs Check Point WAF (formerly CloudGuard WAF) comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Apr 16, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare Web Application ...
Sponsored
Ranking in Web Application Firewall (WAF)
7th
Average Rating
8.6
Reviews Sentiment
7.4
Number of Reviews
26
Ranking in other categories
No ranking in other categories
Atomic ModSecurity Rules
Ranking in Web Application Firewall (WAF)
28th
Average Rating
9.0
Reviews Sentiment
7.8
Number of Reviews
1
Ranking in other categories
No ranking in other categories
Check Point WAF (formerly C...
Ranking in Web Application Firewall (WAF)
5th
Average Rating
8.8
Reviews Sentiment
7.2
Number of Reviews
62
Ranking in other categories
Application Security Tools (5th)
 

Mindshare comparison

As of July 2026, in the Web Application Firewall (WAF) category, the mindshare of Cloudflare Web Application Firewall is 4.0%, down from 5.8% compared to the previous year. The mindshare of Atomic ModSecurity Rules is 0.8%, down from 1.0% compared to the previous year. The mindshare of Check Point WAF (formerly CloudGuard WAF) is 2.1%, up from 1.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Web Application Firewall (WAF) Mindshare Distribution
ProductMindshare (%)
Check Point WAF (formerly CloudGuard WAF)2.1%
Cloudflare Web Application Firewall4.0%
Atomic ModSecurity Rules0.8%
Other93.1%
Web Application Firewall (WAF)
 

Featured Reviews

DB
CTO at PlayNirvana
Advanced security reporting has protected high-traffic betting platforms from constant attacks
I don't see room for improvement to Cloudflare Web Application Firewall. One thing I don't know much about because we have a dedicated IT team for that, and I'm not involved with Cloudflare much anymore. But if I were to compare them to F5, I would like to see more features that F5 offers. F5 has an option to bring the whole infrastructure, the whole WAF and all their packages, Bot Management, and everything else on your infrastructure. You need to install certain services from their side, and then you can choose if you would like requests to hit your servers immediately or if requests need to be proxied through F5 backbone. That would be a nice addition because we have 90% of the traffic as legit traffic coming from whitelisted servers. If it comes from whitelisted servers, I don't need to go every request through the backbone; I could easily just IP whitelist everything. Then I could maybe have Bot Management on my infrastructure that drastically reduces the price of Cloudflare. I would like to see Push CDN more improved in the next release of Cloudflare Web Application Firewall. And maybe something similar to Pushpin that Fastly has, which is an option where you can push messages that then can be scaled globally over the network. From our perspective, if we have a listener that listens for stock updates, I would just need to have one processor that pushes those updates to the Cloudflare API, and then Cloudflare would broadcast that message to all listeners. Cloudflare will check the order of the message, and if you, as a customer, are not connected or have some kind of network issue, when you reconnect, you will receive the latest state and missing updates.
Vahid Babaey - PeerSpot reviewer
PhD Student at University of North Carolina at Charlott
Open rules have enabled me to secure web apps against obfuscated SQL injection and XSS attacks
The best feature Atomic ModSecurity Rules offers is the open source aspect. I believe that because it's open source, all of the developers, programmers, and security experts are able to update this WAF and provide more rules, creating a more secure WAF for all of the clients and customers around the world. By accessing Atomic ModSecurity Rules, it has helped me significantly. Because of this open source feature, I am able to generate new rules and update the WAF and use this WAF in my research and also give it to other clients and customers to use the updated WAF. All of this is done just because of the open-source feature, because it can be updated.
Krishnakumar Mahadevan - PeerSpot reviewer
CISO at Spink Solutions Private Limited
Cloud security has strengthened risk posture and improved advanced threat visibility
There are some API gateway and API securities I mentioned. If these are incorporated with AI-related features, particularly those seven key vulnerabilities I mentioned—token theft and tool poisoning—that would be beneficial. AI-related features are not included yet in Check Point CloudGuard WAF. However, they are present in FortiGate. That is the advantage of FortiGate now. FortiGate is stopping all AI-related vulnerabilities now. FortiGate has this capability. It is unfortunate that even Palo Alto also lacks one or two of these features. Check Point Quantum is very good, without a doubt. However, their capabilities are not in comparison with Palo Alto. There are some features, but there are some gaps in comparison with Palo Alto.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It's pretty convenient and pretty easy to set up and run. And then kind of for static content, it also offers caching."
"Very glad the WAF rulesets works out of box, and requires very little tuning or maintenance."
"We like that there's load balancing, firewall capabilities, DDoS protection, et cetera, all covered by Cloudflare."
"The Cloudflare Web Application Firewall's most valuable feature is its ease of configuration."
"We extensively use the solution every day. The solution is very stable; we haven’t seen any glitches."
"The product has a valuable security control functionality."
"The security features are valuable. The particular feature we use is called OWASP."
"I have not had any issues with this solution, and I would recommend it to others who are interested in using it."
"The best feature Atomic ModSecurity Rules offers is the open source aspect, because all of the developers, programmers, and security experts are able to update this WAF and provide more rules, creating a more secure WAF for all of the clients and customers around the world."
"The first valuable feature is that it is not a complex process to get it up and running. It was not complex at all. We were in a close relationship with the team that developed the app, and it worked in a few hours. The second valuable feature is the information that comes out of it."
"Check Point CloudGuard Application Security enabled us to develop strength and process efficiency coupled with a secure environment in the IT system."
"The most effective CloudGuard feature for threat prevention is its web app protection."
"Ease of deployment and efficiency, particularly for API security, are phenomenal."
"The solution preemptively blocks zero-day attacks and detects hidden anomalies effectively."
"User attitude reviews help us keep all online users compliant with company regulations and policies."
"Check Point CloudGuard WAF has really reduced the headache of IT engineers and has helped me in security through machine learning."
"Check Point CloudGuard Application Security is the one-stop solution for the security of applications and providing API protection to servers and facilities 24/7."
 

Cons

"If they add logs history within the Cloudflare offering, that would be a great benefit."
"We have noticed some latency when the call goes through the firewall. That could be improved."
"A key challenge arises when dealing with numerous integrations with HVAC systems. Depending on the specifics, there might be some configuration mismatches, which necessitate specific support."
"They need to improve their support because getting a response for basic requests took around 48 hours, which is too long."
"They have some limitations with third-party integrations."
"It would be ideal if the solution offered better log integration and more integration with different platforms."
"We don't even use Cloudflare Bot Management because it's too expensive; you need to pay per request, and it's much cheaper to get one or two additional machines."
"I have experienced some difficulties with Cloudflare's support as a customer based in India."
"Additionally, I know that ModSecurity can block only SQL injection and XSS attacks, no more types of attacks."
"The creation of security profiles for each application takes a lot of time."
"The negative aspect is that Check Point WAF (formerly CloudGuard WAF) uses Check Point Harmony in its management console, which sometimes creates latency when connecting to or opening the platform."
"You need to know exactly the system. You cannot have someone running the system if they don't have the knowledge to do so."
"Check Point CloudGuard WAF's support is only available in English."
"Check Point CloudGuard WAF can be improved; initially, the setup is very complicated, and there's not a lot of documentation available, plus it didn't have something for anti-bot, but other than that, it is fine."
"I advise proactive threat detection intelligence offline, which can also help monitor and ensure system checks and compliances are in place."
"The false positive rate is a concern, but I could recommend improvements where false positives have to be minimized better."
"I would like to be able to integrate the theme of Artificial Intelligence to help review issues and to monitor and view the security issue while also suggesting and interpreting and additionally configuring solutions - basically, acting as an interpreter."
 

Pricing and Cost Advice

"The pricing model is very straightforward compared to the competition. You just pay per month for the product and usage."
"We pay $210 per month for CloudFlare WAF."
"The solution's pricing option needs to be more transparent for enterprise clients."
"It is not too pricey."
"It starts at $20 and can easily go up to $200 monthly"
"The annual licensing fee is $10,000 USD."
"Cloudflare Web Application Firewall is more affordable than other solutions."
"What's my experience with pricing, setup cost, and licensing? I believe the pricing is not the best, but it's reasonable and acceptable. We also use the McAfee system in parallel. In terms of pricing, its okay - not great, but not bad either. It falls in the middle, which is acceptable. In terms of support licensing, last time, we were searching for a solution, and we considered products from resellers rather than directly from the cloud provider. However, the pricing we encountered was exceptionally high. As a result, we are inclined to select support from the reseller."
Information not available
"Considering all the benefits we've observed, we find the price to be satisfactory."
"The tool's licensing costs are yearly and competitive."
"It is not cheap, but it is worth it."
"The base solution costs approximately 30,000 euros, with an additional 2,000 euros per year for licenses and support."
"If the pricing for the Infinity platform covers everything, it would be more straightforward. I had a hard time selling it to our CEO as a former CFO because of the differentials. There are different deltas year to year over a five-year period. It is very difficult to explain. It would be easier to digest for our executives if there was a flatter scale"
"I work for an Indian banking client. In India, companies are on a budget. The company liked Check Point very much, but it was a little bit costly compared to FortiWeb. However, it had more features compared to FortiWeb."
"Check Point CloudGuard Application Security's pricing is comparable to other products in the market."
"Check Point CloudGuard Application Security's pricing is not friendly."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
904,748 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
17%
Financial Services Firm
9%
Comms Service Provider
9%
Manufacturing Company
7%
Comms Service Provider
28%
Hospitality Company
13%
Government
9%
Manufacturing Company
8%
Computer Software Company
19%
Outsourcing Company
12%
Financial Services Firm
9%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise6
Large Enterprise6
No data available
By reviewers
Company SizeCount
Small Business39
Midsize Enterprise21
Large Enterprise25
 

Questions from the Community

What needs improvement with Cloudflare Web Application Firewall?
I don't see room for improvement to Cloudflare Web Application Firewall. One thing I don't know much about because we...
What is your primary use case for Cloudflare Web Application Firewall?
We are using Cloudflare Web Application Firewall's advanced reporting and analytics tools with their Zero Trust, so e...
What needs improvement with Atomic ModSecurity Rules?
Atomic ModSecurity Rules can be improved by first studying and reading the structure of new obfuscated attacks, then ...
What is your primary use case for Atomic ModSecurity Rules?
My main use case for Atomic ModSecurity Rules is in my research, which tries to make websites secure against web atta...
What advice do you have for others considering Atomic ModSecurity Rules?
I would rate Atomic ModSecurity Rules nine out of ten. I chose nine out of ten because I have not studied other WAFs....
What is your experience regarding pricing and costs for CloudGuard for Application Security?
All original equipment manufacturers mention zero-day attacks and the exploitation of previously unknown vulnerabilit...
What needs improvement with CloudGuard for Application Security?
Check Point WAF (formerly CloudGuard WAF) needs to offer more competitive pricing. There are many other cloud WAF pro...
What is your primary use case for CloudGuard for Application Security?
I typically use Check Point WAF (formerly CloudGuard WAF) for protecting cloud workspaces, which includes cloud appli...
 

Also Known As

Cloudflare WAF
No data available
Check Point CloudGuard Application Security, CloudGuard Application Security, CloudGuard AppSec
 

Overview

 

Sample Customers

crunchbase, udacity, marketo, okcupid, zendesk
Information Not Available
Orange España, Paschoalotto
Find out what your peers are saying about Imperva, Fortinet, F5 and others in Web Application Firewall (WAF). Updated: June 2026.
904,748 professionals have used our research since 2012.