AWS Security Hub vs Check Point CloudGuard CNAPP comparison

AWS Security Hub vs. Check Point CloudGuard CNAPP

June 2026

Download the complete report

Helped 908,800 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Qualys TotalCloud

Mindshare comparison

As of August 2026, in the Cloud Security Posture Management (CSPM) category, the mindshare of Qualys TotalCloud is 1.9%, up from 1.3% compared to the previous year. The mindshare of AWS Security Hub is 2.7%, down from 4.0% compared to the previous year. The mindshare of Check Point CloudGuard CNAPP is 3.4%, up from 2.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Cloud Security Posture Management (CSPM) Mindshare Distribution
Product	Mindshare (%)
Qualys TotalCloud	1.9%
Check Point CloudGuard CNAPP	3.4%
AWS Security Hub	2.7%
Other	92.0%

Cloud Security Posture Management (CSPM)

Featured Reviews

Robert Orłowski

IT Security Expert at Alior Bank S.A.

Unified risk scoring has improved our cloud visibility and simplifies remediation priorities

Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.

Has helped identify misconfigurations and prioritize risks but lacks multi-cloud support and deeper integration features

Karthik Ekambaram

Director at Scybers

AWS Security Hub cannot scale up to multiple different cloud environments; it only works for AWS. There are other products in the market for CSPM that can give you multi-cloud environment misconfigurations, even Microsoft for that matter. Regarding the integration of AWS Security Hub with third-party tools, I am not certain whether we can integrate them, but there is no need to do so. However, AWS Security Hub cannot integrate with other cloud providers, so it only supports the AWS environment. The compliance checks within AWS Security Hub are good, but we don't use them much. We utilize compliance frameworks such as CIS compliance frameworks and ISO 27017 framework, which are beneficial, but it can improve in other areas too, such as including NIST and other frameworks beyond just ISO and CIS. Improvements can be applicable for scalability, particularly on integration with multi-cloud environments, and compliance frameworks can be added for more variety as well. The unified dashboard in AWS Security Hub is adequate; I cannot say it is exceptional, but the content available in the dashboards is satisfactory for now.

Boosts security and compliance in multi-cloud environments while real-time threat detection enhances risk management

reviewer2751468

Assistant Manager at a computer software company with 201-500 employees

Check Point CloudGuard CNAPP flagged a misconfiguration in our AWS S3 bucket that had overly permissive access settings. That configuration could have exposed our sensitive data to the public internet. The platform not only identified the issue but also provided remediation that our team was able to apply immediately. This prevented a potential data exposure. Check Point CloudGuard CNAPP offers a unified, modular platform that combines CSPM, CWPP, CIEM, code security, and cloud detection and response. The agentless workload posture, real-time threat detection and response, multi-cloud coverage and visibility, compliance automation, and one-click remediations stand out as its best features. I find myself relying on the risk management engine and prioritization the most day-to-day. In any cloud environment, you are flooded with findings, misconfigurations, vulnerabilities, and compliance gaps. Without prioritization, it is overwhelming for our team to take care of the posture. CloudGuard's risk scoring helps us cut through incidents. This makes remediation faster and focused instead of wasting time checking every alert. We get to fix the issues that pose real business risks. Check Point CloudGuard CNAPP has positively impacted our organization at a significant level. We get greater visibility and control across all our cloud environments. Some biggest benefits we have seen are faster detection and remediation of misconfigurations, improved compliance posture, reduced risk exposure, operational efficiency, and cost savings. Overall, it has made our cloud environment more secure, compliant, and easier to manage while freeing up our teams to focus on projects instead of chasing alerts.

More Qualys TotalCloud pros

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I would recommend Qualys TotalCloud to other users because it is cost-efficient and has a good return on investment."

"Qualys TotalCloud is an excellent platform, and the beauty of the platform is that we can get all the vulnerabilities, see all the reports in a single dashboard, view them segregated, and easily learn about critical, high, and medium findings with appropriately provided remediation steps."

"The best feature would be the ability to create policies. It is easy to control and update policies as required."

"I would definitely recommend Qualys TotalCloud to other users."

"Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution."

"TotalCloud provides the easiest and the best approach for cloud infrastructure management."

"It is a cloud-native app that integrates with both IaaS and SaaS. It seamlessly integrates with other platforms."

"The best features in Qualys TotalCloud include the total asset management of the cloud environment. It is very easy to export the report and see the vulnerabilities related to the cloud specifically."

"AWS Security Hub has very good integration features. It allows for AWS native services integration, and it helps us to integrate some of the services outside of AWS. They have partners, such as Amazon Preferred Network Partners (APN). If you have different security tools around APN, we can integrate those findings with AWS Security Hub reducing the need to refer to different portals or different UIs. You can have AWS Security Hub act as a single common go-to dashboard."

"Cloudposse is a valuable feature as it guarantees my security."

"It's a security posture management tool from AWS. Basically, it identifies misconfigurations, similar to Trusted Advisor but on a larger scale."

"This solution is for security posture management for the cloud, showing the security posture of your cloud infrastructure and giving you good insight into whether your infrastructure is secure or not."

"The most valuable features of the solution are the scanning of all the cloud environments and most of the compliances available in the cloud."

"Finding out if your infrastructure is secure is a valuable feature."

"AWS Security Hub's unified dashboard does help streamline my process of identifying vulnerabilities, but we don't use Inspector."

"One of the most effective features of AWS Security Hub is the easy access to a dashboard with a ready-to-use security score."

More AWS Security Hub pros

"The solution is scalable."

"Gives us centralized firewall management for both Windows and Linux distros. Also provides a clear view of the security configurations and connections across environments (DMZ, external and internal networks)."

"It has great scalability."

"Customer Service: Highly engaged at all levels of the organization, and truly helpful, which cannot be said for many others in their space."

"Good interface and visibility."

"I definitely suggest that people use Dome9 because I have used it since last year and I really like the features."

"Overall, Dome9 is a good product and I haven't received any negative feedback from our customers about it."

"This solution has saved the company from unnecessary data loss that occurs due to cyber attacks."

More Check Point CloudGuard CNAPP pros

Cons

"The onboarding process is a bit difficult. In the initial phase, it is very difficult to understand the features, what the dashboard contains, and what criteria they are using."

"With the growing integration of AI, I would like Qualys to enhance its service offerings to better accommodate AI-related risks."

"The downside is only in container security, but it has not been a long time since they introduced these models."

"Qualys TotalCloud has the potential to improve by integrating a hybrid platform for comprehensive management of both on-premises and cloud infrastructures."

"Two areas for improvement in Qualys TotalCloud are the speed of the public cloud platform and vulnerability detection."

"We would like to see Windows-based sensors available in Qualys, as this would make the platform more versatile and support a broader range of environments."

"An area for improvement would be to focus on risks related to AI, such as large language models and potential data leakage."

"The vulnerability part is good, but the policy compliance module needs improvement because it involves a lot of manual work. Specifically, the remediation part of the controls requires enhancements."

More Qualys TotalCloud cons

"Security needs to be measured based on their own criteria. We can't add custom criteria specific to our organization. For example, having an S3 bucket publicly available might be flagged as a critical alert, but it might not be critical in a sandbox environment. So, it gets flagged as critical, which becomes a false positive. So, customization options and creating custom dashboards would be areas for improvement."

"I would like a more fine-grained capability for creating custom rules and a more user-friendly experience programmatically in writing queries and configuring custom security rules, making it quicker and easier."

"There is room for improvement in implementing AI capabilities."

"Many findings are too generic or irrelevant to the environment, which can lead to false positives."

"We need more granular-level customizations to enable or disable the rules in AWS Security Hub."

"It is not flexible for multi-cloud environments."

"One aspect that could be improved in the solution is its adaptability to different markets and geopolitical restrictions. In certain regions like Thailand, specific services from certain countries or providers, such as AWS or Azure, might be limited or blocked. It also needs improvement in would require configuring the solution more adaptable to AWS infrastructure and function."

"There is room for improvement in implementing AI capabilities. It would be beneficial for Security Hub to implement preventative measures and to directly apply recommendations instead of just suggesting them."

More AWS Security Hub cons

"The user interface needs work."

"The support for Dome9 is not thrilling. It was degraded when Check Point took over."

"Every now and then, we feel that their team's training and orientation process on orienting the clients and partners is low and needs to be strengthened so that every single individual is completely aware and informed of the features and their utilities."

"The accuracy of its remediation is a 7.5 out of 10. Before, I would have given it a ten but now, to handle remediation for fully qualified domain names, it's not working as it did in the past. We're finding some difficulties there."

"I would like to see improvements in the vulnerability assessments in terms of how the solution discovers vulnerabilities or compromised workloads. Also, customizable reports would be nice."

"Improvements can be made to the user interface."

"Automatic remediation requires read/write access. When providing read/write access to third-party applications, this can add risk. It should have some options of triggering API calls to the cloud platform, which in turn, can make the required changes."

"Currently, I would like this solution extended to cellular devices or tablets."

More Check Point CloudGuard CNAPP cons

Pricing and Cost Advice

"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."

"Qualys TotalCloud is expensive."

"Although Qualys TotalCloud is relatively expensive due to its unique automation features, its cost-effectiveness is rated an eight out of ten, with ten being the most costly."

"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."

"The cost is high, but it meets our organizational needs."

"Qualys TotalCloud offers cost-effective licensing flexibility."

"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."

"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."

More Qualys TotalCloud pricing and cost advice

"The pricing is fine. It is not an expensive tool."

"AWS Security Hub's pricing is pretty reasonable."

"Security Hub is not an expensive solution."

"There are multiple subscription models, like yearly, monthly, and packaged."

"The price of AWS Security Hub is average compared to other solutions."

"The price of the solution is not very competitive but it is reasonable."

"The cost is based on the number of compliances, core checks, and services required, and for more than 10,000 recommendations, the charge is just one dollar."

"AWS Security Hub is not an expensive tool. I would consider it to be a cheap solution. AWS Security Hub follows the PAYG pricing model, meaning you will have to pay for whatever you use."

"From a pricing perspective, they are pretty expensive."

"It is difficult to contextualize the pricing because we are used to Indian pricing and licensing."

"The tool's pricing is moderate. Its licensing costs are yearly."

"Its price is very fair."

"CloudGuard is fairly priced."

"In the beginning, the price of Dome9 was cheap, whereas now it is not."

"The licensing part still needs some work. The issue that I have is that we do not use all the services in the cloud, but sometimes, CloudGuard identifies them as an asset."

"Right now, we have licenses on 500 machines, and they are not cheap."

More Check Point CloudGuard CNAPP pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Cloud Security Posture Management (CSPM) solutions are best for your needs.

See recommendations

908,800 professionals have used our research since 2012.

Comparison Review

it_user186927

Director of Operations at a comms service provider with 10,001+ employees

Feb 16, 2015

Cybereason vs. Interset vs. SQRRL

Capture DB - they all use NoSQL db and hence solve the ad hoc query and 'go back in time' problem with current best of breed SIEM and DLP solutions that rely on real time analysis of incoming logs (and don't store them). This means deeper and quicker iterative threat analysis and assessment…

What is your experience regarding pricing and costs for Qualys TotalCloud?

Top Industries

By visitors reading reviews

Manufacturing Company

13%

Outsourcing Company

12%

Comms Service Provider

10%

Financial Services Firm

10%

Financial Services Firm

12%

Manufacturing Company

10%

Computer Software Company

Comms Service Provider

Construction Company

12%

Financial Services Firm

10%

Outsourcing Company

10%

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	11
Midsize Enterprise	5
Large Enterprise	30

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	5
Large Enterprise	14

By reviewers
Company Size	Count
Small Business	59
Midsize Enterprise	13
Large Enterprise	57

Questions from the Community

The price is very expensive, actually.

What needs improvement with Qualys TotalCloud?

To be totally honest, I do not have any best features because I have had a bad experience using this tool, especially...

What is your primary use case for Qualys TotalCloud?

My main use case for Qualys TotalCloud is vulnerability management and exposure management. I use this tool to evalua...

Which is better - Azure Sentinel or AWS Security Hub?

We like that Azure Sentinel does not require as much maintenance as legacy SIEMs that are on-premises. Azure Sentinel...

What needs improvement with AWS Security Hub?

I do not see any areas for improvement in AWS Security Hub itself, but the cost factor is something that is the main ...

What is your primary use case for AWS Security Hub?

AWS Security Hub is something I have used daily as it is a part of my job for cloud security purposes. If you are dea...

What is your experience regarding pricing and costs for CloudGuard Workload Protection?

My experience with pricing, setup cost, and licensing has been reasonable for the value it delivers. The initial setu...

What needs improvement with CloudGuard for Cloud Intelligence?

One area that Check Point CloudGuard CNAPP could use improvement is the navigation when switching between modules. A ...

What is your primary use case for CloudGuard for Cloud Intelligence?

My main use case for Check Point CloudGuard CNAPP is strengthening cloud security posture, monitoring configurations,...

Microsoft Defender for Cloud vs Qualys TotalCloud

Comparisons

Wiz vs Qualys TotalCloud

Compared 10% of the time

Compared 8% of the time

JupiterOne vs Qualys TotalCloud

Compared 7% of the time

Prisma Cloud by Palo Alto Networks vs Qualys TotalCloud

Compared 6% of the time

Nucleus Security vs Qualys TotalCloud

Compared 4% of the time

More Qualys TotalCloud Competitors

Microsoft Sentinel vs AWS Security Hub

Compared 30% of the time

Prisma Cloud by Palo Alto Networks vs AWS Security Hub

Compared 6% of the time

Microsoft Defender for Cloud vs AWS Security Hub

Compared 4% of the time

Wiz vs AWS Security Hub

Compared 4% of the time

Palo Alto Networks Cortex XSOAR vs AWS Security Hub

Compared 2% of the time

More AWS Security Hub Competitors

Prisma Cloud by Palo Alto Networks vs Check Point CloudGuard CNAPP

Compared 13% of the time

Check Point Email Security (formerly Harmony Email & Collaboration) vs Check Point CloudGuard CNAPP

Compared 5% of the time

Microsoft Defender for Cloud vs Check Point CloudGuard CNAPP

Compared 4% of the time

Cloudflare vs Check Point CloudGuard CNAPP

Compared 4% of the time

TrendAI Vision One – Cloud Security vs Check Point CloudGuard CNAPP

Compared 3% of the time

More Check Point CloudGuard CNAPP Competitors

Product Reports

Download Qualys TotalCloud product report

Qualys TotalCloud

July 2026

Download AWS Security Hub product report

AWS Security Hub

August 2026

Check Point CloudGuard CNAPP

August 2026

Download Check Point CloudGuard CNAPP product report

Also Known As

Qualys TotalCloud with FlexScan

SQRRL

Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence

Overview

Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.

Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.

What are the most important features of Qualys TotalCloud?

Accurate Vulnerability Reports: Delivers precise and actionable insights for risk mitigation.
Zero-Day Detection: Identifies and addresses zero-day vulnerabilities proactively.
Unified Threat Assessment: Offers comprehensive evaluation of threats across the environment.
Extensive Risk Management: Manages risks effectively with advanced insights and prioritization.
Continuous Monitoring: Provides non-stop surveillance for vulnerabilities and threats.
Cloud-Native Automation: Streamlines processes and reduces manual efforts using automation.
FlexScan for Internet-Facing VMs: Scans external VMs efficiently to detect vulnerabilities.
Dashboard Risk Visualization: Clear visualization helps prioritize vulnerabilities.

What benefits and ROI should users look for?

Improved Security Posture: Enhances threat detection and response across clouds.
Time Savings: Automation reduces time spent on manual vulnerability management.
Resource Efficiency: Better allocation of resources through streamlined workflows.
Enhanced Risk Prioritization: Focus on critical vulnerabilities for effective mitigation.
Integrated Cloud Accounts: Facilitates seamless cloud management and security.

Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.

Qualys

AWS Security Hub provides multi-account management and compliance checks alongside integrations with AWS services and third-party tools. It centralizes vulnerability tracking and risk prioritization, delivering real-time alerts for proactive security management.

AWS Security Hub enhances cloud security management through a centralized dashboard that monitors infrastructure resources and compliance scores, ensuring adherence to AWS standards. With integrations for vulnerability detection and security posture management, users can streamline security operations. While the platform offers notable benefits, areas for improvement include customization options for findings suppression and integration with multi-cloud environments.

What are the key features of AWS Security Hub?

Multi-Account Management: Seamlessly manage security across numerous accounts.
Compliance Checks: Stay aligned with standards such as PCI through automated reviews.
AWS Integrations: Connect effortlessly with AWS and third-party services to enhance security posture.
Real-Time Alerts: Quickly respond to potential threats with immediate notifications.
Risk Prioritization: Focus on critical vulnerabilities to enhance resource allocation.

What benefits should users expect from using AWS Security Hub?

Proactive Security: Early threat detection enables quicker mitigation strategies.
Cloud-Native Functionality: Utilize tools tailored for cloud environments.
Compliance Insights: Simplified compliance management provides transparency.
Ease of Use: Streamlined interface facilitates efficient security management.

Industries implementing AWS Security Hub leverage its capabilities for comprehensive security across multiple accounts and regions. Health, finance, and retail sectors benefit by automating compliance checks and monitoring security infrastructures. This service aids in identifying misconfigurations, tracking alerts, and ensuring infrastructure integrity during cyber incidents.

Amazon Web Services (AWS)

Check Point CloudGuard CNAPP offers comprehensive cloud security with features like dynamic access control, asset protection, and compliance checks, tailored for organizations seeking enhanced governance across AWS, Azure, and GCP platforms.

Check Point CloudGuard CNAPP provides robust capabilities, including centralized firewall management, IAM scanning, and real-time visibility. Its strengths lie in predictive visualization, threat intelligence, and auto-remediation, making it a valuable tool for risk mitigation and compliance management. The platform's integration and responsiveness enhance cloud security, ensuring alignment with industry standards and effective threat protection.

What are the key features of Check Point CloudGuard CNAPP?

Dynamic Access Control: Enables granular security permissions for cloud resources.
Asset Protection: Safeguards cloud assets from unauthorized access and threats.
Compliance Checks: Ensures alignment with industry regulations like PCI DSS and SOC 2.
Centralized Firewall Management: Simplifies firewall rule configuration across cloud environments.
IAM Scanning: Audits and secures identity and access management configurations.
Real-Time Visibility: Provides insights into cloud environments for proactive threat detection.

What benefits and ROI should you expect from Check Point CloudGuard CNAPP?

Threat Intelligence: Identifies and mitigates potential risks before exploitation.
Auto-Remediation: Automates responses to security incidents, reducing manual intervention.
Intuitive Interface: Simplifies management and enhances operational efficiency.
Posture Management: Maintains strong security posture through continuous assessment.

Organizations in finance, healthcare, and retail frequently implement Check Point CloudGuard CNAPP for compliance and security across cloud environments. It assists with workload protection, threat detection, and regulatory obligation fulfillment, proving effective for securing applications and monitoring API interactions.

Check Point Software Technologies

Sample Customers

Information Not Available

Edmunds, Frame.io, GoDaddy, Realtor.com

Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners