No more typing reviews! Try our Samantha, our new voice AI agent.

Check Point Cloud Firewall (formerly CloudGuard Network Security) vs Microsoft Defender Vulnerability Management comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 13, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.2
Qualys TotalCloud enhances efficiency and automation, achieving up to 40% cost savings and over 50% improved asset scanning.
Sentiment score
6.9
Check Point Cloud Firewall offers rapid deployment, improved security, cost savings, and efficiency through automation and centralized management.
Sentiment score
4.4
Microsoft Defender's financial benefits are unclear, best within E5 suite, and difficult to assess against AWS for mixed solution users.
We are able to scan all our assets with less human intervention and achieve overall effective outcomes.
Dns architect at a tech consulting company with 1,001-5,000 employees
It has saved about 90% of our time.
Senior Consultant at a consultancy with 10,001+ employees
TotalCloud has generated overall savings of 30 to 40 percent across various departments.
Security Manager at a consultancy with 10,001+ employees
The value lies in maintaining operational integrity with zero downtime or incidents, facilitating secure, ongoing business operations.
Cybersecurity consultant at a comms service provider with 51-200 employees
The compliance has improved as our overall compliance score against CIS benchmark has improved from around 72 to 92% within the first three months of adoption.
Assistant Manager at a computer software company with 201-500 employees
This helped my team cut manual review time by roughly twenty to twenty-five percent, allowing me to reallocate effort to proactive cloud security improvements.
Networking and System Consultant at Orbcom,Lda.
Organizations typically do not rely solely on Microsoft products to avoid putting all eggs in one basket, which presents a challenge for maximizing ROI.
Cloud Security Engineer at a computer software company with 51-200 employees
As a Microsoft partner, we receive significant discounts, making the solution affordable for us.
COO at Floating-Dot Technology LTD
 

Customer Service

Sentiment score
6.8
Qualys TotalCloud's customer service is praised for responsiveness despite occasional delays, with ratings from seven to ten.
Sentiment score
7.1
Check Point Cloud Firewall support is praised for expertise but needs improved documentation and quicker complex issue responses.
Sentiment score
6.1
Microsoft Defender Vulnerability Management receives mixed reviews, highlighting expertise gaps and communication delays but valued for friendly assistance.
They are helpful, respond to my queries, and can answer any question.
Developer at a consultancy with 10,001+ employees
Qualys's tech support is highly responsive, providing multiple ways to interact with them.
Service Manager, Security Operations at CDA IT SOLUTIONS
Qualys' customer service provides quality answers, but the response time is long, even though it is within the SLA.
Works at a consultancy with 10,001+ employees
They usually respond quite fast, and they are very knowledgeable about what they do.
Network security engineer at a tech services company with 201-500 employees
We had an endless loop of emails trying to fix this, and the suggestion was to reinstall the gateway and do it from scratch, which was not an option at that point because it would leave that specific location without access.
System administrator at a consultancy with 201-500 employees
I think TAC of Check Point Cloud Firewall (formerly CloudGuard Network Security) is very competent; they really know what they are doing.
Ingeniero en redes y Telecomunicaciones at K-IT
They are sometimes responsive, however, often issues cannot be reproduced on their end, making it challenging.
Security Specialist at Prudential Systems Japan
The support we receive from Microsoft is declining, and for example, after taking advanced support, we have not received satisfactory answers.
Microsoft Solutions Manager at Self-Employed
They are familiar with Microsoft products but are not direct Microsoft staff, which is an area needing improvement.
Cloud Security Engineer at a computer software company with 51-200 employees
 

Scalability Issues

Sentiment score
7.4
Qualys TotalCloud is highly scalable and adaptable, efficiently supporting varied environments and large-scale deployments with robust performance.
Sentiment score
7.6
Check Point Cloud Firewall excels in scalability and performance across multi-cloud environments, despite some management complexity and cost considerations.
Sentiment score
7.0
Microsoft Defender Vulnerability Management is lauded for scalability and integration across environments, though some users seek improved documentation.
We started our organization about nine months back. We started with about 30 users, and we now have more than 100 users.
CIO at a venture capital & private equity firm with 11-50 employees
Our organization currently uses it to manage over 1200 web applications.
Analyst, Information Security at Infosys
It is absolutely scalable, and I would rate its scalability as nine out of ten.
retired at a consultancy with 10,001+ employees
Visibility scales without performance issues as my environment expands.
Networking and System Consultant at Orbcom,Lda.
It is capable of managing the increased load and performs well as our needs expand.
IT Security Analyst at Eos Energy Enterprises, Inc.
I can deploy it everywhere I need it.
Security & Network Services at a tech company with 201-500 employees
The integration is straightforward for those who understand it, though documentation needs improvement.
Cloud Security Engineer at a computer software company with 51-200 employees
It is scalable; I evaluated the product and decided to use Defender on over 700 of our company servers.
Security Specialist at Prudential Systems Japan
 

Stability Issues

Sentiment score
8.3
Qualys TotalCloud is stable and reliable, offering 99.9% uptime with quick support for minor issues and transparent maintenance updates.
Sentiment score
8.0
Check Point Cloud Firewall is stable and reliable, with seamless operation but occasional AWS integration and shared resources challenges.
Sentiment score
6.7
Microsoft Defender Vulnerability Management is appreciated for stability and ease despite resource intensity and occasional compatibility issues.
Overall, the support provided has been excellent.
Analyst, Information Security at Infosys
It has a lot of scanning mechanisms, which are agentless APIs, eBPF, and cloud agents, that are highly reliable.
Sr Security Engineer at a tech vendor with 5,001-10,000 employees
It is a stable solution, which is why we chose it.
CIO at a venture capital & private equity firm with 11-50 employees
The firewall itself, Gaia itself, tells you: "Look, there is this error, this problem; verify if your device is affected; if so, here is the solution."
Ingeniero en redes y Telecomunicaciones at K-IT
If there are errors, it is sometimes challenging to elaborate or troubleshoot since it is not transparent enough to understand what to search for.
Cloud Security Architect at controlware
I have not observed any downtime.
Sales manager/ project manager at Atea
There are compatibility issues occasionally arising with false positives when other security tools are not whitelisted in Microsoft Defender.
information Security and IT Manager at Discover Dollar Technologies Pvt Ltd.
It is very resource-intensive, consuming a lot of memory and CPU.
Security Specialist at Prudential Systems Japan
If Microsoft experiences downtime, this solution goes down as it is a SaaS-based solution where we have no control.
Cloud Security Engineer at a computer software company with 51-200 employees
 

Room For Improvement

Qualys TotalCloud requires UI improvements, better cloud integration, enhanced support, and optimized reporting, onboarding, and vulnerability detection.
Check Point Cloud Firewall needs better integration, user interface, documentation, support, reporting, and transparent pricing for optimal performance.
Microsoft Defender Vulnerability Management needs simplified configuration, better integration, faster updates, and advanced features for improved security and efficiency.
Ideally, the scanner should automatically detect and scan all subdomains, even if not explicitly defined, ensuring comprehensive vulnerability assessment.
Analyst, Information Security at Infosys
Ideally, updates should be more immediate, enabling quicker implementation of solutions.
Project Lead at Persistent Systems
Our goal is to integrate all these functions into Qualys, creating a single dashboard for comprehensive security monitoring and management.
Senior Information Security Engineer at a consultancy with 10,001+ employees
Scalability could be improved as well; needing to purchase a new license each time I want to add a new interface is not ideal.
Security architect at Twinformatics
Better documentation would be welcome.
Network security engineer at a tech services company with 201-500 employees
The user interface could be more intuitive, and the initial setup and configuration can be complex, requiring a technical team.
Android Developer at Droidforge
This scoring should be for specific industries as well. If I belong to the healthcare industry using Microsoft Defender Vulnerability Management, it should provide me with a risk score and show how I fare against the risk score of my industry.
DGM. Technical Security at a tech services company with 10,001+ employees
A vulnerability I patch within 15 minutes takes 24 additional hours for an update.
information Security and IT Manager at Discover Dollar Technologies Pvt Ltd.
The product is not stable; it often uses excessive memory and CPU, which makes it slow.
Security Specialist at Prudential Systems Japan
 

Setup Cost

Qualys TotalCloud is costly but justified for large companies due to features, flexibility, and VMware integration efficiencies.
Check Point Cloud Firewall offers competitive pricing, though complex enterprise needs may find it high; flexible licensing aids cost-efficiency.
Microsoft Defender Vulnerability Management offers competitive pricing in industry, though costs can be complex, especially for non-partners.
Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive.
Senior Manager at a financial services firm with 10,001+ employees
Pricing is managed by our finance team; however, Qualys TotalCloud offers cost-effective licensing flexibility.
IT Manager at a consultancy with 10,001+ employees
Qualys TotalCloud is expensive, but it offers a premier solution with no headaches.
Vice President at Inspira Enterprise
The pricing and licensing are expensive, costing between seven thousand to eight thousand dollars.
Android Developer at Droidforge
Check Point is expensive, however, with the features and capabilities, I can justify the cost.
Manager, Managed Security Services at a tech vendor with 51-200 employees
It is the highest in the market.
System engineer at a manufacturing company with 1,001-5,000 employees
Overall, every organization wishes for cheaper options, but we look at the security side as well, so we are good for now.
Senior Cloud Security Consultant at MetLife
For non-partners, however, the cost could be seen as higher, between seven to ten.
COO at Floating-Dot Technology LTD
The pricing is reasonable, and it's included in the whole Microsoft E5 bundle, so it's all-inclusive.
Corporate Planner at MISC Berhad
 

Valuable Features

Qualys TotalCloud offers efficient asset discovery, security posture management, and vulnerability management with excellent integration and threat intelligence features.
Check Point Cloud Firewall delivers robust security with centralized management, threat prevention, and seamless integration across cloud and hybrid environments.
Microsoft Defender offers asset discovery, real-time intelligence, seamless integration, risk prioritization, continuous monitoring, and proactive remediation with AI capabilities.
This view of risk helps reduce the work we would have to do to combine multiple sources to prioritize risk.
Works at a consultancy with 10,001+ employees
It will help cybersecurity professionals monitor the cloud and find vulnerabilities.
Developer at a consultancy with 10,001+ employees
We are enjoying the new feature, FlexScan, which is valuable for Internet-facing VMs.
Senior Consultant at a consultancy with 10,001+ employees
One of the most valuable features is the automated threat prevention, which helps us detect and block potential cyberattacks in real-time, minimizing data breaches.
Android Developer at Droidforge
Centralized management is the feature I like best, resulting in reduced workload and more continuous policy.
Security & Network Services at a tech company with 201-500 employees
Network Security provides us with unified security management across hybrid and cloud as well as on-prem.
Manager, Managed Security Services at a tech vendor with 51-200 employees
The main advantage of Microsoft Defender Vulnerability Management is that it can locate and prevent most threats even when the endpoints are not connected to the corporate network, as long as the internet is available.
DGM. Technical Security at a tech services company with 10,001+ employees
The feature for customizing to region-specific and domain-specific requirements in healthcare is particularly beneficial.
Cloud Security Engineer at a computer software company with 51-200 employees
The most valuable aspect is the kind of assessment results I get, and the recommendations provided in Microsoft products really help in taking care of the resources.
Senior Cloud Security Consultant at MetLife
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Ranking in Vulnerability Management
11th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
46
Ranking in other categories
Container Security (11th), Cloud Workload Protection Platforms (CWPP) (8th), Cloud Security Posture Management (CSPM) (8th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (7th)
Check Point Cloud Firewall ...
Ranking in Vulnerability Management
5th
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
243
Ranking in other categories
Firewalls (8th), Managed Security Services Providers (MSSP) (1st), Software Defined WAN (SD-WAN) Solutions (3rd), Cloud and Data Center Security (3rd), Container Security (6th), Cloud Workload Protection Platforms (CWPP) (5th), WAN Edge (3rd), Unified Threat Management (UTM) (4th), Cloud Security Posture Management (CSPM) (5th), Cloud-Native Application Protection Platforms (CNAPP) (5th), Data Security Posture Management (DSPM) (4th), Compliance Management (5th)
Microsoft Defender Vulnerab...
Ranking in Vulnerability Management
14th
Average Rating
8.2
Reviews Sentiment
6.4
Number of Reviews
18
Ranking in other categories
Advanced Threat Protection (ATP) (19th), Microsoft Security Suite (17th), Risk-Based Vulnerability Management (6th)
 

Mindshare comparison

As of September 2026, in the Vulnerability Management category, the mindshare of Qualys TotalCloud is 1.2%, up from 1.0% compared to the previous year. The mindshare of Check Point Cloud Firewall (formerly CloudGuard Network Security) is 1.4%, up from 1.3% compared to the previous year. The mindshare of Microsoft Defender Vulnerability Management is 1.3%, down from 3.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management Mindshare Distribution
ProductMindshare (%)
Check Point Cloud Firewall (formerly CloudGuard Network Security)1.4%
Qualys TotalCloud1.2%
Microsoft Defender Vulnerability Management1.3%
Other96.1%
Vulnerability Management
 

Featured Reviews

reviewer2859021 - PeerSpot reviewer
Sr Security Engineer at a tech vendor with 5,001-10,000 employees
Risk-based triage has transformed container security and now prioritizes high-impact threats
The best features Qualys TotalCloud offers currently include managing cloud infrastructure and container security while facing major challenges such as alert fatigue. Traditional vulnerability scanners flag hundreds of CVEs on short-lived Kubernetes containers, some of which have no internet exposure or are gone before we can even triage them. I leverage Qualys TotalCloud to move beyond static CVSS. I use it to implement runtime exposure, correlation risk reprioritization, and shift-left integration. This notifies developers to fix a base image upstream rather than patching live ephemeral instances. In my work with cloud and container security, the biggest operational hurdle was alert fatigue. I use Qualys to shift left from static CVSS severity to context-aware risk prioritization. I correlated raw vulnerability data with real-time risk factors such as public network exposure, active runtime execution, or overly permissive IAM roles. This allows us to immediately drop the priority of isolated containers and escalate lower-severity CVEs that sit on an exposed, high-risk path. We can map these findings directly back to our CI/CD pipelines so developers can patch the root base images upstream. We have drastically cut down the signal-to-noise ratio, saved a lot of manual hours doing triage work, and ensured engineering effort goes directly towards high-impact risk reduction.
Oscar Nunez - PeerSpot reviewer
Ingeniero en redes y Telecomunicaciones at K-IT
Centralized management has reduced policy time and provides reliable multitenant protection
What I would like, what I think they should improve a little is the management of objects at large scale. When you work with multiple domains, there are thousands of network objects. Detecting duplicates and consistency across domains is a very manual process that should be more automated. Another thing: the SmartConsole interface is very powerful and very good, but the learning curve, compared to other solutions in the market from other manufacturers, could be modernized. I think it does not necessarily have to be done from a client application; it could be done via web, because via web I know that not all the options you have in SmartConsole are available. So it would be good if it could also be done from the web and all the options were available. Another thing that I would really like is more automation with Ansible or Terraform. I know it has improved in recent versions, but I think it is still not mature enough. Compared to other manufacturers that do have a bit more in terms of automation capabilities in integration flows with Ansible or Terraform, Check Point Cloud Firewall (formerly CloudGuard Network Security) could improve. Another thing that could be improved a little would be the TAC response time, because when there are very complex cases, I think there should be more speed initially, more ownership of those urgent cases, and not leave the customer waiting. This has happened to me: when I have cases open with Check Point Cloud Firewall (formerly CloudGuard Network Security) TAC, sometimes they do not respond and I have to keep insisting, and I think that part should improve. I do not know if it depends on who takes the ticket or on the severity of the ticket, but sometimes I have had to insist a lot, and that would be the only problem. Once they attend to me and become involved in the case, the responses they give are very professional and really help directly resolve the problems when there is a bug or troubleshooting to do. As I said, I would like to see a specific improvement in SmartConsole. I think if they improved it—how to say it—gave it a facelift so you could access all the options directly from a browser, that would be great, because sometimes, for one reason or another, you cannot download SmartConsole or, for some reason, the SmartConsole client does not start correctly, and you could do it directly from the browser. I think that would be a good option to improve. Another thing would be that in multidomain environments, I would like a global search function for objects and rules. That is, you could enter and search across all domains at once, because right now you have to go domain by domain, and in environments with many customers, you spend quite a bit of time; you have to exit one domain and enter another. So those would be the improvements I would like to see.
reviewer2770602 - PeerSpot reviewer
Cloud Security Engineer at a computer software company with 51-200 employees
Has helped with regional threat monitoring but needs better documentation and real-time capabilities
The documentation from Microsoft needs significant improvement. The documents are disorganized, with one document linking to another, making the steps unclear and difficult to follow. Regarding updates, it is not truly real-time as it takes between eight to twelve hours for updates to occur. It would be beneficial if updates could happen more quickly, perhaps within 10 minutes to half an hour. Support for integration and documentation needs to be more straightforward. The pricing is expensive, even though it is part of the E5 package.
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
913,654 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
16%
Outsourcing Company
12%
Manufacturing Company
11%
Financial Services Firm
10%
Outsourcing Company
16%
Construction Company
13%
Financial Services Firm
9%
Manufacturing Company
7%
Financial Services Firm
12%
Manufacturing Company
10%
Comms Service Provider
7%
Computer Software Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business14
Midsize Enterprise5
Large Enterprise34
By reviewers
Company SizeCount
Small Business132
Midsize Enterprise53
Large Enterprise142
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise2
Large Enterprise8
 

Questions from the Community

What needs improvement with Qualys TotalCloud?
In terms of improvement, remediation still belongs to the cloud team, which is one of the issues we faced with Qualys...
What is your primary use case for Qualys TotalCloud?
My main use case for Qualys TotalCloud is regarding the cloud visibility that we were not having previously. Previous...
What is your experience regarding pricing and costs for Check Point CloudGuard Network Security?
Since we use a unified standard for using policies and modules in Check Point Cloud Firewall (formerly CloudGuard Net...
What needs improvement with Check Point CloudGuard Network Security?
The main limitations of Check Point Cloud Firewall (formerly CloudGuard Network Security) are not in Check Point itse...
What is your primary use case for Check Point CloudGuard Network Security?
Check Point Cloud Firewall (formerly CloudGuard Network Security) is the main manager that provides network security ...
What needs improvement with Microsoft Defender Vulnerability Management?
Configuration of Microsoft Defender Vulnerability Management is something that needs improvement. In future updates o...
What is your primary use case for Microsoft Defender Vulnerability Management?
I can control the applications using Microsoft Defender Vulnerability Management, which are its best features for me ...
 

Comparisons

 

Also Known As

Qualys TotalCloud with FlexScan
CloudGuard IaaS, Check Point vSEC, CloudGuard IaaS, Check Point Virtual Systems, Check Point CloudGuard Network Security, Check Point CloudGuard CNAPP
No data available
 

Overview

 

Sample Customers

Information Not Available
Physicians Choice Laboratory Services, Helvetica Insurance
Information Not Available
Find out what your peers are saying about Check Point Cloud Firewall (formerly CloudGuard Network Security) vs. Microsoft Defender Vulnerability Management and other solutions. Updated: September 2026.
913,654 professionals have used our research since 2012.