Check Point Cloud Firewall (formerly CloudGuard Network Security) vs Zafran Security comparison

Check Point Software Technologies and Zafran Security are both solutions in the Vulnerability Management category. Check Point Software Technologies is ranked #5 with an average rating of 8.4, while Zafran Security is ranked #20 with an average rating of 9.5. Check Point Software Technologies holds a 1.2% mindshare in VM, compared to Zafran Security’s 1.0% mindshare. Additionally, 96% of Check Point Software Technologies users are willing to recommend the solution, compared to 100% of Zafran Security users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Aug 13, 2026

Check Point Cloud Firewall (formerly CloudGuard Network Security) and Zafran Security both compete in the network security category, offering features designed to protect cloud and hybrid environments. Check Point Cloud Firewall seems to have the upper hand due to its comprehensive threat prevention and centralized management features.

Features: Check Point Cloud Firewall offers Zero-Day threat protection and advanced threat prevention, VPN capabilities, and URL filtering. It is praised for its automation and centralized management. Zafran Security excels in mitigation and exposure management, focusing on risk reduction through minimal feature enablement and providing a comprehensive view of risk landscapes.

Room for Improvement: Check Point Cloud Firewall could enhance its integration capabilities with specific environments like Nutanix and PaaS services. Improved API integrations and documentation clarity would benefit users. Zafran Security can advance its offerings with more comprehensive searching capabilities and customizable dashboards and reports to enhance user experience.

Ease of Deployment and Customer Service: Both products offer strong customer support. Check Point Cloud Firewall provides dedicated regional support teams and a strong community but can have variable support quality. Zafran Security is noted for its responsiveness in addressing feature requests and smooth deployment, although it could enhance its automation and integration capabilities.

Pricing and ROI: Check Point Cloud Firewall's pricing is considered high, but customers see value due to its capabilities, noting competitive pricing in some models. Zafran Security offers fair pricing with flexibility for scalability through asset-based licensing, providing value through risk reductions and vulnerability management simplification.

To learn more, read our detailed Vulnerability Management Report (Updated: July 2026).

Buyer's Guide

Vulnerability Management

July 2026

Download the complete report

Helped 909,679 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Qualys TotalCloud

Mindshare comparison

As of August 2026, in the Vulnerability Management category, the mindshare of Qualys TotalCloud is 1.2%, up from 1.0% compared to the previous year. The mindshare of Check Point Cloud Firewall (formerly CloudGuard Network Security) is 1.2%, down from 1.3% compared to the previous year. The mindshare of Zafran Security is 1.0%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Vulnerability Management Mindshare Distribution
Product	Mindshare (%)
Check Point Cloud Firewall (formerly CloudGuard Network Security)	1.2%
Qualys TotalCloud	1.2%
Zafran Security	1.0%
Other	96.6%

Vulnerability Management

Featured Reviews

Robert Orłowski

IT Security Expert at Alior Bank S.A.

Unified risk scoring has improved our cloud visibility and simplifies remediation priorities

Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.

Read full review

reviewer2875401

Network Engineer at a outsourcing company with 10,001+ employees

Unified security policies have protected our hybrid network with deep, user-based controls

The main limitations of Check Point Cloud Firewall (formerly CloudGuard Network Security) are not in Check Point itself but in the cloud platforms on which it is deployed. Because not all clouds have L2 infrastructure, you cannot build a unified clustering system everywhere. As a result, the problem usually is not with Check Point, but with the cloud. The main problem with Check Point Cloud Firewall (formerly CloudGuard Network Security) is that it uses a separate thick client instead of a browser. A browser-based SmartConsole exists, but it still has a number of limitations, while the thick client, the so-called SmartConsole, often works unstably, freezes, and has to be restarted. I do not recommend using Check Point Cloud Firewall (formerly CloudGuard Network Security) as a VPN hub for site-to-site VPN because it is inconvenient to monitor the state of its tunnels, especially visually. It does not have a convenient snap-in and everything can be checked only via the console, which is very inconvenient. Check Point is not the most universal solution as a device that provides routing and administration capabilities in addition to security. It is an excellent firewall, but it has a number of limitations in terms of routing and in creating VPN sessions, especially in terms of displaying their states.

Read full review

Reviewer6233

Information Security Vulnerability Management Executive Advisor at a healthcare company with 10,001+ employees

Has become an indispensable tool in our cybersecurity arsenal

While Zafran Security is already a powerful tool, there are areas where it could be further improved to provide even greater value. One key area for enhancement is the searching capabilities within its vulnerabilities module. By incorporating the ability to create Boolean searches, users would gain the ability to apply more complex filters and customize their search criteria. This would greatly enhance the precision and efficiency with which security teams can identify and prioritize vulnerabilities. Having such tailored search capabilities would save time and resources by narrowing down vast lists of vulnerabilities to those that meet specific parameters relevant to our unique risk environment. Additionally, integrating more robust reporting and visualization tools would be advantageous. Enhanced dashboards that offer customizable visual representations of risk configurations and threat landscapes would facilitate better communication with stakeholders, making it easier to explain vulnerabilities and the rationale behind certain security measures. This would also aid in demonstrating the improvements and value derived from existing security investments to leadership and non-technical team members.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"TruRisk Insights is the most important innovation they've released this year."

"In my opinion, this is the best tool."

"One of the most valuable features of Qualys TotalCloud is FlexScan, which is specifically for internet-facing VMs. We found this feature to be very useful. It was a key differentiator for us."

"I would definitely recommend it because it is easy to handle any cloud resources."

"While automatic inventory detection upon connection is a helpful feature, a truly valuable capability would be assessing an environment's security posture against Azure and CIS best practices."

"Qualys TotalCloud helps you not just to identify misconfigurations, but you can actually also fix issues."

"The scalability is good as well. I would rate it ten out of ten."

"The most valuable feature is the consolidated information that it provides from various platforms."

More Qualys TotalCloud pros

"This solution provides threat prevention and detection of anomalies automatically and investigates the activity of each one of them."

"Check Point Cloud Firewall (formerly CloudGuard Network Security) has positively impacted my organization by mainly helping us secure our cloud environment at the network base."

"Security visibility with Dome9 is excellent."

"The features of the solution which I have found most valuable are its flexibility and agility. It's a fully scalable solution, from our perspective. We can define scaling groups and, based on the load, it will create new instances. It's truly a product which is oriented toward the cloud mindset, cloud agility, and this is a great feature."

"The installation process doesn't take very long."

"Check Point is one of the best in the market."

"The solution provides a centralized management console for easy administration and monitoring of security policies and events, making it easy for the security team."

"Check Point Cloud Firewall (formerly CloudGuard Network Security) has centralized policy management, and the logging and monitoring is the extensive solution that we have really appreciated, as it supports multiple SIEM solutions to have logging and monitoring in place from a security perspective."

More Check Point Cloud Firewall (formerly CloudGuard Network Security) pros

"We are able to see the real risk of a vulnerability on our environment with our security tools."

"With Zafran Security, it integrates with your security controls, allowing you to take that risk score and reduce it based on the controls in place or increase the risk based on different factors, such as if the issue is internet reachable or if there's an exploit in the wild."

"We saw benefits from Zafran Security almost immediately after deploying it."

"Overall, we have seen about eighty-seven percent reduction of the number of vulnerabilities that require urgency to remediate, specifically the number of criticals."

"Zafran is an excellent tool."

"Zafran has become an indispensable tool in our cybersecurity arsenal."

Cons

"Regarding technical support from Qualys, they respond, but the response time can be too long. Sometimes we need to wait weeks for solutions to simple questions."

"The patching process with Qualys Patch Management, which is part of TotalCloud, does not cover installing certain prerequisites on the servers or workstations. This shortcoming means we must rely on SCCM when any service stack updates or additional prerequisites are needed."

"The areas in the solution that have room for improvement include the UI/UX design, which should be improved, and they should integrate more artificial intelligence into the product."

"I would like the ability to disable certain default built-in policies as they can be misleading when creating dashboards. That is the top one."

"There is room for improvement in vulnerability scanning, particularly for PaaS environments. Currently, Qualys does not have full access to these instances, which limits its effectiveness."

"In my opinion, what can be improved in Qualys TotalCloud includes pricing and container scanning."

"Qualys TotalCloud has the potential to improve by integrating a hybrid platform for comprehensive management of both on-premises and cloud infrastructures."

"The response part of the Cloud Detection and Response (CDR) module can be improved."

More Qualys TotalCloud cons

"The price of the solution could be reduced, it is expensive."

"More integration into one solution with increased automation would be beneficial."

"The rules are not well-tuned, and many of them generate false positives or nonsensical results."

"Reporting should have more options."

"The reporting has a lot of opportunities to continuously improve so that we can continue to show value."

"Almost all features are good, however, they still require improvements to the code security portion on which integration with the major source code repository is required."

"When upgrading the firewall, the old VPC containing the firewalls needs to be destroyed. After that, a new firewall is redeployed in the setup. Additionally, there's a need to separate the routing, and the routing from the old VPC has to be recreated in the new one."

"Every experience is different. Every ticket is different, and sometimes it's a little bit painful to pinpoint problems."

More Check Point Cloud Firewall (formerly CloudGuard Network Security) cons

"I think the ability to have some enhanced reporting capabilities is something they can improve on, as they have good reports but we have asked for some specific reporting enhancements."

"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."

"The dashboarding and reporting functionality of Zafran Security is an area that definitely could use some improvements."

Pricing and Cost Advice

"While Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive and may soon be considered overpriced."

"TotalCloud's price is about right where I would expect it to be."

"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."

"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."

"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."

"Qualys TotalCloud is expensive."

"Qualys TotalCloud offers cost-effective licensing flexibility."

"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."

More Qualys TotalCloud pricing and cost advice

"The tool's pricing is been higher than other solutions, but it seems like it's turning downwards."

"Although I am not in sales and cannot comment extensively on pricing, it is known that Check Point’s licensing can be complex. However, it is a similar experience to other gateways and not particularly unique for cloud protection."

"The tool's pricing is moderate. Its licensing costs are yearly."

"When customers compare it with Sophos or any other products, the price is on the higher side."

"We have the enterprise-level license and we renew it annually because it is worth the cost."

"The licesning has some good features. For example, the scaling feature is free of charge, allowing multiple scale-ups and scale-downs over a two-week period, which is pretty good."

"My experience has been extremely positive. It was not a concern because I had an account team that fought for pricing for our company. They were not pushing me to professional services for certain help. I was instantly getting a CloudGuard architect to help us out."

"The price is fair for most of the customers. We don't find the price excessive. It's okay."

More Check Point Cloud Firewall (formerly CloudGuard Network Security) pricing and cost advice

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.

See recommendations

909,679 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

13%

Outsourcing Company

11%

Comms Service Provider

11%

Financial Services Firm

10%

Construction Company

15%

Outsourcing Company

12%

Financial Services Firm

10%

Manufacturing Company

Financial Services Firm

11%

Manufacturing Company

Computer Software Company

Outsourcing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	11
Midsize Enterprise	5
Large Enterprise	30

By reviewers
Company Size	Count
Small Business	132
Midsize Enterprise	55
Large Enterprise	138

By reviewers
Company Size	Count
Midsize Enterprise	3
Large Enterprise	5

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?

The price is very expensive, actually.

See all answers

What needs improvement with Qualys TotalCloud?

To be totally honest, I do not have any best features because I have had a bad experience using this tool, especially...

See all answers

What is your primary use case for Qualys TotalCloud?

My main use case for Qualys TotalCloud is vulnerability management and exposure management. I use this tool to evalua...

See all answers

What is your experience regarding pricing and costs for Check Point CloudGuard Network Security?

Since we use a unified standard for using policies and modules in Check Point Cloud Firewall (formerly CloudGuard Net...

See all answers

What needs improvement with Check Point CloudGuard Network Security?

The main limitations of Check Point Cloud Firewall (formerly CloudGuard Network Security) are not in Check Point itse...

See all answers

What is your primary use case for Check Point CloudGuard Network Security?

Check Point Cloud Firewall (formerly CloudGuard Network Security) is the main manager that provides network security ...

See all answers

What is your experience regarding pricing and costs for Zafran Security?

Since we stood Zafran Security up in our private cloud, we handle the maintenance on our side. As we opted not to use...

See all answers

What needs improvement with Zafran Security?

In terms of areas for improvement, Zafran Security is doing a really great job as a new and emerging company. Oftenti...

See all answers

What is your primary use case for Zafran Security?

My use cases for Zafran Security revolve around two primary areas. One is around vulnerability management and priorit...

See all answers

Comparisons

Wiz vs Qualys TotalCloud

Compared 10% of the time

Microsoft Defender for Cloud vs Qualys TotalCloud

Compared 8% of the time

JupiterOne vs Qualys TotalCloud

Compared 6% of the time

Prisma Cloud by Palo Alto Networks vs Qualys TotalCloud

Compared 6% of the time

AWS Security Hub vs Qualys TotalCloud

Compared 5% of the time

More Qualys TotalCloud Competitors

Prisma Cloud by Palo Alto Networks vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 8% of the time

Azure Firewall vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 3% of the time

Palo Alto Networks NG Firewalls vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 3% of the time

Fortinet FortiGate vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 3% of the time

Cisco Secure Firewall vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 2% of the time

More Check Point Cloud Firewall (formerly CloudGuard Network Security) Competitors

Wiz Code vs Zafran Security

Compared 11% of the time

Nucleus Security vs Zafran Security

Compared 10% of the time

Vulcan Cyber vs Zafran Security

Compared 8% of the time

IONIX vs Zafran Security

Compared 8% of the time

Wiz vs Zafran Security

Compared 8% of the time

More Zafran Security Competitors

Product Reports

Buyer's Guide

Qualys TotalCloud

August 2026

Download Qualys TotalCloud product report

Buyer's Guide

Check Point Cloud Firewall (formerly CloudGuard Network Security)

August 2026

Check Point Cloud Firewall (formerly CloudGuard Network Security) report

Download Check Point Cloud Firewall (formerly CloudGuard Network Security) product report

Buyer's Guide

Zafran Security

July 2026

Download Zafran Security product report

Also Known As

Qualys TotalCloud with FlexScan

CloudGuard IaaS, Check Point vSEC, CloudGuard IaaS, Check Point Virtual Systems, Check Point CloudGuard Network Security, Check Point CloudGuard CNAPP

No data available

Overview

Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.

Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.

What are the most important features of Qualys TotalCloud?

Accurate Vulnerability Reports: Delivers precise and actionable insights for risk mitigation.
Zero-Day Detection: Identifies and addresses zero-day vulnerabilities proactively.
Unified Threat Assessment: Offers comprehensive evaluation of threats across the environment.
Extensive Risk Management: Manages risks effectively with advanced insights and prioritization.
Continuous Monitoring: Provides non-stop surveillance for vulnerabilities and threats.
Cloud-Native Automation: Streamlines processes and reduces manual efforts using automation.
FlexScan for Internet-Facing VMs: Scans external VMs efficiently to detect vulnerabilities.
Dashboard Risk Visualization: Clear visualization helps prioritize vulnerabilities.

What benefits and ROI should users look for?

Improved Security Posture: Enhances threat detection and response across clouds.
Time Savings: Automation reduces time spent on manual vulnerability management.
Resource Efficiency: Better allocation of resources through streamlined workflows.
Enhanced Risk Prioritization: Focus on critical vulnerabilities for effective mitigation.
Integrated Cloud Accounts: Facilitates seamless cloud management and security.

Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.

Qualys

Check Point Cloud Firewall, previously known as CloudGuard Network Security, provides advanced threat prevention, centralized management, and VPN capabilities, enabling robust cloud security across various platforms including Azure and AWS.

Check Point Cloud Firewall delivers seamless cloud integration with advanced automated threat prevention and centralized management to enhance security posture. It offers auto-scaling for dynamic environments and a comprehensive policy enforcement framework in hybrid settings. The unified interface streamlines administration across cloud infrastructures, ensuring consistent protection and reducing risk.

What important features does it offer?

Advanced Threat Prevention: Safeguards against sophisticated threats.
Centralized Management: Simplifies control for cloud infrastructures.
Auto-scaling: Adapts to changing workloads seamlessly.
VPN Capabilities: Enables secure connections across environments.
Integration with Azure and AWS: Ensures compatibility with leading cloud services.
Visibility Tools: Enhanced monitoring and management for security enforcement.

What benefits can users expect?

Enhanced Security: Comprehensive threat management reduces risk.
Operational Efficiency: Automation capabilities streamline processes.
Cost Management: Efficient resource usage with auto-scaling reduces expenses.
Integration Flexibility: Adapts easily into existing cloud platforms.
Simplified Administration: Unified management reduces complexity.

In manufacturing and conglomerate sectors, Check Point Cloud Firewall is utilized for protecting cloud environments and implementing network segmentation. It supports secure cloud migration on AWS, Azure, and GCP, ensuring compliance, perimeter defense, and traffic inspection, facilitating sophisticated threat prevention strategies.

Check Point Software Technologies

Zafran Security revolutionizes threat management by leveraging existing tools to distinguish between non-exploitable and critical vulnerabilities, ensuring swift action on potential risks.

Zafran Security offers a groundbreaking approach to vulnerability management through its Zafran Threat Exposure Management Platform. This unified platform utilizes existing security tools to filter out non-exploitable vulnerabilities while prioritizing actionable threats. By integrating vulnerability signals from hybrid cloud environments and factoring in IT-specific contexts, such as CVE presence and asset reachability, Zafran sharpens focus on the most critical exposures. Their solution empowers users to manage risks efficiently, cutting remediation time and restoring risk control to security teams. Recognized as the top CTEM solution by Cyber Defense Magazine in 2024, Zafran provides unmatched capability in threat mitigation and risk reduction.

What are the key features of Zafran Security?

Mitigations Module: Identifies effective measures, boosting efficiency with minimal disruption.
Exposure Tracker: Delivers insights into vulnerability trends to enhance strategic planning.
Integration Capabilities: Connects with tools to analyze risks accurately and adjust risk levels.
Weekly Insights: Offers regular updates and scoring to assist leadership in risk evaluation.

What benefits should users expect from Zafran Security?

Prominent Adaptability: The private SaaS setup offers flexible and prompt benefits.
Effective Vulnerability Management: Focuses resources on pressing threats, reducing remediation time.
Streamlined Communication: Customizable dashboards improve reporting and communication.

Zafran Security finds utility in multiple industries needing robust risk management. It enhances vulnerability scoring and prioritization, supporting the assessment and management of exposure. This is particularly valuable in sectors with significant cyber risks, emphasizing identification and swift response to immediate threats, thus reinforcing cybersecurity infrastructures.

Zafran Security

Sample Customers

Information Not Available

Physicians Choice Laboratory Services, Helvetica Insurance

Information Not Available

Buyer's Guide

Vulnerability Management

July 2026

Download Free Report

Find out what your peers are saying about Wiz, Qualys, Tenable and others in Vulnerability Management. Updated: July 2026.

DOWNLOAD NOW

909,679 professionals have used our research since 2012.

See our list of best Vulnerability Management vendors.

We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.