Check Point CloudGuard CNAPP vs Cisco Secure Workload comparison

Check Point Software Technologies and Cisco are both solutions in the Cloud and Data Center Security category. Check Point Software Technologies is ranked #9 with an average rating of 8.5, while Cisco is ranked #8 with an average rating of 9.5. Check Point Software Technologies holds a 2.7% mindshare in CDCS, compared to Cisco’s 9.5% mindshare. Additionally, 95% of Check Point Software Technologies users are willing to recommend the solution, compared to 100% of Cisco users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 9, 2024

Check Point CloudGuard CNAPP and Cisco Secure Workload are prominent players in the cloud-native application security market. Check Point CloudGuard CNAPP leads in pricing and support according to user feedback, while Cisco Secure Workload is preferred for its rich feature set, making it appealing despite higher costs.

Features: Check Point CloudGuard CNAPP provides robust threat prevention, effective compliance capabilities, and strong support for security automation. Cisco Secure Workload offers extensive monitoring, advanced workload protection features, and sophisticated threat detection capabilities that cater to users desiring comprehensive security solutions.

Room for Improvement: Check Point CloudGuard CNAPP could improve in integration with third-party tools, streamline its configuration settings, and enhance user interface intuitiveness. Cisco Secure Workload users desire better analytics, more straightforward policy management, and improved scalability for growing workloads.

Ease of Deployment and Customer Service: Check Point CloudGuard CNAPP is known for its straightforward deployment and responsive customer support, facilitating ease of use. Cisco Secure Workload, though requiring a more complex setup, is supported by detailed documentation and proactive customer service, helping users navigate deployment challenges.

Pricing and ROI: Check Point CloudGuard CNAPP is recognized for its competitive pricing, delivering a solid return on investment, especially for budget-conscious businesses. Cisco Secure Workload, despite potentially higher upfront costs, is seen as offering significant long-term value through its advanced features and efficiency in threat management.

To learn more, read our detailed Check Point CloudGuard CNAPP vs. Cisco Secure Workload Report (Updated: April 2026).

Buyer's Guide

Check Point CloudGuard CNAPP vs. Cisco Secure Workload

April 2026

Download the complete report

Helped 893,221 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

SentinelOne Singularity Clo...

Mindshare comparison

As of May 2026, in the Cloud and Data Center Security category, the mindshare of SentinelOne Singularity Cloud Security is 3.4%, up from 1.6% compared to the previous year. The mindshare of Check Point CloudGuard CNAPP is 2.7%, up from 1.0% compared to the previous year. The mindshare of Cisco Secure Workload is 9.5%, down from 14.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Cloud and Data Center Security Mindshare Distribution
Product	Mindshare (%)
SentinelOne Singularity Cloud Security	3.4%
Cisco Secure Workload	9.5%
Check Point CloudGuard CNAPP	2.7%
Other	84.4%

Cloud and Data Center Security

Featured Reviews

Sreeraj Mohandas

Security Engineer at HashXpert

Consolidated cloud security has reduced manual work and has automated vulnerability remediation

I elaborate on my rating of SentinelOne support by mentioning that there was some time where the troubleshooting took a longer time. In fact, there were many meetings going on. The availability of the document on the internet is on a lesser side because as an engineer, I would want to know about the troubleshooting aspects of this particular tool. When I am facing a customer, I do not prefer to bring the vendor to every call and try to resolve it, as it takes months and months. It would be better to have a training session with the engineer on site to explain and train properly. This is not the case with SentinelOne, so this is the only thing I have a complaint about. I do not have any other room for improvement to suggest within SentinelOne itself. However, I would really want the AI assistant for the threat hunting part to be more accessible. They have it, but they are making it licensed, so it is a bit on the higher end.

Read full review

reviewer2751468

Assistant Manager at a computer software company with 201-500 employees

Boosts security and compliance in multi-cloud environments while real-time threat detection enhances risk management

Check Point CloudGuard CNAPP flagged a misconfiguration in our AWS S3 bucket that had overly permissive access settings. That configuration could have exposed our sensitive data to the public internet. The platform not only identified the issue but also provided remediation that our team was able to apply immediately. This prevented a potential data exposure. Check Point CloudGuard CNAPP offers a unified, modular platform that combines CSPM, CWPP, CIEM, code security, and cloud detection and response. The agentless workload posture, real-time threat detection and response, multi-cloud coverage and visibility, compliance automation, and one-click remediations stand out as its best features. I find myself relying on the risk management engine and prioritization the most day-to-day. In any cloud environment, you are flooded with findings, misconfigurations, vulnerabilities, and compliance gaps. Without prioritization, it is overwhelming for our team to take care of the posture. CloudGuard's risk scoring helps us cut through incidents. This makes remediation faster and focused instead of wasting time checking every alert. We get to fix the issues that pose real business risks. Check Point CloudGuard CNAPP has positively impacted our organization at a significant level. We get greater visibility and control across all our cloud environments. Some biggest benefits we have seen are faster detection and remediation of misconfigurations, improved compliance posture, reduced risk exposure, operational efficiency, and cost savings. Overall, it has made our cloud environment more secure, compliant, and easier to manage while freeing up our teams to focus on projects instead of chasing alerts.

Read full review

Raj Metkar

Director, Head of Networks at MUFG, EMEA

Discover internal application dependencies and create a dependency map

We actively seek improvements in integrating the Infoblox DDI platform with Cisco Secure Workload. This integration allows Cisco Secure Workload to learn about our networks and network tags, providing valuable insights into vulnerabilities related to the operating system and various applications installed on our servers. Recently, Cisco announced a new product called HyperShield, an AI-based autonomous micro-segmentation solution. While Cisco has not stated that HyperShield will replace Cisco Secure Workload, it represents a natural evolution for the company. HyperShield features dynamic policy discovery and enforcement; however, once policies are enforced, they do not change until a discovery occurs, requiring a re-enforcement process. This new platform operates autonomously, minimizing the need for user or security engineer intervention. I would have expected Cisco to incorporate more automatic discovery and enforcement features within the existing Cisco Secure Workload product. Instead of enhancing the current product, they have introduced a new solution. Cisco plans to honor existing Tetration licenses, allowing users to transition to HyperShield without additional costs, reflecting the investment enterprises have already made. From Cisco’s perspective, this represents a natural progression in their product line. While the product name changes, it seems more of a rebranding effort. The enhancements are greater autonomy, improved discovery, and automatic enforcement, which are now being introduced in HyperShield. Cisco Secure Workload offers automatic policy enforcement but cannot adjust policies dynamically as the application needs to change. Having used the platform for the past five years, the recent announcement has been reassuring. Cisco has confirmed that our investment in the platform will not go to waste. They will honor our existing licenses, providing a natural migration path to the new solution without any disruption

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Cloud Native Security offers a valuable tool called an offensive search engine."

"I recommend SentinelOne due to its high-security capabilities, which are essential to safeguard data and systems from potential threats."

"We use the infrastructure as code scanning, which is good."

"SentinelOne Singularity Cloud Security has improved our security posture."

"Cloud Native Security is user-friendly. Everything in the Cloud Native Security tool is straightforward, including detections, integration, reporting, etc. They are constantly improving their UI by adding plugins and other features."

"The visibility provided by SentinelOne Singularity Cloud Security around infrastructure was very valuable."

"It saves us time based on savings on manual activities."

"The cloud misconfiguration feature and Offensive Security Engine, as well as their alerting process, are valuable."

More SentinelOne Singularity Cloud Security pros

"The dashboard is intuitive. You know if you're compliant or not, and then it gives you a remediation plan."

"Good interface and visibility."

"Dome9 has improved our organization in the way that we have a centralized view of all of our assets, our visible assets, our ECs, our inventories, and then all the policies are centralized and it is easier to manage because everything is one component console."

"Dome9 continues to be a major piece of our cloud security architecture and has given our senior leadership team a high degree of confidence in our ability to protect our cloud environment."

"The product allows us to enhance the security of the implementations we have."

"The feature that I value the most about Check Point CloudGuard CNAPP is the possibility of checking compliance with different standards. This compliance check can be performed for each subscription or service that we have on all the different cloud providers that we use."

"It streamlines visibility, so this is the right tool if you are trying to meet a specific compliance standard or you are managing hundreds or thousands of servers within your cloud environment."

"It has great scalability."

More Check Point CloudGuard CNAPP pros

"The solution is very user-friendly, which clients appreciate."

"Scalability is its most valuable feature."

"Overall, this is a really good product and I am happy with it."

"A complete and powerful micro-segmentation solution."

"The most valuable feature of the solution is that we don't have to do packet captures on the network."

"Secure Workload's best feature is that it's an end-to-end offering from Cisco."

"By using Tetration insight, we are able to get the latency on our level accounts and we can determine whatever the issue is with the application latency itself."

"The most valuable feature right now is to do with having visibility on the network — especially on our servers — and to be able to enforce some type of security measures."

More Cisco Secure Workload pros

Cons

"It does not bring much threat intel from the outside world. All it does is scan. If it can also correlate things, it will be better."

"One potential drawback is the cost of SentinelOne Singularity Cloud Security, which may be prohibitive for smaller businesses or startups, particularly those in regions with lower average incomes, such as India."

"Customized queries should be made easier to improve SentinelOne Singularity Cloud Security."

"If something happens in our infrastructure, the alert appears on the dashboard, but I have to log in to the dashboard and refresh it. I would prefer it to provide better alerting and notifications so that I can resolve issues on priority."

"One area that could be improved in SentinelOne Singularity Cloud Security is their policies; the way they have configured the policies could be enhanced."

"In some cases, the rules are strictly enforced but do not align with real-world use cases."

"The documentation could be better."

"For SentinelOne, improvements could be made in managing Internet dependency as cloud-based operations can pose challenges in environments with limited connectivity."

More SentinelOne Singularity Cloud Security cons

"The user interface could be improved. Sometimes, the visibility is not immediately available for the environment. We have the native servers that come with the solutions, but we cannot see them in the Check Point log. Another issue is with the integrated file monitoring. It would make sense to have stuff like file integrity monitoring and malware scanning available within this module because we don't want to integrate another product."

"I would like an interface more adapted to cell phones or tablets."

"The entire system is complicated, and the setup process may not cater to the company's demands."

"I would like to see Test B functions at the application access level."

"In general, we abandoned this solution this year. Each component of this solution, in my opinion, could be improved."

"The false positives can be annoying at times."

"Check Point tools need to improve the latency in the portal since they take a long time to load."

"The shift left part is not yet at a maturity level I desire. I need more integration from the code-to-cloud principle."

More Check Point CloudGuard CNAPP cons

"The multi-tenancy, redundancy, backup and restore functionalities, as well as the monitoring aspects of the solution, need improvement. The solution offers virtually no enterprise-grade possibility for monitoring."

"Cisco Tetration needs more flags and system alerts that we should get with network capture."

"The entire interface could be improved; it's ugly and uninviting, and Tetration tends to be a lot more cumbersome and not very intuitive compared to the biggest competitor's modern-looking GUI."

"I'd like to see better documentation for advanced features. The documentation is fairly basic. I would also like to see better integration with other applications."

"The scalability of this solution needs to be improved."

"The multi-tenancy, redundancy, backup and restore functionalities, as well as the monitoring aspects of the solution, need improvement."

"They should scale down the hardware a bit. The initial hardware investment is two million dollars so it's a price point problem."

"It is not so easy to use and configure. It needs a bunch of further resources to work, which is mainly the biggest downside of it. The deployment is huge."

More Cisco Secure Workload cons

Pricing and Cost Advice

"The pricing is somewhat high compared to other market tools."

"Its pricing was a little less than other providers."

"It's not expensive. The product is in its initial growth stages and appears more competitive compared to others. It comes in different variants, and I believe the enterprise version costs around $55 per user per year. I would rate it a five, somewhere fairly moderate."

"PingSafe is affordable."

"The tool is cost-effective."

"PingSafe is cost-effective for the amount of infrastructure we have. It's reasonable for what they offer compared to our previous solution. It's at least 25 percent to 30 percent less."

"The features included in PingSafe justify its price point."

"PingSafe's primary advantage is its ability to consolidate multiple tools into a single user interface, but, beyond this convenience, it may not offer significant additional benefits to justify its price."

More SentinelOne Singularity Cloud Security pricing and cost advice

"We have the enterprise-level license and we renew it annually because it is worth the cost."

"The license for CloudGuard Posture Management is about $80 a year, and it's based on your cloud footprint, not the number of users. So you could have a million users, and it doesn't matter."

"Licensing and costs are straightforward, as they have a baseline of 100 workloads within one license and no additional charges."

"The solution’s pricing is a little bit high."

"The pricing is tremendous and super cheap. It is shockingly cheap for what you get out of it. I am happy with that. I hope that doesn't get reported back and they increase the prices. I love the pricing and the licensing makes sense. It is just assets: The more stuff that you have, the more you pay."

"The pricing is extremely competitive."

"It is a very straightforward licensing model that is based on the number of assets you are discovering and managing with the solution."

"The tool's pricing is moderate. Its licensing costs are yearly."

More Check Point CloudGuard CNAPP pricing and cost advice

"It is not cheap and pricing may limit scalability."

"The price is based on how many computers you're going to install it on."

"Pricing depends on the scope of the application and the features. Larger installations save more."

"Regarding price, Cisco Secure Workload can be expensive if you don't have a budget. If you're not doing micro-segmentation, every extra security measure or enforcement you're putting on top of your existing environment will be an extra cost. It's not a cheap solution at all. But from my point of view, if you need to do micro-segmentation, this is one of the best tools I've seen for it. I can't compare that to Microsoft's solution because I haven't looked into it. I've looked into VMware and Cisco. Those are the only two that I know of. I didn't know that Microsoft could do micro-segmentation at all. Maybe they can, but I haven't heard anything about it."

"The price is outrageous. If you have money to throw at the product, then do it."

"The pricing is a bit higher than we anticipated."

"The cost for the hardware is around 300k."

See which vendors are best for you

Use our free recommendation engine to learn which Cloud and Data Center Security solutions are best for your needs.

See recommendations

893,221 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

14%

Computer Software Company

11%

Manufacturing Company

Government

Financial Services Firm

10%

Construction Company

Manufacturing Company

Outsourcing Company

Manufacturing Company

14%

Financial Services Firm

10%

Government

Computer Software Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	52
Midsize Enterprise	23
Large Enterprise	58

By reviewers
Company Size	Count
Small Business	56
Midsize Enterprise	17
Large Enterprise	56

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	3
Large Enterprise	8

Questions from the Community

What do you like most about PingSafe?

The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...

See all answers

What is your experience regarding pricing and costs for PingSafe?

My experience with the pricing, setup costs, and licensing of SentinelOne Singularity Cloud Security is that the pric...

See all answers

What needs improvement with PingSafe?

Integration could be improved because not all solutions can be integrated with SentinelOne Singularity Cloud Security...

See all answers

What is your experience regarding pricing and costs for CloudGuard Workload Protection?

My experience with pricing, setup cost, and licensing has been reasonable for the value it delivers. The initial setu...

See all answers

What needs improvement with CloudGuard for Cloud Intelligence?

One area that Check Point CloudGuard CNAPP could use improvement is the navigation when switching between modules. A ...

See all answers

What is your primary use case for CloudGuard for Cloud Intelligence?

My main use case for Check Point CloudGuard CNAPP is strengthening cloud security posture, monitoring configurations,...

See all answers

What is your experience regarding pricing and costs for Cisco Secure Workload?

CloudStrike offers antivirus capabilities and firewall features for servers and VDI but lacks automatic policy discov...

See all answers

What needs improvement with Cisco Secure Workload?

We actively seek improvements in integrating the Infoblox DDI platform with Cisco Secure Workload. This integration a...

See all answers

What is your primary use case for Cisco Secure Workload?

When we onboarded Cisco Secure Workload, the usual use case was to discover internal application dependencies and cre...

See all answers

Comparisons

Wiz vs SentinelOne Singularity Cloud Security

Compared 8% of the time

Prisma Cloud by Palo Alto Networks vs SentinelOne Singularity Cloud Security

Compared 7% of the time

Microsoft Defender for Cloud vs SentinelOne Singularity Cloud Security

Compared 6% of the time

CrowdStrike Falcon Cloud Security vs SentinelOne Singularity Cloud Security

Compared 5% of the time

FortiCNAPP vs SentinelOne Singularity Cloud Security

Compared 4% of the time

More SentinelOne Singularity Cloud Security Competitors

Prisma Cloud by Palo Alto Networks vs Check Point CloudGuard CNAPP

Compared 17% of the time

Cloudflare vs Check Point CloudGuard CNAPP

Compared 4% of the time

Microsoft Defender for Cloud vs Check Point CloudGuard CNAPP

Compared 4% of the time

AWS Security Hub vs Check Point CloudGuard CNAPP

Compared 3% of the time

Qualys VMDR vs Check Point CloudGuard CNAPP

Compared 2% of the time

More Check Point CloudGuard CNAPP Competitors

Illumio vs Cisco Secure Workload

Compared 15% of the time

Akamai Guardicore Segmentation vs Cisco Secure Workload

Compared 13% of the time

VMware NSX vs Cisco Secure Workload

Compared 9% of the time

Cisco Hypershield vs Cisco Secure Workload

Compared 7% of the time

TrendAI Deep Security vs Cisco Secure Workload

Compared 6% of the time

More Cisco Secure Workload Competitors

Product Reports

Buyer's Guide

SentinelOne Singularity Cloud Security

April 2026

SentinelOne Singularity Cloud Security report

Download SentinelOne Singularity Cloud Security product report

Buyer's Guide

Check Point CloudGuard CNAPP

May 2026

Download Check Point CloudGuard CNAPP product report

Buyer's Guide

Cisco Secure Workload

May 2026

Download Cisco Secure Workload product report

Also Known As

PingSafe

Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence

Cisco Tetration

Overview

SentinelOne Singularity Cloud Security offers a streamlined approach to cloud security with intuitive operation and strong integration capabilities for heightened threat detection and remediation efficiency.

Singularity Cloud Security stands out for its real-time detection and response, effectively minimizing detection and remediation timelines. Its automated remediation integrates smoothly with third-party tools enhancing operational efficiency. The comprehensive console ensures visibility and support for forensic investigations. Seamless platform integration and robust support for innovation are notable advantages. Areas for development include improved search functionality, affordability, better firewall capabilities for remote users, stable agents, comprehensive reporting, and efficient third-party integrations. Clarity in the interface, responsive support, and real-time alerting need enhancement, with a call for more automation and customization. Better scalability and cost-effective integration without compromising capabilities are desired.

What are SentinelOne Singularity Cloud Security's standout features?

Ease of Use: Intuitive operation simplifies navigation across platforms.
Real-Time Detection: Quick identification and response to threats.
Automated Remediation: Streamlines recovery processes with integration capabilities.
Forensic Visibility: Aids in thorough threat analysis and prevention strategies.
Comprehensive Console: Offers full visibility and historical data tracking.
Platform Integration: Supports seamless operation across cloud and hybrid environments.

What benefits should users expect from SentinelOne Singularity Cloud Security?

Enhanced Efficiency: Automation and third-party integration improve threat response.
Improved Detection: Reduces mean time to detect and respond to threats.
Operational Support: Comprehensive visibility and forensic tools aid operational decisions.
Cost Efficiency: Affordable integration with scaling capabilities without high overhead.

SentinelOne Singularity Cloud Security is deployed in industries needing robust cloud security posture management, endpoint protection, and threat hunting. Utilized frequently across AWS and Azure, it assists in monitoring, threat detection, and maintaining compliance in diverse environments while providing real-time alerts and recommendations for proactive threat management.

SentinelOne

Check Point CloudGuard CNAPP offers comprehensive cloud security with features like dynamic access control, asset protection, and compliance checks, tailored for organizations seeking enhanced governance across AWS, Azure, and GCP platforms.

Check Point CloudGuard CNAPP provides robust capabilities, including centralized firewall management, IAM scanning, and real-time visibility. Its strengths lie in predictive visualization, threat intelligence, and auto-remediation, making it a valuable tool for risk mitigation and compliance management. The platform's integration and responsiveness enhance cloud security, ensuring alignment with industry standards and effective threat protection.

What are the key features of Check Point CloudGuard CNAPP?

Dynamic Access Control: Enables granular security permissions for cloud resources.
Asset Protection: Safeguards cloud assets from unauthorized access and threats.
Compliance Checks: Ensures alignment with industry regulations like PCI DSS and SOC 2.
Centralized Firewall Management: Simplifies firewall rule configuration across cloud environments.
IAM Scanning: Audits and secures identity and access management configurations.
Real-Time Visibility: Provides insights into cloud environments for proactive threat detection.

What benefits and ROI should you expect from Check Point CloudGuard CNAPP?

Threat Intelligence: Identifies and mitigates potential risks before exploitation.
Auto-Remediation: Automates responses to security incidents, reducing manual intervention.
Intuitive Interface: Simplifies management and enhances operational efficiency.
Posture Management: Maintains strong security posture through continuous assessment.

Organizations in finance, healthcare, and retail frequently implement Check Point CloudGuard CNAPP for compliance and security across cloud environments. It assists with workload protection, threat detection, and regulatory obligation fulfillment, proving effective for securing applications and monitoring API interactions.

Check Point Software Technologies

Cisco Secure Workload offers advanced auditing, micro-segmentation, and network visibility, automating policy presentation for improved security. It enhances application dependency mapping and provides comprehensive telemetry with strategic policy enforcement.

Cisco Secure Workload specializes in automating micro-segmentation, data center management, and traffic analysis. Its capabilities facilitate application dependency mapping and enhance internal micro-segmentation, providing invaluable network visibility. Users find its automation in policy presentation and strategic enforcement beneficial, along with granular control and scalability, despite needing improvements in scalability and integration capabilities. Enhanced notification features, troubleshooting options, and an efficient interface are desired for seamless deployment, along with stronger multi-tenancy, redundancy, and monitoring functions. Broader platform support and integrated cloud connectivity are desired for unified management across tools.

What are the most important features?

Auditing: Provides in-depth network analysis and security auditing capabilities.
Micro-Segmentation: Enhances network security by automating segmentation at a granular level.
Application Dependency Mapping: Visualizes connections and interactions between applications.
Network Visibility: Delivers comprehensive insight into network activities and dynamics.
Policy Discovery: Streamlines policy creation through automation and reduces manual intervention.
Comprehensive Telemetry: Offers complete coverage and insights for better security assessment.

What benefits and ROI should be evaluated?

Enhanced Security Measures: Offers robust features for network security improvement.
Automated Processes: Reduces manual efforts through automation, increasing efficiency.
Scalability: Adapts to growing network demands with flexible scalability options.
Granular Control: Allows detailed control over network policies and enforcement.

Entities in finance, gas, and oil sectors utilize Cisco Secure Workload for networking site management and compliance maintenance. It integrates into extensive Cisco infrastructure, aiding routers, switches, and endpoints, thus supporting auditors in network synchronization and auditing needs.

Cisco

Sample Customers

Information Not Available

Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners

ADP, University of North Carolina Charlotte (UNCC)

Buyer's Guide

Check Point CloudGuard CNAPP vs. Cisco Secure Workload

April 2026

Free Report: Check Point CloudGuard CNAPP vs. Cisco Secure Workload

Find out what your peers are saying about Check Point CloudGuard CNAPP vs. Cisco Secure Workload and other solutions. Updated: April 2026.

DOWNLOAD NOW

893,221 professionals have used our research since 2012.

See our Check Point CloudGuard CNAPP vs. Cisco Secure Workload report.

See our list of best Cloud and Data Center Security vendors and best Cloud Workload Protection Platforms (CWPP) vendors.

We monitor all Cloud and Data Center Security reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.