Try our new research platform with insights from 80,000+ expert users

Check Point CloudGuard CNAPP vs Forcepoint CASB comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Check Point CloudGuard CNAPP
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
72
Ranking in other categories
Vulnerability Management (14th), Cloud and Data Center Security (9th), Container Security (11th), Cloud Workload Protection Platforms (CWPP) (7th), Cloud Security Posture Management (CSPM) (6th), Cloud-Native Application Protection Platforms (CNAPP) (6th), Data Security Posture Management (DSPM) (7th), Compliance Management (6th)
Forcepoint CASB
Average Rating
7.2
Reviews Sentiment
5.6
Number of Reviews
10
Ranking in other categories
Cloud Access Security Brokers (CASB) (15th)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Check Point CloudGuard CNAPP is designed for Vulnerability Management and holds a mindshare of 1.1%, down 1.2% compared to last year.
Forcepoint CASB, on the other hand, focuses on Cloud Access Security Brokers (CASB), holds 1.4% mindshare, up 0.9% since last year.
Vulnerability Management Market Share Distribution
ProductMarket Share (%)
Check Point CloudGuard CNAPP1.1%
Wiz6.6%
Tenable Nessus5.1%
Other87.2%
Vulnerability Management
Cloud Access Security Brokers (CASB) Market Share Distribution
ProductMarket Share (%)
Forcepoint CASB1.4%
Prisma Access by Palo Alto Networks14.4%
Netskope14.4%
Other69.8%
Cloud Access Security Brokers (CASB)
 

Featured Reviews

reviewer2751468 - PeerSpot reviewer
Assistant Manager at a computer software company with 201-500 employees
Boosts security and compliance in multi-cloud environments while real-time threat detection enhances risk management
Check Point CloudGuard CNAPP flagged a misconfiguration in our AWS S3 bucket that had overly permissive access settings. That configuration could have exposed our sensitive data to the public internet. The platform not only identified the issue but also provided remediation that our team was able to apply immediately. This prevented a potential data exposure. Check Point CloudGuard CNAPP offers a unified, modular platform that combines CSPM, CWPP, CIEM, code security, and cloud detection and response. The agentless workload posture, real-time threat detection and response, multi-cloud coverage and visibility, compliance automation, and one-click remediations stand out as its best features. I find myself relying on the risk management engine and prioritization the most day-to-day. In any cloud environment, you are flooded with findings, misconfigurations, vulnerabilities, and compliance gaps. Without prioritization, it is overwhelming for our team to take care of the posture. CloudGuard's risk scoring helps us cut through incidents. This makes remediation faster and focused instead of wasting time checking every alert. We get to fix the issues that pose real business risks. Check Point CloudGuard CNAPP has positively impacted our organization at a significant level. We get greater visibility and control across all our cloud environments. Some biggest benefits we have seen are faster detection and remediation of misconfigurations, improved compliance posture, reduced risk exposure, operational efficiency, and cost savings. Overall, it has made our cloud environment more secure, compliant, and easier to manage while freeing up our teams to focus on projects instead of chasing alerts.
AlexOgbalu - PeerSpot reviewer
Director at LiveFromSpace Limited
Improving support responsiveness has remained critical while access monitoring and compliance needs have been fully addressed
We have the enterprise licenses for the scanning of the codes, both at runtime and in development, and we also have access to Veracode's e-learning platform as well as a bundle from Veracode.All that has been mentioned is the main benefits Forcepoint CASB provides to us, and it helps us to meet compliance requirements that are necessary in our industry. It's important for enterprises considering Forcepoint to work with very good system integrators and value-added resellers because a lot of things needed go beyond just getting the licenses. You need someone skilled to do all those configurations, write all the rules, and make sure you achieve a very stable environment. I am giving this review an overall rating of eight.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We can monitor each activity from our mobile devices, so there is complete visibility of our cloud traffic flows, with threat intelligence provided by Check Point."
"It provides the most useful tools for protecting our financial account records from hackers."
"People implementing this solution are concerned with addressing a significant risk, and within the AWS realm, this tool does de-risk substantially."
"This solution has saved the company from unnecessary data loss that occurs due to cyber attacks."
"The most valuable feature is the ability to work with the APIs to integrate into our own backend systems."
"The feature that I value the most about Check Point CloudGuard CNAPP is the possibility of checking compliance with different standards. This compliance check can be performed for each subscription or service that we have on all the different cloud providers that we use."
"The initial setup is easy and not complex at all."
"Most of the features are pretty valuable, whether that's a description of the attacks or the attack graph showing the vulnerabilities. If a single tool does all this work, the value is centralizing all these functions on a single tool. These are the cloud-native applications we talk about — containers, Kubernetes, and cloud infrastructure — and all those things are the primary focus of the CNAPP solution."
"As it is based on AWS, it is not a problem."
"The product offers several advantageous features including real-time control and monitoring capabilities, helping identify and manage various activities including shadow IT activities."
"The most valuable aspect for us is the fact that the product seamlessly integrates with the Forcepoint DLP."
"It gives you value for your investment."
"The product offers an easy initial setup."
"Generally, most of our customers are happy with it though."
"Forcepoint CASB ensures that access to cloud applications is properly vetted and monitored, helping us unify access across the board regardless of device or location, while advanced notifications and behavior analytics make it easy to detect unknown connections or baseline changes."
"Most of the features are valuable, primarily for the firewalls, the proxy, and Forcepoint CASB products."
 

Cons

"In Dome9, there should be a policy validation option where we can validate the policy before we push it into production."
"The entire system is complicated, and the setup process may not cater to the company's demands."
"The rules are not well-tuned, and many of them generate false positives or nonsensical results."
"One area that Check Point CloudGuard CNAPP could use improvement is the navigation when switching between modules."
"The biggest thing is the documentation aspect of Dome9 is a little lacking. They were purchased by Check Point about a year and a half to two years ago. When they integrated into Check Point's support system, a lot of the documentation that they had previously got mangled in the transition, e.g., linking to stuff on the Dome9 website that no longer exists. There are still a lot of spaces with incomplete links and stuff that is not as fully explained as it could be."
"The tool has a lot of potential, but today, it lacks a lot of Scripts/Bots for Azure."
"Check Point tools need to improve the latency in the portal since they take a long time to load."
"The guidelines to implement or to link with the clouds are not complete."
"Forcepoint CASB is mature and performing its function, but it is not easy to manage and not as fully-featured as competitors."
"There are various modules to secure a public cloud, such as Cloud Security Posture Management. You might have seen these features available if you've reviewed solutions like Zscaler or Netskope. A full-fledged CASB should be manageable. However, the tool does not seem to offer complete public cloud visibility. While it provides some cloud visibility and can manage API traffic for Web 2.0, it lacks a specific module for securing public cloud environments."
"They should work on the possibility of consolidating all of the products with the group of agents."
"Forcepoint removed the ability to scan for unsanctioned applications on the CASB."
"Forcepoint technical support in general could improve in this area."
"Integration is an area of the solution that needs to be improved."
"The solution needs to be easier to install, and they need to clean up the backend, so stuff doesn't break."
"Lacks different ways to authenticate users."
 

Pricing and Cost Advice

"Check Point CloudGuard Posture Management is expensive."
"Right now, we have licenses on 500 machines, and they are not cheap."
"Check Point CloudGuard Posture Management is always known as a good solution but an expensive one. When you're using Cisco, Check Point, or Palo Alto, you know that you will pay more, but you know that it will work."
"The licensing and costs are straightforward, as they have a baseline of 100 workloads (number of instances) within one license with no additional nor hidden charges. If you want to have 200 workloads under Dome9, then you need to take out two licenses for that. Also, it does not have any impact on cloud billing, as data is shared using the API call. This is well within the limit of free API calls provided by the cloud provider."
"From a pricing perspective, they are pretty expensive."
"In the beginning, the price of Dome9 was cheap, whereas now it is not."
"It is a very straightforward licensing model that is based on the number of assets you are discovering and managing with the solution."
"CloudGuard is fairly priced."
"The pricing really depends on the size of the customer's business because it is price-relevant to the environment."
"The solution is not that expensive compared to Zscaler. Netskope is between Forcepoint CASB and Zscaler in terms of cost. Forcepoint CASB would be the first choice because it negotiates well and offers a perpetual license, though it may seem subscription-based. I rate its pricing a six out of ten."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
881,733 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Manufacturing Company
9%
Computer Software Company
7%
Outsourcing Company
6%
Manufacturing Company
16%
Comms Service Provider
11%
Computer Software Company
11%
University
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business55
Midsize Enterprise18
Large Enterprise56
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise2
Large Enterprise3
 

Questions from the Community

What is your experience regarding pricing and costs for CloudGuard Workload Protection?
My experience with pricing, setup cost, and licensing has been reasonable for the value it delivers. The initial setup cost was fair. Understanding the right modules and tiers took a bit of plannin...
What do you like most about CloudGuard for Cloud Intelligence?
The new scanning function is a valuable feature that wasn't available until recently.
What needs improvement with CloudGuard for Cloud Intelligence?
One area that Check Point CloudGuard CNAPP could use improvement is the navigation when switching between modules. A more streamlined interface and a quicker drill-down into findings would make the...
What is your experience regarding pricing and costs for Forcepoint CASB?
I would put the pricing of Forcepoint CASB at a five, closer to a four. I don't think it's very expensive, but it's also not very cheap.
What needs improvement with Forcepoint CASB?
From a functionality perspective, I don't have any recommendations, but in terms of support, the speed of support is something that can be managed better. This is not exactly for Forcepoint CASB, b...
What is your primary use case for Forcepoint CASB?
Forcepoint CASB ensures that access to cloud applications is properly vetted and monitored. We have a lot of remote and field workers, and many staff members are not required to come into the offic...
 

Also Known As

Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence
Imperva Skyfence
 

Overview

 

Sample Customers

Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners
Zions Bank, GE Healthcare, HomeAway, Logitech, Universal, California National Resources Agency and many mor
Find out what your peers are saying about Wiz, Tenable, Qualys and others in Vulnerability Management. Updated: January 2026.
881,733 professionals have used our research since 2012.