Try our new research platform with insights from 80,000+ expert users

Check Point CloudGuard CNAPP vs Illumio comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jul 27, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SentinelOne Singularity Clo...
Sponsored
Ranking in Cloud and Data Center Security
2nd
Ranking in Cloud Workload Protection Platforms (CWPP)
4th
Average Rating
8.8
Reviews Sentiment
7.9
Number of Reviews
114
Ranking in other categories
Vulnerability Management (5th), Container Security (3rd), Cloud Security Posture Management (CSPM) (3rd), Cloud-Native Application Protection Platforms (CNAPP) (3rd), Compliance Management (1st)
Check Point CloudGuard CNAPP
Ranking in Cloud and Data Center Security
9th
Ranking in Cloud Workload Protection Platforms (CWPP)
5th
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
72
Ranking in other categories
Vulnerability Management (9th), Container Security (10th), Cloud Security Posture Management (CSPM) (5th), Cloud-Native Application Protection Platforms (CNAPP) (5th), Data Security Posture Management (DSPM) (6th), Compliance Management (6th)
Illumio
Ranking in Cloud and Data Center Security
7th
Ranking in Cloud Workload Protection Platforms (CWPP)
15th
Average Rating
8.0
Reviews Sentiment
6.4
Number of Reviews
11
Ranking in other categories
Microsegmentation Software (2nd)
 

Mindshare comparison

As of August 2025, in the Cloud and Data Center Security category, the mindshare of SentinelOne Singularity Cloud Security is 2.1%, up from 0.6% compared to the previous year. The mindshare of Check Point CloudGuard CNAPP is 1.3%, up from 0.4% compared to the previous year. The mindshare of Illumio is 24.6%, up from 23.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cloud and Data Center Security
 

Featured Reviews

Andrew W - PeerSpot reviewer
Tells us about vulnerabilities as well as their impact and helps to focus on real issues
Looking at all the different pieces, it has got everything we need. Some of the pieces we do not even use. For example, we do not have Kubernetes Security. We are not running any K8 clusters, so it is good for us. Overall, we find the solution to be fantastic. There can be additional education components. This may not be truly fair to them because of what the product is going for, but it would be great to see additional education for compliance. It is not a criticism of the tool per se, but anything to help non-development resources understand some of the complexities of the cloud is always appreciated. Any additional educational resources are always helpful for security teams, especially those without a development background.
Bart Coddens - PeerSpot reviewer
Evolved cloud security with active monitoring but needs interface consistency
The user interface needs work. Sometimes, it is a transition from the old tool to the new CNAPP Two that I currently have, and remnants of the old environment can still be detected. I require consistency in the user interface to ensure everything is streamlined into the same look and feel. More work is needed in fine-tuning the threat data towards your CSPM and activity logs, aligning them with business intelligence, which requires a cohesive console interface. My assessment of CloudGuard CDRs in intrusion detection and threat hunting capabilities is that it still needs some work. All the threat data that comes in, you need to fine tune it a bit.
Alark Singh - PeerSpot reviewer
Visual traffic interface aids in network micro-segmentation while a streamlined update option enhances process efficiency
The strongest aspect of Illumio is the visual traffic interface, which allows us to see all traffic that communicates with our servers and allied companies. We can write rules that can be embedded into the IP table, making it easy to handle. Illumio enables us to see network flows, traffic sources, and destinations. The policy generation and enforcement capabilities are valuable, allowing for selective enforcement. Illumio helps in audit purposes by saving data and showing blocked traffic, ensuring no outside traffic is allowed.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The offensive security feature is valuable because it publicly detects the offensive and vulnerable things present in our domain or applications. It checks any applications with public access. Some of the applications give public access to certain files or are present over a particular domain. It detects and lets us know with evidence. That is quite good. It is protecting our infrastructure quite well."
"Cloud Native Security is user-friendly. Everything in the Cloud Native Security tool is straightforward, including detections, integration, reporting, etc. They are constantly improving their UI by adding plugins and other features."
"SentinelOne Singularity Cloud Security offers security solutions for both Kubernetes and CI/CD pipelines."
"We liked the search bar in SentinelOne Singularity Cloud Security. It is a global search. We were able to get some insights from there."
"The ease of use of the platform is very nice."
"For Singularity, the task capability is easy to use and it has a very intuitive dashboard, which streamlines the processes."
"SentinelOne Singularity Cloud Security offers several valuable features, most notably the rapid vulnerability notifications that provide timely alerts regarding our infrastructure."
"It is advantageous in terms of time-saving and cost reduction."
"People implementing this solution are concerned with addressing a significant risk, and within the AWS realm, this tool does de-risk substantially."
"The initial setup is easy and not complex at all."
"It has an analytics service that does research for us."
"It presents a real-time database that is always updated."
"Assets Management as it provide complete visibility of our workload inkling EC2 instance or Serverless"
"Cloud security posture management is the feature we've been using the longest."
"The visibility in our cloud environment is the most valuable feature."
"The CDR helps detect anomalous behavior and respond to threats before they become an issue."
"The strongest aspect of Illumio is the visual traffic interface, which allows us to see all traffic that communicates with our servers and allied companies."
"The tool helps with my company's security posture."
"The most valuable feature of Illumio Adaptive Security Platform is monitoring. When I have no requirement from the other application, I can use the web block traffic to build."
"The Explorer allows you to know the traffic between source and destination."
"The flexibility of the solution is its most valuable feature."
"The product provides visibility into how the applications communicate and how the network protocols are being used."
"It has helped us to understand internal network visibility and firewall policy implementation. We use the product to simplify firewall policy implementation."
"The solution is easy to use."
 

Cons

"SentinelOne Singularity Cloud Security's current documentation could be improved to better assist customers during the cluster onboarding process."
"The area of improvement is the cost, which is high compared to other traditional endpoint protections."
"We use SentinelOne Singularity Cloud Security and also SentinelOne. If SentinelOne Singularity Cloud Security integrated some of the endpoint security features of SentinelOne, it would be the perfect one-stop solution for everything. We wouldn't need to switch between the products. At my organization, I am responsible for endpoint security and vulnerability management. Integrating both functions into one application would be ideal because I could see all the alerts, heat maps, and reports in one console."
"While it is good, I think the solution's console could be improved."
"The documentation could be better."
"I believe the UI/UX updates for SentinelOne Singularity Cloud Security have room for improvement."
"When you find a vulnerability and resolve it, the same issue will not occur again. I want SentinelOne Singularity Cloud Security to block the same vulnerability from appearing again. I want something like a playbook where the steps that we take to resolve an issue are repeated when that issue happens again."
"They could generally give us better comprehensive rules."
"The reporting has a lot of opportunities to continuously improve so that we can continue to show value."
"There are opportunities for improvement that can be addressed through a roadmap."
"Currently, worldwide, there are many companies of all sizes that do not understand the value that their data has, but even with all existing clouds, they also do not understand what the shared responsibility model is. They only assume that by having a cloud, the provider must ensure safety, when the truth is that the providers only secure their sites. Everything we do in the cloud and how we configure it is actually our responsibility."
"Their service needs improvement."
"The main issue that we found with Dome9 is that we have a default rule set with better recommendations that we want to use. So, you do a clone of that rule set, then you do some tweaks and customizations, but there is a problem. When they activate the default rule set with the recommendations and new security measures, it doesn't apply the new security measures to your clones profile. Therefore, you need to clone the profile again. We are already writing a report to Check Point."
"Reporting should have more options."
"No improvements are needed."
"The platform would be significantly enhanced by incorporating data security management capabilities."
"There should be an option to upgrade from the console to the latest version instead of performing manual upgrades."
"Some of the features that can be improved is offer additional guidance on creating an effective and risk-free tagging policy would be highly beneficial."
"The customer service is lagging a bit. It could be better."
"I have not had the chance to experiment deeply with it."
"Illumio Adaptive Security Platform could improve by supporting more operating systems. For example, Cisco and Apache appliances."
"I would like to see better data security in the product."
"We need more details on areas where there is an error or a traffic blockage. I would like the tool to offer a more detailed view."
"The solution is very basic and doesn't do anything other than the orchestration of layer four endpoint firewall rules."
 

Pricing and Cost Advice

"As a partner, we receive a discount on the licenses."
"I am personally not taking care of the pricing part, but when we moved from CrowdStrike to PingSafe, there were some savings. The price of CrowdStrike was quite high. Compared to that, the price of PingSafe was low. PingSafe is charging based on the subscription model. If I want to add an AWS subscription, I need to pay more. It should not be based on subscription. It should be based on the number of servers that I am scanning."
"SentinelOne is relatively cheap. If ten is the most expensive, I would rate it a seven."
"I would rate the cost a seven out of ten with ten being the most costly."
"PingSafe is cost-effective for the amount of infrastructure we have. It's reasonable for what they offer compared to our previous solution. It's at least 25 percent to 30 percent less."
"I wasn't sure what to expect from the pricing, but I was pleasantly surprised to find that it was a little less than I thought."
"We found it to be fine for us. Its price was competitive. It was something we were happy with. We are not a Fortune 500 company, so I do not know how pricing scales at the top end, but for our cloud environment, it works very well."
"I am not involved in the pricing, but it is cost-effective."
"CloudGuard is fairly priced."
"The pricing is extremely competitive."
"Licensing and costs are straightforward, as they have a baseline of 100 workloads within one license and no additional charges."
"The licensing and costs are straightforward, as they have a baseline of 100 workloads (number of instances) within one license with no additional nor hidden charges. If you want to have 200 workloads under Dome9, then you need to take out two licenses for that. Also, it does not have any impact on cloud billing, as data is shared using the API call. This is well within the limit of free API calls provided by the cloud provider."
"The licensing part still needs some work. The issue that I have is that we do not use all the services in the cloud, but sometimes, CloudGuard identifies them as an asset."
"Right now, we have licenses on 500 machines, and they are not cheap."
"It is a very straightforward licensing model that is based on the number of assets you are discovering and managing with the solution."
"From a pricing perspective, they are pretty expensive."
"There is a subscription needed to use Illumio Adaptive Security Platform and we pay every three years. Overall the solution is expensive."
"The product's pricing is around 10,000-15,000 USD. The pricing is on a yearly basis."
report
Use our free recommendation engine to learn which Cloud and Data Center Security solutions are best for your needs.
865,164 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Financial Services Firm
14%
Manufacturing Company
9%
Government
6%
Computer Software Company
12%
Financial Services Firm
11%
Manufacturing Company
8%
Educational Organization
5%
Financial Services Firm
18%
Computer Software Company
14%
Manufacturing Company
8%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about PingSafe?
The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...
What is your experience regarding pricing and costs for PingSafe?
I don't handle the price part, but it isn't more expensive than Palo Alto Prisma Cloud. It's not cheap, but it is wor...
What needs improvement with PingSafe?
There is scope for more application security posture management features. Additionally, the runtime protection needs ...
What do you like most about Illumio Adaptive Security Platform?
The features that I have found most useful is the ability to centralize all the rules and then distribute them across...
What is your experience regarding pricing and costs for Illumio Adaptive Security Platform?
I do not have specific knowledge about pricing details as it is handled by upper management. I know that Illumio is t...
What needs improvement with Illumio Adaptive Security Platform?
There should be an option to upgrade from the console to the latest version instead of performing manual upgrades. Th...
 

Also Known As

PingSafe
Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence
Illumio Adaptive Security Platform, Illumio ASP
 

Overview

 

Sample Customers

Information Not Available
Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners
Plantronics, NTT Innovation Institute Inc.
Find out what your peers are saying about Check Point CloudGuard CNAPP vs. Illumio and other solutions. Updated: July 2025.
865,164 professionals have used our research since 2012.