Try our new research platform with insights from 80,000+ expert users

Check Point CloudGuard CNAPP vs Netskope comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jul 13, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Zafran Security
Sponsored
Average Rating
9.6
Reviews Sentiment
7.8
Number of Reviews
6
Ranking in other categories
Vulnerability Management (16th), Continuous Threat Exposure Management (CTEM) (1st)
Check Point CloudGuard CNAPP
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
73
Ranking in other categories
Vulnerability Management (9th), Cloud and Data Center Security (8th), Container Security (10th), Cloud Workload Protection Platforms (CWPP) (6th), Cloud Security Posture Management (CSPM) (5th), Cloud-Native Application Protection Platforms (CNAPP) (5th), Data Security Posture Management (DSPM) (6th), Compliance Management (6th)
Netskope
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
46
Ranking in other categories
Cloud Access Security Brokers (CASB) (3rd), Secure Access Service Edge (SASE) (3rd)
 

Mindshare comparison

Vulnerability Management Market Share Distribution
ProductMarket Share (%)
Check Point CloudGuard CNAPP1.4%
Wiz10.3%
Tenable Nessus7.7%
Other80.6%
Vulnerability Management
Cloud Access Security Brokers (CASB) Market Share Distribution
ProductMarket Share (%)
Netskope15.0%
Prisma Access by Palo Alto Networks17.8%
Cato SASE Cloud Platform10.7%
Other56.5%
Cloud Access Security Brokers (CASB)
 

Featured Reviews

Israel Cavazos Landini - PeerSpot reviewer
Weekly insights and risk analysis facilitate informed security decisions
I appreciate the weekly insights Zafran provides, which include critical topics for networks and IT security, allowing us to evaluate which insights apply to our environment. The organization score feature is valuable to keep the leadership team updated on how our infrastructure fares security-wise. The applicable risk level versus base risk level feature is beneficial because prior to Zafran, we only used the base risk level, but now understand that risk depends on the asset itself. Zafran is an excellent tool.
Bart Coddens - PeerSpot reviewer
Evolved cloud security with active monitoring but needs interface consistency
The user interface needs work. Sometimes, it is a transition from the old tool to the new CNAPP Two that I currently have, and remnants of the old environment can still be detected. I require consistency in the user interface to ensure everything is streamlined into the same look and feel. More work is needed in fine-tuning the threat data towards your CSPM and activity logs, aligning them with business intelligence, which requires a cohesive console interface. My assessment of CloudGuard CDRs in intrusion detection and threat hunting capabilities is that it still needs some work. All the threat data that comes in, you need to fine tune it a bit.
Benjamin Naranjo - PeerSpot reviewer
Provides secure remote access and web navigation protection with highly customizable features
The most helpful features in Netskope are the data loss prevention module, the anti-malware module, and the integration that it has with Information Rights Management from Microsoft. It has better categorization and more granular features regarding web protection, as it allows me to control HTTP methods. I can publish WhatsApp web for my users as read-only, for example. Other providers cannot; they are only on and off, and do not have the granularity for a website to be read-only. That comes with a downside, which is that they need to regularly update their controls to support those features in those websites.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We saw benefits from Zafran Security almost immediately after deploying it."
"Overall, we have seen about eighty-seven percent reduction of the number of vulnerabilities that require urgency to remediate, specifically the number of criticals."
"Zafran has become an indispensable tool in our cybersecurity arsenal."
"We are able to see the real risk of a vulnerability on our environment with our security tools."
"Zafran is an excellent tool."
"On Dome9, you can have reports on compliance, users created, and EAM access to the cloud infrastructure. For example, if some machine is exposed to the Internet, importing and exporting to the Internet when it shouldn't, we get immediate alerts if someone does this type of configuration by mistake. Dome9 is very important because AWS doesn't protect us for this. It is the client's responsibility to make sure that we don't export things to the Internet. This solution helps us ensure that we comply with our security measures."
"The feature that I find most valuable is the blocking feature."
"The initial setup is easy and not complex at all."
"The most valuable features of CloudGuard CNAPP are its reporting capabilities for aggregating vulnerability information and scoring."
"The comprehensive security for IaaS and PaaS cloud assets provides efficient security awareness to all the teams."
"The feature that I value the most about Check Point CloudGuard CNAPP is the possibility of checking compliance with different standards. This compliance check can be performed for each subscription or service that we have on all the different cloud providers that we use."
"It offers advanced detection of threats that can harm data from the cloud database."
"I love the work involved in maintaining and scaling security services and configurations across multiple public clouds using this solution, versus using native native cloud security controls. It is so much better. The different cloud platforms all have their own way that they handle a lot of the stuff that Dome9 handles. Even within their platform, they are in a lot of disparate places, e.g., in AWS, there are five different tools. You have to jump between them to get the same information that you can just pull in automatically on Dome9, which is just one platform. We are using multiple platforms, so that makes it even more complicated and time consuming if you had to just rely on them to get all of your information. Whereas, it's all just summarized and put together on the Dome9 end."
"Netskope serves as a single web console carrying out multiple functionalities: Zero Trust Network Architecture (ZTNA), Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), Web DLP, and firewall services."
"The detection capability is very nice and lightweight."
"The automation offered by the product is pretty solid."
"A feature that was valuable was the built-in website classification or safety ratings. Different websites would be rated according to analyses that the Netskope team had done, and we built policies on some of those scores. If the website scored less than a certain percentage, then we would have a different user experience around how the site would interact with the clients."
"We use Cisco VPN for remote access. Additionally, we have started implementing Netskope with a strong focus on security. Our primary goal is to protect users from accessing malicious sites. We also plan to implement DLP based on our data, as data security is our main concern."
"The most helpful features in Netskope are the data loss prevention module, the anti-malware module, and the integration that it has with Information Rights Management from Microsoft."
"The tool provides extensive DLP features."
"The most valuable features of the solution are that the support is very good and the dashboards are easy and intuitive to use."
 

Cons

"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."
"I think the ability to have some enhanced reporting capabilities is something they can improve on, as they have good reports but we have asked for some specific reporting enhancements."
"The dashboarding and reporting functionality of Zafran Security is an area that definitely could use some improvements."
"Currently, worldwide, there are many companies of all sizes that do not understand the value that their data has, but even with all existing clouds, they also do not understand what the shared responsibility model is. They only assume that by having a cloud, the provider must ensure safety, when the truth is that the providers only secure their sites. Everything we do in the cloud and how we configure it is actually our responsibility."
"One feature of the product that I would like to enhance is the possibility to connect to vulnerability management platforms so that the issues that emerge from the scans can then be ingested directly into the vulnerability management process."
"The dashboard is feature-rich, but it can sometimes feel overwhelming."
"Currently, this solution is somewhat expensive."
"Integration could be improved."
"The user interface could be improved. Sometimes, the visibility is not immediately available for the environment. We have the native servers that come with the solutions, but we cannot see them in the Check Point log. Another issue is with the integrated file monitoring. It would make sense to have stuff like file integrity monitoring and malware scanning available within this module because we don't want to integrate another product."
"Down the road, we would like to see automation. That is probably a feature that most people want. If they can automate patching a vulnerability, it will be much easier."
"We want to be able to customize the solution more in order to meet the needs of our company."
"A bit of latency is observed in some of the applications."
"They can focus more on ease of admin, ease of use, and ease of migration. Migration should be simple for companies that are using a different platform and would like to move to Netskope. Everyone looks for a simple migration. They can also focus more on cloud services and cloud trends. They have to see the cloud market, and they should try to compete with Zscaler and other players. They should also work on licensing costs."
"I would like to see more threat protection in Netskope's Zero Trust Network Access."
"It should have user behavior analysis and diverse analysis."
"The configuration in the cloud model could be improved upon."
"They could add endpoint security features."
"There could be room for improvement in the subscription process."
"There could be better integration with other solutions."
 

Pricing and Cost Advice

Information not available
"Check Point CloudGuard Posture Management is expensive."
"In the beginning, the price of Dome9 was cheap, whereas now it is not."
"The solution’s pricing is a little bit high."
"The pricing is tremendous and super cheap. It is shockingly cheap for what you get out of it. I am happy with that. I hope that doesn't get reported back and they increase the prices. I love the pricing and the licensing makes sense. It is just assets: The more stuff that you have, the more you pay."
"I would advise taking into account the existing number of devices and add a forecast of the number of devices to be added in the coming year or two, to obtain better pricing."
"Licensing and costs are straightforward, as they have a baseline of 100 workloads within one license and no additional charges."
"The license fee is high."
"Check Point CloudGuard Posture Management is always known as a good solution but an expensive one. When you're using Cisco, Check Point, or Palo Alto, you know that you will pay more, but you know that it will work."
"The price of the solution is fair but it depends on your use case."
"Netskope's pricing is reasonable compared to Microsoft."
"They should work on licensing costs."
"Netskope is a premium service, and its pricing ranges from medium to expensive."
"It is an expensive solution."
"The product's price is average."
"Pricing is a little expensive but it is affordable."
"I would rate the pricing nine out of ten."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
868,759 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Computer Software Company
9%
Manufacturing Company
8%
Government
6%
Computer Software Company
12%
Financial Services Firm
11%
Manufacturing Company
8%
Educational Organization
6%
Computer Software Company
14%
Financial Services Firm
13%
Manufacturing Company
10%
Healthcare Company
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business54
Midsize Enterprise17
Large Enterprise57
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise9
Large Enterprise25
 

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?
Since we stood Zafran Security up in our private cloud, we handle the maintenance on our side. As we opted not to use...
What needs improvement with Zafran Security?
In terms of areas for improvement, Zafran Security is doing a really great job as a new and emerging company. Oftenti...
What is your primary use case for Zafran Security?
My use cases for Zafran Security revolve around two primary areas. One is around vulnerability management and priorit...
What is your experience regarding pricing and costs for CloudGuard Workload Protection?
My experience with pricing, setup cost, and licensing is that the pricing model is flexible and consumption-based, wh...
What do you like most about CloudGuard for Cloud Intelligence?
The new scanning function is a valuable feature that wasn't available until recently.
What needs improvement with CloudGuard for Cloud Intelligence?
There is a lack of functionalities and usability. I used to compare it with another solution that is focused on speci...
Which is better, Zscaler internet access or Netsckope CASB?
We researched Netskope but ultimately chose Zscaler. Netskope is a cloud access security broker that helps identify ...
What do you like most about Netskope CASB?
The product's analytics part is pretty fine.
 

Also Known As

No data available
Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence
Netskope CASB
 

Overview

 

Sample Customers

Information Not Available
Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners
NetApp, Genomic Health, Caterpillar, Apollo, Pandora, Continental Resources, Fractal, infinera, Tesla
Find out what your peers are saying about Tenable, Qualys, Wiz and others in Vulnerability Management. Updated: September 2025.
868,759 professionals have used our research since 2012.