No more typing reviews! Try our Samantha, our new voice AI agent.

Check Point ThreatCloud Managed Security Services vs Netsurion comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 3, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Check Point ThreatCloud Man...
Ranking in Managed Security Services Providers (MSSP)
5th
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
7
Ranking in other categories
No ranking in other categories
Netsurion
Ranking in Managed Security Services Providers (MSSP)
27th
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
24
Ranking in other categories
Security Information and Event Management (SIEM) (49th), SOC as a Service (13th), Managed Detection and Response (MDR) (36th), Extended Detection and Response (XDR) (43rd)
 

Mindshare comparison

As of June 2026, in the Managed Security Services Providers (MSSP) category, the mindshare of Check Point ThreatCloud Managed Security Services is 1.6%, up from 0.9% compared to the previous year. The mindshare of Netsurion is 1.2%, up from 0.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Managed Security Services Providers (MSSP) Mindshare Distribution
ProductMindshare (%)
Check Point ThreatCloud Managed Security Services1.6%
Netsurion1.2%
Other97.2%
Managed Security Services Providers (MSSP)
 

Featured Reviews

AnkurSharma3 - PeerSpot reviewer
Cyber SOC Manager at Tower Research Capital
Offers data models that learn the patterns and behavior of the internal network
I really like the artificial intelligence feature that utilizes automated versioning through AI Yellow Prism. It has a lot of data models that learn the patterns and behavior of the internal network. If something abnormal happens, it raises a flag or alert. The GUI control interface was good and very attractive, and setting up the tool was easy with the help of online articles. Customization was also possible for each department.
John-Berry - PeerSpot reviewer
Information Technology Manager at ProfitSolv
The SOC center monitors, hunts, and notifies us of threats around the clock
I know they are working to resolve this issue, but Netsurion is currently unable to retrieve logs from S3 buckets. We use WP Engine for a lot of web hosting as well as AWS, and both of these platforms use S3 buckets. I would like Netsurion to be able to pull logs from Linux devices. We have some of that capability, and I believe they can do it. However, the way it works with Amazon is strange and glitchy. Therefore, working something out with Amazon would be great. Netsurion's SOC can be a bit too aggressive at times. We have asked them to adjust their playbook because I am tired of being notified about the same issue multiple times a day. I am aware of the issue, and it is not a cause for concern. Let's only take action on this issue if we see an actual problem.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It's a small investment to protect our largest investment which is the assets, both physical and virtual, shielding us from attacks and making it possible for us to operate seamlessly and with full confidence."
"We get analysis and can take into consideration the critical alerts found at any time, which gives us security and stability."
"It was easily configured and offered one more layer of security in our environment as the monitoring provided by the dashboard is very complete."
"The reports it shares with the IT team provide the feedback necessary to see what needs to change and what needs to continue to be done."
"The most outstanding characteristic that we can see is having something in place that allows any network administrator to apply security policies throughout the company's network."
"The real-time intelligence was a good feature."
"We have not seen a security capacity equal to that of Check Point in other manufacturers."
"Advanced threat intelligence reports have enabled each department to coordinate roles and put security measures in place."
"When it comes to threat detection and response, it does a very good job detecting and blocking on its own. And the SOC is a nice added value because they're doing analysis on things that aren't as obvious, on things that you can't just detect with a signature or behavior. Also, any SIEM will come with a lot of noise, so having them do a lot of the initial analysis to find out what's critical and what issues are false alarms is very good."
"When I looked last week, we probably averaged about 20 million log entries a day. So, we certainly can't individually manage that. Just looking at the reports, then trying to go back and find anything that was questionable, was a challenge. Therefore, the managed service has been invaluable to us in terms of being able to narrow the scope of what really needs to be looked at and bringing those things to our attention to be dealt with."
"They have what they call Elasticsearch which is very quick, although that's only available for the last seven days' worth of data. It used to be that, if I wanted to do a search from three days ago, it might take me 10 to 15 minutes because it had to actually unzip some archive files. So I really like that feature. It's almost instantaneous for anything within the last seven days."
"The most valuable feature is that we get the events: the alerts about disk space and the security reports that we get once a day, including user lockouts and the like."
"If I were to look at logs manually, there's no way I could do that. As an example, they are 48 million logs processed a day. There is no way I could look at all 48 million of those. So, it gives me a good structure to be able to look at the different incidents which are created and do different searches."
"Netsurion's 24/7 monitoring has enhanced the overall security of the company."
"The solution provides actionable threat intelligence, it is not a passive service, they go in and perform mitigations on whatever they find, it is timely, and they provide context so it is understood by anyone who receives these reports."
"We have also integrated our endpoint security into the Netsurion SIEM. That's important because we have all the events in one place; we don't have to manage them in multiple places. In addition, the embedded MITRE ATT&CK Framework was paramount in our decision to choose Managed Threat Protection because the MITRE Framework is the industry standard for threats."
 

Cons

"One of the great improvements that must be improved is the support for end users."
"The next release should have threat indicators that categorize various types of threats and their immediate solution."
"We want better customization."
"I would like for the service to be a little more accessible for all segments."
"Sometimes we can see the documentation and follow its instructions to apply a new rule or policy, and sometimes we don't get the expected result by following them."
"The documentation for the most modern applications of the manufacturer is sometimes not well done or complete."
"The only issue I encountered was with mobile device integration and compatibility with on-premise solutions."
"Communication is always something that can be improved, but I feel that any time we've had a communication issue, it's quickly addressed when we bring those up at the monthly meetings. Usually, it's an individual that wasn't clear in the communication, it's not the process per se. You always have to be able to segregate if the process didn't work or an individual either didn't say the right thing or my people didn't understand what they were being told."
"Using Netsurion has not meant we have consolidated cybersecurity technologies."
"The hosted on-premise hardware that we were using was having issues. The performance of it was horrendous, but we weren't using it."
"The deployment of the agents could be a bit easier. We always seem to have a bit of a challenge with that. A lot of times the agents either don't deploy or they quit responding, then we have to go and redeploy them."
"The upfront costs have increased, and we have been locked into this contract."
"Where there is an opportunity for improvement is in the interface used for performing the searches."
"I would like to see a faster response when we see things like 15,000 lockouts. I really wished that I had known that on Friday afternoon rather than waiting until I got the weekly report today. By the same token, they are looking at it from the point of view that this is a system or software malfunction. This is not a bad actor repeating the exact same password three times a second. Therefore, they can tell that this is not a bad thing. However, it's not a security event but it is an operational event for me. Knowing this sort of thing would help my team and me out more because then we would be able to clear out a lot of network traffic that we didn't know was going on. So, we would like quicker updates on non-high security events."
"The threat detection and response is passive. We have asked if there were options for taking action, and we have not gotten any feedback on that, which would be useful to know. Depending on the situation and threat, some actions may not be possible, but we haven't gotten any feedback on what options could be directed and actionable with the understanding that it may have an extra cost. It would be nice to know or find out if it is actually possible to take actions by a SIEM service or a SIEM agent."
 

Pricing and Cost Advice

Information not available
"Our budget follows the calendar year. We just started a new budget year at the beginning of the month. We did budget for an increase in our threat management system selection. Therefore, we have the budget to implement and accommodate a threat management system change, including an increase for the quoted actions that we received to improve EventTracker. We are just waiting on our council to approve that budget, which might not be for a little while. Hopefully, when they do, we will be able to jump on doing something."
"EventTracker's subscription-based model is interesting as far as yearly license type stuff. It's nice because you know what it's going to be next year. We haven't really looked at any other solutions. The pricing at the time compared to the other solutions was a lot less. A couple of years ago, we actually looked at Splunk. The amount in Splunk's licensing model is based on 20 gigs a day, or something like that. Based on our number of logs and stuff that we were already generating, the costs would be substantially more for the amount of logs that we would be getting."
"We have seen time and cost savings. It prevents us from having to hire specialized people for this type of work. We would need to hire six staff members to accommodate the same service."
"The upfront costs have increased, and we have been locked into this contract. The cost of changing over from it is way too high."
"Licensing is very easy. Our CIO takes care of the billing, but in terms of price point, he hasn't complained, so it must be good."
"Netsurion's pricing is competitive. At the same time, they're the only ones who do what we want to do the way we want it. I can't say we would've paid more, but we would've had to have come up with our own solution if they weren't providing that."
"In the security space, it's hard to quantify your return on investment. So, I don't. We spend about $40,000 a year and so. It's hard to say if the SIEM saved that much money."
"The solution is fairly expensive, but in my experience, all of the SIEM applications that I've evaluated or looked at cost about the same."
report
Use our free recommendation engine to learn which Managed Security Services Providers (MSSP) solutions are best for your needs.
900,644 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Construction Company
11%
Outsourcing Company
10%
Performing Arts
10%
Manufacturing Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise3
Large Enterprise1
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise7
Large Enterprise7
 

Questions from the Community

What is your experience regarding pricing and costs for Check Point ThreatCloud Managed Security Services?
It's a one-year subscription. Our procurement team handled that. The procurement team found it a bit expensive, but they were happy to close the deal.
What needs improvement with Check Point ThreatCloud Managed Security Services?
The only issue I encountered was with mobile device integration and compatibility with on-premise solutions. This could be enhanced to integrate with more log sources.
What is your primary use case for Check Point ThreatCloud Managed Security Services?
The use cases were to block the various sources of threat intelligence and store data on the cloud environment.
Ask a question
Earn 20 points
 

Also Known As

ThreatCloud Managed Security Services
Netsurion Managed Threat Protection, Netsurion EventTracker
 

Overview

 

Sample Customers

Morton Salt, Medical Advocacy and Outreach, BH Telecom, Lightbeam Health Solutions, X by Orange, Cadence, Nihondentsu, Datastream Connexion, Good Sam, Omnyway, FIASA, Pacific Life, Banco del Pacifico, Control Southern, Xero, Centrify, Tradair, Laterlite, Phoenix International, Unisinos, Wilkin Chapman, Connexus Energy, Mutua Universal, Smart & Final, Central New Mexico Community Colleg, Grupo Financiero Multiva
The Salvation Army, The FRESH Market, Pacific Western Bank, NASA, American Academy of Orthopaedic Surgeons (AAOS), and Talbot’s Stores
Find out what your peers are saying about Check Point ThreatCloud Managed Security Services vs. Netsurion and other solutions. Updated: June 2026.
900,644 professionals have used our research since 2012.