

GitHub and Check Point WAF operate in the realms of code management and web application security. GitHub excels in collaboration and code management, while Check Point WAF shines in security, particularly for zero-day attacks and advanced threat prevention.
Features: GitHub facilitates robust collaboration with source code management, Git Hooks, and SSH keys. It seamlessly integrates with tools like Azure DevOps, Jenkins, and Jira. Check Point WAF, on the other hand, emphasizes defense with AI/ML-driven threat prevention, preemptive zero-day attack blocking, and comprehensive network security.
Room for Improvement: GitHub could improve its UI, better support for CICD processes, and enhance security measures further. Check Point WAF might benefit from better documentation, a more intuitive interface, and simpler configuration. Improved API security support could also be advantageous.
Ease of Deployment and Customer Service: GitHub is renowned for easy deployment in public and hybrid clouds, with strong community support complementing customer service. In contrast, Check Point WAF's setup is considered more complex and relies heavily on technical support, suggesting a need for more accessible services.
Pricing and ROI: GitHub is mostly free for open-source projects and offers cost-effective pricing for private repositories, providing significant ROI by boosting productivity and reducing development time. Check Point WAF offers high security at a higher cost, with the ROI being justified only for organizations needing robust threat prevention capabilities.
When we are attacked, we can understand how important the solution is.
When you migrate to the cloud, it feels like saving 90% of your time.
Most of the operations happen in the background, so I do not spend much time on it.
Using GitHub reduces, on average, one to two hours of time daily for making things ready, so it has very good metrics.
They need to increase the number of people for 24/7 support.
They were responsive even before we committed to buying their solution.
I also received full technical support, especially during the implementation.
The technical support from GitHub is generally good, and they communicate effectively.
Some forums help you get answers faster since you just type in your concern and see resolutions from other engineers.
I have not used GitHub's technical support extensively because there are many resources and a robust knowledge base available due to the large user community.
If I need to scale, I open a Whatsapp group with the director and the team, and we quickly proceed to do so.
They have sufficient resources, and there are no challenges from a scalability perspective.
Check Point CloudGuard WAF's scalability is very good.
We have never had a problem with scalability, so I would rate it at least eight to nine.
GitHub is more scalable than on-prem solutions, allowing for cloud-based scaling which is beneficial for processing large workloads efficiently.
I can easily give updates from VS Code and commit messages directly to the GitHub repository by just using Git commands.
It is very stable.
It is very stable, never crashing or giving me an error that I can see.
I did not have any issues in the last three years during which I had more than ten critical services running on CloudGuard.
If a skilled developer uses it, it is ten out of ten for stability.
It provides a reliable environment for code management.
GitHub is mostly stable, but there can be occasional hiccups.
The provider could improve by providing better guidance and support during the configuration process.
Future releases should include better bot mitigation, behavioral anomaly detection, compliance templates, advanced threat intel integration, and streamlined multi-cloud support to boost protection and usability.
A machine learning-based adaptive mode could help the WAF learn over time and auto-tune policies.
When working with the CI/CD pipeline and somebody is writing the workflow file, it would be best to include the AI feature so if they write incorrect code, it will notify me about it in the same dashboard, eliminating the need to use third-party tools to review the file.
I am providing this feedback for Copilot because it seems more widespread and more companies allow it rather than Amp, and it would be beneficial if they catch up with Amp on this capability.
Security could make GitHub better. OWASP Top Ten security advisors could be integrated on GitHub, and it could provide checks and advice.
It is more expensive than f5, where we purchased everything as bundles, and Check Point costs more, but it is worth the money.
It is less costly than Cloudflare, Fortinet, and other vendors.
I know that its price is relatively expensive compared to other products but it gives benefits that are worth it.
I have not encountered any initial setup cost for that.
Normally, GitHub is not expensive, but it would be welcome if it reduces costs for developing countries.
The pricing of GitHub is reasonable, with the cost being around seven dollars per user per month for private repositories.
Upon implementation and evaluation with third-party penetration testing, it meets rigorous security standards required for dealing with financial institutions.
It can protect against zero-day attacks and hidden anomalies.
The solution preemptively blocks zero-day attacks and detects hidden anomalies effectively.
The pull request facility for code review.
GitHub Actions allow for creating multiple jobs that run in different stages such as build, test, and deploy, which enable better visibility and control over the deployment pipeline.
For branching, it works well, especially in an agile environment.
| Product | Mindshare (%) |
|---|---|
| GitHub | 2.7% |
| Check Point WAF (formerly CloudGuard WAF) | 1.0% |
| Other | 96.3% |


| Company Size | Count |
|---|---|
| Small Business | 57 |
| Midsize Enterprise | 23 |
| Large Enterprise | 37 |
| Company Size | Count |
|---|---|
| Small Business | 43 |
| Midsize Enterprise | 14 |
| Large Enterprise | 55 |
Check Point WAF offers a robust security framework with AI-driven threat detection and seamless integration, protecting applications and APIs in multi-cloud environments.
Effective in preemptively blocking threats through AI and machine learning, Check Point WAF reduces false positives and operational workload. Its integration capabilities and threat intelligence provide comprehensive protection against zero-day attacks, while centralized management facilitates cost-effective and insightful threat reporting.
What are the main features of Check Point WAF?Check Point WAF is employed in industries securing web applications and APIs, especially in multi-cloud environments. It effectively protects backend services, prevents unauthorized access, and monitors traffic, making it suitable for businesses with diverse infrastructures. It ensures compliance with security standards and adapts to fluctuating traffic patterns.
GitHub is a platform that enhances collaboration and version control among developers, utilizing robust integration tools and features suitable for distributed teams. Its capabilities cater to diverse coding and project workflows, supporting effective team contributions and project deployments.
GitHub efficiently manages code repositories, facilitating seamless collaboration in distributed environments. It incorporates features beneficial for continuous integration and continuous deployment with tools like Jenkins and GitHub Actions. Recognized for its code-sharing, security, and branch management capabilities, GitHub serves as a versatile development hub. However, there's room for enhancement in project management, testing, and AI integration, with users expressing a need for better documentation, reporting, and enhanced user experience through improved automation and interface simplification.
What features make GitHub essential?GitHub is implemented widely in software development industries, supporting teams that require centralized platforms for code management. It is crucial for maintaining code integrity and facilitating developer communication. Industries rely on it for integrating tools essential for their CI/CD pipelines, accelerating project timelines, and organizing development tasks through collaborative workflows.
We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.