No more typing reviews! Try our Samantha, our new voice AI agent.

Check Point WAF (formerly CloudGuard WAF) vs Tenable.io Web Application Scanning comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 13, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Check Point WAF (formerly C...
Ranking in Application Security Tools
4th
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
81
Ranking in other categories
Data Loss Prevention (DLP) (6th), Web Application Firewall (WAF) (5th), DevSecOps (2nd)
Tenable.io Web Application ...
Ranking in Application Security Tools
26th
Average Rating
7.8
Reviews Sentiment
5.8
Number of Reviews
18
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of October 2026, in the Application Security Tools category, the mindshare of Check Point WAF (formerly CloudGuard WAF) is 1.1%, up from 0.4% compared to the previous year. The mindshare of Tenable.io Web Application Scanning is 1.2%, down from 1.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools Mindshare Distribution
ProductMindshare (%)
Check Point WAF (formerly CloudGuard WAF)1.1%
Tenable.io Web Application Scanning1.2%
Other97.7%
Application Security Tools
 

Featured Reviews

Krishnakumar Mahadevan - PeerSpot reviewer
CISO at Spink Solutions Private Limited
Cloud security has strengthened risk posture and improved advanced threat visibility
There are some API gateway and API securities I mentioned. If these are incorporated with AI-related features, particularly those seven key vulnerabilities I mentioned—token theft and tool poisoning—that would be beneficial. AI-related features are not included yet in Check Point CloudGuard WAF. However, they are present in FortiGate. That is the advantage of FortiGate now. FortiGate is stopping all AI-related vulnerabilities now. FortiGate has this capability. It is unfortunate that even Palo Alto also lacks one or two of these features. Check Point Quantum is very good, without a doubt. However, their capabilities are not in comparison with Palo Alto. There are some features, but there are some gaps in comparison with Palo Alto.
HL
Security Analyst at TOPNET
Web audits have identified vulnerabilities and now provide clear visibility into compliance gaps
We have experience with Tenable.io Web Application Scanning, and we use it as well; we have approximately ten licenses for web application scanning. We use it to find vulnerabilities, but Tenable.io Web Application Scanning does not include remediation; we remediate with other products. We use the…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The implementation of this tool for security management and control is very simple."
"CloudGuard WAF has been great."
"The first valuable feature is that it is not a complex process to get it up and running. It was not complex at all. We were in a close relationship with the team that developed the app, and it worked in a few hours. The second valuable feature is the information that comes out of it."
"The tool's most valuable feature is AI, which makes operations easier. Moreover, it is easy to deploy."
"Check Point WAF (formerly CloudGuard WAF) has positively impacted my organization by reducing security incidents."
"The automated policy creation and threat intelligence have helped my team by reducing manual configuration and saving time, and the threat intelligence updates ensure immediate protection against new threats, simplifying daily operations and improving response speed."
"It helps me sleep at night, providing peace of mind."
"With the solution, we managed to obtain complete comprehensive visibility of the entire environment in the cloud, thus having better control of each of the resources."
"The most effective feature of the product is the ability to scan the entire environment."
"Now that the license is centralized, it's a significant feature to manipulate assets based on their functions."
"We use the tool for our websites. We have a vulnerable subdomain. The tool helps to scan it for vulnerabilities."
"The solution's instant reports feature is the most effective for detecting threats."
"The initial setup is straightforward."
"Tenable provides the end analysis results covering all the published vulnerabilities and information on the market."
"Tenable.io Web Application Scanning is very easy to use, provides very reliable results, and is easily managed by someone who lacks prior knowledge, information, or experience."
"It has good unified web application scanning and exposure management."
 

Cons

"In my opinion, there is some room for improvement regarding pricing, which we require, and much of it relates to the license base and support."
"A feature we'd like to see in the future is something that could protect against other attack vectors, with a focus on application protection."
"We need to have many of the baselines or development guides providing less complex writing or development."
"I believe that Check Point WAF (formerly CloudGuard WAF) can be improved, as it is currently in a midway position; it is not much better, but it is not bad."
"While the GUI allows configuration for application-related features, specific definitions cannot be modified through the code."
"It was costlier than other solutions."
"I am pretty happy with the current version. I have not yet used it to its full potential, but there could be improvements as I explore it further."
"The User interface can be improved, especially for 1st time user."
"It isn't easy to manage vulnerabilities in Tenable."
"The solution's dashboards could be improved and made more user-friendly."
"The market is standard for vulnerability scanning, however, the posture can be improved through Tenable's prioritization engine."
"The reporting has a very limited customization capability."
"The reporting in Tenable.io Web Application Scanning is not as good as the reporting in Tenable SC."
"Tenable.io Web Application Scanning could improve by offering faster fuzzing."
"They have a general dashboard for web application scanning, but the dashboards and reporting can be improved. They probably have some features in their roadmap."
"I would like for them to add intervening proxy, whereby you can alter the get/put requests."
 

Pricing and Cost Advice

"The base solution costs approximately 30,000 euros, with an additional 2,000 euros per year for licenses and support."
"The tool's licensing costs are yearly and competitive."
"Check Point CloudGuard Application Security's pricing is not friendly."
"Check Point CloudGuard WAF is expensive compared to Azure WAF."
"The sales team or account managers from Check Point are top-notch. As I am using other products as well, my pricing was competitive compared to others."
"Check Point CloudGuard Application Security's pricing is comparable to other products in the market."
"Considering all the benefits we've observed, we find the price to be satisfactory."
"I work for an Indian banking client. In India, companies are on a budget. The company liked Check Point very much, but it was a little bit costly compared to FortiWeb. However, it had more features compared to FortiWeb."
"For Tenable.io Web Application Scanning, it comes to around 6,50,000 Indian rupees, plus taxes."
"The pricing is okay."
"It follows the same licensing scheme as Tenable.io and Tenable. sc."
"The application is extremely affordable. There are no additional costs involved with licensing. We switched to Tenable.io Web Application Scanning from other solutions due to pricing."
"Tenable.io Web Application Scanning is expensive for small businesses."
"I rate the product's pricing a four out of ten."
"The price of the solution is reasonable compared to the competitors. The license cost is based on the number of users and the annual usage."
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
918,957 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
15%
Computer Software Company
14%
Financial Services Firm
11%
Construction Company
8%
Financial Services Firm
12%
Manufacturing Company
11%
Comms Service Provider
8%
Construction Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business57
Midsize Enterprise24
Large Enterprise40
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise5
Large Enterprise7
 

Questions from the Community

What is your experience regarding pricing and costs for CloudGuard for Application Security?
It is a little bit expensive, but the pricing model is acceptable, though a reduction would make it more competitive with leaders such as Palo Alto.
What needs improvement with CloudGuard for Application Security?
The false positive rate is a concern, but I could recommend improvements where false positives have to be minimized better. This all depends on how the rules are customized and configured, and it c...
What is your primary use case for CloudGuard for Application Security?
The main purpose is to have network security through machine learning, which can offer threat detection and intelligence for my endpoints, and I am looking for application security. I am looking fo...
What needs improvement with Tenable.io Web Application Scanning?
If there were a solution, I would like to see automation and an integrated remediation solution for vulnerability or patch management.
What advice do you have for others considering Tenable.io Web Application Scanning?
I do not understand what API approach means; I do not understand this term. I think Tenable.io Web Application Scanning is the best option on the market at the moment. My review rating for this pro...
What is your experience regarding pricing and costs for Tenable.io Web Application Scanning?
I think the price is expensive. We do not have an idea of how much we have to pay approximately, but comparing to other products, Tenable.io Web Application Scanning is expensive.
 

Also Known As

Check Point CloudGuard Application Security, CloudGuard Application Security, CloudGuard AppSec, Check Point CloudGuard Code Security
No data available
 

Overview

 

Sample Customers

Orange España, Paschoalotto
IMDEX
Find out what your peers are saying about Check Point WAF (formerly CloudGuard WAF) vs. Tenable.io Web Application Scanning and other solutions. Updated: September 2026.
918,957 professionals have used our research since 2012.