No more typing reviews! Try our Samantha, our new voice AI agent.

Check Point WAF (formerly CloudGuard WAF) vs Wallarm NG WAF comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 13, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Check Point WAF (formerly C...
Ranking in Web Application Firewall (WAF)
5th
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
79
Ranking in other categories
Application Security Tools (5th), Data Loss Prevention (DLP) (7th), DevSecOps (2nd)
Wallarm NG WAF
Ranking in Web Application Firewall (WAF)
39th
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
5
Ranking in other categories
API Security (14th)
 

Mindshare comparison

As of September 2026, in the Web Application Firewall (WAF) category, the mindshare of Check Point WAF (formerly CloudGuard WAF) is 2.0%, up from 1.5% compared to the previous year. The mindshare of Wallarm NG WAF is 1.1%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Web Application Firewall (WAF) Mindshare Distribution
ProductMindshare (%)
Check Point WAF (formerly CloudGuard WAF)2.0%
Wallarm NG WAF1.1%
Other96.9%
Web Application Firewall (WAF)
 

Featured Reviews

Krishnakumar Mahadevan - PeerSpot reviewer
CISO at Spink Solutions Private Limited
Cloud security has strengthened risk posture and improved advanced threat visibility
There are some API gateway and API securities I mentioned. If these are incorporated with AI-related features, particularly those seven key vulnerabilities I mentioned—token theft and tool poisoning—that would be beneficial. AI-related features are not included yet in Check Point CloudGuard WAF. However, they are present in FortiGate. That is the advantage of FortiGate now. FortiGate is stopping all AI-related vulnerabilities now. FortiGate has this capability. It is unfortunate that even Palo Alto also lacks one or two of these features. Check Point Quantum is very good, without a doubt. However, their capabilities are not in comparison with Palo Alto. There are some features, but there are some gaps in comparison with Palo Alto.
it_user796242 - PeerSpot reviewer
Information Security Engineer at a tech vendor with 51-200 employees
Helps us to monitor attacks to our sites and prevents a lot of them
Set up Wallarm as a reverse proxy. Do not replace your web server. Use Wallarm first in monitoring mode, then learn from Wallarm which type of request is false positive and which type of request is not. This process takes a couple of weeks for very highly-loaded web applications (few millions of unique visitors in one month). Then you can turn Wallarm into blocking mode and everything will be fine. Do not forget to build a monitoring system, the wave, and API for it. Before we started using Wallarm, I already knew Ivan (CEO) and Stepan (COO) from a couple of years before. Ivan had his own security company and Stepan was working on a Russian security magazine called Xakep. They told us that they wanted to create a new WAF and already had a working version of it. They asked me to test it. We did tests, and it was really good. After few month after testing, we signed an agreement. Our choice was made not because we knew these guys for a long time, but because the product was really cool and we were glad to start using it as one of the first on the market!

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The tool's most valuable feature is AI, which makes operations easier. Moreover, it is easy to deploy."
"Check Point CloudGuard WAF delivers clear efficiency gains over traditional WAFs in three main areas: operations, accuracy, and cost optimization."
"Its main value and what we liked the most is its powerful AI."
"I rate it ten out of ten."
"The tool helps us to block IPs and applications."
"Check Point WAF (formerly CloudGuard WAF) has positively impacted my organization by reducing rule maintenance, leading to less or near-zero false positives, and enabling frictionless DevSecOps alignment."
"The implementation of this tool for security management and control is very simple."
"The tool performs device health checkups and updates us. It helps us to be compliant with regulatory policies."
"Vulnerability scanner and WAF are valuable features."
"Perimeter control and active vulnerability scanner are the most valuable features."
"Helps us to monitor situation in regards to attacks to our sites and prevents a lot of them."
"The most powerful feature is the ability to first learn what type of query to make to your web application when it is attacked and what type of query creates a false positive to your app."
"With active threat detection, we are no longer over-swamped with tons of useless events."
"They are the only solution that fits our success criteria and business objectives: WAF must have a low (<5%) false negative rate and be ready to protect from all well-known web attacks."
 

Cons

"They need improved latency in the main window."
"In terms of features, I do not have any negatives. Their integration is extremely quick. It is better than others I have been involved with in the past. Their pricing model, however, can be better."
"There are occasions when it interfaces with other systems, leading to a loss of visibility."
"Pricing is high, although possibly justified by the service received."
"A feature we'd like to see in the future is something that could protect against other attack vectors, with a focus on application protection."
"The negative side I see is that while most things about Check Point CloudGuard WAF are really good, there is some latency and performance issues, as it can be slow to log in, especially from different regions."
"The learning curve was a challenge due to initially incorrect configurations. It took approximately a month and a half to understand how the solution works because of inadequate documentation."
"I am pretty happy with the current version. I have not yet used it to its full potential, but there could be improvements as I explore it further."
"Technical support is 6 or 7 out of 10. Sometimes we have had trouble with communication and understanding."
"The biggest problem for us was the stability and speed using the first version of Wallarm. Now, it is fine."
"There were several stability issues during the first pilot."
"Wallarm uses a learning mechanism to detect attacks and to avoid false positives. If Wallarm blocks some illegitimate request, then you can go to the management console and mark this request as false positive, but sometimes this does not work properly."
"It needs more customization in PDF reports."
 

Pricing and Cost Advice

"I work for an Indian banking client. In India, companies are on a budget. The company liked Check Point very much, but it was a little bit costly compared to FortiWeb. However, it had more features compared to FortiWeb."
"The base solution costs approximately 30,000 euros, with an additional 2,000 euros per year for licenses and support."
"Considering all the benefits we've observed, we find the price to be satisfactory."
"Check Point CloudGuard Application Security's pricing is not friendly."
"Check Point CloudGuard Application Security's pricing is comparable to other products in the market."
"If the pricing for the Infinity platform covers everything, it would be more straightforward. I had a hard time selling it to our CEO as a former CFO because of the differentials. There are different deltas year to year over a five-year period. It is very difficult to explain. It would be easier to digest for our executives if there was a flatter scale"
"The pricing is competitive compared to other solutions on the market. So, the licensing cost is average."
"I find the pricing to be reasonable."
"​Pricing must be cheaper than the competition and the licensing must be good.​"
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
913,806 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
15%
Computer Software Company
15%
Financial Services Firm
10%
Construction Company
8%
Financial Services Firm
20%
Government
11%
Manufacturing Company
10%
Insurance Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business57
Midsize Enterprise23
Large Enterprise38
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for CloudGuard for Application Security?
It is a little bit expensive, but the pricing model is acceptable, though a reduction would make it more competitive with leaders such as Palo Alto.
What needs improvement with CloudGuard for Application Security?
The false positive rate is a concern, but I could recommend improvements where false positives have to be minimized better. This all depends on how the rules are customized and configured, and it c...
What is your primary use case for CloudGuard for Application Security?
The main purpose is to have network security through machine learning, which can offer threat detection and intelligence for my endpoints, and I am looking for application security. I am looking fo...
Ask a question
Earn 20 points
 

Also Known As

Check Point CloudGuard Application Security, CloudGuard Application Security, CloudGuard AppSec, Check Point CloudGuard Code Security
Wallarm NG-WAF
 

Overview

 

Sample Customers

Orange España, Paschoalotto
Panasonic. Miro. Rappi. Wargaming. Gannett. Omio. Acronis. Workforce Software. Tipalti. SEMRush.
Find out what your peers are saying about Check Point WAF (formerly CloudGuard WAF) vs. Wallarm NG WAF and other solutions. Updated: September 2026.
913,806 professionals have used our research since 2012.