Check Point WAF (formerly CloudGuard WAF) vs Wallarm NG WAF comparison

Check Point WAF (formerly CloudGuard WAF) vs. Wallarm NG WAF

Download the complete report

Helped 886,719 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cloudflare Web Application ...

Mindshare comparison

As of April 2026, in the Web Application Firewall (WAF) category, the mindshare of Cloudflare Web Application Firewall is 4.7%, down from 7.2% compared to the previous year. The mindshare of Check Point WAF (formerly CloudGuard WAF) is 2.4%, up from 1.3% compared to the previous year. The mindshare of Wallarm NG WAF is 1.0%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Web Application Firewall (WAF) Mindshare Distribution
Product	Mindshare (%)
Cloudflare Web Application Firewall	4.7%
Check Point CloudGuard WAF	2.4%
Wallarm NG WAF	1.0%
Other	91.9%

Web Application Firewall (WAF)

Featured Reviews

Dean Barisic

CTO at PlayNirvana

Advanced security reporting has protected high-traffic betting platforms from constant attacks

I don't see room for improvement to Cloudflare Web Application Firewall. One thing I don't know much about because we have a dedicated IT team for that, and I'm not involved with Cloudflare much anymore. But if I were to compare them to F5, I would like to see more features that F5 offers. F5 has an option to bring the whole infrastructure, the whole WAF and all their packages, Bot Management, and everything else on your infrastructure. You need to install certain services from their side, and then you can choose if you would like requests to hit your servers immediately or if requests need to be proxied through F5 backbone. That would be a nice addition because we have 90% of the traffic as legit traffic coming from whitelisted servers. If it comes from whitelisted servers, I don't need to go every request through the backbone; I could easily just IP whitelist everything. Then I could maybe have Bot Management on my infrastructure that drastically reduces the price of Cloudflare. I would like to see Push CDN more improved in the next release of Cloudflare Web Application Firewall. And maybe something similar to Pushpin that Fastly has, which is an option where you can push messages that then can be scaled globally over the network. From our perspective, if we have a listener that listens for stock updates, I would just need to have one processor that pushes those updates to the Cloudflare API, and then Cloudflare would broadcast that message to all listeners. Cloudflare will check the order of the message, and if you, as a customer, are not connected or have some kind of network issue, when you reconnect, you will receive the latest state and missing updates.

Read full review

KrishnakumarM

CISO at Pink Solutions

Cloud security has strengthened risk posture and improved advanced threat visibility

There are some API gateway and API securities I mentioned. If these are incorporated with AI-related features, particularly those seven key vulnerabilities I mentioned—token theft and tool poisoning—that would be beneficial. AI-related features are not included yet in Check Point CloudGuard WAF. However, they are present in FortiGate. That is the advantage of FortiGate now. FortiGate is stopping all AI-related vulnerabilities now. FortiGate has this capability. It is unfortunate that even Palo Alto also lacks one or two of these features. Check Point Quantum is very good, without a doubt. However, their capabilities are not in comparison with Palo Alto. There are some features, but there are some gaps in comparison with Palo Alto.

Read full review

it_user796242

Information Security Engineer at a tech vendor with 51-200 employees

Helps us to monitor attacks to our sites and prevents a lot of them

Set up Wallarm as a reverse proxy. Do not replace your web server. Use Wallarm first in monitoring mode, then learn from Wallarm which type of request is false positive and which type of request is not. This process takes a couple of weeks for very highly-loaded web applications (few millions of unique visitors in one month). Then you can turn Wallarm into blocking mode and everything will be fine. Do not forget to build a monitoring system, the wave, and API for it. Before we started using Wallarm, I already knew Ivan (CEO) and Stepan (COO) from a couple of years before. Ivan had his own security company and Stepan was working on a Russian security magazine called Xakep. They told us that they wanted to create a new WAF and already had a working version of it. They asked me to test it. We did tests, and it was really good. After few month after testing, we signed an agreement. Our choice was made not because we knew these guys for a long time, but because the product was really cool and we were glad to start using it as one of the first on the market!

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"This is a good product; it's reliable and scales well."

"I have not had any issues with this solution, and I would recommend it to others who are interested in using it."

"It is a SaaS solution unlike much of the competition."

"Cloudflare WAF provides protection through rules and functionalities like Cloudflare's SDRAP."

"The setup process is very simple for me."

"The security features are valuable. The particular feature we use is called OWASP."

"The most valuable part of the solution for us overall is exactly that it is a Software-as-a-Service product."

"For us, the key feature of Cloudflare is DDoS protection and IP hiding, especially since we are a crypto company."

More Cloudflare Web Application Firewall pros

"They offer free trials, which is quite appreciative and grabs more attention from new users and businesses."

"It has allowed us to use components with known vulnerabilities, which have been prevented based on their multiple databases that have correlated incidents, helping the development of applications to be fast, efficient, and safe, which is what we were looking for."

"By using a cloud application security solution, our company can save costs by reducing the need for additional security hardware and software and improving operational efficiency."

"Before CloudGuard, we periodically had some website issues. Since we've had CloudGuard, we've never had these issues happen again."

"The first valuable feature is that it is not a complex process to get it up and running. It was not complex at all. We were in a close relationship with the team that developed the app, and it worked in a few hours. The second valuable feature is the information that comes out of it."

"Among its most outstanding features is the powerful AI in container security; above all, it is one of the most powerful and easy-to-manage solutions."

"The solution's ability to handle multiple websites and applications without needing more expensive hardware is a key advantage."

"The tool helps us to block IPs and applications."

More Check Point WAF (formerly CloudGuard WAF) pros

"Helps us to monitor situation in regards to attacks to our sites and prevents a lot of them."

"With active threat detection, we are no longer over-swamped with tons of useless events."

"Vulnerability scanner and WAF are valuable features."

"They are the only solution that fits our success criteria and business objectives: WAF must have a low (<5%) false negative rate and be ready to protect from all well-known web attacks."

"Perimeter control and active vulnerability scanner are the most valuable features."

"The most powerful feature is the ability to first learn what type of query to make to your web application when it is attacked and what type of query creates a false positive to your app."

Cons

"The notification part could be improved. It's very much connected to Web Application Firewall, rate-limiting, and DDoS protection."

"Cloudflare Web Application Firewall should improve visibility for a customer."

"The rate limiting functionality could be enhanced, as we find it somewhat limited."

"Cloudflare should update the version of the ModSecurity core rule set that they run on."

"The accuracy of the Cloudflare Web Application Firewall could be improved by reducing the number of false-negative alerts."

"Their documentation could be better. They don't have documentation that explains everything well. They have documentation for everything you're looking for, but they lack a single piece of documentation to tie everything together. As a new user or beginner, it took us a little bit of time to figure out how to put all these things in place."

"The reporting could be improved if it were more granular."

"They need to improve their support because getting a response for basic requests took around 48 hours, which is too long."

More Cloudflare Web Application Firewall cons

"If the price could come down, I would be very happy with the product."

"One of the big problems we found in Check Point, in general, is the support."

"The user interface can be improved, especially for 1st time user."

"You need to know exactly the system. You cannot have someone running the system if they don't have the knowledge to do so."

"I have faced issues with the tool's blocking aspects. It is hard to open or block web services due to the multitude of cloud centers. I have to do the process manually at times. We have a bug which is hard to solve."

"The documentation of each of the tools that they offer needs to be better."

"They need improved latency in the main window."

"Check Point CloudGuard WAF can be improved in several ways. We have faced slowness issues in our network after onboarding it on any application."

More Check Point WAF (formerly CloudGuard WAF) cons

"Technical support is 6 or 7 out of 10. Sometimes we have had trouble with communication and understanding."

"It needs more customization in PDF reports."

"The biggest problem for us was the stability and speed using the first version of Wallarm."

"The biggest problem for us was the stability and speed using the first version of Wallarm. Now, it is fine."

"Wallarm uses a learning mechanism to detect attacks and to avoid false positives. If Wallarm blocks some illegitimate request, then you can go to the management console and mark this request as false positive, but sometimes this does not work properly."

"There were several stability issues during the first pilot."

Pricing and Cost Advice

"Cloudflare offers different types of subscriptions for businesses, enterprises, and personal users, and the pricing is negotiable."

"The solution is expensive."

"The solution's pricing option needs to be more transparent for enterprise clients."

"It starts at $20 and can easily go up to $200 monthly"

"It is not too pricey."

"What's my experience with pricing, setup cost, and licensing? I believe the pricing is not the best, but it's reasonable and acceptable. We also use the McAfee system in parallel. In terms of pricing, its okay - not great, but not bad either. It falls in the middle, which is acceptable. In terms of support licensing, last time, we were searching for a solution, and we considered products from resellers rather than directly from the cloud provider. However, the pricing we encountered was exceptionally high. As a result, we are inclined to select support from the reseller."

"The annual licensing fee is $10,000 USD."

"We pay $210 per month for CloudFlare WAF."

More Cloudflare Web Application Firewall pricing and cost advice

"I work for an Indian banking client. In India, companies are on a budget. The company liked Check Point very much, but it was a little bit costly compared to FortiWeb. However, it had more features compared to FortiWeb."

"If the pricing for the Infinity platform covers everything, it would be more straightforward. I had a hard time selling it to our CEO as a former CFO because of the differentials. There are different deltas year to year over a five-year period. It is very difficult to explain. It would be easier to digest for our executives if there was a flatter scale"

"Check Point CloudGuard Application Security's pricing is comparable to other products in the market."

"The base solution costs approximately 30,000 euros, with an additional 2,000 euros per year for licenses and support."

"The sales team or account managers from Check Point are top-notch. As I am using other products as well, my pricing was competitive compared to others."

"Check Point CloudGuard Application Security's pricing is not friendly."

"I find the pricing to be reasonable."

"It is not cheap, but it is worth it."

More Check Point WAF (formerly CloudGuard WAF) pricing and cost advice

"Pricing must be cheaper than the competition and the licensing must be good."

See which vendors are best for you

Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.

See recommendations

886,719 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

17%

Financial Services Firm

Comms Service Provider

Computer Software Company

26%

Manufacturing Company

10%

Financial Services Firm

Comms Service Provider

Financial Services Firm

17%

Government

12%

Manufacturing Company

10%

Insurance Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	16
Midsize Enterprise	6
Large Enterprise	6

By reviewers
Company Size	Count
Small Business	35
Midsize Enterprise	20
Large Enterprise	19

No data available

Questions from the Community

What is your experience regarding pricing and costs for Cloudflare Web Application Firewall?

The price of Cloudflare Web Application Firewall is reasonable.

What needs improvement with Cloudflare Web Application Firewall?

I don't see room for improvement to Cloudflare Web Application Firewall. One thing I don't know much about because we...

What is your primary use case for Cloudflare Web Application Firewall?

We are using Cloudflare Web Application Firewall's advanced reporting and analytics tools with their Zero Trust, so e...

What is your experience regarding pricing and costs for CloudGuard for Application Security?

Check Point CloudGuard WAF is expensive. It is a little bit expensive. You cannot avoid this from an Israeli product....

What needs improvement with CloudGuard for Application Security?

While Check Point CloudGuard WAF is a strong solution, it could be improved in a few areas such as simplifying and cu...

What is your primary use case for CloudGuard for Application Security?

Check Point CloudGuard WAF's primary use is protecting web applications and APIs from application layer attacks in th...

Fortinet FortiWeb vs Cloudflare Web Application Firewall

Ask a question

Earn 20 points

Comparisons

Compared 7% of the time

Imperva Application Security Platform vs Cloudflare Web Application Firewall

Compared 6% of the time

Azure Web Application Firewall vs Cloudflare Web Application Firewall

Compared 5% of the time

Radware Cloud WAF Service vs Cloudflare Web Application Firewall

Compared 5% of the time

F5 Advanced WAF vs Cloudflare Web Application Firewall

Compared 5% of the time

More Cloudflare Web Application Firewall Competitors

Prisma Cloud by Palo Alto Networks vs Check Point WAF (formerly CloudGuard WAF)

Compared 12% of the time

AWS WAF vs Check Point WAF (formerly CloudGuard WAF)

Compared 10% of the time

Imperva Application Security Platform vs Check Point WAF (formerly CloudGuard WAF)

Compared 9% of the time

F5 Advanced WAF vs Check Point WAF (formerly CloudGuard WAF)

Compared 8% of the time

Fortinet FortiWeb vs Check Point WAF (formerly CloudGuard WAF)

Compared 6% of the time

More Check Point WAF (formerly CloudGuard WAF) Competitors

Imperva Application Security Platform vs Wallarm NG WAF

Compared 12% of the time

Venusense Web Application Firewall vs Wallarm NG WAF

Compared 10% of the time

Cequence Security vs Wallarm NG WAF

Compared 9% of the time

Akamai API Security vs Wallarm NG WAF

Compared 8% of the time

Microsoft Azure Application Gateway vs Wallarm NG WAF

Compared 5% of the time

More Wallarm NG WAF Competitors

Product Reports

Cloudflare Web Application Firewall

Download Cloudflare Web Application Firewall product report

Cloudflare Web Application Firewall report

Check Point WAF (formerly CloudGuard WAF)

Download Check Point WAF (formerly CloudGuard WAF) product report

Check Point WAF (formerly CloudGuard WAF) report

Web Application Firewall (WAF)

March 2026

Download Wallarm NG WAF product report

Also Known As

Cloudflare WAF

Check Point CloudGuard Application Security, CloudGuard Application Security, CloudGuard AppSec

Wallarm NG-WAF

Overview

Cloudflare Web Application Firewall's intuitive dashboard enables users to build powerful rules through easy clicks and also provides Terraform integration. Every request to the WAF is inspected against the rule engine and the threat intelligence curated from protecting over 27 Million websites. Suspicious requests can be blocked, challenged or logged as per the needs of the user while legitimate requests are routed to the destination, agnostic of whether it lives on-premise or in the cloud. Analytics and Cloudflare Logs enable visibility into actionable metrics for the user.

Cloudflare

Check Point WAF uses AI-driven threat prevention with seamless API integration, offering advanced DDoS protection. It auto-learns attack patterns, updates protection, and minimizes false positives. Its interface simplifies policy management for secure web applications across cloud environments.

Check Point WAF combines AI-driven threat detection with streamlined policy management to provide effective security for web applications and APIs. It offers zero-day protection, threat intelligence, and advanced DDoS protection. Users enjoy robust logging and compliance management across multi-cloud environments. Integration is smooth, with reduced reliance on signatures, facilitating multi-layer security. Despite its strengths, users note areas for improvement, such as latency and pricing, and call for enhancements in API security, real-time monitoring, and reporting. Challenges include integration complexity and limited technical support accessibility. Effective application security across dynamic environments is a key offering.

What are Check Point WAF's key features?

AI-Driven Threat Prevention: Utilizes AI to identify and block threats, minimizing false positives.
Seamless API Integration: Ensures integration into existing infrastructures without delays.
Advanced DDoS Protection: Safeguards against large-scale attacks to maintain service availability.
Auto-Learning Capability: Continuously adapts to new threat patterns for improved security.
User-Friendly Management: Simplifies policy and compliance management tasks.

What benefits can users expect from Check Point WAF?

Extensive Logging: Enables comprehensive analysis and auditing through detailed records.
Reduced Total Cost of Ownership: Provides cost-effective security measures in cloud environments.
Zero-Day Protection: Offers proactive defense against unidentified vulnerabilities.
Streamlined Deployment: Reduces deployment times with easy integration processes.
Robust Multi-Layer Security: Reinforces application security without heavy reliance on signatures.

Check Point WAF finds particular relevance in industries requiring robust cybersecurity measures such as finance, healthcare, and e-commerce. These sectors benefit from its advanced threat detection and adaptive security policy management, crucial for securing sensitive data across multi-cloud infrastructures. By managing API usage efficiently, it helps maintain regulatory compliance while ensuring optimal operation. Enhanced traffic logging and malware threat management add to its appeal for organizations focusing on securing transactions and sensitive information.

Check Point Software Technologies

Wallarm NG WAF provides advanced security by integrating machine learning, making it essential for modern web applications. It offers protection against sophisticated threats and automates many processes.

Wallarm NG WAF leverages AI-driven technology to deliver robust security measures. It helps in defending web applications from cybersecurity threats with enhanced threat detection and response capabilities. Beyond vulnerability insights, Wallarm enhances security protocols, scales with growing online demands, and ensures comprehensive threat coverage, fostering a safer web environment.

What are the key features of Wallarm NG WAF?

AI-Powered Threat Detection: Identifies and mitigates sophisticated attacks efficiently.
Automated Security Updates: Continuously updates defense strategies without manual intervention.
Flexible Deployment: Easily integrates across cloud, on-premise, and hybrid setups.
Scalability: Adapts to growing traffic volumes with consistent protection.
Detailed Reporting: Provides comprehensive analytics on web security posture.

What benefits can users expect from Wallarm NG WAF?

Increased Security: Enhances threat detection and reduces vulnerabilities.
Operational Efficiency: Reduces manual intervention with automated tasks.
Cost-Effectiveness: Optimizes security expenditure by preventing potential breaches.
Time Savings: Automates repetitive actions, saving valuable time for IT teams.

In industries like finance, e-commerce, and healthcare, Wallarm NG WAF is implemented to ensure data protection and compliance with stringent security standards. Its adaptability allows it to meet industry-specific requirements, offering specialized configurations tailored to each sector's unique demands.

Wallarm

Sample Customers

crunchbase, udacity, marketo, okcupid, zendesk

Orange España, Paschoalotto

Panasonic. Miro. Rappi. Wargaming. Gannett. Omio. Acronis. Workforce Software. Tipalti. SEMRush.

Check Point WAF (formerly CloudGuard WAF) vs. Wallarm NG WAF