Check Point CloudGuard CNAPP vs Netskope comparison

Cancel
You must select at least 2 products to compare!
Check Point Software Technologies Logo
1,472 views|862 comparisons
93% willing to recommend
Netskope Logo
8,076 views|6,504 comparisons
97% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Check Point CloudGuard CNAPP and Netskope based on real PeerSpot user reviews.

Find out what your peers are saying about Tenable, Wiz, Check Point Software Technologies and others in Vulnerability Management.
To learn more, read our detailed Vulnerability Management Report (Updated: March 2024).
768,246 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"Gives us centralized firewall management for both Windows and Linux distros. Also provides a clear view of the security configurations and connections across environments (DMZ, external and internal networks).""The CloudGuard for Cloud Intelligence tool has several significant features that provide security to our company.""Helps identify and correct misconfigurations in cloud environments, ensuring that infrastructure and applications are secure and optimized.""The ability to drill down to individual hosts on an account and see which ones are affected is valuable.""The initial setup is easy and not complex at all.""It provides critical insights that enable the IT team to plan and launch smart investigations when there are security breaches.""Its monitoring and alerts are triggered by a failure or non-compliance with policies. It helps us to be able to act effectively and quickly.""The two most valuable features for us are the central firewall administrator and the real-time cloud compliance monitoring."

More Check Point CloudGuard CNAPP Pros →

"Technical support is pretty good.""Their technical support is very good.""In Azure, we have multiple subscriptions and with every subscription, we add some kind of instance ID. We can work with the instance ID so that we allow all of the instances containing nodules. Everything else, we block. This way, if you go to outlook.com and check your email, if you log in with your company account, the instance ID will show. The network will take action according to the instance ID and say, "You are using the enterprise email. I'll let you surf. I'll let you see your email." But when you try to log in with your own email address, like Hotmail or Gmail, the instance ID will be different. This way we are not completely blocking Outlook, but we are blocking people from accessing their Outlook. We are only allowing the enterprise-level emails, and we are not allowing user-based emails.""It's one of the top-ranking solutions in the market, and it's very responsive. We are using Netskope, and Netskope provides a load of features for SQL, STP, and traffic control.""Its deployment is very easy and quick. Their technical support is also very good.""The feature that I like best is the GUI.""They are very good at CASB as compared to other players.""It's a comprehensive security portfolio solution."

More Netskope Pros →

Cons
"I am not a technical person, but generically, the user interface can be a little more intuitive. Our staff has trained network security and cloud security professionals, and they get it, but when you are trying to get to the customers to be able to pick it up and maintain it, it can be a bit difficult.""Streamlining the user interface would greatly improve the user experience.""The entire system is complicated, and the setup process may not cater to the company's demands.""I’d like to see more integration with third-party tools. For example, it would be helpful to have an integration between Dome9 and ServiceNow to manage security incidents and security changes.""They take time to respond or coordinate a meeting since they maintain a schedule that does not fit Latin America very well.""We were demotivated by the lack of native automation modules for the Terraform and Ansible tools.""The biggest thing is the documentation aspect of Dome9 is a little lacking. They were purchased by Check Point about a year and a half to two years ago. When they integrated into Check Point's support system, a lot of the documentation that they had previously got mangled in the transition, e.g., linking to stuff on the Dome9 website that no longer exists. There are still a lot of spaces with incomplete links and stuff that is not as fully explained as it could be.""The security of Check Point CloudGuard Posture Management could improve. There are always new security issues coming out."

More Check Point CloudGuard CNAPP Cons →

"The product's high price is an area of concern where improvements are required.""It should have user behavior analysis and diverse analysis.""Support services could definitely be improved. Support is the one area that can always use improvement. It's an evolving thing, so based on demand and based on market requirement and the way market is moving towards.""The solution's implementations can be made much easier because, currently, it is complex in nature.""There should be some granular custom roles that are not available. However, this is on the road map. There are many devices that do not have the Zero Trust feature and other enhancements available which they should have.""Third party integration with other cloud applications could be improved. Sometimes the API won't be working, but Netskope is taking it seriously. They accept all the feature requests, and they are trying to provide whatever we ask from them.""Netskope needs to improve its stability.""There could be better integration with other solutions."

More Netskope Cons →

Pricing and Cost Advice
  • "​They support either annual licensing or hourly. At the time of our last negotiation, it was either one or the other, you could not mix or match. I would have liked to mix/match. ​"
  • "I would advise taking into account the existing number of devices and add a forecast of the number of devices to be added in the coming year or two, to obtain better pricing."
  • "It is a very straightforward licensing model that is based on the number of assets you are discovering and managing with the solution."
  • "The licensing and costs are straightforward, as they have a baseline of 100 workloads (number of instances) within one license with no additional nor hidden charges. If you want to have 200 workloads under Dome9, then you need to take out two licenses for that. Also, it does not have any impact on cloud billing, as data is shared using the API call. This is well within the limit of free API calls provided by the cloud provider."
  • "I suggest that you pay attention to the product pricing because while there are no tricks, and the licensing model is transparent, the final numbers may surprise you."
  • "Right now, we have licenses on 500 machines, and they are not cheap."
  • "The pricing is tremendous and super cheap. It is shockingly cheap for what you get out of it. I am happy with that. I hope that doesn't get reported back and they increase the prices. I love the pricing and the licensing makes sense. It is just assets: The more stuff that you have, the more you pay."
  • "Licensing and costs are straightforward, as they have a baseline of 100 workloads within one license and no additional charges."
  • More Check Point CloudGuard CNAPP Pricing and Cost Advice →

  • "Pricing is a little expensive but it is affordable."
  • "They should work on licensing costs."
  • "The pricing is competitive."
  • "Licensing is on a yearly basis."
  • "The price of the solution is fair but it depends on your use case."
  • "There is a license required for this solution and there are many licensing models available. For example, what applications are covered as part of the license."
  • "I recall that the price was considerably cheaper than that of Zscaler. It was around 60,000 AUD for 1,000 users per year and included some training and some premier support offerings. If we wanted to take advantage of the CASB capabilities, then there was an additional subscription fee, for which we didn't have the budget. On price, I would give Netskope a three or four out of five because it's quite expensive, but it offers a lot of value."
  • "Licensing fees are paid annually."
  • More Netskope Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
    768,246 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:The visibility in our cloud environment is the most valuable feature.
    Top Answer:We have concerns regarding the pricing and would appreciate seeing some improvements.
    Top Answer:We researched Netskope but ultimately chose Zscaler Netskope is a cloud access security broker that helps identify and manage cloud applications, protecting your sensitive data from exfiltration.… more »
    Top Answer:The product's analytics part is pretty fine.
    Ranking
    5th
    Views
    1,472
    Comparisons
    862
    Reviews
    48
    Average Words per Review
    651
    Rating
    8.5
    Views
    8,076
    Comparisons
    6,504
    Reviews
    15
    Average Words per Review
    465
    Rating
    8.3
    Comparisons
    Also Known As
    Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence
    Netskope CASB
    Learn More
    Overview

    Check Point CloudGuard CNAPP is a robust cloud security solution, offering comprehensive protection for cloud workloads and applications against cyberattacks. This platform encompasses cloud security posture management, threat prevention, and efficient incident response, providing organizations with a unified defense against threats. Key features include continuous visibility and remediation of misconfigurations, threat prevention through various techniques like intrusion prevention and malware detection, and rapid, cost-effective incident response. With CloudGuard CNAPP, you can safeguard cloud-native applications, cloud infrastructure, and sensitive data, enhancing your overall cloud security posture. This solution is a powerful asset for organizations seeking to fortify their cloud environments against a range of cyber threats.

    Netscope is a Secure Access Service Edge (SASE) platform that includes core products such as Cloud Access Security Broker (CASB) and Security Service Edge (SSE).

    Netskope CASB is a cloud access security broker tool that allows you to adopt cloud applications and services without sacrificing security. The solution makes it possible to manage the movement of sensitive data between cloud app instances and in the context of app risk and user risk. With Netskope’s industry-leading cloud security solution, you can also prevent sensitive data from being exfiltrated from your environment by risky insiders or malicious cybercriminals who have breached your perimeter.

    Netskope CASB Features

    Netskope CASB has many valuable key features. Some of the most useful ones include:

    • Cloud app risk scoring: With this feature you can automatically audit your traffic to discover your overall risk profile.
    • Advanced data loss protection: The solution’s data loss protection capabilities provide contextual awareness of content being used in the cloud and include machine learning enhancements to simplify, expedite, and accurately scan and classify data.
    • Granular visibility and control: The Netskope CASB solution gives you inline visibility for thousands of apps (managed and unmanaged) in use, including users, file names, activity, and other contextual information.
    • Real-time enforcement: Netskope CASB offers real-time enforcement of security policies to prevent data loss and stop threats.
    • Streamlined operations: Because of its streamlined operations, you can identify, mitigate, and remediate insider threats, compromised accounts, and privileged user threats across web and cloud applications within a single centralized administrative console.
    • Global scale and performance: The solution runs on NewEdge, a carrier-class global network, to provide maximum performance and efficacy worldwide.

    Netskope CASB Benefits

    There are many benefits to implementing Netskope CASB. Some of the biggest advantages the solution offers include:

    • Granular control of personal devices: With Netskope CASB, you can enforce granular control of unmanaged devices that have single-sign-on (SSO) access to managed cloud services, like Box and Microsoft 365.
    • Data protection: The solution has a single pane of glass and a policy interface that is easy to use to create security policies across cloud services, apps, and digital assets.
    • Find cloud services in use and assess risk: Netskope CASB can help you discover 50,000+ cloud apps and also provides risk-ratings for cloud apps so you can devise appropriate security policies.
    • Data exfiltration prevention: By using this solution, you can prevent users on corporate cloud services who download sensitive data from uploading that data to unmanaged or personal cloud apps.
    • Protection against cloud threats: Netskope CASB enables you to stop malware and advanced threats from infected users spreading through your organization. The solution directly blocks malware, whether it’s delivered from collaboration tools or downloaded from a cloud storage service to a sync client.

    Reviews from Real Users

    Netskope CASB is a solution that stands out when compared to many of its competitors. Some of its major advantages are that it offers great reporting, has a good tracking mechanism, and has a solid Cloud Control feature.

    Prerna S., Senior Information Security Analyst II at Workato, says, “[Netskope] CASB has a lot of good features; their reporting and tracking mechanism is amazing.”

    PeerSpot reviewer Dima Z., Director at Irangers International Inc., mentions, “The most useful feature of this solution is Cloud Control, which allows me to schedule cloud uploads.”

    Syed H., Lead Cloud Security Practice at Vincacyber, states, "I have found the most useful features to be the Web Secure Gateway, CASB, infrastructural service scanning, and Zero Trust."

    Sample Customers
    Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners
    NetApp, Genomic Health, Caterpillar, Apollo, Pandora, Continental Resources, Fractal, infinera, Tesla
    Top Industries
    REVIEWERS
    Security Firm23%
    Financial Services Firm19%
    Computer Software Company10%
    Cloud Provider8%
    VISITORS READING REVIEWS
    Financial Services Firm17%
    Computer Software Company15%
    Security Firm8%
    Manufacturing Company7%
    REVIEWERS
    Computer Software Company24%
    Manufacturing Company24%
    Financial Services Firm14%
    Security Firm10%
    VISITORS READING REVIEWS
    Computer Software Company17%
    Financial Services Firm15%
    Manufacturing Company8%
    Insurance Company5%
    Company Size
    REVIEWERS
    Small Business45%
    Midsize Enterprise12%
    Large Enterprise43%
    VISITORS READING REVIEWS
    Small Business27%
    Midsize Enterprise11%
    Large Enterprise62%
    REVIEWERS
    Small Business39%
    Midsize Enterprise18%
    Large Enterprise42%
    VISITORS READING REVIEWS
    Small Business21%
    Midsize Enterprise14%
    Large Enterprise66%
    Buyer's Guide
    Vulnerability Management
    March 2024
    Find out what your peers are saying about Tenable, Wiz, Check Point Software Technologies and others in Vulnerability Management. Updated: March 2024.
    768,246 professionals have used our research since 2012.

    Check Point CloudGuard CNAPP is ranked 5th in Vulnerability Management with 60 reviews while Netskope is ranked 4th in Cloud Access Security Brokers (CASB) with 35 reviews. Check Point CloudGuard CNAPP is rated 8.6, while Netskope is rated 8.4. The top reviewer of Check Point CloudGuard CNAPP writes "Threat intel integration provides us visibility in case any workload is communicating with suspicious or blacklisted IPs". On the other hand, the top reviewer of Netskope writes "Network proxy that provides visibility during deployment and allows you to control PII". Check Point CloudGuard CNAPP is most compared with Prisma Cloud by Palo Alto Networks, AWS GuardDuty, Wiz, Microsoft Defender for Cloud and Qualys VMDR, whereas Netskope is most compared with Zscaler Internet Access, Prisma Access by Palo Alto Networks, Microsoft Defender for Cloud Apps, Cisco Umbrella and Skyhigh Security.

    We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.