Factual Product Summary
Cloud Native Security Platform providing automated network security, posture management (CSPM), and serverless application protection across clouds.
Particularly strong in advanced cloud network firewalling with virtual gateways deployed in AWS transit gateways and Azure Virtual WANs.
Documented Capabilities & Sourced Claims
Every claim is checked against official engineering documentation or compliance reports.
Automated high-throughput cloud network threat prevention and dynamic micro-segmentation
Audited Capability Specifications
Structured criteria validated against official vendor documentation for buyer comparison.
Supported cloud security postures across AWS, Azure, GCP, and Kubernetes.
Support for API-based, read-only VM disk snapshot and container scanning without agents.
Scanning Terraform, CloudFormation, Helm, and ARM templates in CI/CD.
Real-time kernel or eBPF-based container and serverless workload threat detection.
Official Sources & References
Deployment & Specifications
- Deployment Models
- Cloud SaaS / Cloud Virtual Appliances
- Supported Platforms
- AWS, Azure, GCP, Kubernetes
- Customer Segments
- Enterprise
- Service Geography
- Global
Pricing Transparency
Per protected gateway / asset annual subscription.
About the Vendor
Check Point offers a portfolio covering assessing cloud exposure or protecting running workloads, protecting or governing business messaging, endpoint protection and incident investigation, applying access policy to users, applications or traffic and controlling communications and inspecting traffic. The entries in this catalog include CloudGuard, Harmony Email and Collaboration, Harmony Endpoint, Harmony SASE and Quantum. CloudGuard focuses on cloud security posture and workload protection. Harmony Email and Collaboration focuses on email and collaboration threat protection. Harmony Endpoint focuses on endpoint prevention and threat response. When reviewing Check Point, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for cloud permissions required for onboarding, the assets assessed, runtime coverage and how findings reach remediation owners. Portfolio detail - CloudGuard: the catalog lists Runtime threat detection, Vulnerability prioritization. - Harmony Email and Collaboration: the catalog lists Phishing detection, Message remediation. - Harmony Endpoint: the catalog lists Application control, Threat hunting, Malware prevention. - Harmony SASE: the catalog lists Zero trust network access, Data loss prevention controls, Remote workforce access. - Quantum: the catalog lists VPN connectivity, SD-WAN functions, Web content filtering. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Frequently Asked Questions: Check Point CloudGuard
Key technical, architectural, and procurement questions documented for Check Point CloudGuard by Check Point.