CP
Check Point•Software Product

Check Point CloudGuard

Profile checked & reviewed: Oct 15, 2026

Official Website
Cataloged Taxonomy:Cloud security

Factual Product Summary

Cloud Native Security Platform providing automated network security, posture management (CSPM), and serverless application protection across clouds.

SecurifyA Editorial Technical Commentary

Particularly strong in advanced cloud network firewalling with virtual gateways deployed in AWS transit gateways and Azure Virtual WANs.

Based on documented architectural analysis.Editorial Standards Policy

Documented Capabilities & Sourced Claims

Every claim is checked against official engineering documentation or compliance reports.

1 claims verified
CLOUD NETWORK SECURITY
verified

Automated high-throughput cloud network threat prevention and dynamic micro-segmentation

Audited Capability Specifications

Structured criteria validated against official vendor documentation for buyer comparison.

Audited Criteria
Multi-Cloud CSPM / CWPP / CIEM Coverage

Supported cloud security postures across AWS, Azure, GCP, and Kubernetes.

Cloud Network Security, CSPM, and Serverless Security
Agentless Snapshot Scanning

Support for API-based, read-only VM disk snapshot and container scanning without agents.

Infrastructure as Code (IaC) Scanning

Scanning Terraform, CloudFormation, Helm, and ARM templates in CI/CD.

Runtime Detection & Response

Real-time kernel or eBPF-based container and serverless workload threat detection.

Official Sources & References

Check Point CloudGuard SpecificationsType: official documentation
fresh

Deployment & Specifications

Deployment Models
Cloud SaaS / Cloud Virtual Appliances
Supported Platforms
AWS, Azure, GCP, Kubernetes
Customer Segments
Enterprise
Service Geography
Global

Pricing Transparency

Status: Contact Sales / Custom Quote Only

Per protected gateway / asset annual subscription.

About the Vendor

Check Point offers a portfolio covering assessing cloud exposure or protecting running workloads, protecting or governing business messaging, endpoint protection and incident investigation, applying access policy to users, applications or traffic and controlling communications and inspecting traffic. The entries in this catalog include CloudGuard, Harmony Email and Collaboration, Harmony Endpoint, Harmony SASE and Quantum. CloudGuard focuses on cloud security posture and workload protection. Harmony Email and Collaboration focuses on email and collaboration threat protection. Harmony Endpoint focuses on endpoint prevention and threat response. When reviewing Check Point, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for cloud permissions required for onboarding, the assets assessed, runtime coverage and how findings reach remediation owners. Portfolio detail - CloudGuard: the catalog lists Runtime threat detection, Vulnerability prioritization. - Harmony Email and Collaboration: the catalog lists Phishing detection, Message remediation. - Harmony Endpoint: the catalog lists Application control, Threat hunting, Malware prevention. - Harmony SASE: the catalog lists Zero trust network access, Data loss prevention controls, Remote workforce access. - Quantum: the catalog lists VPN connectivity, SD-WAN functions, Web content filtering. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.

HQ: Tel Aviv, Israel / San Carlos, CA
Product FAQ

Frequently Asked Questions: Check Point CloudGuard

Key technical, architectural, and procurement questions documented for Check Point CloudGuard by Check Point.

|
CSPM (Cloud Security Posture Management) scans multi-cloud control planes via read-only APIs to detect misconfigurations, insecure storage buckets, and IAM privilege risks. CWPP (Cloud Workload Protection Platform) deploys lightweight runtime sensors inside containers, Kubernetes pods, and VMs to detect active in-memory exploits and unauthorized execution.
Have an architecture or vendor question not answered here?Our analysts review vendor source documentation and publish updates continuously.