Check Point CloudGuard CNAPP Features

Management (3)

Operations (3)

Governance: Allows users to create, edit, and relinquish user access privileges.
Logging and Reporting: Provides required reports to manage business. Provides adequate logging to troubleshoot and support auditing.
API / Integrations: Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications.

Security Controls (4)

Anomaly Detection: Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns.
Data Loss Prevention: Stores data securely either on premise or in an adjacent cloud database to prevent loss of data at rest.
Security Auditing: Analyzes data associated with security configurations and infrastructure to provide vulnerability insights and best practices.
Cloud Gap Analytics: Analyzes data associated with denied entries and policy enforcement, giving information of better authentication and security protocols.

Administration (13)

Risk Scoring: Provides risk scoring for suspicious activity, vulnerabilities, and other threats.
Secrets Management: Provides tools for managing authentication credentials such as keys and passwords.
Security Auditing: Analyzes data associated with security configurations and infrastructure to provide vulnerability insights and best practices.
Configuration Management: Monitors configuration rule sets and policy enforcement measures and document changes to maintain compliance.
Policy Enforcement: Allows administrators to set policies for security and data governance.
Auditing: Analyzes data associated with web traffic and site performance to provide vulnerability insights and best practices.
Workflow Management: Creates new or streamlines existing workflows to better handle IT support tickets and service.
Auditing: Documents access and alterations of the database for analytics and reporting.
Data Discovery: Unveils data connected to infrastructure and applications used to help manage and maintain compliance within complex IT systems.
Access Control: Supports LDAP Protocol to enable access control and governance.
Security Automation: Streamline the flow of work processes by establishing triggers and alerts that notify and route information to the appropriate people when their action is required within the compensation process.
Security Integration: Integrates additional security tools to automate security and incident response processes.
Multicloud Visibility: Allows users to track and control activity across cloud services and providers.

Monitoring (3)

Continuous Image Assurance: Provides image verification features to establish container approval requirements and continuously monitor for policy violations to identify containers with known vulnerabilities, malware, and other threats.
Behavior Monitoring: Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns and fraud indicators.
Observability: Generate insights across IT systems utilizing event metrics, logging, traces, and metadata.

Protection (4)

Dynamic Image Scanning: Scans application and image source code for security flaws without executing it in a live environment
Runtime Protection: Monitors container activities and detects threats across containers, networks, and cloud service providers.
Workload Protection: Protects compute resources across a networks and cloud service providers. Serves as Firewall and prompts additional authentication for suspicious users.
Network Segmentation: Allows administrative control over network components, mapping, and segmentation.

Security (10)

Compliance Monitoring: Monitors data quality and sends alerts based on violations or misuse.
Anomoly Detection: Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns.
Data Loss Prevention: Stores data securely either on premise or in an adjacent cloud database to prevent loss of data at rest.
Cloud Gap Analytics: Analyzes data associated with denied entries and policy enforcement, giving information of better authentication and security protocols.
Compliance Monitoring: Monitors data quality and send alerts based on violations or misuse.
Risk Analysis: Identifies potential network security risks, vulnerabilities, and compliance impacts.
Reporting: Creates reports outlining log activity and relevant metrics.
False Positives: Does not falsely indicate vulnerable code when no vulnerabilitiy legitimately exists.
Custom Compliance: Allows users to set custom code standards to meet specific compliances.
Agility: Detects vulnerabilities at a rate suitable to maintain security, or allows collaborators to do the same.

Compliance (3)

Data Protection (5)

Data Masking: Protects sensitive data by disguising or encrypting data, keeping it usable by the organization and approved parties.
Data Encryption/Security: Manages policies for user data access and data encryption.
Data loss Prevention: Stores data securely either on premise or in an adjacent cloud database to prevent loss of data at rest.
Anomoly Detection: Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns.
Sensitive Data Compliance: Supports compliance with PII, GDPR, HIPPA, PCI, and other regulatory standards.

Analysis (3)

Functionality - Software Composition Analysis (3)

Effectiveness - Software Composition Analysis (3)

Activity Monitoring (4)

Usage Monitoring: Tracks infrastructure resource needs and alerts administrators or automatically scales usage to minimize waste.
Database Monitoring: Monitors performance and statistics related to memory, caches and connections.
API Monitoring: Detects anomalies in functionality, user accessibility, traffic flows, and tampering.
Activity Monitoring: Actively monitors status of work stations either on-premise or remote.

Documentation (3)

Configuration (5)

DLP Configuration: Offers data loss prevention tools to protect data from leaving the environments it is allowed to.
Configuration Monitoring: Monitors configuration rule sets and policy enforcement measures and document changes to maintain compliance.
Unified Policy Management: Allows users to track and control security policies across cloud services and providers.
Adaptive Access Control: Provides a risk-based approach to determining trust within the network.
API / Integrations: Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications.

Visibility (2)

Vulnerability Management (4)

Threat Hunting: Facilitates the proactive search for emerging threats as they target servers, endpoints, and networks.
Vulnerability Scanning: Analyzes your existing cloud, network, and IT infrastructure to outline access points that can be easily compromised.
Vulnerability Intelligence: Stores information related to new and common vulnerabilities and how to resolve them once incidents occur.
Risk-Prioritization: Allows for vulnerability ranking by customized risk and threat priorities.

Security - Cloud-Native Application Protection Platform (CNAPP) (4)

Workload and container security: Scans containers, workloads, and kubernetes clusters for any misconfigurations or vulnerabilities.
Threat detection and response: Monitor live environments for anomalies, risks and threats to ensure rapid response.
DevSecOps Integrations: Integrates with CI/CD pipelines to detect security risks early in the development life cycle.
Unified Visibility: Consolidate all security data across the tech and cloud stacks into one dashboard.