1. Ease of integration without altering my code or application flow.

2. Clear and Friendly mitigation steps and guidance.

3. ClougGuard provides large set of compliance policies which can be mapped as required. Review collected by and hosted on G2.com.

1. Getting more false positives particularly with the custom scripts.

2. Reporting feature needs to get improved.

3. Integration with other third party tool is bit complex. Review collected by and hosted on G2.com.

What I appreciate most about Check Point CloudGuard Code Security is how it integrates seamlessly into our CI/CD pipelines, allowing us to discover misconfigurations and vulnerabilities in infrastructure-as-code and containers before deployment. Our DevSecOps team benefits from real-time visibility, compliance mapping, and policy enforcement, which enables them to detect risks early on and save time and rework. Its ability to deliver immediate repair information directly to developers distinguishes it from other warning systems. Review collected by and hosted on G2.com.

One disadvantage of Check Point CloudGuard Code Security is that the initial configuration and policy customization may be difficult, particularly for organizations new to DevSecOps methods. The documentation, although extensive, might be clearer in certain complex areas, which may hinder uptake. Furthermore, interaction with certain third-party development tools requires additional configuration. Finally, reporting dashboards, although powerful, might be intimidating at first and could benefit from more basic, out-of-the-box views." Review collected by and hosted on G2.com.

CloudGuard Code Security integrates seamlessly with our CI/CD pipelines (Jenkins and GitHub Actions). It provides real-time scanning of infrastructure as code (IaC) like Terraform and CloudFormation. I appreciate its detailed vulnerability reports, policy-as-code capabilities, and easy-to-use dashboards. Review collected by and hosted on G2.com.

The initial setup and configuration were a bit complex and required documentation referencing. Also, it can sometimes generate false positives in custom scripts. Improved documentation for multi-cloud deployment scenarios would be helpful. Review collected by and hosted on G2.com.

What I like most is how easily CloudGuard Code Security integrates into our CI/CD pipeline. It scans Infrastructure-as-Code (IaC) configurations in real time, offering detailed and actionable insights. Its support for multiple frameworks like Terraform and CloudFormation is a big plus. The tool is reliable and gives us confidence that we’re shipping secure code to the cloud Review collected by and hosted on G2.com.

The one area I think needs improvement is documentation. Some advanced configuration examples are not clearly explained, and we had to spend extra time experimenting. Also, the initial onboarding could be a bit more guided for first-time users Review collected by and hosted on G2.com.

I would be very likely to recommend Check Point CloudGuard Code Security to a friend or colleague. It provides strong protection across the software development lifecycle, detecting vulnerabilities early and ensuring compliance. Its seamless integration with CI/CD pipelines and automated remediation guidance make it an effective and developer-friendly security solution. Review collected by and hosted on G2.com.

Nothing is there , as of now everything is fine. Review collected by and hosted on G2.com.

It fits seamlessly into our CI/CD pipelines without slowing down builds, and we don’t have to worry about data leaving our environment since everything runs locally. The in-depth detection of misconfigurations and hardcoded credentials is really commendable, and the ability to customize policies gives us flexibility to align with our internal security standards. Review collected by and hosted on G2.com.

the initial setup and policy customization take some time, the documentation is very helpful but for advanced usecase it becomes cubersome to implement Review collected by and hosted on G2.com.

The best part was the comprehensive solution they provide in CloudGuard. I was working as contractor for a firm & they were using CloudGuard to maintain the cloud security. Since we were using multiple cloud like GCP, Azure etc. it really become crucial to consider cloud security on priority. Review collected by and hosted on G2.com.

There is no such downsides but it would have been really helpful if they could add a product tour. Review collected by and hosted on G2.com.

Easy to integrate and deploy.

I can use cloud gaurd check point security code in my ci/cd pipeline building and it's helping to reduce and low the risk of code risk and vulnerabilities.

As a DevOps software engineer I have to do code review and code scanning.

Also secures scaning of source code. Review collected by and hosted on G2.com.

As mentioned above easy to use easy to deploy.

No drawbacks I can point out or say. Review collected by and hosted on G2.com.

Easy to integrate and deploy.

It was smooth and had no issues while integrating it with CI/CD.

Automation features for our day to day workflow.

Helping in our SDLC process. Review collected by and hosted on G2.com.

Nothing as per the uses as of now.

N numbers of APIs. Review collected by and hosted on G2.com.

The agent based scanning will help us to find the vulnerabilities while the code is in development phase. It will indicate that the following code contains any package level vulnerabilities or it storing any secrets on code level. Review collected by and hosted on G2.com.

It will not able to detect the vulnerabilities once the code was build to image. Review collected by and hosted on G2.com.