--- title: Check Point WAF (formerly CloudGuard WAF) Reviews meta\_title: 'Check Point WAF (formerly CloudGuard WAF) Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 88 reviews by the users' company size, role or industry to find out how Check Point WAF (formerly CloudGuard WAF) works for a business like yours. aggregate\_rating: rating\_value: 4.4 review\_count: 88 scale: '5' date\_modified: '2026-08-10' parent\_category: name: Cloud Security url: https://www.g2.com/categories/cloud-security --- # Check Point WAF (formerly CloudGuard WAF) Reviews & Product Details Visit Website CloudGuard WAF is a cloud-native Web and API security solution designed to help users safeguard their applications from both known and unknown threats. By leveraging advanced contextual AI, this solution provides precise threat prevention without the need for traditional signature-based detection methods. This innovative approach allows organizations to maintain a robust security posture while minimizing the risks associated with evolving cyber threats. Targeted primarily at businesses that rely on web applications and APIs, CloudGuard WAF is particularly beneficial for enterprises in sectors such as finance, healthcare, and e-commerce, where data protection is paramount. The solution is designed to address the complex security challenges that arise in modern application environments, especially those utilizing continuous integration and continuous deployment (CI/CD) practices. As organizations increasingly adopt cloud-native architectures, the need for flexible and efficient security solutions becomes critical. One of the standout features of CloudGuard WAF is its preemptive protection capabilities. By employing machine learning-based security measures, the solution can effectively prevent zero-day threats, which are vulnerabilities that have not yet been discovered or patched. This proactive approach eliminates the reliance on frequent signature updates, allowing organizations to stay ahead of potential attacks without the need for constant manual intervention. Moreover, CloudGuard WAF excels in precise detection, enabling it to identify a broader range of attacks while minimizing the need for ongoing fine-tuning and exception creation. This feature not only enhances the accuracy of threat detection but also reduces the operational burden on security teams, allowing them to focus on more strategic initiatives rather than routine adjustments. Designed with cloud-native principles in mind, CloudGuard WAF supports CI/CD-friendly deployment and automation. This means that organizations can easily integrate the solution into their existing workflows, from installation to upgrades and configuration. By utilizing declarative infrastructure-as-code or APIs, users can streamline their security processes, ensuring that their applications remain protected as they evolve. Overall, CloudGuard WAF represents a significant advancement in the realm of web and API security, offering organizations a sophisticated and adaptable solution to combat the ever-changing landscape of cyber threats. Its combination of preemptive protection, precise detection, and cloud-native design makes it a valuable asset for any organization looking to enhance its security posture in today's digital environment. * * * Product Website Check Point WAF (formerly CloudGuard WAF) Seller [Check Point Software Technologies](https://www.g2.com/sellers/check-point-software-technologies) Discussions [Check Point WAF (formerly CloudGuard WAF) Community](https://www.g2.com/products/check-point-waf-formerly-cloudguard-waf/discuss) Solution Type Best-of-Breed Overview by Kristin Manogue Show More ## Value at a Glance Averages based on real user reviews. ### Time to Implement 1 month [ View More Pricing Information ](https://www.g2.com/products/check-point-waf-formerly-cloudguard-waf/pricing) ## Check Point WAF (formerly CloudGuard WAF) Integrations (6) What do users say about integrations? Verified by Check Point WAF (formerly CloudGuard WAF) [ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Azure Portal ](https://www.g2.com/products/azure-portal/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Google Analytics ](https://www.g2.com/products/google-analytics/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Microsoft Azure Cosmos DB ](https://www.g2.com/products/microsoft-azure-cosmos-db/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") ngrok ](https://www.g2.com/products/ngrok/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Splunk Enterprise ](https://www.g2.com/products/splunk-enterprise/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") YouTube Advertising ](https://www.g2.com/products/google-youtube-advertising/reviews) Show More ![Samiksha C.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Samiksha C.") SC Samiksha C. Security operations Small-Business (50 or fewer emp.) 7/15/2026 "Complex Setup, but Strong Security Features" 4.5/5 What do you like best about Check Point WAF (formerly CloudGuard WAF)? I feel Check Point WAF is very basic but it does its job well in protecting the organization. It definitely helps when an employee is clicking on a suspicious link, like, preventing phishing attacks. I appreciate that it logs everything so that the SOC team stays aware. The feature I love the most is the firewall policy management and log monitoring via the smart console. I regularly work on analyzing the logs to investigate issues and validate security alerts. I also use the threat prevention features like IPS and antivirus to understand patterns and tune rules. Review collected by and hosted on G2.com. What do you dislike about Check Point WAF (formerly CloudGuard WAF)? I feel the setup is very complex and quite lengthy. It also has a high cost, and the performance impact is a bit lagging. It increases latency, reduces throughput, and needs proper sizing and tuning. I request the Check Point team to hopefully make the process easier. Review collected by and hosted on G2.com. What problems is Check Point WAF (formerly CloudGuard WAF) solving and how is that benefiting you? I use Check Point WAF to protect my organization, detecting endpoint activities and preventing security breaches. It logs everything, keeping our SOC team aware of potential phishing threats and ensuring we don't visit suspicious links. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Milan D.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Milan D.") MD Milan D. Consultant Small-Business (50 or fewer emp.) 7/13/2026 "Solid WAF Protection With a Learning Curve" 4/5 What do you like best about Check Point WAF (formerly CloudGuard WAF)? What I like best is the contextual AI engine that detects threats without relying on constant signature updates. It dramatically cut down our false positives compared to our previous signature-based WAF, which means less time spent tuning rules and chasing noise. Deployment across our cloud environments was straightforward, and the automatic learning of application behavior means new apps get protected without a ton of manual configuration. The unified management through the Infinity portal is also a big plus for us since we can see everything in one place. Review collected by and hosted on G2.com. What do you dislike about Check Point WAF (formerly CloudGuard WAF)? The initial setup and configuration felt more complex than expected, and the learning curve for tuning rules to reduce false positives was steep. Documentation could be more thorough in places, and support response times occasionally lagged when we ran into urgent issues. Pricing also feels on the higher side compared to some alternatives, especially as you scale traffic. Better dashboards and more intuitive policy management would go a long way Review collected by and hosted on G2.com. What problems is Check Point WAF (formerly CloudGuard WAF) solving and how is that benefiting you? We use Check Point WAF to protect our web applications and APIs from common threats like SQL injection, cross-site scripting, and bot traffic. Before adopting it, we struggled with manually managing security rules and staying ahead of emerging attacks. It's given us more consistent protection across our cloud environments and reduced the time our team spends triaging alerts. The automated threat detection lets us focus on other priorities while staying confident our applications are covered. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Ayodeji A.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Ayodeji A.") AA Ayodeji A. Cybersecurity Home Lab & Security Projects Small-Business (50 or fewer emp.) 7/7/2026 "Strong, Easy-to-Manage Web App Protection with Smart Automation" 5/5 What do you like best about Check Point WAF (formerly CloudGuard WAF)? I like Check Point WAF because it provides strong protection against web application attacks while being easy to deploy and manage. Its automated policy generation, AI-driven threat detection, and low false positive rate reduce administrative effort without compromising security. I also appreciate its support for cloud environments, API protection, and centralised management, making it a reliable solution for securing modern web applications. Review collected by and hosted on G2.com. What do you dislike about Check Point WAF (formerly CloudGuard WAF)? One area that could be improved is making the platform even more intuitive for new users, especially when configuring advanced security policies. However, the available documentation and automation features help reduce the learning curve, and overall the solution provides strong security capabilities and flexibility. Review collected by and hosted on G2.com. What problems is Check Point WAF (formerly CloudGuard WAF) solving and how is that benefiting you? Check Point WAF helps me solve the challenge of protecting web applications from security threats while reducing the effort required to monitor and manage protection rules. I benefit from its automated threat detection, clear visibility into traffic, and ability to identify and block malicious activity. It gives me greater confidence that applications are better protected while making security management more efficient. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Ijlal K.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Ijlal K.") IK Ijlal K. Machine Learning & Software Engineer Small-Business (50 or fewer emp.) 6/30/2026 "Good protection and easy to manage web security" 5/5 What do you like best about Check Point WAF (formerly CloudGuard WAF)? I like that Check Point WAF is easy to use and gives good protection without needing too much manual work all the time. It helps to block common web attacks and gives clear visibility about what is happening. The managed rules are also useful, and it is good that we can still adjust things when needed. Review collected by and hosted on G2.com. What do you dislike about Check Point WAF (formerly CloudGuard WAF)? One thing I dislike is that sometimes the setup and tuning can feel a bit complicated, especially in the start. Some alerts or rules need extra checking to avoid false positives, and it can take time to understand why something was blocked. The interface is good overall, but few parts could be more simple and easier to follow. Review collected by and hosted on G2.com. What problems is Check Point WAF (formerly CloudGuard WAF) solving and how is that benefiting you? Check Point WAF is solving the problem of protecting web applications from common attacks like bad bots, injection attempts and other unwanted traffic. It helps to block many threats before they reach the application, so we dont have to check everything manually. It also gives better visibility about what kind of requests are coming and what was blocked. The benefit is that security becomes more easy to manage and it saves time for the team. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Ashith S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Ashith S.") AS Ashith S. DevOps Intern Small-Business (50 or fewer emp.) 7/17/2026 "Strong Web Traffic Visibility, But a Steep Learning Curve" 3/5 What do you like best about Check Point WAF (formerly CloudGuard WAF)? What I like most about Check Point WAF is its clear visibility into web traffic and blocked requests. It makes it easy to identify suspicious activity and fine-tune security policies. Once configured, it provides reliable protection with minimal day-to-day effort. Review collected by and hosted on G2.com. What do you dislike about Check Point WAF (formerly CloudGuard WAF)? The biggest drawback is the learning curve, especially for first-time users. The interface can feel crowded, and fine-tuning policiesThe initial setup and policy tuning can be time-consuming, especially if you're new to WAFs. The interface isn't always intuitive, and some configuration options require extra effort to understand. takes time to avoid false positives. Some configuration tasks could also be more intuitive. Review collected by and hosted on G2.com. What problems is Check Point WAF (formerly CloudGuard WAF) solving and how is that benefiting you? Check Point WAF helps protect our web applications from common attacks while reducing the need for constant manual monitoring. It gives us better visibility into suspicious traffic, allowing us to respond faster and manage security more efficiently. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Hazem H.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Hazem H.") HH Hazem H. Cyber Security Trainee Network Security Trainee Self Learning – Cyber & Network Security Mid-Market (51-1000 emp.) 6/20/2026 "Strong Protection with Room for Onboarding Improvement" 4.5/5 What do you like best about Check Point WAF (formerly CloudGuard WAF)? I use Check Point WAF to protect web applications and APIs from a wide range of cyber threats like SQL injection and cross-site scripting (XSS). What I like most about Check Point WAF is its ability to provide strong, automated protection for web applications while remaining easy to manage on a day-to-day basis. The platform effectively detects and blocks traffic. The initial setup of Check Point WAF was relatively straightforward, especially with the available documentation and guided configuration options. It provides strong protection against modern web application threats and offers good visibility through a centralized management interface. Review collected by and hosted on G2.com. What do you dislike about Check Point WAF (formerly CloudGuard WAF)? One challenge is the initial onboarding and policy tuning process. For organizations with complex or highly customized web applications, achieving the right balance between strong protection and minimizing false positives can require additional time and expertise. Review collected by and hosted on G2.com. What problems is Check Point WAF (formerly CloudGuard WAF) solving and how is that benefiting you? I use Check Point WAF to protect web applications and APIs from cyber threats like SQL injection and XSS. It offers strong, automated protection while being easy to manage daily. It effectively detects and blocks traffic, solving security challenges by defending against common and complex attacks. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Ema B.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Ema B.") EB Ema B. System Engineer Computer Networking Mid-Market (51-1000 emp.) 1/23/2026 "Strong ML-Based Protection, but Pricing, Setup, and Documentation Need Work" 3.5/5 What do you like best about Check Point WAF (formerly CloudGuard WAF)? It can easily distinguish between attacks and legitimate traffic. It doesn’t require a lot of manual tuning, such as creating rules and policies. It protects using machine learning and AI, which helps prevent most attacks. Review collected by and hosted on G2.com. What do you dislike about Check Point WAF (formerly CloudGuard WAF)? I don’t like the pricing and the complexity of the initial setup. Log retention is limited, which creates issues with troubleshooting, and the documentation feels lacking—especially when it comes to real-world examples. The customization is also limited unlike traditional firewalls. It relies on cliud so it canndepend on ISP reachability and connectivity. Review collected by and hosted on G2.com. What problems is Check Point WAF (formerly CloudGuard WAF) solving and how is that benefiting you? It protects against SQL injection and XSS attacks that are often missed. It also reduces false positives, which means less overhead for the network security team. It helps stop automated botnets as well. Overall, it strengthens our network security. Review collected by and hosted on G2.com. Show More 8/7/2026 Validated ReviewerIncentivizedSource: G2 invite ![UTSAV A.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "UTSAV A.") UA UTSAV A. Network Lead Mid-Market (51-1000 emp.) 7/15/2026 "Intuitive and Secure Firewall Solution" 4.5/5 What do you like best about Check Point WAF (formerly CloudGuard WAF)? I find Check Point WAF very easy to use. Even if someone is new to firewall stuff, they can handle it effectively with some guidance on using its GUI. The setup is also quite straightforward; you can set it up in five to ten minutes using the GUI interface, which is quite comfortable for first-timers. Review collected by and hosted on G2.com. What do you dislike about Check Point WAF (formerly CloudGuard WAF)? As of now, I've used many firewalls, and while Check Point WAF's interface is good, I feel it could be improved a little bit. Compared to Fortinet, their GUI interface is slightly better than Check Point's. That's pretty much the only thing I would say needs improvement, although Check Point does have very good features compared to Palo Alto and ForteGate. Review collected by and hosted on G2.com. What problems is Check Point WAF (formerly CloudGuard WAF) solving and how is that benefiting you? I use Check Point WAF to secure our environment from vulnerabilities, performing URL and application-level filtering effectively. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Merin K O.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Merin K O.") MO Merin K O. Core Team Member (Cybersecurity) Small-Business (50 or fewer emp.) 5/29/2026 "Powerful Security with a Complex Setup" 4.5/5 What do you like best about Check Point WAF (formerly CloudGuard WAF)? I use Check Point WAF to protect our internet-facing web application and APIs from web-based threats like SQL injection and cross-domain issues. The solution provides advanced threat prevention and automated policy cleaning. I appreciate the traffic inspection and reverse migration capabilities that ensure application availability and maintain security compliance. It supports both community and hybrid environments. We also integrate it with our broader security ecosystem, which helps in monitoring and provides better visibility for threat detection. Cloud integration capabilities have simplified development, providing better visibility to application networks and stronger protection against top vulnerabilities. Review collected by and hosted on G2.com. What do you dislike about Check Point WAF (formerly CloudGuard WAF)? While Check Point WAF provides strong application security and configuration capabilities, there are some areas that could be improved. The initial set of policy tuning process can be complex for new administrators, requiring a good understanding of web application traffic patterns. The interface could be more user-friendly, and the reporting and dashboard customization options could be enhanced to provide more actionable insights. Additionally, licensing can be challenging for smaller organizations, I assume. Faster deployment templates for cloud-native applications would further simplify the implementation. Review collected by and hosted on G2.com. What problems is Check Point WAF (formerly CloudGuard WAF) solving and how is that benefiting you? I use Check Point WAF to protect our web application and APIs from threats like SQL injection and ensure security compliance. It offers advanced threat prevention, automated policy cleaning, and supports hybrid environments, though initial setup needs expertise. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Nijat I.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Nijat I.") NI Nijat I. Full-stack Developer Information Technology and Services Small-Business (50 or fewer emp.) 5/12/2026 "Excellent Traffic Insights for Securing Web Apps and APIs" 4.5/5 What do you like best about Check Point WAF (formerly CloudGuard WAF)? Check Point WAF was mostly used for monitoring and securing internet-facing applications and APIs receiving traffic from outside clients. The majority of daily operations entailed examining rejected requests, analyzing security events post-deployment, and tuning protection rules in case legitimate traffic was impacted. The main asset in terms of operational activities was insight provided at the HTTP and API level. This allowed for examination of request patterns, header details, path and URL parameters and, if needed, the actual contents of blocked requests, rather than looking at basic network data. It made things more clear whether strange behavior was caused by legitimate application operation, automated scanning, or attack attempts against available services. Post-updates policy tuning was done occasionally because even minor front-end or API changes were affecting some protection settings. Review collected by and hosted on G2.com. What do you dislike about Check Point WAF (formerly CloudGuard WAF)? The tuning phase can be a lengthy one due to traffic fluctuations or custom APIs. Initially, I had to spend quite some time ensuring that blocked calls were indeed malicious or a result of the application's normal activity misinterpreted as something else. Additionally, there is a need for constant tuning when dealing with multiple applications as well as keeping a balance between tight protection and not interrupting the production traffic. Only after acquiring a good understanding of how signature definitions, exceptions, and policies worked internally did troubleshooting become easier. Review collected by and hosted on G2.com. What problems is Check Point WAF (formerly CloudGuard WAF) solving and how is that benefiting you? The reliance on traditional firewall filtering and manual monitoring for web application security was much higher before the deployment of Check Point WAF, as these methods were insufficient when detecting potential attacks on application layer. With the implementation of the new system, security monitoring became more application-focused, allowing us to detect malicious activity targeted at our web applications and web APIs, as well as minimizing vulnerability to standard web attacks and gaining more control over incoming traffic. Review collected by and hosted on G2.com. Show More Our network of Icons are G2 members who are recognized for their outstanding contributions and commitment to helping others through their expertise.G2 IconValidated ReviewerIncentivizedSource: G2 invite ## Pricing Insights Averages based on real user reviews. ### Time to Implement 1 month ### Return on Investment 15 months ### Average Discount 11% [ View More Pricing Information ](https://www.g2.com/products/check-point-waf-formerly-cloudguard-waf/pricing) ##### ##### Check Point WAF (formerly CloudGuard WAF) Features Analysis Logging and Reporting Issue Tracking Security Monitoring Controls Application-Layer Controls Traffic Controls Network Controls Functionality API / Integrations Bot Traffic API Management API Discovery API Monitoring Reporting [ View More Features ](https://www.g2.com/products/check-point-waf-formerly-cloudguard-waf/features) ## Top-Rated Alternatives [ ![HAProxy](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "HAProxy") HAProxy 4.7/5(912) ](https://www.g2.com/products/haproxy/reviews) [ ![Cloudflare Application Security and Performance](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Cloudflare Application Security and Performance") Cloudflare Application Security and Performance 4.5/5(685) ](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews) [ ![Postman](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Postman") Postman 4.6/5(1,800) ](https://www.g2.com/products/postman/reviews) [ View All Alternatives ](https://www.g2.com/products/check-point-waf-formerly-cloudguard-waf/competitors/alternatives) ##### Categories on G2 [API Security](https://www.g2.com/categories/api-security)[Web Application Firewall (WAF)](https://www.g2.com/categories/web-application-firewall-waf) ##### Explore More [What's the best ATS for reducing hiring manager workload while still giving candidates a smooth, professional experience?](https://www.g2.com/discussions/what-s-the-best-ats-for-reducing-hiring-manager-workload-while-still-giving-candidates-a-smooth-professional-experience)[Which cloud kitchen management platforms are most reliable when handling peak dinner rush of 100-plus simultaneous orders without system slowdown?](https://www.g2.com/discussions/which-cloud-kitchen-management-platforms-are-most-reliable-when-handling-peak-dinner-rush-of-100-plus-simultaneous-orders-without-system-slowdown)[Most popular project management software for consulting firms](https://www.g2.com/discussions/most-popular-project-management-software-for-consulting-firms) [What is the best payroll software for small businesses?](https://www.g2.com/discussions/what-is-the-best-payroll-software-for-small-businesses)[Podium vs DealerSocket: which automotive marketing platform is better for real-time customer response at dealerships?](https://www.g2.com/discussions/podium-vs-dealersocket-which-automotive-marketing-platform-is-better-for-real-time-customer-response-at-dealerships)[Pros and Cons Details](https://www.g2.com/products/check-point-waf-formerly-cloudguard-waf/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)