What I like best about Check Point CloudGuard WAF is its comprehensive, proactive protection for web applications against modern threats.Another standout feature is its integration with Check Point Threat Cloud, which provides continuous updates on emerging threats, enabling proactive defense and reducing the window of vulnerability.Offers detailed reports and dashboards for compliance and operational insights.Easy to implement. Nice customer support. Review collected by and hosted on G2.com.

Initial Learning Curve is the only challenge. Product is so great. Review collected by and hosted on G2.com.

I appreciate Check Point CloudGuard WAF's ability to provide a balance between strong protection and low maintenance. The product effectively shields our web applications on AWS by allowing straightforward rule setup for API protection, virtual patching, and blocking common web attacks. One of the standout features for me is the ability to apply virtual patches instantly, which is crucial when developers need more time to address vulnerabilities. I also find the auto-updates to threat signatures invaluable for keeping us protected against the latest threats. The learning mode is another advantage, as it quickly propagates policy changes, allowing our security measures to adapt swiftly. Switching to Check Point CloudGuard WAF from AWS WAF has resulted in stronger, more automated protection with enhanced visibility, which aligns perfectly with the time constraints we face. This product delivers a robust solution while minimizing the hands-on management typically required. Review collected by and hosted on G2.com.

I find the initial setup of Check Point CloudGuard WAF overwhelming. Upon logging in, the dashboard presents many menus, which can be quite daunting. Implementing a more intuitive feature such as a 'Connect Cloud Environment' could significantly ease this process. Review collected by and hosted on G2.com.

Checkpoint CloudGuard WAF is a great solution. It uses contextual AI/ML based threat prevention to stop both known threats and zero-day attacks without need for constant signature updates. From a deployment and operation viewpoint, CloudGuard WAF shines, it is cloud-native, Supports infrastructure as a code/API-based setup. Customer support is so great. We have achieved all our use cases. Review collected by and hosted on G2.com.

No dislike as of now. We liked that product. Review collected by and hosted on G2.com.

What I like best is that it uses AI and machine learning, blocking zero-day web attacks, bypassing the need for signatures. It can also distinguish humans from bots using behavioral analysis like mouse movements and keystrokes. The upsides of using the tool basically is that its ML engine adapts to changing traffic patterns automatically and it inspects uploaded files for malicious content. and its frequency of use is high because teams monitor it daily. Review collected by and hosted on G2.com.

Well, there is a few things I don't like the cost is higher than more basic WAFs, especially for smaller apps. On the downside if by any chance you have unusual or custom web apps, the contextual ML might misclassify traffic until properly “trained". Their customer support is not that good. Review collected by and hosted on G2.com.

As user the most definitely excited by the system's AI, is the robust threat defense, which presents impressively accurate in blocking those intrusions, almost no false positives.

Its function demonstrates how easily it’s launched and managed, mainly because of its automated system.

It includes strong web application and API protection, with fewer misleading alerts, easy setup in cloud, an adjustment is very easy too. Review collected by and hosted on G2.com.

I dislike that it can be expensive compared to other WAF solutions, and the initial learning curve can be challenging for new users. Some of the documentation could be more detailed, especially for advanced configurations. Additionally, while customer support is generally responsive, it can sometimes take longer than expected to resolve complex issues. Review collected by and hosted on G2.com.

What I like most about Check Point CloudGuard WAF is how reliably it blocks common web attacks without needing constant manual tuning. The dashboard is clean, and the threat visibility makes it easy to understand what is happening in real time. Its automated protections and strong integration with cloud environments help maintain security with less operational effort. Review collected by and hosted on G2.com.

The initial setup can feel a bit complex, especially for teams that are not already familiar with Check Point’s ecosystem. Some of the advanced configuration options could be more intuitive, and certain logs take time to get used to. Aside from that, the product performs well but could improve in terms of onboarding and documentation clarity. Review collected by and hosted on G2.com.

I evaluated Check Point CloudGuard WAF as part of a proposal to protect a cloud-hosted web and API stack. The deployment process was remarkably fast — it took only a few minutes to get up and running — and the integration with our existing CI/CD pipeline was smooth and straightforward. It provided comprehensive visibility into API traffic and strong protection against common web threats without requiring extensive manual tuning. Review collected by and hosted on G2.com.

The solution is slightly more expensive compared to some of its competitors, such as Cloudflare WAF and Imperva WAF. However, the additional cost is partly justified by its advanced AI-driven threat detection, API discovery capabilities, and the overall reliability of Check Point’s cloud-native infrastructure. Review collected by and hosted on G2.com.

Checkpoint CloudGuard WAF is appreciated for its intelligent,prevention first approach to securing web application and API's. It offers comprehensive suite of protection, including bot mitigation, DDoS defence, file reputation check and coverage for thousands of known vulnerabilities.Beyond its technical strengths, Checkpoint CoudGuard WAF Excels in delivering a seamless user experience. customer support is so great. Review collected by and hosted on G2.com.

Some users have also noted that documentation can be more user-friendly. Other than this solution is so greta. Review collected by and hosted on G2.com.

I liked that it integrates well with cloud environments and supports laC workflows and this makes the deployment smooth for the Devops team.It is very effective against common web attacks like SQL injection, XSS etc. Review collected by and hosted on G2.com.

The User Interface is powerful but it felt slightly overwhelming at first open. Some advanced and powerful options are bit hidden in the menus. Sometimes I felt UI lag issues. Review collected by and hosted on G2.com.

It does not require too much manual configuration and it is straight forward to set it up and get your critical assets protected against sophisticated attacks using AI and machine learning to automatically understand the behavior of our applications and APIs. Review collected by and hosted on G2.com.

The fact that you cannot have two assets with the same URL even though the application is reached using different IP addresses. Review collected by and hosted on G2.com.