Strong protection against OWASP Top 10 attacks

Easy integration with cloud environments

Good real-time threat prevention and bot protection

Centralized management and visibility

AI-driven threat intelligence from Check Point

Scalable for enterprise workloads

Helpful automation and policy tuning feature Review collected by and hosted on G2.com.

Initial setup can be complex

Can be expensive for smaller companies

Some advanced configurations require expertise

Dashboard/UI can feel overwhelming at first

Occasional false positives that need tuning

Support response time may vary depending on the plan Review collected by and hosted on G2.com.

I like the strong protection Check Point WAF offers against web application attacks. Its easy-to-manage interface is a big plus for me, as is the real-time threat detection that it provides. I also appreciate the detailed visibility into web traffic and security events, which makes it easier to monitor and respond to potential threats. The documentation was helpful during the initial setup, allowing for a straightforward configuration. Additionally, it integrates well with other security tools, which enhances its effectiveness in our security infrastructure. Review collected by and hosted on G2.com.

One area that could be improved is reducing false positives and making policy tuning more straightforward. The reporting and dashboard customization options could also be more flexible and user-friendly. Review collected by and hosted on G2.com.

I use Check Point CloudGuard WAF to protect cloud-native apps and APIs from OWASP Top 10 threats, like injection and XSS, while also providing bot mitigation and granular traffic inspection. I like its seamless integration with the CI/CD pipeline, allowing security policies to be deployed as code without slowing down development. This automation ensures security enforcement with every development, eliminating manual policy updates and reducing human error, which lets developers ship faster while protecting new code immediately. I appreciate its integration with CI/CD tools like Jenkins and CircleCI, and security platforms like Wiz and AWS Network Firewall. We switched to Check Point CloudGuard WAF from a legacy web app firewall because it lacked API security and multi-cloud support, and CloudGuard WAF provides better automation and centralized policy management. Review collected by and hosted on G2.com.

The policy tuning can be complex, leading to occasional false positives. Also, dashboard sync delays sometimes occur across multi-cloud environments. The learning curve and tuning effort for non-trivial apps keep it from being a perfect fit for every team. Review collected by and hosted on G2.com.

I like Check Point CloudGuard WAF for its ability to combine intelligent automation with strong visibility, making it a reliable solution for securing cloud applications while reducing operational overhead. It balances advanced security capabilities with usability and scalability effectively, which is great for both security operations and compliance-focused teams. It also integrates well with broader security and cloud ecosystems, which enhances visibility, monitoring, and incident response. The AI-driven protection, excellent visibility, and scalability for cloud environments are strong points, making it a solution I recommend for strengthening application security. Review collected by and hosted on G2.com.

I think there are a few areas where Check Point CloudGuard WAF could be improved. I would appreciate more guided onboarding and configuration support. Also, an enhanced UI/UX for policy management and log analysis would be beneficial. I'd like to see greater flexibility in custom rule creation and deeper integration with SIEM and GRC platforms. Expanded documentation and real-world use cases would also be helpful, along with better cost transparency and scalability options. While the setup was moderately easy, there is a learning curve during initial configuration, and the documentation and guidance could improve. Review collected by and hosted on G2.com.

I like how Check Point CloudGuard WAF delivers strong automated threat prevention with minimal tuning, making cloud app protection feel both powerful and effortless. I also really appreciate how seamlessly CloudGuard WAF integrates with cloud-native workflows, applying protections automatically as new services spin up so security never slows down development. It's great how CloudGuard automatically applies security policies to every new cloud resource as it's created, so nothing ever launches unprotected and you don't have to slow down development to keep things secure. Review collected by and hosted on G2.com.

CloudGuard WAF could improve by making advanced configuration and log analysis faster and less cumbersome. It would benefit from clearer, more intuitive advanced settings and a faster, more searchable log viewer that makes deep dive investigation less time-consuming. Review collected by and hosted on G2.com.

CloudGuard WAF is an excellent non-cloud choice to keep the applications or website secured without being a security expert. It hides the background or ground level details of application and acts as a barrier layer in front of your site and automatically blocks unauthorized and DDos and others attacks. Review collected by and hosted on G2.com.

Just liek any other software out there Cloudguard does have some complex and rigid configuration policies which i really feel aren't worthy.

Sometimes configuration takes more time than actual benefits. Review collected by and hosted on G2.com.

I like the single pane of glass management that Check Point CloudGuard WAF offers, providing consistent policies across all cloud environments. I appreciate how it enforces granular, context-aware security policies across multi-cloud, protecting my cloud-native applications from web exploits and bots. I also find its centralized security management across multi-cloud environments valuable, as it eliminates the complexity of maintaining disparate WAF solutions and stops sophisticated attacks like SQL injection and zero-day exploits. Additionally, I use it with SIEM platforms like Splunk for centralized logging and threat correlation, and I integrate it with CI/CD pipelines such as Jenkins to automate security policy deployment. Overall, it delivers powerful security. Review collected by and hosted on G2.com.

The setup and policy tuning have a steep learning curve, and the reporting dashboard could be more intuitive. Review collected by and hosted on G2.com.

I appreciate how quickly you can get it up and running. Compared to older WAFs that take time to tune, this one is much faster to deploy and requires less ongoing maintenance, which makes a real difference in day-to-day operations. Review collected by and hosted on G2.com.

The platform is also not the most intuitive at first. While the core functionality is strong, getting familiar with some of the advanced features and configuration options takes time, especially if you’re used to simpler WAF solutions. Review collected by and hosted on G2.com.

I like Check Point WAF's strong security capabilities combined with ease of management. The policy management is flexible, which is really helpful. Plus, the initial setup is relatively straightforward, making the transition smoother. Review collected by and hosted on G2.com.

I find the initial deployment and policy tuning can take time. Review collected by and hosted on G2.com.

The user interface is really good, also a good integration and performance on my device. Pricing is okay in the actual market. Always when I had a problem the support team has been helpful. AI integration could be better Review collected by and hosted on G2.com.

I will say that the AI integration on Check Point WAF could be better and use more of the Agentic AI but overall the rest is okay so far as I had a great experience overall Review collected by and hosted on G2.com.