Sold by: Check Point Software Technologies
Are you looking for an automated Web Application Firewall (WAF) with precise prevention and no management overheads? CloudGuard WAF delivers AI-enabled Web Application and API protection.
Sold by: Check Point Software Technologies
Overview
With deep application contextual analysis, CloudGuard WAF eliminates the tradeoff between the level of application security and the complexity of managing it. Your applications drive your business. As they evolve, grow, and expose more APIs, your attack surface expands. CloudGuard WAF learns how an application is typically used by profiling the user and the app content. It then scores each request accordingly, eliminating false positives while maintaining the highest security standards. CloudGuard WAF is easy to deploy and requires no ongoing maintenance as it continues to protect your evolving applications and APIs.
Advantages
- 90% of CloudGuard WAF customers run in prevent mode, demonstrating the hands-off nature of the management required
- 100% of CloudGuard WAF customers have less than 10 exception rules!
- CloudGuard WAF goes from deployment to active protection in just days, not weeks.
Click on the "View Usage Instructions" and "Usage Information" below to get next steps for setting up CloudGuard WAF.
This is a BYOL Image. Pricing and entitlements for this product are directly with Check Point. As an AWS partner Check Point enables marketplace transaction on this listing through a private offer provided by Check Point. Please contact your Check Point trusted advisers (link to a list of CP sellers / or directly to check point SDRs). Payment for the underlaying infrastructures are paid directly to AWS and is based on AWS pricing.
Highlights
- Precise Prevention: Contextual app analysis for high fidelity application security to prevent known and unknown cyberattacks.
- Automated by Design: Auto-deploy, hands-off management and AI-powered short learning cycles.
- Flexible deployment: Protect all applications in any cloud environment built on any architecture.
Details
Categories
Delivery method
Delivery option
Auto Scaling Group
Single Gateway into existing VPC
Single Gateway into new VPC
Latest version
Operating system
OtherLinux Gaia 3.10
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing and entitlements for this product are managed through an external billing relationship between you and the vendor. You activate the product by supplying a license purchased outside of AWS Marketplace, while AWS provides the infrastructure required to launch the product. AWS Subscriptions have no end date and may be canceled any time. However, the cancellation won't affect the status of the external license.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Vendor refund policy
Please see seller website for refund details.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Auto Scaling Group
A number of AppSec instances in an Auto Scaling Group. Load balanced by an ELB.
CloudFormation Template (CFT)
AWS CloudFormation templates are JSON or YAML-formatted text files that simplify provisioning and management on AWS. The templates describe the service or application architecture you want to deploy, and AWS CloudFormation uses those templates to provision and configure the required services (such as HAQM EC2 instances or HAQM RDS DB instances). The deployed application and associated resources are called a "stack."
Version release notes
Additional details
Usage instructions
Navigate to http://portal.checkpoint.com ; if you do not have an existing account, open a new account. Open the main menu (icon is in the top left corner), choose APPLICATION SECURITY under the CloudGuard column, then select Cloud on the left. The Getting Started page will open. After defining the asset, you will be redirected to the Profile page. Note: Obtain the Token for CloudGuard WAF from the Profile page.
Resources
Vendor resources
Support
Vendor support
To open a support ticket, send an email to infinity-next-support@checkpoint.com CloudGuard WAF
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by HAQM Web Services.
Similar products
CloudGuard WAF-as-a-Service (Contract)
By Check Point Software Technologies
CloudGuard WAF-as-a-Service is an AI-based WAF and API protection solution. Its AI and IPS signatures provide the highest protection against known and unknown zero-day attacks.
The CloudGuard WAF offerings provide multiple layers of protection: rate limiting, AI engines (attack indicators & context), IPS signatures (shielding against OWASP Top-10 attacks), zero-day file security, bot protection, and comprehensive API discovery and schema validation.
CloudGuard WAF-as-a-Service delivers a non-agent WAF, deployable within minutes, and adds advanced DDoS mitigation. Traffic is seamlessly routed through Check Point servers which automatically issue SSL certificates.
CloudGuard WAF Agent supports flexible deployment types (IaaS), including reverse proxy, virtual machine, Kubernetes ingress controller, and more.
Check Point CloudGuard
By Cadre Information Security
- CloudGuard WAF
- CloudGuard CDR
- CloudGuard Network Security
- CloudGuard CNAPP
- CloudGuard Posture Management
- CloudGuard Code Security
- CloudGuard Workload
- Developer Security
CloudGuard Network Security Next-Gen Firewall with Threat Prevention
By Check Point Software Technologies
Advanced threat prevention security for AWS and hybrid cloud environments with GWLB (starting with R81.20)
Please note: To ensure optimal operations, Check Point recommends a 4 vCores machine size. This provides balanced efficiency and smooth performance, which most customers find ideal for their needs.
CloudGuard Network Security All-In-One
By Check Point Software Technologies
Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation, and a built-in security management server
CloudGuard Network Security with Threat Prevention and SandBlast
By Check Point Software Technologies
Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation, and with GWLB (starting with R81.20)
**Please note: To ensure optimal operations, Check Point recommends a 4 vCores machine size. This provides balanced efficiency and smooth performance, which most customers find ideal for their needs.
CloudGuard Network Security with Threat Prevention & SandBlast BYOL
By Check Point Software Technologies
Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation.
**Please note: To ensure optimal operations, Check Point recommends a 4 vCores machine size. This provides balanced efficiency and smooth performance, which most customers find ideal for their needs.
Check Point Security Management
By Check Point Software Technologies
A single pane-of-glass security management console delivers consistent visibility, policy management, logging, reporting and control across all cloud environments and networks
Customer reviews
Satish P.
CloudGuard WAF Delivers Peace of Mind and Similipfied
Reviewed on Apr 23, 2025
Review provided by G2
What do you like best about the product?
1 ) Accurate threat detection with minimal false positives
2) Prevention First approach
3) Reduces operation overhead
4) Good detection technology
5) Minimal false positive
6) Onboarding is easier
7) Best feature is its comprehensive API security and automated API discovery
2) Prevention First approach
3) Reduces operation overhead
4) Good detection technology
5) Minimal false positive
6) Onboarding is easier
7) Best feature is its comprehensive API security and automated API discovery
What do you dislike about the product?
1) Initial onboarding is tedious
2) Documentations needs further improvement
3) Drastic improvements needs in support
4) Need further improvement in antibot
2) Documentations needs further improvement
3) Drastic improvements needs in support
4) Need further improvement in antibot
What problems is the product solving and how is that benefiting you?
Zero-day threats, API risks, operational complexity—with AI-driven automation, precise threat prevention, and seamless cloud integration. This resulted in stronger security postures, lower operational costs, and scalable protection.
Leave a comment0 comments
José Luis C.
Protecting your brand with Check Point CloudGuard
Reviewed on Apr 22, 2025
Review provided by G2
What do you like best about the product?
The automation of rules and the visibility of logs by category
What do you dislike about the product?
The initial setup was a bit complicated having an AWS behind it.
What problems is the product solving and how is that benefiting you?
Automatic reputation protection on a CMS developed in WordPress
Dialungana M.
Cloudguard WAF protects our critical web applications and APIs
Reviewed on Apr 22, 2025
Review provided by G2
What do you like best about the product?
It does not require too much manual configuration and it is straight forward to set it up and get your critical assets protected against sophisticated attacks using AI and machine learning to automatically understand the behavior of our applications and APIs.
What do you dislike about the product?
The fact that you cannot have two assets with the same URL even though the application is reached using different IP addresses.
What problems is the product solving and how is that benefiting you?
Before we had no visibility into the application layer attacks targeting our web applications and APIs. We relied completely on our Next Generation Firewalls (NGFW) to protect our assets. Ever since we deployed Cloudguard WAF, we immediately understood that we were missing many attacks that were targeting the applications. Today, with Cloudguard WAF, we block an average of 3500 attacks on daily basis. In addition to that, with tha API protection, we are now able to identify all the endpoints associated with the applications and better protect our APIs.
Telecommunications
A quick way to deploy a WAF without the need for advanced WAF knowledge.
Reviewed on Dec 27, 2024
Review provided by G2
What do you like best about the product?
E2E solution capabilities: WAF, DDoS, AntiBot, Api Protection.
What do you dislike about the product?
Vendor support time; anti-bot capabilities compared with others like Cloudfare. Third party integration: web-hook and similar
What problems is the product solving and how is that benefiting you?
Protecting web apps.
Mallikarjun G.
Great Protection with Check Point CloudGuard WAF
Reviewed on Dec 07, 2024
Review provided by G2
What do you like best about the product?
Check Point CloudGuard WAF excels in providing robust security features for web applications and APIs. One of its standout strengths is its advanced threat protection, powered by Check Point’s ThreatCloud threat intelligence. This allows it to effectively block malicious attacks like SQL injection, XSS, and DDoS.
Great tool, I prefer using this tool for my work also
Great tool, I prefer using this tool for my work also
What do you dislike about the product?
initial setup and configuration can be complex for newbies that might me optimized
What problems is the product solving and how is that benefiting you?
It solved alot of problems like protection
against web app security, DDos attacks , API security and much more
against web app security, DDos attacks , API security and much more