- Home
- Data Security Posture Management Software
- Check Point CloudGuard Data Security
Check Point CloudGuard Data Security
Tel Aviv, Israel
What it is
Check Point CloudGuard Data Security adds sensitive-data discovery to cloud security risk assessment. Its data security posture management identifies sensitive information in cloud workloads and uses that context to prioritize higher-risk assets. For AWS S3 buckets, CloudGuard uses Amazon Macie sensitivity classifications and scores; Microsoft Purview, Cyera, and Sentra are also listed as data-sensitivity integrations. Classification categories include PII, PCI, PHI, credentials, and other. Risk scoring can consider public exposure, permissions, and best-practice configurations. DSPM can use vulnerability scans and configuration audits, monitor and audit sensitive data, identify excessive permissions, and support incident detection and remediation workflows. CloudGuard also lists registry and CI pipeline scanning, Kubernetes admission, SBOM generation, fix recommendations, exposure and permission analysis, API protection, bot management, and rate limiting. Check Point describes coverage across public, private, hybrid, and multi-cloud environments. Pricing is on request; the cloud security page offers a free trial without specifying its duration.
For and against
For
- Discovers sensitive data in cloud workloads
- Uses Macie classifications for AWS S3
- Includes exposure and permission analysis
- Supports remediation workflows
- Covers public, private, hybrid, and multi-cloud
Against
- Pricing is available only on request
- No free plan is listed
- Sensitivity may report none without enough information
- Free-trial duration is unspecified
The verdict
CloudGuard Data Security combines DSPM with broader cloud posture and workload controls. Its integrations and classification context support risk prioritization, while quote-based pricing and variable sensitivity results need consideration.
Who it suits
It suits enterprises seeking sensitive-data discovery, breach prevention, and regulatory compliance across cloud environments. Check Point also markets its products to service providers, small and medium-sized businesses, and consumers.
On the record
- Access controls
- DSPM can identify excessive permissions that violate least privilege and increase data security risk.checkpoint.com · read 30 Sep 2026
- Additional DSPM integrations
- CloudGuard documentation lists AWS Macie, Microsoft Purview, Cyera, and Sentra as data sensitivity classification sources or integrations.sc1.checkpoint.com · read 30 Sep 2026
- Additional integrations
- The CloudGuard integration guide lists Microsoft Purview, Cyera, and Sentra as data sensitivity or DSPM integrations.sc1.checkpoint.com · read 30 Sep 2026
- AWS integration
- CloudGuard uses Amazon Macie sensitivity scores to classify data in AWS S3 buckets.sc1.checkpoint.com · read 30 Sep 2026
- Classification
- CloudGuard assigns data classification categories including PII, PCI, PHI, credentials, and other.sc1.checkpoint.com · read 30 Sep 2026
- Classifications
- CloudGuard data classification categories include PII, PCI, PHI, credentials, and other.sc1.checkpoint.com · read 30 Sep 2026
- Cloud coverage
- Check Point describes its cloud security solutions as covering public, private, hybrid, and multi-cloud environments.checkpoint.com · read 30 Sep 2026
- Compliance
- Check Point says CloudGuard cloud security posture management helps organizations address regulatory requirements and best practices.checkpoint.com · read 30 Sep 2026
- Coverage limitation
- CloudGuard may report data sensitivity as none when it cannot calculate sensitivity from available information.sc1.checkpoint.com · read 30 Sep 2026
- Data discovery
- DSPM solutions can automatically discover and classify sensitive data, using tools such as AWS Macie, and map data flows through infrastructure.checkpoint.com · read 30 Sep 2026
- Integrations
- The CloudGuard integration hub supports connections to third-party applications, APIs, and services, including Splunk, IBM QRadar, ServiceNow, Slack, and AWS Security Hub.sc1.checkpoint.com · read 30 Sep 2026
- Intended users
- Check Point says its products and services are sold to enterprises, service providers, small- and medium-sized businesses, and consumers.checkpoint.com · read 30 Sep 2026
- Macie integration
- CloudGuard uses Amazon Macie data sensitivity classifications for AWS S3 buckets and incorporates them into risk analysis.blog.checkpoint.com · read 30 Sep 2026
- Monitoring
- DSPM solutions automatically monitor and audit sensitive data to identify potential risks and gaps in data security controls.checkpoint.com · read 30 Sep 2026
- Purpose
- Check Point CNAPP provides capabilities to secure applications and data against potential threats.checkpoint.com · read 30 Sep 2026
- Remediation
- DSPM supports incident detection and remediation through automated response workflows.checkpoint.com · read 30 Sep 2026
- Risk assessment
- DSPM can use vulnerability scans and configuration audits to identify potential risks and security gaps in sensitive data environments.checkpoint.com · read 30 Sep 2026
- Risk context
- CloudGuard risk scoring considers cloud application context such as public exposure, permissions, and best-practice configurations.blog.checkpoint.com · read 30 Sep 2026
