Check Point CloudGuard Cloud Native Security
Security • Automated • Everywhere

Features:

Security Automated Everywhere

Check Point cloud native security, delivered through CloudGuard, provides automated security and advanced threat prevention to protect your cloud assets and workloads from the most sophisticated cyber-attacks. Secure your cloud and workload environment with one unified cloud native security platform- automate security posture management, gain visibility of threats, and control your workloads across clouds.

Unified Security for Multi-Cloud

CloudGuard unifies cloud security to provide intelligent threat prevention. Securely protect and prevent threats across AWS, Azure, Google, VMware, IBM Cloud, Oracle Cloud, Alibaba Cloud, Kubernetes, etc all from one platform. Provide centralized visualization for all of your cloud traffic, security alerts, assets and auto-remediation all from one platform.

Security and Posture Management

Through High Fidelity Posture Management, CloudGuard delivers zero trust, multi-layer, advanced threat prevention, leveraging enriched intelligence with the highest levels of intelligence inputs, in context. In addition, with its comprehensive compliance and security engine, CloudGuard prevents critical security misconfigurations, and ensures compliance with more than 50 compliance frameworks and best practices.

Automated Devsecops

CloudGuard allows organizations to shift-left for DevOps to seamlessly evaluate security posture, configuration, and governance during CI/CD. Seamlessly scale and deploy your security in real-time through integration with tools like CloudFormation and Terraform, and evaluate posture pre-deployment to scale across thousands of assets. Automatically define applications security profiles and enforce zero trust boundaries between workloads.

Cloud Network Security

CloudGuard Public Cloud Network Security provides advanced threat prevention and network security through a virtual security gateway - automated and unified across all your multi-cloud and on-premises environments. CloudGuard provides cloud native proteciton with the industry's highest security effectiveness, and supports rapid deployment, agility and automation of CI/CD workflows. Create consistent policy to manage security across on-prem and multi-cloud environments.

Cloud Security Posture Management

CloudGuard Cloud Security Posture Management automates governance across multi-cloud assets and services including visualization. Through CloudGuard High Fidelity Posture Management visualize and assess security posture, detect misconfigurations, model and actively enforce gold standard policies, in context and with enriched intelligence. Protect against attacks and insider threats, cloud security intelligence for cloud intrusion detection, and comply with regulatory requirements and best practices all from one unified platform.

Cloud Workload Protection

CloudGuard Workload Protection provides seamless vulnerability assessment and runtime protection of modern cloud workloads, including serverless functions and containers - automating security with minimal overhead across your multicloud environment. Continuously scan workload environments to increase security posture and provide continuous observability and assessment, with self-protection to continuously evaluate and adapt security posture.

Cloub Web App & API Protection

CloudGuard moves application security closer to the edge of the workload, giving more real-time granular protection than a traditional Web Application Firewalls (WAFs). CloudGuard protects web applications and APIs from the most sophisticated types of threats, with an automated, cloud-native security platform. Where traditional WAFs are built using “one-size-fits-all” rule tables even though no two applications are the same, CloudGuard transcends rule-based security by leveraging the power of AI. Automation is a critical component which ensures that security is maintained even in dynamic app development cycles.

Cloud Intelligence and Threat Hunting

CloudGuard Cloud Intelligence and Threat Hunting provides cloud-native threat security forensics through rich, machine learning visualization, giving real-time context of threats and anomalies across your mutli-cloud environment. Detect anomalies, activate alerts, quarantine threats, and remediate threats automatically, utilizing the largest threat intelligence feed.

Use Cases:

Unified Security for Multi Cloud

• Unified security architecture: providing intelligent threat prevention, from on premise to the cloud, through the Check Point Infinity unified security platform.
• Unified hybrid cloud security: securely protect and prevent threats across AWS, Azure, Google Cloud, Cisco ACI, VMWare NSX, Ali, and Oracle.
• Unified visibility across assets: offering a centralized visualization for all of your cloud traffic, security alerts, assets along with auto-remediation.

Automated DevSecOps

• Shift-Left with automation: provide DevOps with toolsets to evaluate security posture, configuration guidance, alerts, and governance during CI/CD.
• Scale and deploy your security in real-time: seamlessly integrate protections and controls into your CI/CD tools, like CloudFormation and Terraform, and evaluate security posture pre-deployment and scale across hundreds of thousands of cloud assets.
• Intelligent adaptive security controls: automatically profile and define application behavior, and enforce zero trust boundaries between cloud workloads (e.g. containers and serverless).

Security and Posture Management

• Cloud native multi-layer protection: deliver zero trust, advanced threat prevention with workload protection, including security hardening, runtime code analysis, Web and API security.
• Most comprehensive compliance engine: prevent critical cloud security misconfigurations and keep up with evolving posture management security and compliance best practices, including auto-remediation.
• High Fidelity Posture Management (HFPM): comply with regulatory and industry standards, such as HIPAA, CIS BENCHMARKS, NIST CSF/800-53, PCI-DSS, with the most contextual cloud security across, 300+ native cloud services.

Documentation:

Download the Check Point CloudGuard Cloud Native Security Datasheet (PDF).