Check Point CloudGuard Data Security
checkpoint.com
What it is
Check Point CloudGuard Data Security adds sensitive-data discovery to cloud security risk assessment. Its data security posture management identifies sensitive information in cloud workloads and uses that context to prioritize higher-risk assets. For AWS S3 buckets, it uses Amazon Macie sensitivity classifications and scores; Microsoft Purview, Cyera, and Sentra are also listed as integrations. Classification categories include PII, PCI, PHI, credentials, and other. Risk analysis can include public exposure, permissions, and best-practice configurations. DSPM can use vulnerability scans and configuration audits, monitor and audit sensitive data, identify excessive permissions, and support incident detection and remediation workflows. CloudGuard also lists registry and CI pipeline scanning, Kubernetes admission, SBOM generation, fix recommendations, exposure and permission analysis, API protection, bot management, and rate limiting. Coverage spans public, private, hybrid, and multi-cloud environments. The product is web-based, paid with pricing on request, and has no free plan; a free trial is offered without a stated duration.
Spec sheet
- Purpose
- Check Point CNAPP provides capabilities to secure applications and data against potential threats.Read 30 Sep 2026 · checkpoint.com
- Intended users
- Check Point says its products and services are sold to enterprises, service providers, small- and medium-sized businesses, and consumers.Read 30 Sep 2026 · checkpoint.com
- Integrations
- The CloudGuard integration hub supports connections to third-party applications, APIs, and services, including Splunk, IBM QRadar, ServiceNow, Slack, and AWS Security Hub.Read 30 Sep 2026 · sc1.checkpoint.com
- Compliance
- Check Point says CloudGuard cloud security posture management helps organizations address regulatory requirements and best practices.Read 30 Sep 2026 · checkpoint.com
- Headquarters
- Tel Aviv, IsraelRead 28 Sep 2026 · checkpoint.com
- Founded
- 1993Read 28 Sep 2026 · checkpoint.com
- Access controls
- DSPM can identify excessive permissions that violate least privilege and increase data security risk.Read 30 Sep 2026 · checkpoint.com
- Additional DSPM integrations
- CloudGuard documentation lists AWS Macie, Microsoft Purview, Cyera, and Sentra as data sensitivity classification sources or integrations.Read 30 Sep 2026 · sc1.checkpoint.com
- Additional integrations
- The CloudGuard integration guide lists Microsoft Purview, Cyera, and Sentra as data sensitivity or DSPM integrations.Read 30 Sep 2026 · sc1.checkpoint.com
- AWS integration
- CloudGuard uses Amazon Macie sensitivity scores to classify data in AWS S3 buckets.Read 30 Sep 2026 · sc1.checkpoint.com
- Classification
- CloudGuard assigns data classification categories including PII, PCI, PHI, credentials, and other.Read 30 Sep 2026 · sc1.checkpoint.com
- Classifications
- CloudGuard data classification categories include PII, PCI, PHI, credentials, and other.Read 30 Sep 2026 · sc1.checkpoint.com
- Cloud coverage
- Check Point describes its cloud security solutions as covering public, private, hybrid, and multi-cloud environments.Read 30 Sep 2026 · checkpoint.com
- Coverage limitation
- CloudGuard may report data sensitivity as none when it cannot calculate sensitivity from available information.Read 30 Sep 2026 · sc1.checkpoint.com
- Data discovery
- DSPM solutions can automatically discover and classify sensitive data, using tools such as AWS Macie, and map data flows through infrastructure.Read 30 Sep 2026 · checkpoint.com
- Macie integration
- CloudGuard uses Amazon Macie data sensitivity classifications for AWS S3 buckets and incorporates them into risk analysis.Read 30 Sep 2026 · blog.checkpoint.com
- Monitoring
- DSPM solutions automatically monitor and audit sensitive data to identify potential risks and gaps in data security controls.Read 30 Sep 2026 · checkpoint.com
- Remediation
- DSPM supports incident detection and remediation through automated response workflows.Read 30 Sep 2026 · checkpoint.com
- Risk assessment
- DSPM can use vulnerability scans and configuration audits to identify potential risks and security gaps in sensitive data environments.Read 30 Sep 2026 · checkpoint.com
- Risk context
- CloudGuard risk scoring considers cloud application context such as public exposure, permissions, and best-practice configurations.Read 30 Sep 2026 · blog.checkpoint.com
- Risk prioritization
- CloudGuard prioritizes risky assets and provides remediation recommendations for developers and DevOps teams.Read 30 Sep 2026 · blog.checkpoint.com
- Support and demo
- Check Point invites prospective customers to contact their account team or schedule a demo to learn more about CloudGuard data security posture management.Read 30 Sep 2026 · blog.checkpoint.com
- Trial availability
- Check Point’s cloud security solutions page offers a free trial, without specifying trial duration on that page.Read 30 Sep 2026 · checkpoint.com
- Who it is for
- Check Point describes DSPM as useful for enterprises seeking data breach prevention, regulatory compliance, and protection of sensitive data.Read 30 Sep 2026 · checkpoint.com
Strong points and limits
Strong points
- Sensitive-data discovery and classification
- AWS Macie integration
- Exposure and permission analysis
- Registry and CI pipeline scanning
- Automated remediation workflows
Limits
- No free plan
- Pricing is available on request
- Sensitivity may show none when it cannot be calculated
Who it suits
It suits enterprises and other organizations seeking sensitive-data protection, breach prevention, regulatory support, and cloud risk prioritization. Teams operating public, private, hybrid, or multi-cloud environments may use its listed integrations and workflows.
Verdict
CloudGuard Data Security connects DSPM findings with broader cloud application risk and remediation controls. Buyers should confirm data-source coverage, pricing, and how undefined sensitivity results are handled.
Where Specifiction places it
- Data Security Posture Management Software#8 of 347.6
Alternatives to Check Point CloudGuard Data SecurityAll alternatives →
Forcepoint Data Security Cloud 8.3 Visit 
Cyberhaven Data Security Platform 8.2 Visit 
BigID DSPM 8.0 Visit