Check Point CloudGuard Data Security vs DataSunrise

Check Point CloudGuard Data Security adds sensitive-data discovery to cloud security risk assessment. Its data security posture management identifies sensitive information in cloud workloads and uses that context to prioritize higher-risk assets. For AWS S3 buckets, it uses Amazon Macie sensitivity classifications and scores; Microsoft Purview, Cyera, and Sentra are also listed as integrations. Classification categories include PII, PCI, PHI, credentials, and other. Risk analysis can include public exposure, permissions, and best-practice configurations. DSPM can use vulnerability scans and configuration audits, monitor and audit sensitive data, identify excessive permissions, and support incident detection and remediation workflows. CloudGuard also lists registry and CI pipeline scanning, Kubernetes admission, SBOM generation, fix recommendations, exposure and permission analysis, API protection, bot management, and rate limiting. Coverage spans public, private, hybrid, and multi-cloud environments. The product is web-based, paid with pricing on request, and has no free plan; a free trial is offered without a stated duration.

DataSunrise is a data, AI and database security platform for protecting sensitive information across cloud, on-premises and hybrid environments. Its functions include activity monitoring and audit, data masking, a database firewall, sensitive data discovery, vulnerability assessment and data security posture management. The firewall monitors activity in real time, detects SQL injection and other malicious query patterns, and can block potential threats. Its controls include encryption, request blocking, access restrictions and SQL allow or deny lists. The company says cloud or on-premises installation uses a non-intrusive approach that leaves existing databases and applications unchanged. Published integrations span SQL and NoSQL databases, warehouses, cloud services, storage, business tools and generative AI services. Available monitoring methods vary with database, version and deployment. DataSunrise says it supports compliance efforts for SOX, HIPAA, GDPR and PCI DSS, among other frameworks. It lists Linux, Windows, web and self-hosted availability. Pricing is on request, with a personalized offer following a request; there is no free plan. A 30-day trial is listed, and the firewall page states performance impact of around 5–10%.