Check Point CloudGuard Data Security

What Check Point CloudGuard Data Security is

Check Point CloudGuard Data Security adds sensitive-data discovery to cloud risk assessment. Its data security posture management capabilities identify sensitive information in cloud workloads and use that context to help teams prioritize higher-risk assets. Classification categories include PII, PCI, PHI, credentials, and other. For AWS S3 buckets, CloudGuard uses Amazon Macie sensitivity classifications and scores. Microsoft Purview, Cyera, and Sentra are also listed as data sensitivity sources or integrations.

Risk scoring can take account of public exposure, permissions, and best-practice configurations. DSPM can use vulnerability scans and configuration audits to surface potential gaps, monitor sensitive data, identify excessive permissions, and support incident detection and remediation through automated response workflows. CloudGuard also lists registry and CI pipeline scanning, Kubernetes admission, SBOM generation, fix recommendations, exposure and permission analysis, API protection, bot management, and rate limiting. Check Point describes cloud coverage across public, private, hybrid, and multi-cloud environments. CloudGuard may report sensitivity as none when available information is insufficient to calculate it. The product is paid, with pricing on request, and is listed for web use. A free trial is offered for Check Point cloud security solutions, with no duration specified.