Listing Thumbnail

    Check Point WAF as a Service (Premium, PAYG, Free 7 Days or 1M Requests)

     Info
    Deployed on AWS
    Check Point WAF as a Service (WAFaaS) is an AI-based web application, generative and agentic AI, and API security solution, delivering the highest protection against known and zero-day threats using advanced AI and IPS. WAFaaS provides multiple layers of protection: rate limiting, AI engines, IPS signatures, zero-day file security, bot protection, and comprehensive API discovery and schema validation. WAFaaS delivers a non-agent WAF, deployable within minutes, and adds advanced DDoS mitigation. Traffic is seamlessly routed through Check Point servers, which automatically issue SSL certificates.
    4.4

    Overview

    Play video

    Check Point WAF as a Service (WAFaaS) is an automated solution that delivers superior benefits of a top-tier web application, generative and agentic AI, and API security solution, requiring minimal manual intervention. The AI engine continuously learns the behavior of your application, tracking changes throughout its lifecycle. This ensures a minimal false positive rate and reduces tedious rule tuning after each application change. WAFaaS delivers a non-agent WAF that can be deployed in less than 15 minutes. Traffic is effortlessly routed through Check Point servers, which automatically issue SSL certificates. Upon redirection, any HTTP requests are intercepted for inspection and forwarded to the application only after validating their security. WAFaaS is available in premium and advanced packages. Advanced package does not include API Discovery and Zero-day file security.

    The Premium package provides:

    AI-based engines for prevention of Zero-day Attacks and OWASP Top 10 known attacks.

    AI-based contextual analysis engine to ensure precise detection rate with minimal false positives.

    Real-time API discovery, sensitive data, and public exposure governance.

    Snort 3.0 signature enforcement engine.

    Advanced DDoS mitigation to ensure your applications stay accessible to legitimate users by mitigating attacks that overwhelm your network, servers, or applications.

    Rate limiting, based on identifiers such as IP address and XFF - limited to 5 rules.

    Intrusion Prevention (IPS), over 2,800 Web CVEs, based on award-winning NSS-Certified IPS.

    Includes 6 months of full logs retention, based on the fair usage policy.

    Auto-generated swagger schema for validation and schema enforcement. Unlimited rate limiting.

    Rate limiting functionality adds identifiers such as keys within JWT, cookies, or headers.

    Zero-day file security.

    You are entitled to free usage of 7 days or 1M HTTP requests whatever comes first, after that you will be billed.

    Highlights

    • Zero-day prevention: Check Point WAF as a Service (WAFaaS) automatically prevents zero-day exploits across a wide spectrum of security events, including React2Shell, log4shell, text4shell, and MOVEit, all in real-time.
    • Deployed within minutes: WAFaaS delivers a non-agent Web application firewall, deployable within minutes. Only a one-time DNS configuration is necessary for WAFaaS to start routing traffic securely to applications in the cloud.
    • Unified Application Security Across the Full Attack Surface: Consolidates WAF, API, GenAI, bot, DDoS, file security, and CDN capabilities, eliminating the fragmented point solutions that create blind spots and increase administrative overhead.

    Details

    Delivery method

    Deployed on AWS
    New

    Introducing multi-product solutions

    You can now purchase comprehensive solutions tailored to use cases and industries.

    Multi-product solutions

    Features and programs

    Buyer guide

    Gain valuable insights from real users who purchased this product, powered by PeerSpot.
    Buyer guide

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    Check Point WAF as a Service (Premium, PAYG, Free 7 Days or 1M Requests)

     Info
    Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
    Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator  to estimate your infrastructure costs.

    Usage costs (4)

     Info
    Dimension
    Cost/unit
    First 10M HTTP requests
    $1,800.00
    10M-60M HTTP requests (price per 1M)
    $44.00
    60M-160M HTTP requests (price per 1M)
    $24.00
    160M HTTP requests and above (price per 1M)
    $16.00

    Vendor refund policy

    No Refunds.

    Custom pricing options

    Request a private offer to receive a custom quote.

    How can we make this page better?

    Tell us how we can improve this page, or report an issue with this product.
    Tell us how we can improve this page, or report an issue with this product.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    Software as a Service (SaaS)

    SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.

    Support

    Vendor support

    https://supportcenter.checkpoint.com/supportcenter/portal  24x7 email support with emergency phone number. Premier support available for enterprise customers.

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Similar products

    Customer reviews

    Ratings and reviews

     Info
    4.4
    138 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    60%
    38%
    2%
    0%
    0%
    14 AWS reviews
    |
    124 external reviews
    External reviews are from G2  and PeerSpot .
    Ashith S.

    Strong Web Traffic Visibility, But a Steep Learning Curve

    Reviewed on Jul 17, 2026
    Review provided by G2
    What do you like best about the product?
    What I like most about Check Point WAF is its clear visibility into web traffic and blocked requests. It makes it easy to identify suspicious activity and fine-tune security policies. Once configured, it provides reliable protection with minimal day-to-day effort.
    What do you dislike about the product?
    The biggest drawback is the learning curve, especially for first-time users. The interface can feel crowded, and fine-tuning policiesThe initial setup and policy tuning can be time-consuming, especially if you're new to WAFs. The interface isn't always intuitive, and some configuration options require extra effort to understand. takes time to avoid false positives. Some configuration tasks could also be more intuitive.
    What problems is the product solving and how is that benefiting you?
    Check Point WAF helps protect our web applications from common attacks while reducing the need for constant manual monitoring. It gives us better visibility into suspicious traffic, allowing us to respond faster and manage security more efficiently.
    Samiksha C.

    Complex Setup, but Strong Security Features

    Reviewed on Jul 15, 2026
    Review provided by G2
    What do you like best about the product?
    I feel Check Point WAF is very basic but it does its job well in protecting the organization. It definitely helps when an employee is clicking on a suspicious link, like, preventing phishing attacks. I appreciate that it logs everything so that the SOC team stays aware. The feature I love the most is the firewall policy management and log monitoring via the smart console. I regularly work on analyzing the logs to investigate issues and validate security alerts. I also use the threat prevention features like IPS and antivirus to understand patterns and tune rules.
    What do you dislike about the product?
    I feel the setup is very complex and quite lengthy. It also has a high cost, and the performance impact is a bit lagging. It increases latency, reduces throughput, and needs proper sizing and tuning. I request the Check Point team to hopefully make the process easier.
    What problems is the product solving and how is that benefiting you?
    I use Check Point WAF to protect my organization, detecting endpoint activities and preventing security breaches. It logs everything, keeping our SOC team aware of potential phishing threats and ensuring we don't visit suspicious links.
    UTSAV A.

    Intuitive and Secure Firewall Solution

    Reviewed on Jul 15, 2026
    Review provided by G2
    What do you like best about the product?
    I find Check Point WAF very easy to use. Even if someone is new to firewall stuff, they can handle it effectively with some guidance on using its GUI. The setup is also quite straightforward; you can set it up in five to ten minutes using the GUI interface, which is quite comfortable for first-timers.
    What do you dislike about the product?
    As of now, I've used many firewalls, and while Check Point WAF's interface is good, I feel it could be improved a little bit. Compared to Fortinet, their GUI interface is slightly better than Check Point's. That's pretty much the only thing I would say needs improvement, although Check Point does have very good features compared to Palo Alto and ForteGate.
    What problems is the product solving and how is that benefiting you?
    I use Check Point WAF to secure our environment from vulnerabilities, performing URL and application-level filtering effectively.
    Milan D.

    Solid WAF Protection With a Learning Curve

    Reviewed on Jul 14, 2026
    Review provided by G2
    What do you like best about the product?
    What I like best is the contextual AI engine that detects threats without relying on constant signature updates. It dramatically cut down our false positives compared to our previous signature-based WAF, which means less time spent tuning rules and chasing noise. Deployment across our cloud environments was straightforward, and the automatic learning of application behavior means new apps get protected without a ton of manual configuration. The unified management through the Infinity portal is also a big plus for us since we can see everything in one place.
    What do you dislike about the product?
    The initial setup and configuration felt more complex than expected, and the learning curve for tuning rules to reduce false positives was steep. Documentation could be more thorough in places, and support response times occasionally lagged when we ran into urgent issues. Pricing also feels on the higher side compared to some alternatives, especially as you scale traffic. Better dashboards and more intuitive policy management would go a long way
    What problems is the product solving and how is that benefiting you?
    We use Check Point WAF to protect our web applications and APIs from common threats like SQL injection, cross-site scripting, and bot traffic. Before adopting it, we struggled with manually managing security rules and staying ahead of emerging attacks. It's given us more consistent protection across our cloud environments and reduced the time our team spends triaging alerts. The automated threat detection lets us focus on other priorities while staying confident our applications are covered.
    Nekkala Nagendra

    Ai-driven cloud security has strengthened threat prevention and improved security posture

    Reviewed on Jul 13, 2026
    Review provided by PeerSpot

    What is our primary use case?

    The main purpose is to have network security through machine learning, which can offer threat detection and intelligence for my endpoints, and I am looking for application security.

    I am looking for an AI-based solution that can strengthen my cloud-native security, automate security, and better prevent threats.

    I am looking for an AI-based solution and unified cloud-native security from the SaaS platform to improve my security posture.

    What is most valuable?

    Check Point WAF (formerly CloudGuard WAF)  is a SaaS platform that gives unified cloud-native security across my applications, workloads, and network, allowing me to automate security, prevent threats, ensure compliance, and manage my security posture well across all my cloud environments.

    It conducts security scoring and risk scoring, which helps prioritize my security needs, and the advanced threat detection is also very fine, providing actionable information for my current security threats by collecting and analyzing data through threat actors and IOCs, offering tactical, technical, and operational features.

    What needs improvement?

    The false positive rate is a concern, but I could recommend improvements where false positives have to be minimized better.

    This all depends on how the rules are customized and configured, and it can also improve with planning during the initial configuration, including threat intelligence and APIs, so it could enhance how it defends against attacks and prompts injections.

    It can find the threat actors behind it, and I find that strategically and technically it is effective, although the AI-related features could improve, especially as global AI capabilities evolve, which are advancing more than what Check Point WAF (formerly CloudGuard WAF)  provides compared to competitors.

    There are no glitches; I believe improvement could be made primarily in API Gateway and API security, especially by enabling enhanced AI-related features for better fine-tuning.

    For how long have I used the solution?

    I have experience of two years with the product.

    What do I think about the stability of the solution?

    It is stable.

    What do I think about the scalability of the solution?

    It is definitely a highly scalable solution without any doubt.

    How are customer service and support?

    The customer support is very good.

    Which solution did I use previously and why did I switch?

    Earlier, we had Microsoft Defender, which we replaced with Check Point WAF  (formerly CloudGuard WAF ), and we are now ensuring that policy enforcement and threat protection are better.

    How was the initial setup?

    The deployment and initial setup are really straightforward; they provide enough documentation, videos, and deployment documents that are really helpful to complete it faster.

    What was our ROI?

    The return on investment is very good as it has increased my security posture and the operational efficiency of my engineers.

    What's my experience with pricing, setup cost, and licensing?

    It is a little bit expensive, but the pricing model is acceptable, though a reduction would make it more competitive with leaders such as Palo Alto.

    Which other solutions did I evaluate?

    I purchased from a different source.

    What other advice do I have?

    The configurations are pretty easy, and it is plug-and-play, which gives me regular updates.

    I would assess the solution as positive in this regard.

    All the integrations are pretty easy through API connectivity, which I can recommend more, and it also helps with modern AI-based vulnerabilities to conduct token tests and improve detection.

    I would rate this review a 9 out of 10.

    View all reviews