Sold by: Check Point Software Technologies
Deployed on AWS
Check Point WAF as a Service (WAFaaS) is an AI-based web application, generative and agentic AI, and API security solution, delivering the highest protection against known and zero-day threats using advanced AI and IPS. WAFaaS provides multiple layers of protection: rate limiting, AI engines, IPS signatures, zero-day file security, bot protection, and comprehensive API discovery and schema validation. WAFaaS delivers a non-agent WAF, deployable within minutes, and adds advanced DDoS mitigation. Traffic is seamlessly routed through Check Point servers, which automatically issue SSL certificates.
4.4
Overview
Check Point WAF as a Service (WAFaaS) is an automated solution that delivers superior benefits of a top-tier web application, generative and agentic AI, and API security solution, requiring minimal manual intervention. The AI engine continuously learns the behavior of your application, tracking changes throughout its lifecycle. This ensures a minimal false positive rate and reduces tedious rule tuning after each application change. WAFaaS delivers a non-agent WAF that can be deployed in less than 15 minutes. Traffic is effortlessly routed through Check Point servers, which automatically issue SSL certificates. Upon redirection, any HTTP requests are intercepted for inspection and forwarded to the application only after validating their security. WAFaaS is available in premium and advanced packages. Advanced package does not include API Discovery and Zero-day file security.
The Premium package provides:
AI-based engines for prevention of Zero-day Attacks and OWASP Top 10 known attacks.
AI-based contextual analysis engine to ensure precise detection rate with minimal false positives.
Real-time API discovery, sensitive data, and public exposure governance.
Snort 3.0 signature enforcement engine.
Advanced DDoS mitigation to ensure your applications stay accessible to legitimate users by mitigating attacks that overwhelm your network, servers, or applications.
Rate limiting, based on identifiers such as IP address and XFF - limited to 5 rules.
Intrusion Prevention (IPS), over 2,800 Web CVEs, based on award-winning NSS-Certified IPS.
Includes 6 months of full logs retention, based on the fair usage policy.
Auto-generated swagger schema for validation and schema enforcement. Unlimited rate limiting.
Rate limiting functionality adds identifiers such as keys within JWT, cookies, or headers.
Zero-day file security.
You are entitled to free usage of 7 days or 1M HTTP requests whatever comes first, after that you will be billed.
Highlights
- Zero-day prevention: Check Point WAF as a Service (WAFaaS) automatically prevents zero-day exploits across a wide spectrum of security events, including React2Shell, log4shell, text4shell, and MOVEit, all in real-time.
- Deployed within minutes: WAFaaS delivers a non-agent Web application firewall, deployable within minutes. Only a one-time DNS configuration is necessary for WAFaaS to start routing traffic securely to applications in the cloud.
- Unified Application Security Across the Full Attack Surface: Consolidates WAF, API, GenAI, bot, DDoS, file security, and CDN capabilities, eliminating the fragmented point solutions that create blind spots and increase administrative overhead.
Details
Categories
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/unit |
|---|---|
First 10M HTTP requests | $1,800.00 |
10M-60M HTTP requests (price per 1M) | $44.00 |
60M-160M HTTP requests (price per 1M) | $24.00 |
160M HTTP requests and above (price per 1M) | $16.00 |
Vendor refund policy
No Refunds.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
https://supportcenter.checkpoint.com/supportcenter/portal 24x7 email support with emergency phone number. Premier support available for enterprise customers.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
A single pane-of-glass security management console delivers consistent visibility, policy management, logging, reporting and control across all cloud environments and networks
Check Point Check Point Cloud Firewall is a cloud-native security gateway that delivers automated, advanced threat prevention and multi-layered network security for assets that customers migrate to or store on AWS. Try it free for 30 days.
A single security management console delivers consistent visibility, policy management, logging, reporting and control across all cloud environments and networks
Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation, and with GWLB (starting with R81.20)
**Please note: To ensure optimal operations, Check Point recommends a 4 vCores machine size. This provides balanced efficiency and smooth performance, which most customers find ideal for their needs.
Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation.
**Please note: To ensure optimal operations, Check Point recommends a 4 vCores machine size. This provides balanced efficiency and smooth performance, which most customers find ideal for their needs.
Customer reviews
Ashith S.
Strong Web Traffic Visibility, But a Steep Learning Curve
Reviewed on Jul 17, 2026
Review provided by G2
What do you like best about the product?
What I like most about Check Point WAF is its clear visibility into web traffic and blocked requests. It makes it easy to identify suspicious activity and fine-tune security policies. Once configured, it provides reliable protection with minimal day-to-day effort.
What do you dislike about the product?
The biggest drawback is the learning curve, especially for first-time users. The interface can feel crowded, and fine-tuning policiesThe initial setup and policy tuning can be time-consuming, especially if you're new to WAFs. The interface isn't always intuitive, and some configuration options require extra effort to understand. takes time to avoid false positives. Some configuration tasks could also be more intuitive.
What problems is the product solving and how is that benefiting you?
Check Point WAF helps protect our web applications from common attacks while reducing the need for constant manual monitoring. It gives us better visibility into suspicious traffic, allowing us to respond faster and manage security more efficiently.
Samiksha C.
Complex Setup, but Strong Security Features
Reviewed on Jul 15, 2026
Review provided by G2
What do you like best about the product?
I feel Check Point WAF is very basic but it does its job well in protecting the organization. It definitely helps when an employee is clicking on a suspicious link, like, preventing phishing attacks. I appreciate that it logs everything so that the SOC team stays aware. The feature I love the most is the firewall policy management and log monitoring via the smart console. I regularly work on analyzing the logs to investigate issues and validate security alerts. I also use the threat prevention features like IPS and antivirus to understand patterns and tune rules.
What do you dislike about the product?
I feel the setup is very complex and quite lengthy. It also has a high cost, and the performance impact is a bit lagging. It increases latency, reduces throughput, and needs proper sizing and tuning. I request the Check Point team to hopefully make the process easier.
What problems is the product solving and how is that benefiting you?
I use Check Point WAF to protect my organization, detecting endpoint activities and preventing security breaches. It logs everything, keeping our SOC team aware of potential phishing threats and ensuring we don't visit suspicious links.
UTSAV A.
Intuitive and Secure Firewall Solution
Reviewed on Jul 15, 2026
Review provided by G2
What do you like best about the product?
I find Check Point WAF very easy to use. Even if someone is new to firewall stuff, they can handle it effectively with some guidance on using its GUI. The setup is also quite straightforward; you can set it up in five to ten minutes using the GUI interface, which is quite comfortable for first-timers.
What do you dislike about the product?
As of now, I've used many firewalls, and while Check Point WAF's interface is good, I feel it could be improved a little bit. Compared to Fortinet, their GUI interface is slightly better than Check Point's. That's pretty much the only thing I would say needs improvement, although Check Point does have very good features compared to Palo Alto and ForteGate.
What problems is the product solving and how is that benefiting you?
I use Check Point WAF to secure our environment from vulnerabilities, performing URL and application-level filtering effectively.
Milan D.
Solid WAF Protection With a Learning Curve
Reviewed on Jul 14, 2026
Review provided by G2
What do you like best about the product?
What I like best is the contextual AI engine that detects threats without relying on constant signature updates. It dramatically cut down our false positives compared to our previous signature-based WAF, which means less time spent tuning rules and chasing noise. Deployment across our cloud environments was straightforward, and the automatic learning of application behavior means new apps get protected without a ton of manual configuration. The unified management through the Infinity portal is also a big plus for us since we can see everything in one place.
What do you dislike about the product?
The initial setup and configuration felt more complex than expected, and the learning curve for tuning rules to reduce false positives was steep. Documentation could be more thorough in places, and support response times occasionally lagged when we ran into urgent issues. Pricing also feels on the higher side compared to some alternatives, especially as you scale traffic. Better dashboards and more intuitive policy management would go a long way
What problems is the product solving and how is that benefiting you?
We use Check Point WAF to protect our web applications and APIs from common threats like SQL injection, cross-site scripting, and bot traffic. Before adopting it, we struggled with manually managing security rules and staying ahead of emerging attacks. It's given us more consistent protection across our cloud environments and reduced the time our team spends triaging alerts. The automated threat detection lets us focus on other priorities while staying confident our applications are covered.
Nekkala Nagendra
Ai-driven cloud security has strengthened threat prevention and improved security posture
Reviewed on Jul 13, 2026
Review provided by PeerSpot
What is our primary use case?
The main purpose is to have network security through machine learning, which can offer threat detection and intelligence for my endpoints, and I am looking for application security.
I am looking for an AI-based solution that can strengthen my cloud-native security, automate security, and better prevent threats.
I am looking for an AI-based solution and unified cloud-native security from the SaaS platform to improve my security posture.
What is most valuable?
Check Point WAF (formerly CloudGuard WAF) is a SaaS platform that gives unified cloud-native security across my applications, workloads, and network, allowing me to automate security, prevent threats, ensure compliance, and manage my security posture well across all my cloud environments.
It conducts security scoring and risk scoring, which helps prioritize my security needs, and the advanced threat detection is also very fine, providing actionable information for my current security threats by collecting and analyzing data through threat actors and IOCs, offering tactical, technical, and operational features.
What needs improvement?
The false positive rate is a concern, but I could recommend improvements where false positives have to be minimized better.
This all depends on how the rules are customized and configured, and it can also improve with planning during the initial configuration, including threat intelligence and APIs, so it could enhance how it defends against attacks and prompts injections.
It can find the threat actors behind it, and I find that strategically and technically it is effective, although the AI-related features could improve, especially as global AI capabilities evolve, which are advancing more than what Check Point WAF (formerly CloudGuard WAF) provides compared to competitors.
There are no glitches; I believe improvement could be made primarily in API Gateway and API security, especially by enabling enhanced AI-related features for better fine-tuning.
For how long have I used the solution?
I have experience of two years with the product.
What do I think about the stability of the solution?
It is stable.
What do I think about the scalability of the solution?
It is definitely a highly scalable solution without any doubt.
How are customer service and support?
The customer support is very good.
Which solution did I use previously and why did I switch?
How was the initial setup?
The deployment and initial setup are really straightforward; they provide enough documentation, videos, and deployment documents that are really helpful to complete it faster.
What was our ROI?
The return on investment is very good as it has increased my security posture and the operational efficiency of my engineers.
What's my experience with pricing, setup cost, and licensing?
It is a little bit expensive, but the pricing model is acceptable, though a reduction would make it more competitive with leaders such as Palo Alto.
Which other solutions did I evaluate?
I purchased from a different source.
What other advice do I have?
The configurations are pretty easy, and it is plug-and-play, which gives me regular updates.
I would assess the solution as positive in this regard.
All the integrations are pretty easy through API connectivity, which I can recommend more, and it also helps with modern AI-based vulnerabilities to conduct token tests and improve detection.
I would rate this review a 9 out of 10.