SECURITY ATLAS / EVALUATION BRIEF Check Point CloudGuard and Wiz CNAPP Research reviewed: 2026-10-18 https://atlasofsecurity.com/landscape/vendors/checkpoint-cloudguard/ THE ATLAS TAKE This profile should begin with transition planning. Check Point’s published partnership material describes moving CloudGuard CNAPP customers to Wiz rather than building a single combined CNAPP product. Its cloud network-security offerings remain a different control boundary. Atlas would judge the arrangement by preservation of policies, cloud access, findings, ownership, and contractual support through the actual migration. A partnership announcement is useful lineage evidence, but it does not prove that every promised integration has shipped. Existing customers should obtain a configuration-specific migration and acceptance plan before treating an old CloudGuard screen and a current Wiz demonstration as equivalent deployments. SCOPE Scope the existing Check Point CNAPP deployment separately from Cloud Firewall and web-application firewall products. Use the partnership FAQ for migration planning; older CNAPP marketing pages should not be treated as proof that every module remains unchanged. WORTH A LOOK WHEN Existing Check Point CNAPP customers planning a documented transition, or teams explicitly combining Wiz CNAPP with separately scoped Check Point network controls. THINK TWICE WHEN The evaluation assumes all CloudGuard-branded products share one lifecycle, or that a strategic partnership supplies immediate feature and policy equivalence. IMPLEMENTATION 1. Inventory what must survive List findings, policy intent, exceptions, role grants, exports, downstream integrations, and evidence-retention requirements. 2. Agree the target boundary Obtain the current order form, cloud support matrix, migration responsibility, and the list of delivered integrations. 3. Accept the migrated workflow Repeat a representative finding-to-owner and approved remediation path, then compare retained evidence before retiring the original dependency. OPERATING REALITY The customer needs a named migration owner across cloud administration, security operations, and procurement. Inventory policies, findings, exceptions, integration roles, and evidence exports before changing platforms. Atlas would maintain parallel acceptance evidence until the target workflow is demonstrated; a new dashboard should not silently erase the history needed to explain an unresolved exposure. COMMERCIAL CONSIDERATIONS Obtain written terms for the existing CNAPP support period, target Wiz subscription, migration assistance, and separately retained Check Point products. A partnership does not establish one universal license. - Existing support and transition commitments - Wiz CNAPP subscription and any separately contracted network controls - Migration services, temporary overlap, and evidence-retention work EVALUATION PLAN / PROPOSED TESTS, NOT COMPLETED RESULTS 1. Account for historical evidence Acceptance evidence: Export representative open findings, exceptions, and ownership records and show where each remains available after transition. Owner: __________ Pass criterion: __________ Observed result: __________ Evidence location: __________ 2. Validate the target control Acceptance evidence: Reproduce a benign cloud exposure in the target environment and confirm scope, owner assignment, and reassessment after remediation. Owner: __________ Pass criterion: __________ Observed result: __________ Evidence location: __________ 3. Separate network enforcement Acceptance evidence: Test one approved network policy independently of CNAPP risk visibility; preserve which product actually made the enforcement decision. Owner: __________ Pass criterion: __________ Observed result: __________ Evidence location: __________ QUESTIONS FOR THE VENDOR - Which existing CNAPP functions have a demonstrated replacement rather than only a similarly named feature? - Who owns the post-transition contract, support and data-processing responsibilities? - Which firewall or web-application-firewall policies remain separately managed and outside the CNAPP migration? EVIDENCE GAPS - Historical partnership material is not proof that every planned integration is currently delivered; obtain current release and migration documentation. - No independent migration, coverage-equivalence, or network-enforcement test was conducted for this profile. SOURCES Check Point and Wiz partnership migration Q&A (Lifecycle) https://engage.checkpoint.com/powering-the-next-era-of-cloud/items/q--a--check-point-and-wiz-webinar-partnership Current Check Point and Wiz integration scope (Product information) https://www.checkpoint.com/integrations/wiz/ Check Point and Wiz strategic partnership announcement (Product information) https://www.checkpoint.com/press-releases/check-point-enters-next-level-of-strategic-partnership-with-wiz-to-deliver-integrated-cnapp-and-cloud-network-security-solution/ Use synthetic fixtures in an authorized environment. Agree rollback and acceptance criteria before enforcement. Documentation research and Atlas analysis. Independent hands-on effectiveness, effort, and complete price remain unassessed.