In short: Check Point CloudGuard CNAPP customers are being offered an assisted migration to Wiz, under a strategic partnership announced on 11 February 2025 in which Wiz replaces Check Point's own CNAPP. Check Point keeps investing in cloud network security, WAF and AI security. Google completed its acquisition of Wiz in March 2026. Existing customers should plan their move before renewal.
What changed
CloudGuard CNAPP was Check Point's cloud-native application protection platform. Its posture management grew out of Dome9, which Check Point acquired in 2018, and it later added entitlement management, workload and container protection, infrastructure-as-code scanning and cloud threat detection.
On 11 February 2025 Check Point and Wiz announced a strategic partnership. Under it:
- Wiz's platform takes the place of Check Point's own CNAPP, and existing CloudGuard CNAPP customers are offered an assisted migration to Wiz.
- Check Point said it would put its cloud investment into cloud network security, web application firewall and generative AI security.
- The two platforms are integrated, so cloud risks Wiz identifies can be acted on by Check Point network enforcement. Check Point describes this as bridging cloud risk detection and network enforcement.
Wiz has since changed hands. Google completed its acquisition of Wiz on 11 March 2026. Wiz has joined Google Cloud but keeps its own brand, and says it remains a multicloud platform covering AWS, Azure, Google Cloud and Oracle Cloud.
What stays with Check Point
The partnership does not affect the rest of Check Point's cloud range. These products continue, and we cover them separately:
| Product | What it does | Our guide |
|---|---|---|
| CloudGuard Network Security (now listed as Check Point Cloud Firewall) | Virtual security gateways for AWS, Azure, Google Cloud and private cloud | CloudGuard Network Security |
| CloudGuard WAF (formerly CloudGuard AppSec, now presented as Check Point WAF) | Web application and API protection | CloudGuard WAF |
| Workforce AI Security | Discovery, governance and protection of employee use of AI tools | Workforce AI Security |
| Workspace Security (formerly the Harmony range) and Check Point SASE | Email, endpoint, mobile, browser and SaaS security, plus secure access for users | Our Check Point Harmony site |
The full map is on our Check Point cloud security portfolio page.
What existing CloudGuard CNAPP customers should do
There is no need to panic, but there is a need to plan. Do not let cloud posture coverage lapse because a renewal date passes unnoticed.
- Find your dates. Check your CloudGuard CNAPP subscription term and renewal date, and ask Check Point or your supplier what the assisted migration offer is for your account.
- Inventory what CloudGuard does for you today. List connected accounts, compliance rulesets, custom rules, Kubernetes and container protections, infrastructure-as-code scanning, alert integrations and any automated remediation. This list becomes your migration requirement.
- Decide where your CNAPP should be. Wiz is the route Check Point has set out. It is not the only one: Azure-heavy estates may get most of what they need from Microsoft Defender for Cloud, and organisations already running CrowdStrike, SentinelOne or TrendAI on their servers may prefer that vendor's cloud module. Compare them on our CNAPP page.
- Run in parallel. Connect the new platform to your accounts, compare findings against CloudGuard for a few weeks, then rebuild compliance reports and alert routes before switching CloudGuard off.
- Keep your network and WAF layers. If you use CloudGuard Network Security gateways or CloudGuard WAF, those continue; check that they integrate with whichever CNAPP you choose.
As a safety net during the move, Microsoft Defender for Cloud's Foundational CSPM is free for Azure subscriptions and can also connect AWS and Google Cloud accounts. It is not a full replacement, but it keeps basic posture checks running.
Wiz and Forever Systems
To be clear: we do not supply Wiz. If Wiz is the right answer for you, the assisted migration runs through Check Point and Wiz. What we can do is independent:
- Review your current CloudGuard CNAPP configuration and document what must be carried across
- Assess your cloud posture today, so you know your starting point before any migration
- Compare Wiz against the CNAPP options we do work with, on your own requirements
- Supply and deploy Microsoft Defender for Cloud, CrowdStrike, SentinelOne or TrendAI cloud security if one of those fits better
- Keep supporting your Check Point network security and WAF
Whichever platform you choose, ask the same questions: which of your current CloudGuard rules and compliance reports carry across automatically, what has to be rebuilt by hand, how Kubernetes and container protections are redeployed, how alerts reach your SOC or MDR service, and how long the old and new platforms can run side by side.
How we help
Our cloud security assessment includes a posture review of your AWS, Azure and Google Cloud accounts and a written migration plan for CloudGuard CNAPP users, with options ranked by fit rather than by what we sell. Contact us to plan your next step.
How Forever Systems helps with cloud security
We are an independent UK IT and cyber security provider. We supply and support a wide range of security platforms, so we recommend what fits your organisation rather than one vendor's answer to everything.
- Assess first: we review what you already own, especially your Microsoft 365 licences, before suggesting anything new
- Vendor-aware advice across secure access, email, identity, data protection, endpoint, MDR, cloud infrastructure, browser, AI and backup, including Cisco Secure, Check Point Harmony and Sophos
- Deployment and migration from a UK team, from tenant hardening to replacing a VPN or an endpoint product
- Ongoing support: policy tuning, alert handling, renewals and regular reviews
- People and certification too: security awareness training and Cyber Essentials
We work with businesses, schools, charities and public sector organisations.
Want an independent view of your cloud security?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Is Check Point CloudGuard CNAPP being discontinued?
Effectively, yes. Under a strategic partnership announced in February 2025, Wiz replaces Check Point's own CNAPP and existing CloudGuard CNAPP customers are offered assisted migration to Wiz. Check Point continues to invest in cloud network security, WAF and AI security. Check your own contract and renewal date with Check Point for your account's timeline.
Who owns Wiz now?
Google. Google completed its acquisition of Wiz on 11 March 2026 and Wiz is now part of Google Cloud. Wiz continues under its own brand and supports AWS, Azure, Google Cloud and Oracle Cloud.
Is CloudGuard Network Security affected?
No. Check Point's virtual firewalls for public and private cloud, now presented as Check Point Cloud Firewall, continue, as does CloudGuard WAF (now presented as Check Point WAF). The change affects only the CNAPP posture and workload protection side.
Do I have to move to Wiz?
No. Wiz is the route Check Point has set out, with assisted migration. You can also move to another CNAPP, such as Microsoft Defender for Cloud, CrowdStrike Falcon Cloud Security, SentinelOne Singularity Cloud Security or TrendAI Vision One. Compare them against what CloudGuard does for you today.
Does Forever Systems sell Wiz?
No. We do not supply Wiz. We can review your CloudGuard set-up, assess your cloud posture independently and supply alternative platforms if one of them suits you better.