# Cloud Firewalls Fail Independent Tests

> Major cloud firewalls fail security tests as hyperscalers lag behind.
- Title: Cloud Firewalls Fail Independent Tests · Futuriom | Shortify
- Summary: Major cloud firewalls fail security tests as hyperscalers lag behind. AWS and Azure firewalls score 0% in security tests, showing hyperscalers need…
- Keywords: aws, azure, cyberratings, firewall, hyperscalers, nss labs, security, versa networks, cloud security, sase, Cloud, Firewalls
- Source: Futuriom — https://futuriom.com/articles/news/cloud-firewalls-fail-again-in-independent-tests/2026/09
- Read time: 1 min
- Topics: aws, azure, cyberratings, firewall, hyperscalers, nss labs, security, versa networks, cloud security, sase
## Cloud Firewall Test Results
CyberRatings.org tested nine cloud firewalls this week.
## Recommended Firewalls
Fortinet FortiGate, HPE Juniper vSRX, Palo Alto VM-Series, and Versa Networks scored 99.7%+ security.
## Hyperscaler Weaknesses
AWS and Azure firewalls scored 0% security effectiveness, Google Cloud at 77.45%.
## CyberRatings CEO
Vikram Phatak says security tools need significant investment to improve.

> I don't think it is. There are good choices out there. The know-how to build strong security products exists; it comes down to how much a vendor is willing to invest.
## Google's Improvement
Google improved security from 0.00% to 77.45% since April 2025.

> Google is a good example. Compare its past results with its current ones and you can see those investments paying off.
## Cost Factor
Check Point CloudGuard scored highest at 99.95% but got neutral rating due to high cost.

> Check Point CloudGuard Network Security posted the highest Security Effectiveness of any product tested, at 99.95%, but it received only a Neutral rating because of its high cost
## Evasion Techniques
Tests ran 5,004 attacks across 43 evasion techniques spanning OSI Layers 3-7.
## TLS Importance
Most enterprise traffic is encrypted; firewalls must inspect TLS to detect threats.

> The majority of enterprise traffic is now encrypted, so if a firewall can't inspect TLS, it can be blind to many of the largest threats.
## Hyperscaler Tradeoff
Hyperscalers offer easy deployment but lack full security protection.

> Hyperscalers have built convenient, integrated security tools, but convenience is not the same as best-in-class protection
## AI Workloads
Firewalls need to scale for AI agent traffic growth and complex policies.

> As enterprises deploy local AI models and agent-based workflows, east-west traffic between agents will grow, policies will become more complex
## Versa Networks
Versa Networks remains independent with strong security tools for cloud and on-premises.

> Versa, founded by Juniper veterans, is a long-time member of the Futuriom 50. It is one of the few SD-WAN and SASE companies that remained independent by declining M&A
## Next Steps
Users should seek third-party security vendors for better protection.

> Users shouldn't rely on cloud tools to secure their networks and will continue to need third-party security vendors
## Key takeaway

AWS and Azure firewalls score 0% in security tests, showing hyperscalers need third-party security tools.