In short: Check Point cloud security spans cloud firewalls (CloudGuard Network Security, now Check Point Cloud Firewall), web application and API protection (CloudGuard WAF), Workspace Security (formerly Harmony) for email, endpoints, browsers and SaaS, Check Point SASE and Workforce AI Security. Its CloudGuard CNAPP customers are being moved to Wiz. Everything is managed from the Check Point Portal.
How Check Point organises its cloud range
In 2026 Check Point regrouped its products into four pillars and retired the Harmony brand from official product names. Knowing which pillar a product sits in makes its website and quotes much easier to follow:
| Pillar | Cloud-relevant products |
|---|---|
| Hybrid Mesh Network Security | Cloud firewalls (the CloudGuard Network Security family), cloud virtual WAN, WAF and DDoS protection, alongside office and data centre firewalls, plus Check Point SASE (Private Access, Internet Access and an enterprise browser) |
| Workspace Security | The former Harmony products: Endpoint Security, Email Security, Mobile Security, Browser Security and SaaS Security |
| Exposure Management | Threat intelligence, exposure prioritisation and attack surface management, including ThreatCloud AI |
| AI Security | Workforce AI Security for employee use of AI, plus AI red teaming and AI agent security |
The CloudGuard name survives in documentation, marketplace listings and licences, and older Harmony names will appear on quotes and datasheets for some time. If a document uses either name, it is the same product. Our Check Point Harmony site has the full old-to-new name table.
Cloud infrastructure: CloudGuard
| Product | Status | Our guide |
|---|---|---|
| CloudGuard Network Security (now listed as Check Point Cloud Firewall) | Current. Virtual gateways for AWS, Azure, Google Cloud, private cloud and Azure Virtual WAN | CloudGuard Network Security |
| CloudGuard WAF (formerly CloudGuard AppSec, now presented as Check Point WAF) | Current. Machine-learning web and API protection, available as WAF as a service among other deployment options | CloudGuard WAF and the WAF guide |
| CloudGuard CNAPP | Being replaced by Wiz: customers offered assisted migration under a February 2025 partnership; Google completed its Wiz acquisition in March 2026 | CloudGuard CNAPP and the move to Wiz |
For how Check Point compares with other options in each category, see cloud firewall, WAF and CNAPP.
Workspace, SASE and AI security
Our sister site covers the former Harmony range in depth, so we do not duplicate it here:
| Current name (Harmony name) | What it protects | Where to read more |
|---|---|---|
| Check Point Email Security (Harmony Email & Collaboration; technology from Avanan) | Microsoft 365 and Google Workspace email, plus Teams, SharePoint, OneDrive and other collaboration apps, via API | Harmony Email & Collaboration; compare with Microsoft in Defender for Office 365 vs Harmony Email & Collaboration |
| Check Point SaaS Security (Harmony SaaS) | SaaS application posture and threats | Our Check Point Harmony site and the CASB guide |
| Check Point Endpoint Security (Harmony Endpoint) | Laptops, desktops and servers | Harmony Endpoint |
| Check Point Mobile Security and Browser Security (Harmony Mobile and Harmony Browse) | Mobile devices and the browser | Harmony Mobile, Harmony Browse |
| Check Point SASE (Harmony SASE, formerly Perimeter 81) | Internet and private application access for users and sites | Check Point SASE and our SASE guide |
| Workforce AI Security | Employee use of AI: web apps in the Essentials edition, extended to desktop apps, developer tools and MCP-connected activity in the Enterprise edition | Check Point Workforce AI Security |
Harmony Connect, Check Point's earlier cloud access product, reached end of sale in November 2023 and its successor is Check Point SASE; see Harmony Connect if you still run it.
One platform and one portal
Check Point presents its products as one platform: what it used to call Infinity and now mostly calls the Check Point Platform. Network, cloud and workspace products share the same threat intelligence (ThreatCloud AI) and are switched on and managed from the same console, the Check Point Portal (formerly the Infinity Portal). Larger organisations buying across several product areas can also use a single Platform License Agreement rather than separate contracts.
For a smaller organisation this means you can start with, say, email security, then add endpoint protection, SASE or WAF later in the same portal account, without a new console. Licensing detail is on our Check Point licensing page and our sister site's guide to the Check Point Infinity Platform; pricing is always a matter of asking us for a quote.
Choosing what you need from Check Point
Most organisations do not need the whole range. A sensible order, depending on where you are:
- Email and collaboration first, because the inbox remains one of the commonest ways in for attackers.
- Endpoint protection and SASE for a hybrid workforce, especially if you are retiring a VPN.
- CloudGuard Network Security once production servers move into AWS, Azure or Google Cloud, particularly if you already run Check Point firewalls on site.
- CloudGuard WAF for any public web application or API you host.
- Workforce AI Security once staff are using AI tools with company data.
If you use Microsoft 365 Business Premium or E5, check what you already own before adding overlapping products; our Microsoft 365 security hub maps the Microsoft equivalents.
How we help
We are independent: we supply Check Point alongside other vendors, so we recommend Check Point where it fits and say so when something you already own does the job. We scope, deploy and support Check Point services, and help CloudGuard CNAPP customers plan their next step. Our cloud security assessment is a good starting point. Contact us to discuss Check Point for your organisation.
How Forever Systems helps with cloud security
We are an independent UK IT and cyber security provider. We supply and support a wide range of security platforms, so we recommend what fits your organisation rather than one vendor's answer to everything.
- Assess first: we review what you already own, especially your Microsoft 365 licences, before suggesting anything new
- Vendor-aware advice across secure access, email, identity, data protection, endpoint, MDR, cloud infrastructure, browser, AI and backup, including Cisco Secure, Check Point Harmony and Sophos
- Deployment and migration from a UK team, from tenant hardening to replacing a VPN or an endpoint product
- Ongoing support: policy tuning, alert handling, renewals and regular reviews
- People and certification too: security awareness training and Cyber Essentials
We work with businesses, schools, charities and public sector organisations.
Want an independent view of your cloud security?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
What is Check Point CloudGuard?
CloudGuard is Check Point's family name for cloud infrastructure and application security, including cloud network security (virtual firewalls, now presented as Check Point Cloud Firewall), CloudGuard WAF and the CloudGuard CNAPP posture and workload products, whose customers are now being offered migration to Wiz.
What is the difference between Check Point Harmony and CloudGuard?
Harmony, now called Workspace Security, protects users and their workspace: email, collaboration apps, endpoints, mobiles, browsers and SaaS. CloudGuard protects the infrastructure and applications you run in the cloud, such as virtual networks and web applications.
What was CloudGuard AppSec renamed to?
CloudGuard AppSec was renamed CloudGuard WAF, and checkpoint.com now presents it as Check Point WAF. It protects web applications and APIs using machine learning rather than relying on signatures.
What is the Check Point Infinity Platform?
Infinity is the name Check Point used for its unified security platform, now mostly called the Check Point Platform. Its products share ThreatCloud AI threat intelligence and are managed from one console, the Check Point Portal (formerly the Infinity Portal), with a Platform License Agreement available for larger multi-product purchases.
Is Check Point SASE the same as Perimeter 81?
Yes. Check Point acquired Perimeter 81 in 2023, and its service became Harmony SASE, now named Check Point SASE. Harmony Connect, an earlier product, is no longer sold.