ThreatCloud AI - Check Point Software

Security Advisory - July 2026 Frontier AI Security and Hardening Update

Check Point ThreatCloud AI

The Brain Behind Check Point’s Best Security​

Check Point named a leader in the 2025 Gartner Magic Quadrant for Hybrid Mesh Firewalls.

Collaborative Security - Check Point ThreatCloud AI

With Check Point defending your business, you are empowered with enhanced and precise prevention capabilities against the most sophisticated attacks. This is made possible by the formidable intelligence of Check Point ThreatCloud AI, the central nervous system for our  security solutions.

Prevention first

Fastest block attack rate to prevent attacks

Best catch rate

With both known and unknown threats

Near zero false positives

Regain time that would be lost addressing false alarms

Check Point is #1 in the 2025 Miercom Enterprise & Hybrid Mesh Firewall Security Report

99.9% Block rate on new malware

99.7% Phishing prevention rate

How ThreatCloud AI Works

As part of Check Point Core Services, ThreatCloud AI aggregates and analyzes big data telemetry and millions of Indicators of compromise (IoCs) every day. Our threat intelligence database is fed from 150,000 connected networks and millions of endpoint devices, as well as Check Point Research (CP) and dozens of external feeds. Over 50 engines are packed  with AI-based features and capabilities.

ThreatCloud AI employs advanced AI with over 50 technologies to detect and neutralize novel threats, using big data to update its defenses with the latest Indicators of Compromise. It analyzes telemetry data for precise threat categorization, enhancing security across networks with Check Point, cloud with Check Point, operations with Check Point, and user access with Workspace Security.

Big Data Threat Intelligence

Aggregating and analyzing big data telemetry and millions of Indicators of Compromise (IoCs) every day

New Zero-Day Phishing

4X More attacks Blocked compared to Signature technologies

DNS Attack Prevented

5X More attacks blocked compared to Signature based technologies

Data Leak (DNS Tunneling), Command and Control Servers Machine-generated domains (DGA)

ThreatCloud GraphA

Multi-Dimensional Perspective on Cyber Security

Check Point Protects Your Everything with Accurate Prevention

Over 50+ Engines Packed with​ AI-based Features and Capabilities​

Unknown Malware Detection

Infected hosts detection, sandbox static analysis for executables, documents, and macros

Zero-Day Phishing

Network and mobile zero-phishing detection, anti-phishing AI engine, email static analysis, and HTML body NLP

Classify

Documents meta classifier vectorization family classifier, XDR/XPR incidents aggregation, ML Similarity Model, MRAT classifier, IP Port

Improve Accuracy

Network AI and mobile AI engines aggregator, machine validated signature

Anomaly Detection

Cloud networks anomaly detection, XDR/XPR user behavior analysis, SSH tunneling

DNS Security

DNS tunneling, DGA domain generation algorithm

Campaign Hunting

ThreatCloud AI Campaign Hunting

Expose Stealth Breaches

Analyst Mind, Malicious Activity Detection

Over 50 AI and Traditional Threat Prevention engines

Use Cases for ThreatCloud AI

Threat Extraction – Check Point’s Content Disarm and Reconstruction (CDR)

Threat extraction is a Content Disarm and Reconstruction capability of Check Point network and Check Point Endpoint Security, powered by ThreatCloud AI, the brain behind all of Check Point’s products, Threat extraction: real-time threat prevention that never disrupts the flow of business and provides best security.

Proactively prevent emerging threats

Explore More about ThreatCloud AI

New ThreatCloud AI engine designed to prevent IPFS attacks

ThreatCloud AI, the brain behind all of Check Point’s products, combines the latest AI technologies with big data threat intelligence.