threatcloud solution brief.pdf
The Brain Behind Check Point’s Best Security
When your perimeter is everywhere and attacks keep advancing, your business needs
accurate prevention.
When you are using Check Point to secure your business, you gain accurate prevention against the most advanced attacks through the power of ThreatCloud AI. ThreatCloud AI, the brain behind all of Check Point’s products, combines the latest AI technologies with big data threat intelligence to prevent the most advanced attacks while reducing false positives, keeping your business safe and productive.
Main Benefits
▪ Prevention first: Block attacks faster than anyone else
▪ Best catch rate: Of known & unknown threats
▪ Near zero false positives: Less alerts/tickets for sec admins; Uninterrupted user productivity
Real-time globally shared protections with big data threat intelligence
ThreatCloud AI aggregates and analyzes big data telemetry and millions of Indicators of compromise (IoCs) every day. Its threat intelligence database is fed from 150,000 connected networks and millions of endpoint devices, as well as Check Point Research and dozens of external feeds.
ThreatCloud AI updates newly revealed threats and protections in real-time across Check Point’s entire security stack, for example:
A malicious link is detected and blocked in a zero-day attack in the US. The threat data is then immediately shared across all attack vectors with protections for this attack updated in real time. This same zero-day malicious link is then blocked less than 2 seconds later in a similar attack in Australia.
ThreatCloud AI Live Threat Map
- ThreatCloud AI is continually enriched with exclusive threat intelligence collected and analyzed by Check Point Research (CPR), an elite group of researchers and security engineers. The group investigates and exposes the world’s most dangerous and sophisticated cyber-attacks and software vulnerabilities, and issues corresponding protections to all Check Point products. This means Check Point customers are instantly protected from software vulnerabilities found by CPR with no patching needed, as well as from attacks first seen in the wild.
- 150,000 connected Networks
- Millions of Endpoint Devices
- Dozens of external feeds and crawling the www and social media
THREATCLOUD AI
ThreatCloud AI Makes 2 Billion Security Decisions Daily
- 73,000,000 Full content emails
- 20,000,000 Potential IoT devices
- 1,500,000 Newly installed mobile apps
- 1,000,000 Online web forms
CPR’s software vulnerability findings are translated into protections and are instantly propagated to Check Point’s customers, with no patch needed