threatcloud solution brief.pdf

The Brain Behind Check Point’s Best Security

When your perimeter is everywhere and attacks keep advancing, your business needs

accurate prevention.

When you are using Check Point to secure your business, you gain accurate prevention against the most advanced attacks through the power of ThreatCloud AI. ThreatCloud AI, the brain behind all of Check Point’s products, combines the latest AI technologies with big data threat intelligence to prevent the most advanced attacks while reducing false positives, keeping your business safe and productive.

Main Benefits

▪ Prevention first: Block attacks faster than anyone else

▪ Best catch rate: Of known & unknown threats

▪ Near zero false positives: Less alerts/tickets for sec admins; Uninterrupted user productivity


Real-time globally shared protections with big data threat intelligence

  1. ThreatCloud AI aggregates and analyzes big data telemetry and millions of Indicators of compromise (IoCs) every day. Its threat intelligence database is fed from 150,000 connected networks and millions of endpoint devices, as well as Check Point Research and dozens of external feeds.

  2. ThreatCloud AI updates newly revealed threats and protections in real-time across Check Point’s entire security stack, for example:

    A malicious link is detected and blocked in a zero-day attack in the US. The threat data is then immediately shared across all attack vectors with protections for this attack updated in real time. This same zero-day malicious link is then blocked less than 2 seconds later in a similar attack in Australia.

ThreatCloud AI Live Threat Map

  1. ThreatCloud AI is continually enriched with exclusive threat intelligence collected and analyzed by Check Point Research (CPR), an elite group of researchers and security engineers. The group investigates and exposes the world’s most dangerous and sophisticated cyber-attacks and software vulnerabilities, and issues corresponding protections to all Check Point products. This means Check Point customers are instantly protected from software vulnerabilities found by CPR with no patching needed, as well as from attacks first seen in the wild.

THREATCLOUD AI

ThreatCloud AI Makes 2 Billion Security Decisions Daily


CPR’s software vulnerability findings are translated into protections and are instantly propagated to Check Point’s customers, with no patch needed

Prevent zero-day attacks before the rest through 30+ highly trained AI-based engines

1. Accurately block zero-day ransomware, sophisticated Trojans, and other advanced malware through a market leading malware analysis technology leveraging 30+ AI-based machine and deep learning engines.

2. Instantly deliver safe web downloads and email attachments to users by disarming files from possible malicious content in less than a second, leveraging ultra-fast Content Disarm and Reconstruction (CDR) services.

3. Prevent advanced first-seen phishing attacks coming through web and email with AI-based deep learning engines that analyze 300+ phishing indicators.