Check Point Pricing
Advanced phishing, malware and data loss protection for Microsoft 365 and Google Workspace. The prices below are starting points for under 100 users. Over 100 users, and for education, government and non-profit, we quote directly.
Advanced Protect
$48/yr
Per User
£35/yr
Per User
€42/yr
Per User
A$68/yr
Per User
Includes:
- Anti-phishing and anti-virus
- Malicious URL prevention
- Click-time protection
- Account takeover prevention
- Sandboxing and attachment sanitization
- Optional Email & Collaboration scope: Teams, SharePoint, OneDrive, Google Drive, Slack, Dropbox, Box, ShareFile
Complete Protect
$72/yr
Per User
£54/yr
Per User
€63/yr
Per User
A$102/yr
Per User
Includes:
- Everything in Advanced Protect
- Data loss prevention for outbound email
- Email encryption
- Optional DLP across collaboration apps
Custom Quote
Custom
Custom
Custom
Custom
Includes:
- Pricing for 100+ users
- Education, government, non-profit rates
- Multi-year terms
Optional add-ons
Every add-on can be applied to any package, whichever tier or scope you choose. Contact us for bundle pricing.
| Add-on | What it does | Price per user/per year |
|---|---|---|
| Security Awareness Training (SAT) | Phishing simulation and awareness training | From $12.00 |
| Incident Response (IRaaS) | Check Point analysts handle restore requests and phishing reports | From $18.00 |
| Archiving | Stores email for up to 10 years with filtering and bulk export | From $30.00 |
| DMARC Management | Supports maintaining a restrictive DMARC policy against impersonation | From $7.20 |
| Leaked Credentials | Alerts on credentials exposed in third party breaches | From $12.00 |
| SSPM | Posture management for Microsoft 365 and Google Workspace | From $6.00 |
What every package includes
Two tiers, each available for email only or email plus collaboration apps. Every configuration includes the full threat prevention stack, with data loss prevention and encryption in Complete Protect. The Email & Collaboration scope adds Teams, SharePoint, OneDrive, Google Drive, Slack, Dropbox, Box and ShareFile.
| Feature | Advanced Protect | Complete Protect |
|---|---|---|
| Anti-phishing (incoming and internal) | Included | Included |
| Known malware prevention (Anti-Virus) | Included | Included |
| Malicious URL prevention | Included | Included |
| URL click-time protection | Included | Included |
| Account takeover prevention | Included | Included |
| Shadow IT detection | Included | Included |
| Zero-day malware prevention (Sandboxing) | Included | Included |
| Attachment sanitization (CDR) | Included | Included |
| Data loss prevention | - | Included |
| Email encryption | - | Included |
| Email Only scope: Outlook, Gmail | Included | Included |
| Email & Collaboration scope (Teams, SharePoint, OneDrive and more) | Optional | Optional |
Frequently asked questions
What's the difference between Advanced Protect and Complete Protect?
Data loss prevention and email encryption. Everything else is identical, so both tiers include anti-phishing, account takeover prevention, sandboxing, attachment sanitization and Shadow IT detection. Choose Complete Protect if you need to control what leaves your organisation, not just what arrives.
What's the difference between Email Only and Email & Collaboration?
Which applications are covered. Email Only protects Outlook and Gmail. Email & Collaboration extends the same protection to Teams, SharePoint, OneDrive, Google Drive, Slack, Dropbox, Box and ShareFile. The security features are the same either way.
How are licences counted?
Per active user with a mailbox. Unlicensed shared mailboxes, group mailboxes and aliases are protected but don’t consume a licence, so you don’t pay for them. Shared mailboxes that Microsoft requires an Exchange Online licence for do count. As an example, 75 licensed users with 10 unlicensed shared mailboxes and 3 distribution lists needs 75 licences, and the shared mailboxes are still scanned
Do we need to change our MX records?
No. Check Point connects to Microsoft 365 or Google Workspace through the API and sits inside the environment rather than in front of it, so there’s no change to mail routing and nothing to unpick if you move away.
How does it compare to Microsoft Defender for Office 365?
Defender is a reasonable first layer and Check Point is designed to sit behind it rather than replace it. Because it works inside the tenant, it sees internal email and post-delivery threats that a perimeter layer doesn’t, and it catches what Defender lets through rather than duplicating it.
Can we add or remove users during the term?
Yes. Users added mid-term are prorated to your existing renewal date, so you keep one anniversary and one invoice. We send a renewal summary ahead of each anniversary so the cost is confirmed before it’s invoiced.