

Check Point
Services firm offering MDR built on ThreatCloud AI. The MDR 360 tier (launched July 2025) added vendor-neutral positioning with 160+ third-party integrations and native identity threat detection for AD, Entra ID, and Okta. Strongest for organizations already running Check Point infrastructure, though premium pricing and licensing complexity are persistent complaints.
Buyer fit
Good fit when
- ✓Enterprises already running Check Point firewalls and infrastructure who want consolidated security management
- ✓Organizations with hybrid environments needing vendor-neutral MDR across 160+ tool integrations (MDR 360 tier)
- ✓Companies that need identity threat detection for AD, Entra ID, and Okta built into their MDR
Watch out when
- ×Budget-conscious buyers or SMBs who need predictable, transparent pricing
- ×Organizations that want a dedicated account manager included in the base service
- ×Teams looking for a pure-play MDR with independently validated service-level metrics
Coverage
EDR
Cloud
Additional capabilities
Incident response
Pricing
What costs extra
- –MDR 360 tier (identity protection, expanded integrations, XDR/XPR access)
- –MXDR 360 tier (managed SIEM, data lake, co-managed SOC)
- –ATAM 360 (Advanced Technical Account Management with dedicated engineer)
- –Additional modules (SSL, SD-WAN features)
Cost caveats
- –ATAM 360 (dedicated account management) is an additional subscription on top of MDR
- –Licensing complexity is a recurring PeerSpot complaint, plan for negotiation cycles
- –Identity protection and expanded integrations require the MDR 360 tier, not the base MDR tier
- –PeerSpot reviewers consistently flag Check Point licensing and support costs as higher than competitors
Pricing compiled from public sources. Verify directly with the provider.
Team and access
Certifications
Reputation
PeerSpot rates Check Point Infinity 8.8/10 (platform-level, not MDR-specific). Premium pricing, licensing complexity, and technical support delays are persistent complaints across PeerSpot reviews. MDR-specific community feedback is minimal. Most reviews cover the Infinity platform broadly, not the MDR service layer.
What customers praise
- ✓100% detection in 2024 MITRE ATT&CK Evaluations (XDR/XPR platform, not MDR-specific)
- ✓ThreatCloud AI threat intelligence fed by hundreds of millions of global sensors
- ✓Vendor-neutral MDR 360 tier with 160+ third-party integrations (launched July 2025)
Common complaints
- ×Premium pricing with licensing complexity that requires negotiation (persistent PeerSpot theme)
- ×Technical support delays reported across Check Point products on PeerSpot
- ×Dedicated account management (ATAM 360) is a paid add-on, not included
Very little Reddit discussion about Infinity MDR specifically. Check Point discussed in r/networking and r/cybersecurity mainly for firewalls, with persistent complaints about pricing, licensing, and support quality.
Questions to ask
- 1.
What is the all-in per-user cost difference between MDR, MDR 360, and MXDR 360 for our environment?
- 2.
Your MITRE results are for the XDR/XPR platform, not the MDR service. What MDR-specific detection and response metrics can you share?
- 3.
Which of the 160+ claimed integrations are production-tested versus API-available-but-untested?
- 4.
Is ATAM 360 required for effective service, or do MDR customers without it get the same response quality?
- 5.
What exactly happens at 3am on a Saturday if ransomware is detected, and does the MDR team act autonomously or escalate?
- 6.
What data and custom detection content do we retain if we cancel the MDR service?
Evidence
Sources reviewed
Main public source used for the provider profile.
Comprehensive solution brief detailing Check Point MDR service capabilities, features, and benefits
2025 announcement of enhanced MDR service tiers with identity protection and enterprise capabilities
Public-data caveats
- –No public contractual response-time SLA is recorded for this profile.
- –No public fixed price is recorded; compare only after a scoped quote.
- –No public breach warranty is recorded.
- –Response authority may depend on pre-approval and contract scope.
Also consider
Information compiled from public sources. Verify details directly with the provider before making decisions.