In short: Check Point Harmony Endpoint, now officially Check Point Endpoint Security, is one agent combining prevention, anti-ransomware and EDR for Windows, macOS, Linux and VDI. It is licensed per protected device in editions from Basic to Complete and Elite, with MDR as an option, and we bill it monthly on the devices in use.
What Harmony Endpoint is
Harmony Endpoint is Check Point's endpoint security product. It began as SandBlast Agent, became Harmony Endpoint when the Harmony suite launched, and in 2026 Check Point's website renamed it Check Point Endpoint Security. It is the same agent and console, so quotes and renewals may use either name.
One client handles three jobs: endpoint protection (anti-ransomware with file restoration, anti-malware, anti-exploit, anti-bot and behavioural detection), endpoint detection and response (automated forensics reports mapped to MITRE ATT&CK, threat hunting and remediation), and, in the top edition or as an add-on, XDR that correlates endpoint events with the rest of your Check Point estate. Verdicts draw on Check Point's ThreatCloud AI intelligence, which also feeds its email, mobile and network products.
For a deeper look at the technology, see Check Point Harmony Endpoint on our specialist site.
Editions compared
Every edition uses the same agent; the licence decides which components are switched on. Each edition includes everything in the column to its left.
| Capability | Basic | Advanced | Complete | Elite |
|---|---|---|---|---|
| Anti-ransomware, anti-malware, anti-exploit, anti-bot | Yes | Yes | Yes | Yes |
| Firewall, application control, compliance, remote access VPN | Yes | Yes | Yes | Yes |
| Browser protection: zero-phishing, URL filtering, password reuse | Yes | Yes | Yes | Yes |
| EDR: forensics, MITRE ATT&CK mapping, threat hunting | Yes | Yes | Yes | Yes |
| Threat Emulation (sandboxing) and Threat Extraction (file sanitisation) | No | Yes | Yes | Yes |
| Full disk encryption and removable media encryption | No | No | Yes | Yes |
| Infinity XDR, posture management (vulnerability and patching), DLP and GenAI controls | No | No | No | Yes |
Check Point's current solution brief lists Advanced, Complete and Elite (plus a standalone Data Protection package for encryption); Basic, with prevention and EDR but no sandboxing, is also available through us. Check Point also sells XDR, posture management and DLP as add-ons to lower editions, so if you need two or more of those it is worth comparing against Elite. Our specialist site covers the editions in more depth.
How Harmony Endpoint is licensed
Harmony Endpoint is a subscription counted per protected device: each workstation, laptop or server running the agent uses a licence. We confirm on your quote how servers and VDI sessions are counted for your estate.
- Monthly: through Forever Systems, Harmony Endpoint is provisioned in your Check Point Portal tenant and billed monthly on the devices in use, so you are not paying for machines you have retired.
- Mixing editions: you can license groups of devices at different editions, for example Complete for laptops that leave the office and Advanced for fixed servers where disk encryption is not wanted.
- Upgrades: moving up an edition is a licence and policy change on the same agent, not a reinstall. Adding encryption still means updating the deployment policy, and full disk encryption needs a restart to take effect.
- Managed detection and response: Check Point MDR can be added on top of your endpoint licences if you want analysts watching alerts around the clock.
If you hold an older package or a renewal quote with different product names, we map it to a current edition before renewal so there are no surprises.
Requirements and deployment
Check Point lists Windows workstations, Windows Server, macOS, the major Linux distributions and VDI and terminal server environments, including VMware and Citrix. Feature coverage is fullest on Windows, and some features, such as device isolation, vary by platform, so we check your estate against Check Point's current support list before quoting.
Management is normally in the cloud through the Check Point Portal, with nothing to host. Organisations that must keep management in-house can use an on-premises Endpoint Security Management Server instead. Check Point lists integrations with Microsoft Intune and Jamf for deploying the client, and with Microsoft Entra ID for users and groups; other software distribution tools can also push the package. Remove or coexist with your previous antivirus as part of the roll-out; we plan that step with you.
Who it suits and how we help
Harmony Endpoint suits organisations that want strong prevention and EDR in one agent, particularly those already using Check Point firewalls or Harmony Email & Collaboration, because events from both come together in one portal. Its malware protection and firewall features also support the controls in the Cyber Essentials requirements.
We count your devices, recommend the edition, run a trial in your own tenant if you want one, deploy the agent and tune policies, then handle additions, upgrades and renewals. Ask us for a quote, or compare other vendors on our endpoint protection and EDR, XDR and MDR pages.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Is Harmony Endpoint licensed per user or per device?
Per protected device. Each workstation, laptop or server running the Check Point agent uses a licence. We confirm how servers and virtual desktops are counted for your estate on the quote.
Is Harmony Endpoint the same as Check Point Endpoint Security?
Yes. In 2026 Check Point dropped the Harmony brand from its website and now calls Harmony Endpoint Check Point Endpoint Security. It is the same agent and the same editions. The product was originally called SandBlast Agent.
What is the difference between Harmony Endpoint Advanced and Complete?
Complete includes everything in Advanced and adds full disk encryption and removable media encryption, managed from the same console. Advanced already includes EDR, threat hunting, sandboxing (Threat Emulation) and file sanitisation (Threat Extraction).
Does Harmony Endpoint include EDR?
Yes. EDR with automated forensics reports, MITRE ATT&CK mapping and threat hunting is included from Basic upwards. Cross-product XDR is part of Elite, or can be added to lower editions as an add-on.
Can I change edition part-way through?
Yes. Moving up is a licence and policy change on the same agent. Because we bill monthly on what is in use, the change shows on your next invoice rather than requiring a new contract.