In short: Harmony Email security awareness training is an add-on to Check Point Email Security (Harmony Email and Collaboration). It uses generative AI to build phishing simulations based on real attacks aimed at your organisation, targets the users and departments attacked most, follows up with people who fall for a test and includes a library of training modules.
What the add-on includes
Check Point sells Security Awareness Training as an add-on to Harmony Email and Collaboration, now officially Check Point Email Security. Its plans page also lists an AI Phishing Training add-on that generates role-based phishing simulations; we will confirm which training add-on and features apply to your tenant. The main elements Check Point describes are:
| Element | What it does |
|---|---|
| AI-generated simulations | Uses generative AI to create simulated phishing emails modelled on attacks actually aimed at your organisation |
| Simulations by attack type | Lets you choose the attack style, from QR code phishing and business email compromise to internal attacks and executive impersonation |
| Role-based targeting | Prioritises the departments and users who are attacked most, and lets you customise the attack type, sender and other details |
| Re-engagement | Follows up with users who fall for a simulation with targeted emails |
| Training library | A library of training material and videos for wider education |
| Customisable training | Lets you tailor the training content to your organisation's needs |
Why training from inside the email security product helps
Many standalone awareness platforms send simulations from outside your tenant. That often means allow-listing their servers, adjusting filtering rules and testing that the emails arrive, and the scenarios come from a generic template library.
Because this add-on sits inside Check Point Email Security, it has two advantages:
- Relevance. The product already sees the phishing that targets your users, so simulations can mirror the lures, senders and themes your people are really getting, rather than a generic parcel-delivery template.
- Less set-up. Check Point's plans page describes its AI phishing training as generating simulations with zero configuration or deliverability issues.
The result is training that matches today's threats in your own inbox, which tends to feel more credible to staff.
Where it fits in a wider awareness programme
An add-on inside your email security product is a strong, practical way to run phishing simulations. It is not the whole of a security culture programme. Depending on your sector and risk, you may also want:
- Broader topics such as passwords, social engineering, remote working and data handling
- Formal, scheduled courses with completion tracking for compliance or audits
- Policy acknowledgements and sector-specific modules
If you need a full learning platform, our sister site compares the options in choosing security awareness training software and explains how phishing simulation works in general. Many organisations use the Check Point add-on for realistic simulations and keep a separate platform for structured courses; others find the add-on enough.
Running a simulation programme that works
The tooling is the easy part. What makes phishing simulation change behaviour is how you run it:
- Tell staff it is happening. Explain the purpose: practice, not punishment. Surprise is fine for individual tests, but the programme itself should not be secret.
- Start with a baseline. Run a first round across the organisation so you know where you are starting from.
- Target by risk. Use role-based targeting to focus on finance, HR, executives and anyone who handles payments or personal data, since these are the people attackers aim at.
- Mirror real attacks. Use the attack types your organisation is actually seeing, such as QR code lures or supplier invoice fraud, rather than the same template every month.
- Follow up quickly. Send short, relevant training to people who click, while the lesson is fresh, using the re-engagement emails and training library.
- Celebrate reporting. Measure and praise people who report simulations, not only those who avoid clicking.
- Review and repeat. Look at trends each quarter and adjust targets and scenarios.
We avoid naming and shaming individuals in results. It discourages reporting, which is the behaviour you need most when a real attack gets through.
The UK angle
UK GDPR requires appropriate technical and organisational measures to protect personal data, and the Information Commissioner's Office's security guidance treats staff awareness and training as part of those measures. The NCSC's phishing guidance also recommends a layered defence in which people are trained to spot and report suspicious messages, rather than blamed for clicking.
That last point matters. A simulation programme works best when reporting is easy and welcomed. Pair training with a simple report button and, if your IT team is small, the Incident Response as a Service add-on so that every report gets a quick answer.
Licensing and how we help
Security Awareness Training is licensed as an add-on to Harmony Email and Collaboration, alongside Advanced Protect or Complete Protect. The Harmony pricing guide explains how add-ons affect the cost.
Forever Systems can:
- Agree goals and target groups with you, such as finance, HR and executives
- Enable the add-on and plan a schedule of simulations by attack type
- Communicate the programme to staff so that reporting is encouraged
- Review results with you and assign training to the people who need it
Contact us for a quote.
How Forever Systems supplies and supports Check Point Harmony
We supply and support the whole Check Point Harmony suite, now marketed as Check Point Workspace Security, for UK organisations: from a single product to endpoint, email, SaaS, mobile, browser and SASE together, with Check Point MDR if you want round-the-clock cover.
- Scoping and licensing: the right products, editions and plans for your users, devices and risk, and a clear view of what the old Harmony names now mean
- Proof of value: trial deployments that show what Harmony finds in your own mailboxes, devices and traffic
- Deployment: endpoint agents and policies, the Microsoft 365 or Google Workspace connection, mobile roll-out through your MDM, browser extensions and SASE access policies
- Migration: moving from another endpoint, email or VPN product, or from Harmony Connect to Harmony SASE
- Ongoing support: policy tuning, alert triage, upgrades and renewals, managed in the Check Point Portal
Forever Systems Ltd is an independent IT and cyber security provider. We will always recommend what fits, including other options if Harmony is not right for you.
Want a Check Point Harmony quote, trial or renewal review?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Does Harmony Email and Collaboration include phishing simulation?
Phishing simulation comes with the Security Awareness Training add-on, not the core tiers. It creates AI-generated simulations based on real attacks against your organisation and includes a training library.
What types of phishing can the simulations mimic?
Check Point lists simulations by attack type, including QR code phishing, business email compromise, internal attacks and executive phishing. You can also customise the sender and other details.
Do I need to allow-list anything for Check Point phishing simulations?
Check Point's plans page describes its AI phishing training as generating simulations with zero configuration or deliverability issues. We will confirm the set-up for your tenant.
Is Check Point's add-on a replacement for a full security awareness platform?
For many smaller organisations it is enough. If you need broad course libraries, formal completion tracking or policy sign-off, you may want a dedicated platform as well. We can advise on the right mix.