In short: Check Point Harmony pricing is per unit on a subscription: usually per user or mailbox for Email Security and SASE, and per device for Endpoint and Mobile. Each product has tiers (Advanced, Complete and Elite for Endpoint; Advanced Protect and Complete Protect for email) plus optional add-ons. Price depends on quantity, tier and term, so ask us for a quote.
How Harmony is licensed
Every Harmony product is sold as a subscription. You choose the product, the edition (or tier) and the quantity of the unit it is licensed by, then a term or a monthly plan. The workspace products are delivered from Check Point's cloud, so for most deployments there is no hardware to buy.
| Product | Usual licensing unit | Editions or tiers | Details |
|---|---|---|---|
| Harmony Endpoint (Check Point Endpoint Security) | Per protected endpoint (workstation or server) | Advanced, Complete, Elite | Editions compared |
| Harmony Email & Collaboration (Check Point Email Security) | Per user (mailbox) | Email Only or Email & Collaboration coverage, each in Advanced Protect or Complete Protect | Plans compared |
| Harmony Mobile (Check Point Mobile Security) | Per mobile device | Ask us for current packages | Harmony Mobile |
| Harmony Browse (Check Point Browser Security) | Confirmed per quote; Endpoint editions already include browser protection | - | Harmony Browse |
| Harmony SaaS (Check Point SaaS Security) | Confirmed per quote; SaaS posture management is also sold as an email add-on | - | Harmony SaaS |
| Harmony SASE (Check Point SASE) | Per user | Internet Access and Private Access, separately or together | SASE pricing |
| Workforce AI Security | Confirmed per quote | Essentials (web apps) or Enterprise (web, desktop, MSP and IDEs) | Workforce AI Security |
| Check Point MDR | Service subscription scoped to your estate | MDR, MDR 360 and MXDR 360 packages | Check Point MDR |
Licensing units can vary by route to market (some monthly MSP plans count users rather than devices, for example), so we always confirm the unit, the minimum quantity and what counts as a user or device before you commit.
Editions, tiers and what they add
The biggest single factor after quantity is the tier. Higher tiers bundle capabilities that would otherwise be add-ons.
- Harmony Endpoint Advanced: prevention (anti-ransomware, anti-malware, anti-exploit, anti-bot), firewall, application control, remote access VPN, browser security, EDR, and sandboxing with threat extraction
- Harmony Endpoint Complete: Advanced plus full disk encryption and removable media encryption
- Harmony Endpoint Elite: Complete plus XDR for Endpoint (Check Point XDR/XPR, formerly Infinity XDR), posture management (vulnerability and patch management), DLP and GenAI security
- Email Advanced Protect: anti-phishing for incoming and internal email, anti-malware, URL protection with click-time rewriting, account takeover prevention, shadow IT detection, sandboxing and attachment sanitisation (CDR)
- Email Complete Protect: everything in Advanced Protect plus data loss prevention (DLP)
Older packages such as Endpoint Prevent and Basic, and the Avanan-era Email Protect and Email & Collaboration Protect, appear on some existing contracts. Check Point's current email plans page lists only Advanced Protect and Complete Protect, so a renewal is the time to move onto a current tier.
Add-ons
Add-ons are priced separately and usually follow the same unit as the product they extend.
| Product | Add-ons |
|---|---|
| Harmony Endpoint | XDR/XPR, Posture Management, DLP and GenAI Security, Vulnerability Management (several are included in Elite) |
| Harmony Email & Collaboration | Archiving (up to 10 years), Incident Response as a Service, DMARC Management, AI phishing and security awareness training, SaaS security posture management (Harmony SaaS), Leaked Credentials |
| Harmony SASE | Additional gateways and other options; see Harmony SASE pricing |
| Check Point Portal | SIEM event forwarding needs its own contract (log forwarding or log exporter) |
Annual terms and MSP monthly billing
There are two common ways to buy:
- Annual or multi-year subscription: a fixed quantity for a fixed term, invoiced up front or annually. You can usually add licences during the term
- Managed service provider (MSP) billing through the Check Point Portal: the portal supports pay-as-you-go contracts for accounts managed by a service provider. We provision your account under ours and bill you for what you use, typically monthly. This suits organisations whose headcount changes, or who want to start without a long commitment
Either way the product runs in your own Check Point Portal account. Check Point also offers a Platform License Agreement for organisations buying across network, cloud and workspace products; we can tell you whether that route is worth considering.
Factors that change the price
- The number of users, mailboxes or devices, and any minimum quantity
- Which product or products you choose, and whether you combine several
- The edition or tier (for example Endpoint Advanced versus Elite)
- Email coverage: Email Only versus Email & Collaboration
- Add-ons such as archiving, DMARC Management, XDR or SSPM
- Term length, and annual versus monthly MSP billing
- Whether you need managed services on top, such as Check Point MDR or our own support
- Data region: the Check Point Portal has regional hosting, including UK and EU options for some services, and we confirm availability per product and feature
How to get a quote
- Tell us what you want to protect: number of users, mailboxes, laptops, servers and phones, and whether you use Microsoft 365 or Google Workspace.
- We recommend products and tiers, and flag anything already covered (for example, every Harmony Endpoint edition includes browser protection, so you may not need Harmony Browse as well).
- We confirm licensing units, data region and term options.
- You receive a written quote listing every product, tier and add-on, and can start with a trial or proof of value if you prefer.
We do not publish prices on this site because they depend on the factors above and change over time. Contact us and ask us for a quote.
How Forever Systems supplies and supports Check Point Harmony
We supply and support the whole Check Point Harmony suite, now marketed as Check Point Workspace Security, for UK organisations: from a single product to endpoint, email, SaaS, mobile, browser and SASE together, with Check Point MDR if you want round-the-clock cover.
- Scoping and licensing: the right products, editions and plans for your users, devices and risk, and a clear view of what the old Harmony names now mean
- Proof of value: trial deployments that show what Harmony finds in your own mailboxes, devices and traffic
- Deployment: endpoint agents and policies, the Microsoft 365 or Google Workspace connection, mobile roll-out through your MDM, browser extensions and SASE access policies
- Migration: moving from another endpoint, email or VPN product, or from Harmony Connect to Harmony SASE
- Ongoing support: policy tuning, alert triage, upgrades and renewals, managed in the Check Point Portal
Forever Systems Ltd is an independent IT and cyber security provider. We will always recommend what fits, including other options if Harmony is not right for you.
Want a Check Point Harmony quote, trial or renewal review?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
How much does Check Point Harmony cost?
It depends on the product, edition, quantity and term. Harmony Endpoint is usually priced per device, Harmony Email and Collaboration and Harmony SASE per user, and add-ons cost extra. Check Point does not publish a UK price list on its website, so ask us for a quote based on your numbers.
Is Harmony Endpoint licensed per user or per device?
Harmony Endpoint is normally licensed per protected endpoint, meaning each workstation or server running the agent. Some monthly MSP plans count users instead, and servers may be quoted separately, so we confirm the unit on your quote.
Can I pay for Check Point Harmony monthly?
Yes, for many products. The Check Point Portal supports pay-as-you-go contracts for accounts run by a managed service provider, so we can provision your account and bill monthly for what you use. Annual and multi-year subscriptions are also available.
What is the difference between Advanced, Complete and Elite?
They are the Harmony Endpoint editions. Advanced covers prevention, EDR and sandboxing; Complete adds full disk and removable media encryption; Elite adds XDR for Endpoint, posture management, DLP and GenAI security.
Is there a free trial of Check Point Harmony?
Yes, for most products. Check Point offers free trials of Endpoint Security, Email Security (14 days), Browser Security and SaaS Security, and Mobile Security starts with a 30-day trial in the portal. We set trials up in your own Check Point Portal account so you can see what each product finds before you buy.