In short: Check Point Workforce AI Security discovers which AI tools, agents, browser extensions, code assistants and MCP servers staff use, sets access policies for them, and applies contextual DLP to prompts, uploads and files, including redaction and blocking of risky agent actions. It deploys as a browser extension, with a desktop agent option, in Essentials and Enterprise tiers.
What is Workforce AI Security?
Staff are using generative AI whether or not it has been approved: public chat tools, AI features inside SaaS apps, browser extensions, coding assistants and, increasingly, AI agents that act on their behalf. Workforce AI Security gives security teams sight of that use and control over it. It sits in Check Point's AI Security pillar, one of the four pillars Check Point introduced in March 2026 (see our Workspace Security naming guide).
Check Point organises it around three jobs:
- Discover: see every AI tool, agent and action across web and desktop apps, SaaS integrations, browser extensions, code assistants, AI agents and MCP servers, with insight into who is using what and what data is flowing
- Govern: set access and security policies for each AI app, sanctioned or shadow, including SaaS integrations, agent actions, data types and user behaviour
- Protect: stop sensitive data leaking with contextual DLP, inline prompt protection, file and image redaction (with OCR) and runtime controls that block risky agent actions
Check Point says the aim is to let people adopt AI safely rather than block it outright.
How it works
Workforce AI Security deploys as a lightweight browser extension, which covers AI used on the web without network changes. For AI used outside the browser, such as desktop AI apps and agents, a desktop agent extends coverage to the device.
Once deployed, it:
- Builds an AI app catalogue of the tools in use across the organisation, with risk scoring, adoption trends and session-level visibility, so you can see shadow AI as well as approved tools.
- Classifies content and intent in prompts, uploads and attachments using AI-based analysis, rather than relying only on keywords, to recognise personal data, credentials, source code and financial information.
- Enforces policy inline: allowing, warning, redacting sensitive data from prompts, restricting copy and paste, redacting text in files and images, or blocking an action.
- Guides users with prompts explaining why something was redacted or blocked, so they learn the policy as they work.
- Controls agents at runtime, blocking risky actions by AI agents and MCP-connected tools rather than just logging them.
Check Point's examples of covered tools include ChatGPT, Gemini, Claude and Copilot, and coding assistants such as GitHub Copilot and Cursor.
Essentials and Enterprise tiers
Check Point offers two tiers:
| Essentials | Enterprise | |
|---|---|---|
| Coverage | AI used through web applications | Web, desktop, IDEs and MSP use |
| Deployment | Browser extension | Browser extension plus desktop agent |
| Typical fit | Organisations whose AI use is mainly browser-based chat and SaaS AI features | Organisations with developers using coding assistants, desktop AI apps or AI agents |
Detailed feature differences between the tiers change as the product develops, so we confirm current entitlements when we scope. Pricing depends on how many people it covers, the tier and the term: ask us for a quote, and see our Harmony pricing and licensing guide for how Check Point subscriptions work.
Background: GenAI Protect and Lakera
Workforce AI Security builds on earlier work at Check Point:
- GenAI Protect added generative AI controls to the DLP policies of Harmony Browse and Harmony Endpoint in 2024, detecting and preventing confidential data being shared in prompts. It remains part of those products, and endpoint DLP and GenAI security are included in Harmony Endpoint Elite.
- Lakera: on 16 September 2025 Check Point announced an agreement to acquire Lakera, an AI-native security company, to add runtime protection for AI applications and agents.
So if you already have Browse or Endpoint, you may have some GenAI controls today. Workforce AI Security is the broader product, adding discovery and control of desktop AI, coding tools, agents and MCP servers.
UK GDPR and AI use
When an employee pastes customer details into a public AI tool, your organisation may be disclosing personal data to a third party without a lawful basis, a suitable contract or a data protection impact assessment. Under UK GDPR your organisation, as the controller, is accountable for that processing and must be able to show how it complies. The Information Commissioner's Office has published guidance on AI and data protection that is worth reading alongside your AI policy.
Workforce AI Security helps in three practical ways:
- Evidence: an inventory of which AI tools are used, by whom, supports your records of processing and risk assessments
- Prevention: redaction and blocking stop personal data reaching unapproved tools in the first place
- Policy in practice: approved tools can be allowed while unapproved ones are restricted, so your AI policy is enforced rather than just published
Technology works best alongside training. Our sister site covers GDPR training for staff.
Who it suits and how we help
Workforce AI Security suits organisations that have adopted, or are about to adopt, Microsoft Copilot, ChatGPT or similar tools and need to show regulators, clients or the board that AI use is under control. It also suits software teams where coding assistants and AI agents have access to source code and systems.
Forever Systems runs a discovery phase first so you can see your real AI use, then helps you write policy, configure redaction and blocking, deploy the extension and agent, and review the results with you. If you want broader SaaS governance too, see Harmony SaaS. Contact us to discuss a trial.
How Forever Systems supplies and supports Check Point Harmony
We supply and support the whole Check Point Harmony suite, now marketed as Check Point Workspace Security, for UK organisations: from a single product to endpoint, email, SaaS, mobile, browser and SASE together, with Check Point MDR if you want round-the-clock cover.
- Scoping and licensing: the right products, editions and plans for your users, devices and risk, and a clear view of what the old Harmony names now mean
- Proof of value: trial deployments that show what Harmony finds in your own mailboxes, devices and traffic
- Deployment: endpoint agents and policies, the Microsoft 365 or Google Workspace connection, mobile roll-out through your MDM, browser extensions and SASE access policies
- Migration: moving from another endpoint, email or VPN product, or from Harmony Connect to Harmony SASE
- Ongoing support: policy tuning, alert triage, upgrades and renewals, managed in the Check Point Portal
Forever Systems Ltd is an independent IT and cyber security provider. We will always recommend what fits, including other options if Harmony is not right for you.
Want a Check Point Harmony quote, trial or renewal review?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
What is Check Point Workforce AI Security?
It is Check Point's product for securing employee use of AI. It discovers AI tools, agents, browser extensions, coding assistants and MCP servers in use, applies access policies to them, and uses contextual DLP to redact or block sensitive data in prompts, uploads and files.
How is Workforce AI Security deployed?
Through a lightweight browser extension, which covers AI used on the web without network changes. A desktop agent extends coverage to desktop AI apps and agents. The Enterprise tier covers web, desktop, MSP and IDE use; Essentials covers web applications.
Does Workforce AI Security block ChatGPT?
It can, but the usual approach is to allow approved AI tools and control what goes into them. It can redact personal data or source code from prompts, restrict copy and paste, warn users, and block unapproved or high-risk tools and agent actions.
What is the difference between Workforce AI Security and GenAI Protect?
GenAI Protect is a DLP feature in Harmony Browse and Harmony Endpoint that stops confidential data being shared in AI prompts in the browser. Workforce AI Security is a broader product that also discovers and controls desktop AI apps, coding assistants, AI agents and MCP servers.
Does Workforce AI Security help with UK GDPR?
It helps you meet your accountability duties by showing which AI tools are in use and stopping personal data reaching unapproved ones. It supports, but does not replace, your AI policy, data protection impact assessments and staff training.
How much does Check Point Workforce AI Security cost?
It is sold as a subscription in Essentials or Enterprise tiers, so the cost depends on how many people it covers, the tier and the term. Ask us for a quote.