In short: Check Point Workspace Security is the pillar that replaced the Harmony brand in March 2026. It groups Check Point Endpoint Security, Email Security, Mobile Security, Browser Security and SaaS Security. Check Point presents it as a change of names: same products, same portal. SASE now sits under Hybrid Mesh Network Security and Workforce AI Security under AI Security.
What changed in March 2026
Check Point reorganised its whole product range into four pillars and took "Harmony" out of the official product names. A Check Point blog post on 17 March 2026 introduced the four pillars and explained that the management portal menu was being regrouped to match. On 25 March 2026 a second post announced that Harmony Email & Collaboration is now Check Point Email Security, describing the new name as aligned with the company's AI-driven strategy and referring to the Check Point Portal as "formerly Infinity Portal". Other product names followed; the Harmony Browse admin guide, for example, records on 23 April 2026 that Harmony Browse is now referred to as Check Point Browser Classic.
The four pillars, as they appear on checkpoint.com, are:
| Pillar | What it covers |
|---|---|
| Hybrid Mesh Network Security | Data centre, branch, SMB and industrial firewalls, SD-WAN, remote access VPN, security management, cloud firewalls, cloud virtual WAN, WAF and DDoS protection, and SASE (Private Access, Internet Access, Enterprise Browser) |
| Workspace Security | Endpoint, Email & Collaboration, Mobile, Browse and SaaS: the former Harmony products |
| Exposure Management | Threat intelligence, exposure prioritisation, cyber asset attack surface management, safe remediation and ThreatCloud AI |
| AI Security | Workforce AI Security, AI red teaming and AI agent security |
So "Workspace Security" is not one product. It is the umbrella for the products that protect people and their devices, the same job the Harmony brand did.
Old name to new name
| Name most people know | Current official name | Earlier names |
|---|---|---|
| Harmony Endpoint | Check Point Endpoint Security | SandBlast Agent |
| Harmony Email & Collaboration | Check Point Email Security | Harmony Email & Office; technology from Avanan |
| Harmony Mobile | Check Point Mobile Security | SandBlast Mobile |
| Harmony Browse | Check Point Browser Security on checkpoint.com; Check Point Browser Classic in the admin guide | - |
| Harmony SaaS | Check Point SaaS Security | - |
| Harmony SASE | Check Point SASE | Perimeter 81 |
| Infinity Portal | Check Point Portal | - |
| Harmony Connect | Listed as Workspace Security Connect in the life cycle policy: end of sale, succeeded by Check Point SASE | - |
Check Point's own pages are not yet perfectly consistent. The product menu on checkpoint.com uses short labels such as "Email & Collaboration", "Endpoint", "Mobile", "Browse" and "SaaS", product pages use the full new names, and some pages and older datasheets still say Harmony. Community posts, distributor catalogues and third-party listings will use the Harmony names for some time. If a document mentions either name, it is the same product.
What has not changed
- Functionality: Check Point's Email Security announcement says the product continues to deliver the same protection against phishing, malware, account takeover and advanced email threats, and the Browser Classic admin guide records the rename with no functional changes
- Access: you sign in to the same Check Point Portal account. Check Point's announcement says access to Email Security is unchanged, with the product listed under a Workspace Security section of the portal's product launcher
- Your subscriptions: Check Point's announcements do not ask customers to migrate or re-license because of the new names. Renewal quotes use the current product names
- Editions: Harmony Endpoint is still sold as Advanced, Complete and Elite, and email as Advanced Protect and Complete Protect
The visible change is in the console (product tiles and headings), on quotes over time, and in documentation titles. The Mobile admin guide, for example, is now the Check Point Mobile Security Administration Guide, and the portal guide is the Check Point Portal Administration Guide.
Where SASE, AI security and cloud security now sit
Two products that used to be marketed alongside Harmony now live in other pillars:
- Check Point SASE (Harmony SASE) is listed under Hybrid Mesh Network Security, next to firewalls, SD-WAN and remote access VPN, which reflects that it is as much a network access product as a user one. We still cover it on this site: see Harmony SASE
- Workforce AI Security is in the AI Security pillar, alongside AI red teaming and AI agent security. It discovers, governs and protects employee use of AI tools. See Workforce AI Security
- Cloud network security (cloud firewalls, cloud virtual WAN, WAF and DDoS protection) is under Hybrid Mesh Network Security. It is not part of Harmony; for the general topic see cloud firewalls and cloud security posture management on our sister site
- ThreatCloud AI is grouped under Exposure Management, with threat intelligence, exposure prioritisation, cyber asset attack surface management and safe remediation. See ThreatCloud AI
A short history of the names
- SandBlast was Check Point's original brand for threat emulation and extraction, used for SandBlast Agent (endpoint) and SandBlast Mobile.
- Check Point Harmony brought the user-facing products together under one name: Harmony Endpoint, Harmony Mobile, Harmony Browse and Harmony Connect.
- Avanan was acquired in 2021, and its API-based email technology was sold as Harmony Email & Office, later Harmony Email & Collaboration.
- Perimeter 81 was acquired in 2023 and became Harmony SASE, the successor to Harmony Connect, which reached end of sale in November 2023.
- Harmony SaaS launched in March 2024, building on Atmosec, a SaaS security company Check Point acquired in 2023.
- March 2026: the Harmony brand was retired in favour of the four-pillar structure and the current product names, with further guide and portal renames rolling out over the following weeks.
What existing customers should do
Nothing urgent. Keep your current portal account, agents and policies. At your next renewal, expect the quote to use the new product names; check that the edition and quantities match what you had, because the rename is a good moment to spot shelfware or gaps. If you have been putting off a review of whether you are on the right Harmony Endpoint edition or email plan, do it then.
We can review your Check Point Portal account, map what you own to the new names and tell you what (if anything) is worth changing. Contact us for a renewal review or a quote, or see the pricing and licensing guide.
How Forever Systems supplies and supports Check Point Harmony
We supply and support the whole Check Point Harmony suite, now marketed as Check Point Workspace Security, for UK organisations: from a single product to endpoint, email, SaaS, mobile, browser and SASE together, with Check Point MDR if you want round-the-clock cover.
- Scoping and licensing: the right products, editions and plans for your users, devices and risk, and a clear view of what the old Harmony names now mean
- Proof of value: trial deployments that show what Harmony finds in your own mailboxes, devices and traffic
- Deployment: endpoint agents and policies, the Microsoft 365 or Google Workspace connection, mobile roll-out through your MDM, browser extensions and SASE access policies
- Migration: moving from another endpoint, email or VPN product, or from Harmony Connect to Harmony SASE
- Ongoing support: policy tuning, alert triage, upgrades and renewals, managed in the Check Point Portal
Forever Systems Ltd is an independent IT and cyber security provider. We will always recommend what fits, including other options if Harmony is not right for you.
Want a Check Point Harmony quote, trial or renewal review?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
What is Check Point Workspace Security?
Check Point Workspace Security is one of the four pillars Check Point introduced in March 2026. It contains the products formerly sold under the Harmony brand: Endpoint Security, Email Security, Mobile Security, Browser Security and SaaS Security. Harmony SASE moved to the Hybrid Mesh Network Security pillar.
What is Harmony Endpoint called now?
Harmony Endpoint is now officially Check Point Endpoint Security. It was originally called SandBlast Agent. The agent, editions and management are unchanged.
What is Harmony Email and Collaboration called now?
Since 25 March 2026 it has been Check Point Email Security. Earlier it was sold as Harmony Email & Office, and its technology comes from Avanan, which Check Point acquired in 2021.
Do I need new licences because of the rename?
No. Check Point presents the change as a new name for the same products, with the same protection and the same portal access, and its announcements do not ask customers to re-license. Renewal quotes simply use the new product names. We check your renewal matches what you had.
What are Check Point's four pillars?
Hybrid Mesh Network Security (firewalls, SD-WAN, cloud network security and SASE), Workspace Security (endpoint, email, mobile, browser and SaaS), Exposure Management (threat intelligence, ThreatCloud AI, attack surface management) and AI Security (including Workforce AI Security).
Is the Infinity Portal still called the Infinity Portal?
No. It is now the Check Point Portal; Check Point's March 2026 Email Security announcement refers to it as the Check Point Portal, formerly Infinity Portal. It is the same console and the same sign-in.