Software blades, Smart-1 and Smart-1 Cloud, Israeli jurisdiction, life-cycle policy, exploit record, MSSP billing and where DLP runs, from Check Point's own documents, each with its source.
| Topic | Check Point — from their own documents | Zedmos |
|---|---|---|
| Licensing model | Quantum appliance plus a software-blade package (NGFW, NGTP or SNBT); the first-year purchase includes SNBT and renewals are bought for subsequent years. The Infinity Enterprise License Agreement is a per-user, per-year subscription across the portfolio; CloudGuard virtual gateways are bring-your-own-licence by core pool or pay-as-you-go in the cloud marketplace.Sources: Quantum 3600 datasheet · checkpoint.com: Infinity ELA · CloudGuard central license tool guide | Software, licensed per firewall. It installs as a package on the OPNsense or pfSense CE box you already run, or from an image as ZedmosOS on x86 hardware you own. No hardware in the licence. |
| Management console | Smart-1 appliances (up to 1,500 gateways, or 10,000 in a multi-domain configuration), Quantum management software on your own physical or virtual server, or Smart-1 Cloud as SaaS in the Check Point Portal (formerly Infinity Portal). Multi-Domain Security Management is the multi-tenant option, sold in domain packages. The portal's data region is chosen at account creation and cannot be changed afterwards.Sources: Check Point blog: Smart-1 appliances, May 2025 · Smart-1 Cloud admin guide: getting started · Multi-Domain Security Management datasheet · Check Point docs: data region on login | One console, multi-tenant from the first firewall. Run it as a container on your server under your domain, or use ours at console.zedmos.com, operated from Frankfurt, and move between the two without re-enrolling anything. |
| Jurisdiction | Check Point Software Technologies Ltd., Tel Aviv, Israel, listed on Nasdaq (CHKP), with US headquarters in California. Cloud services are contracted under Israeli law with exclusive jurisdiction of the Tel Aviv courts; hosting sub-processors are AWS, Microsoft Azure and Google in the US, the EU and other regions, and the data-processing addendum permits transfer outside the EEA under standard contractual clauses.Sources: Form 20-F · Check Point cloud terms · Check Point sub-processors list · Check Point customer DPA | A German company. A self-hosted console keeps firewall logs, personal data under the GDPR (CJEU C-582/14), in your own controllership. Our licence and threat-intelligence services run in Frankfurt. |
| Hardware lifecycle | Maintenance releases for three years after End of Sale; full TAC support and RMA for five years. Fourteen appliance models with End of Sale in December 2020, from the 3100 to the 23900, reached End of Support in December 2025; the 910 follows in August 2026.Sources: Check Point support life cycle policy | The support period is the software's: at least five years from placing on the market (CRA Art. 13(8)), published, and independent of any box. The hardware is yours to keep or replace. |
| Exploit record | 3 entries in the CISA Known Exploited Vulnerabilities catalogue (version 2026.09.11), 2 of them flagged for known ransomware use, naming Quantum Security Gateways, Security Gateway and SmartConsole. Two were added in 2026.Sources: CISA KEV — Check Point | 0 entries. Published, with our CRA class, an SBOM per release, the disclosure path and the support period, on a page that stays up whatever the number becomes. |
| MSP billing | The MSSP Program: consumption-based pricing with fixed, pay-as-you-go and tiered options, no upfront commitments or predefined bundles, paid in arrears and onboarded through distributors. No minimum commitment is published.Sources: checkpoint.com: MSP program · Check Point blog: MSSP program, November 2023 · TD Synnex: Check Point MSP | MSP tier: multi-tenant, unlimited firewalls, billed monthly in arrears on the month-end count. Your brand on the console and on the box. |
| AI and data loss prevention | ThreatCloud AI, a cloud threat-intelligence layer with 50+ AI engines, and Check Point AI Assist (formerly Infinity AI Copilot) across the Infinity Platform. Network DLP is a software blade in the Quantum gateway with 500+ predefined data types; Harmony DLP covers endpoint and browser from a central console.Sources: checkpoint.com: ThreatCloud AI · checkpoint.com: AI Assist · checkpoint.com: Quantum data loss prevention · Check Point blog: Harmony DLP, August 2024 | DLP and the AI gateway run on the box. 61 content detectors; prompts, uploads and files checked before they leave; the model that decides runs on your hardware. |
| Price changes, 2025–2026 | A subscription price increase in July 2025 and a 5 % product price increase effective 1 January 2026, per the CFO on the Q4 2025 earnings call.Sources: Q4 2025 earnings call transcript · Yahoo Finance, Q4 2025 results | No hardware in the price. The licence is not tied to an appliance list, so a hardware price change does not propagate into a renewal. |
| What Check Point has that Zedmos does not | A Leader in the 2025 Gartner Magic Quadrant for Hybrid Mesh Firewall, over 100,000 organisations protected, founded in 1993 and Nasdaq-listed, 2025 revenue of $2,725 million, Check Point Research with over 200 analysts, and worldwide technical assistance centres available 24×7.Sources: Check Point press release: Gartner Hybrid Mesh Firewall 2025 · Q4 and full-year 2025 results · Check Point Research: about | None of those. A small German vendor with a published exploit record, a console you own, and a licence that does not care which box it runs on. |
Check Point invented the commercial stateful firewall in 1993 and protects over 100,000 organisations; nothing on this page disputes that. The comparison is about how the two products are licensed, where they are managed from, under whose law, and what the public record says. Every claim on the left carries its source; if one is wrong, write to us and it will be corrected.
Checked: 2026-09-13
Zedmos is compared with Check Point above on licensing, management, jurisdiction, exploit record and what each is delivered as. Zedmos is software on hardware you own, managed from a console you host yourself or use hosted from Frankfurt, licensed per firewall, from a German vendor under EU law, with zero entries in the CISA Known Exploited Vulnerabilities catalogue. The last row of the table is what Check Point has that Zedmos does not.