Check Point Extended Detection and Response

Name: Check Point Extended Detection and Response
Brand: Check Point Software Technologies
Rating: 4.6 (232 reviews)

Leader

Customers rely on Lakera for real-time security that doesn’t slow down their GenAI applications.

Est 1993|Valuation $14.1B|Raised $1.8B

LinkedIn 11K|Website|Web traffic 2.0M|FTEs 6,825|HQ San Francisco, CA

MarketsSecurity Information and Event Management (SIEM)Endpoint Security (EPP/EDR)Security Orchestration, Automation, and Response (SOAR)

01Competitive Landscape

Narrative competitive analysis

- Against Microsoft Defender XDR: Check Point emphasizes cross-vendor correlation and prevention-oriented messaging. Microsoft’s advantage is the tight coupling across identity, email, and endpoint when customers are heavily invested in the Microsoft ecosystem, and procurement simplicity when organizations already license relevant Microsoft bundles. - Against Palo Alto Cortex XDR: Palo Alto often competes strongly where organizations have standardized on Palo Alto network and cloud security. Check Point’s competitive angle is unified prevention and response across the Infinity platform plus third-party telemetry ingestion. - Against CrowdStrike / SentinelOne: Those vendors may be preferred when endpoint is the primary anchor and the buyer prefers a single-agent-first operational model that expands integrations outward.

Competitor perspectives / positioning signals

CrowdStrike publishes some pricing information and provides trials for certain packages.
SentinelOne provides platform package information but usually requires partner engagement for final pricing.

	Check Point Infinity XDR/XPR	Microsoft Defender XDR	Palo Alto Cortex XDR
Starting Price	Quote-based / channel SKUs; some price-list hints exist but not authoritative	Often bundled with Microsoft 365 security licensing; otherwise sold via enterprise agreements (quote-based)	Quote-based; commonly tied to Cortex Data Lake and endpoint licensing
Best For	Organizations standardizing on Check Point ecosystem; hybrid tool estates wanting correlation and playbooks	Microsoft-centric enterprises (Entra ID, M365, Defender stack) seeking native integration	Palo Alto platform buyers (Strata/Prisma/Cortex ecosystem) prioritizing integrated SecOps
Key Strength	Vendor positions product on prevention-first messaging, ThreatCloud intelligence, ecosystem correlation, Playblocks automation	Tight integration across identity/email/endpoint/cloud within Microsoft	Integrated SOC workflows for Palo Alto customers; mature endpoint and analytics ecosystem
Key Weakness	Market mindshare relative to some platform-native XDR leaders may be lower; integration breadth and licensing complexity require validation	Less applicable if not invested in Microsoft stack; tuning and noise may be concerns	Often tied to Palo Alto footprint and data lake costs; complexity and expense possible

01Competitive Landscape

Narrative competitive analysis

Against Microsoft Defender XDR: Check Point emphasizes cross-vendor correlation and prevention-oriented messaging. Microsoft’s advantage is the tight coupling across identity, email, and endpoint when customers are heavily invested in the Microsoft ecosystem, and procurement simplicity when organizations already license relevant Microsoft bundles.
Against Palo Alto Cortex XDR: Palo Alto often competes strongly where organizations have standardized on Palo Alto network and cloud security. Check Point’s competitive angle is unified prevention and response across the Infinity platform plus third-party telemetry ingestion.
Against CrowdStrike / SentinelOne: Those vendors may be preferred when endpoint is the primary anchor and the buyer prefers a single-agent-first operational model that expands integrations outward.

Competitor perspectives / positioning signals

CrowdStrike publishes some pricing information and provides trials for certain packages.
SentinelOne provides platform package information but usually requires partner engagement for final pricing.

	Check Point Infinity XDR/XPR	Microsoft Defender XDR	Palo Alto Cortex XDR
Starting Price	Quote-based / channel SKUs; some price-list hints exist but not authoritative	Often bundled with Microsoft 365 security licensing; otherwise sold via enterprise agreements (quote-based)	Quote-based; commonly tied to Cortex Data Lake and endpoint licensing
Best For	Organizations standardizing on Check Point ecosystem; hybrid tool estates wanting correlation and playbooks	Microsoft-centric enterprises (Entra ID, M365, Defender stack) seeking native integration	Palo Alto platform buyers (Strata/Prisma/Cortex ecosystem) prioritizing integrated SecOps
Key Strength	Vendor positions product on prevention-first messaging, ThreatCloud intelligence, ecosystem correlation, Playblocks automation	Tight integration across identity/email/endpoint/cloud within Microsoft	Integrated SOC workflows for Palo Alto customers; mature endpoint and analytics ecosystem
Key Weakness	Market mindshare relative to some platform-native XDR leaders may be lower; integration breadth and licensing complexity require validation	Less applicable if not invested in Microsoft stack; tuning and noise may be concerns	Often tied to Palo Alto footprint and data lake costs; complexity and expense possible