Check Point

For other uses, see Checkpoint (disambiguation).

Check Point Software Technologies Ltd.

We Secure the Future
200px Check Point headquarters, Tel Aviv, Israel
Type	Public NASDAQ-100 component
Traded as	NASDAQ: CHKP
Industry	Security software Computer hardware
Founded	Ramat Gan, Israel (1993 (1993))
Founders	Gil Shwed Marius Nacht Shlomo Kramer
Headquarters	Tel Aviv, Israel and San Carlos, California
Key people	Gil Shwed, (Founder & CEO)
Products	FireWall-1, VPN-1, UTM-1, Check Point Integrity, Intrusion prevention systems, Endpoint, security, Security appliances, Web Application Security
Revenue	US$ $1,629.84 million (2015)
Net income	US$ $685.87 million (2015)
Number of employees	3,400 (2015)
Subsidiaries	ZoneAlarm, SofaWare, Easy2comply
Website	www.checkpoint.com

Check Point Software Technologies Ltd. is an international provider of software and combined hardware and software products for IT security, including network security, endpoint security, data security and security management.

As of 2014 the company had approximately 2,900 employees worldwide. Headquartered in Tel Aviv, Israel, the company has development centers in Israel, California (ZoneAlarm), Sweden (Former Protect Data development centre), and Belarus. The company has main offices in the United States, in San Carlos, California, in Dallas, Texas, in Ottawa, Ontario, Canada, and Sydney Australia.

Check Point competes in the antivirus industry against AVG, Avira, ESET, F-Secure, Kaspersky, McAfee, Panda Security, Sophos and Symantec among others.

History

Check Point was established in Ramat-Gan, Israel in 1993, by Gil Shwed (CEO as of 2015), Marius Nacht (Chairman as of 2015) and Shlomo Kramer (who left Check Point in 2003). Shwed had the initial idea for the company’s core technology known as stateful inspection, which became the foundation for the company's first product, FireWall-1; soon afterwards they also developed one of the world’s first VPN products, VPN-1. Shwed developed the idea while serving in the Unit 8200 of the Israel Defense Forces, where he worked on securing classified networks.

Initial funding of US$400,000 was provided by venture capital fund BRM Group.

In 1994 Check Point signed an OEM agreement with Sun Microsystems, followed by a distribution agreement with HP in 1995. The same year, the U.S. head office was established in Redwood City, California.

By February 1996 the company was named worldwide firewall market leader by IDC, with a market share of 40 percent. In June 1996 Check Point raised $67 million from its initial public offering on NASDAQ.

In 1998 Check Point established a partnership with Nokia, which bundled Check Point's Software with Nokia's computer Network Security Appliances.

In 2003, a class action lawsuit was filed against Check Point over violation of the Securities Exchange Act by failing to disclose major financial information.

During the first decade of the 21st century Check Point started acquiring other IT security companies, including Nokia's network security business unit in 2009.

Over the years many employees who worked at Check Point have left to start their own software companies. These include Shlomo Kremer who started Imperva, Nir Zuk who founded Palo Alto Networks, Ruvi Kitov and Reuven Harrison of Tufin and Yonadav Leitersdorf.

Products

Check Point offers the following primary products:

• Network Security – Check Point's core business has historically focused on network security components including Firewall, IPsec VPN, Mobile Access, Intrusion Prevention, Antivirus, Anti-spam and Email security, URL filtering, Data Loss Prevention, Anti-Bot and Application Control. Check Point provides these components as individual products called Software Blades or combined in one of their bundle offerings: Next Generation Firewall (NGFW), Next Generation Threat Prevention (NGTP), Next Generation Data Protection (NGDP) and Next Generation Secure Web Gateway (NGSWG). These products are deployed as software on x86-based hardware made by third parties including BlueCoat (formerly Crossbeam), Hewlett-Packard, IBM, Fujitsu, or by Check Point.
• Software Defined Protection – Software-defined protection enables organizations to design and deploy a modern security infrastructure that is modular, flexible, secure, and is applicable across networks, hosts, and mobile and cloud environments. Software-defined protection describes enterprise security architecture in the context of three inter-connected layers, the Enforcement Layer, the Control Layer, and the Management Layer.
• Public and Private Cloud Security – Check Point Virtual Appliance for Amazon Web Services protects Amazon public cloud with Check Point software blade protections. The Security Gateway Virtual Edition product protects private clouds and virtual environments. It runs on VMware ESXi servers and inspects traffic between virtual machines and hosts by integrating with the hypervisor using VMWare NetX API. Check Point also integrates with OpenStack to defend the emerging cloud infrastructure against threats.
• Data Security – VPNs, access controls, and the DLP security gateway secure data-in-motion and data-in-use. Check Point Document Security protects data-in-use. Full Disk Encryption, Media Encryption and Port Control secure data-at-rest on endpoints.
• ThreatCloud – Released April 2012, ThreatCloud® is a collaborative network to share security intelligence between organizations all over the world. ThreatCloud collects its data from a global network of security enforcement points, research, community feeds and other industry feeds. By sharing information between organizations globally, ThreatCloud provides immediate protection to all organizations as soon as a new attack gets detected. To date, ThreatCloud has 250 million+ addresses analyzed for bot discovery, created 11million malware signatures, and detected 3 million+ malware-infested sites. Data collected and analyzed by ThreatCloud is automatically distributed as security protections on subscribed customers’ security gateways.
• ThreatCloud IntelliStore – Released May 2014, ThreatCloud® IntelliStore is a marketplace that provides access to a wide variety of threat intelligence data that can be selected according to an organizations’ needs. Some of the vendors that provide threat intelligence to ThreatCloud IntelliStore today include, iSIGHT, CrowdStrike, IID, NetClean, PhishLabs, SenseCy and ThreatGRID. Using the ThreatCloud infrastructure, threat data from the intelligence store gets passed on the security gateways in real-time as well.
• Virtual Systems – Check Point’s Virtual Systems technology enables consolidation of up to 250 security gateways into one single hardware platform. Virtual Systems can be deployed on any gateway or can be pre-configured and packaged on Check Point Virtual System Appliances.
• Endpoint Security – a single security agent that combines firewall, antivirus, anti-spyware, full disk encryption, removable media encryption, protection of I/O ports such as USB, network access control, and a VPN client. The security policies for networked endpoints can be centrally managed from a single location via the Endpoint Policy Management Software Blade product.
• Mobile Security – Check Point Mobile Access software provides secure access to corporate resources via a SSL VPN portal for devices such as laptops, mobile phones, and tablet PCs.
• Security Management – Allows administrators to manage events, set policy and apply protections across the entire security infrastructure from a single interface. Based on the Software Blade architecture, with 11 management software blades including event analysis, correlation, multi-domain security management, and device provisioning. a good access point

Acquisitions

• SofaWare Technologies, in January 2002 (partial acquisition).
• Zone Labs, makers of the ZoneAlarm personal firewall software, in 2003, for $205 million in cash and shares.
• Protect Data, the holding company for PointSec Mobile Technologies, in a cash deal valued at $586m in late 2006. Prior to their acquisition by Check Point, Protect Data acquired Reflex Software.
• NFR security, an intrusion prevention system developer, for $20 million in late 2006, following its failed plan to acquire the larger IPS vendor Sourcefire.
• Nokia Security Appliances division was acquired in April 2009.
• Liquid Machines, a data security startup company based in Boston, was acquired in June 2010.
• Dynasec, a provider of enterprise governance, risk management, and compliance products, was acquired in November 2011. Dynasec offers a Web-based enterprise application, branded as Easy2comply, for Sarbanes-Oxley compliance, Basel II compliance, operational risk management, information security management, HIPAA compliance, and internal audit management.
• Hyperwise, an early-stage startup, focused on CPU Level Threat Prevention was acquired Feb 2015.
• Lacoon Mobile Security was acquired in April 2015.

In 2005, Check Point tried to acquire intrusion prevention system developers Sourcefire for $225 million, but later withdrew its offer after it became clear US authorities (C.F.I.U.S) would try to block the acquisition.

SofaWare legal battle

SofaWare Technologies was founded in 1999, as a cooperation between Check Point and SofaWare's founders, Adi Ruppin and Etay Bogner, with the purpose of extending Check Point from the enterprise market to the small business, consumer and branch office market. SofaWare's co-founder Adi Ruppin said that his company wanted to make the technology simple to use and affordable, and to lift the burden of security management from end users while adding some features. In 2001 SofaWare began selling firewall appliances under the SofaWare S-Box brand; in 2002 the company started selling the Safe@Office and Safe@Home line of security appliances, under the Check Point brand. By the fourth quarter of 2002 sales of SofaWare's Safe@Office firewall/VPN appliances had increased greatly, and SofaWare held the #1 revenue position in the worldwide firewall/VPN sub-$490 appliance market, with a 38% revenue market share.

Relations between Check Point and the SofaWare founders went sour after the company acquisition in 2002. In 2004 Etay Bogner, co-founder of SofaWare, sought court approval to file a shareholder derivative suit, claiming Check Point was not transferring funds to SofaWare as required for its use of SofaWare's products and technology. His derivative suit was ultimately successful, and Check Point was ordered to pay SofaWare 13 million shekels for breach of contract. In 2006 the Tel Aviv District Court Judge ruled that Bogner SofaWare could sue Check Point by proxy for $5.1 million in alleged damage to SofaWare. Bogner claimed that Check Point, which owned 60% of Sofaware, had behaved belligerently, and withheld monies due for use of SofaWare technology and products Check Point appealed the ruling, but lost.

In 2009 the Israeli Supreme Court ruled that a group of founders of SofaWare, which includes Bogner, had veto power over any decision of SofaWare. The court ruled that the three founders could exercise their veto power only as a group and by majority rule.

In 2011 Check Point settled all litigation relating to SofaWare. As part of the settlement it acquired the SofaWare shares held by Bogner and Ruppin, and began a process of acquiring the remaining shares, resulting in SofaWare becoming a wholly owned subsidiary.

See also

• ZoneAlarm
• VPN-1
• Check Point GO
• Silicon Wadi

External links

• Corporate website
• Check Point on Google Finance