Check Point - External Risk Management (Cyberint)

What do you like best about the product?

Really helpfull UI/UX, Multiple integrations , easy navigation. Pricing is competitive and didnt have a lot of performance issues. Support is reasonably fast.

What do you dislike about the product?

We had some false positives and we couldnt find a lot of phishing websites as well as some leaked credentials

What problems is the product solving and how is that benefiting you?

external surface monitoring , leaked credentials . It provides easy and fast way to find issues and leaked creds

What do you like best about the product?

The best part is its ability to identify impersonated domains and credential leakage. It also supports takedowns for impersonation across social media, including website impersonation.

What do you dislike about the product?

It looks great to me overall. The only weak point is related to an issue we already remediated, but it still triggers the same thing.

What problems is the product solving and how is that benefiting you?

This aligns with our business expectations and helps demonstrate that we can maintain control over blind spots, such as card data leakage, customer credential leakage, or employee credential leakage.

What do you like best about the product?

I highlight the scope it has for searching information within the Deep Web and the Dark Web, as well as the speed with which they respond to takedowns and provide specific observations.

What do you dislike about the product?

Perhaps the cost is higher compared to other tools, but it is offset by the quality of its operations.

What problems is the product solving and how is that benefiting you?

It helps us identify fake sites that impersonate our brand and conduct a proactive search for high-profile users in order to prevent spear phishing.

What do you like best about the product?

What I like best about Check Point Exposure Management is that it goes beyond simply identifying vulnerabilities and exposures. It combines threat intelligence, attack surface visibility, risk prioritization, validation, and remediation in a single workflow, helping security teams focus on the exposures that attackers are actually targeting rather than drowning in thousands of alerts.

What do you dislike about the product?

The least helpful aspect is that some of its broader features may not provide immediate value to every analyst, especially those focused mainly on internal vulnerability and threat management.

What problems is the product solving and how is that benefiting you?

Security teams are overwhelmed by thousands of vulnerabilities and alerts, making it difficult to determine what actually poses the highest risk to the organization.

Cyberint prioritizes exposures based on exploitability, threat intelligence, business impact, and attacker activity. It helps teams focus on the small percentage of risks that are most likely to result in a breach.

What do you like best about the product?

The External Attack Surface, its almost real time detection and alert to our assets

What do you dislike about the product?

The Forensic Canvas, I think need to enhance specially the result and sources

What problems is the product solving and how is that benefiting you?

Website infringement, sensitive data exposed on the internet, exposed vulnerability public facing

What do you like best about the product?

What we like most is how the exposure database connects directly to our vulnerability management and IPS workflow. Rather than chasing every new CVE as it drops, we use the platform to identify which vulnerabilities are actually relevant in our environment. With that context, we can update our IPS protections to focus on the threats that matter most, not just the loudest CVEs. This has significantly reduced the manual cross-referencing our team used to do between scan results and signature updates. Keeping asset and exposure data in one place also makes it much easier to explain to non-security teams why a specific patch or protection is being prioritized.

What do you dislike about the product?

Pipeline integration feels overly complex, and the pricing is high compared to alternative tools. The UI also has navigation limitations, especially when I need deeper drill-downs to find details quickly. On top of that, there’s no dedicated mobile application, which makes it harder to stay on top of things when I’m away from my desk.

What problems is the product solving and how is that benefiting you?

Before using this, our team spent a lot of time manually cross-referencing new CVE disclosures against our actual environment to figure out which ones mattered, then separately updating IPS signatures to cover them. That process was slow and easy to fall behind on. Now we use the exposure database to see which vulnerabilities are actually present and exploitable in our environment, and use that context to prioritize and update our IPS protections accordingly. It has cut down the manual work significantly and means we're patching and protecting against the threats that are actually relevant to us instead of chasing every CVE that gets published.

What do you like best about the product?

Check Point Exposure Management helps us prioritize risks based on actual exploitability and business impact rather than chasing endless vulnerability lists.

What do you dislike about the product?

Occasional False positive or non-relevant alerts regarding our brand.

What problems is the product solving and how is that benefiting you?

It helps us shift security from a reactive stance to an early prevention approach.

What do you like best about the product?

Most appreciated would be the people, the analysts, the tech specialists. No matter how good the technology already is, I always go back to being appreciative of the personal touch of the people behind it.

What do you dislike about the product?

Filing a support ticket takes extra steps, such as having to log in to a different platform first and then navigate from there to submit it.

What problems is the product solving and how is that benefiting you?

Brand protection, including phishing detection, has been a strong capability. The team also continues to be innovative and collaborative with us as new threat actor evasion techniques emerge, which helps ensure we maintain the best possible view of our threat landscape. In addition, their custom investigations are top-notch. They take regional threat contexts into account and work effectively within them, which is something I found lacking with other competitors.

What do you like best about the product?

Once you get it up and running (which is an easy deployment), and you reach the point where you trust it, you can truly set it and forget it for most use cases—especially if you don’t want to babysit it. The dashboards are informative, and it’s easy to configure.

What do you dislike about the product?

I’m a bit worried about prices going up. We really love the product, but there’s a limit to how much we can afford to spend on it.

What problems is the product solving and how is that benefiting you?

It works with our Checkpoint firewall and is constantly blocking threats automatically. It’s extremely good at avoiding false positives; I think we’ve only run into a few issues with that over the years. It also helps me rest easier knowing it’s always working in the background and continuing to refine and improve our overall security architecture, especially since we’re a small team and can’t afford to spend a lot of time focused on it.

What do you like best about the product?

I like the responsive customer service with Check Point Exposure Management. I also appreciate the IOC feeds because there's not just one feed; I can subscribe to many feeds. They onboarded the product and meet with me every month to review and discuss new features.

What do you dislike about the product?

Right now we're working out CPU utilization from certain configurations. Initial setup requires an on-premises VM and administrative access configurations.

What problems is the product solving and how is that benefiting you?

I use Check Point Exposure Management to manage IPS protections and IOC feeds. It saves me time, cost, and expertise in reviewing IPS defenses and network traffic.