Check Point - External Risk Management (Cyberint)

What do you like best about the product?

The External Attack Surface, its almost real time detection and alert to our assets

What do you dislike about the product?

The Forensic Canvas, I think need to enhance specially the result and sources

What problems is the product solving and how is that benefiting you?

Website infringement , sensitive data exposed in the internet, exposed vulnerability public facing

What do you like best about the product?

What we like most is how the exposure database connects directly to our vulnerability management and IPS workflow. Rather than chasing every new CVE as it drops, we use the platform to identify which vulnerabilities are actually relevant in our environment. With that context, we can update our IPS protections to focus on the threats that matter most, not just the loudest CVEs. This has significantly reduced the manual cross-referencing our team used to do between scan results and signature updates. Keeping asset and exposure data in one place also makes it much easier to explain to non-security teams why a specific patch or protection is being prioritized.

What do you dislike about the product?

Pipeline integration feels overly complex, and the pricing is high compared to alternative tools. The UI also has navigation limitations, especially when I need deeper drill-downs to find details quickly. On top of that, there’s no dedicated mobile application, which makes it harder to stay on top of things when I’m away from my desk.

What problems is the product solving and how is that benefiting you?

Before using this, our team spent a lot of time manually cross-referencing new CVE disclosures against our actual environment to figure out which ones mattered, then separately updating IPS signatures to cover them. That process was slow and easy to fall behind on. Now we use the exposure database to see which vulnerabilities are actually present and exploitable in our environment, and use that context to prioritize and update our IPS protections accordingly. It has cut down the manual work significantly and means we're patching and protecting against the threats that are actually relevant to us instead of chasing every CVE that gets published.

What do you like best about the product?

Check Point Exposure Management helps us prioritize risks based on actual exploitability and business impact rather than chasing endless vulnerability lists.

What do you dislike about the product?

Occasional False positive or non-relevant alerts regarding our brand.

What problems is the product solving and how is that benefiting you?

It helps us shift security from a reactive stance to an early prevention approach.

What do you like best about the product?

Most appreciated would be the people, the analysts, the tech specialists. No matter how good the technology already is, I always go back to being appreciative of the personal touch of the people behind it.

What do you dislike about the product?

Filing a support ticket takes extra steps, such as having to log in to a different platform first and then navigate from there to submit it.

What problems is the product solving and how is that benefiting you?

Brand protection, including phishing detection, has been a strong capability. The team also continues to be innovative and collaborative with us as new threat actor evasion techniques emerge, which helps ensure we maintain the best possible view of our threat landscape. In addition, their custom investigations are top-notch. They take regional threat contexts into account and work effectively within them, which is something I found lacking with other competitors.

What do you like best about the product?

Once you get it up and running (which is an easy deployment), and you reach the point where you trust it, you can truly set it and forget it for most use cases—especially if you don’t want to babysit it. The dashboards are informative, and it’s easy to configure.

What do you dislike about the product?

I’m a bit worried about prices going up. We really love the product, but there’s a limit to how much we can afford to spend on it.

What problems is the product solving and how is that benefiting you?

It works with our Checkpoint firewall and is constantly blocking threats automatically. It’s extremely good at avoiding false positives; I think we’ve only run into a few issues with that over the years. It also helps me rest easier knowing it’s always working in the background and continuing to refine and improve our overall security architecture, especially since we’re a small team and can’t afford to spend a lot of time focused on it.

What do you like best about the product?

I like the responsive customer service with Check Point Exposure Management. I also appreciate the IOC feeds because there's not just one feed; I can subscribe to many feeds. They onboarded the product and meet with me every month to review and discuss new features.

What do you dislike about the product?

Right now we're working out CPU utilization from certain configurations. Initial setup requires an on-premises VM and administrative access configurations.

What problems is the product solving and how is that benefiting you?

I use Check Point Exposure Management to manage IPS protections and IOC feeds. It saves me time, cost, and expertise in reviewing IPS defenses and network traffic.

What do you like best about the product?

The capability of the tool to do continuous discovery ensuring that assets exposure status is close or real time

What do you dislike about the product?

As of now the capability is still not enabled in our license, POC is still being done and pricing discussions is still underway.

What problems is the product solving and how is that benefiting you?

While CheckPoints ASM handle the exposure of our internet facing assets, the CTEM will provide us with exposure findings internally with the help of its AI capability, leading to mitigations of identified exposure, improving the overall security posture of our organization.

What do you like best about the product?

The UI/UX feels somewhat more complex compared to other platforms. The integration for username checks and credential alerts is useful, but there is room for improvement, particularly in supporting a wider range of username formats and enhancing password validation capabilities. The Jira integration is beneficial for tracking activities, although it currently supports only a basic workflow.
The alert volume is manageable after the initial setup and fine-tuning phase. CVE-related alerts based on version checks are adequate, while the AEV AI agentic functionality provides better accuracy and validation. The Customer Success Manager is proactive and supportive in coordinating activities, though follow-ups are sometimes required due to their understandably busy schedule.

What do you dislike about the product?

Simplify and unify the UI/UX across all modules and configuration pages so the experience feels consistent end to end. Expand the username-checking capabilities to support a wider range of username formats. Strengthen password validation to improve credential detection and overall accuracy. Broaden the Jira integration to better support advanced workflows and automation. Improve CVE detection so it goes beyond basic version-based checks. Finally, increase the CSM’s responsiveness and follow-up frequency to reduce the need for customers to chase updates.

What problems is the product solving and how is that benefiting you?

It helps cover ASM and provides threat intelligence for SIEM and detection, along with news support. It also includes phishing detection and brand protection.

What do you like best about the product?

Its ability to transform fragmented security data into validated, safe remediation stands out.

What do you dislike about the product?

Alert Fatigue & False Positives
The initial configuration and deployment can be time-consuming and complex.
Would you like to explore how these limitations compare to other solutions like CrowdStrike Falcon Exposure Management

What problems is the product solving and how is that benefiting you?

It addresses the problem of chasing static severity scores (like CVSS) by correlating internal telemetry with real-world threat intelligence, so you can focus only on the vulnerabilities attackers are actively exploiting.

Faster Mean Time to Remediation
Operational Confidence &Reduced Attack Surface.
Better Resource Allocation: Instead of fixing everything, your team works on a prioritized "action list" based on business impact and actual

What do you like best about the product?

Based on industry feedback and technical reviews, what users like best about
Check Point Exposure Management (powered by the Argos/Cyberint technology) usually boils down to three main things:

Noise Reduction through Context: Instead of just giving you a massive list of vulnerabilities, it uses Business Context and Threat Intelligence to tell you which ones actually matter. It filters out the "noise" so your team isn't chasing low-risk bugs.
External Surface Visibility: It’s excellent at finding "shadow IT"—assets you didn't even know were connected to your network, leaked credentials on the Dark Web, or look-alike domains (typosquatting) used for phishing.

What do you dislike about the product?

Cost: As a premium enterprise solution, the licensing can be expensive. Smaller organizations often find the price point high compared to basic vulnerability scanners.
Integration Effort: While it integrates well with major platforms like ServiceNow, connecting it to niche or older legacy systems often requires custom API work or significant manual configuration.

What problems is the product solving and how is that benefiting you?

The Problem: Brand Impersonation & Phishing The Problem: Credential Leaks on the Dark Web