This week we published two posts on buying a Check Point license through cAIberOps: how the license-only route works, with the price beat and the free trial, and the six steps to take before a renewal. The question we have been asked since is simpler than either: which route is right for us, the license on its own or Managed Email Security? Same platform, same engines, two very different arrangements. Five questions settle it.
Question 1: who works the quarantine on a Tuesday?
Start here, because it decides the rest. An email security platform holds mail it judges malicious and flags mail it is unsure about, and somebody has to look. On a normal Tuesday that means a held supplier invoice that is probably fine, a payroll notice that looks like phishing because phishing copied it, and a message from your bookkeeper asking whether something is safe. Somebody releases, somebody adds the sender to a list, somebody answers the bookkeeper.
If you have that somebody, an admin or an IT provider who already administers your Microsoft 365 or Google Workspace tenant and has time in the week for it, the license-only route fits. You get the Check Point license in your own Infinity Portal account, you run the console, and the monthly check-in from us keeps you current. If your side cannot name who does this, or the honest answer is "whoever notices," that is the managed route. From day one the quarantine, spam filtering and a clean inbox, allow and block list management, release requests, and investigation when it is needed, with no cap on the time we spend on it, are ours, and your staff forward what looks wrong to a person who answers.
Question 2: who reads the release notes?
Check Point adds protections and settings through the year, and some of them need a permission in your tenant or a decision about how aggressive a policy should be.
Somebody has to read what changed, decide whether to turn it on, and do it.
On the license-only route that is shared work, and it is the part a license alone does not usually include: once a month we send you a short written report and offer a call, with what the platform's monthly report shows, what changed, what Check Point released and whether we think you should turn each one on, and a renewal heads-up, typically about 30 days out, with the count checked. You decide and you make the change; the call is where we talk it through if you want it. On the managed route we read the notes, we recommend which protection to turn on, and we ask for your approval before anything touches your tenant.
Question 3: what do you want to pay, and for what?
The two routes are priced on different logic, on purpose.
License only is priced against your quote. Send us a written, current quote from another vendor or reseller for the same product category and protection tier, the same number of users or devices, the same term, dated within the last 30 days, license only against license only, issued to your business for a paid standalone license. Apples to apples, we will beat that price. Guaranteed, on those terms. A beat, not a match. We do not publish a license-only price list, because the right number depends on the product, the tier, the count and the term. What you pay for is the Check Point license, with Check Point's technical support under the support plan on your quote. The free trial comes first, and the monthly check-in runs for the term.
Managed Email Security is a published price: $6.40 per user per month on the year-end offer ($5.60 for registered 501(c)(3) nonprofits; $8 list). The offer is 20% off (30% for registered 501(c)(3) nonprofits) on a 12-month Managed Email Security agreement signed by December 31, 2026, new customers only, no onboarding fee. That price is the license and the managed service together: the business-day review of what was held, spam filtering and a clean inbox, allow and block list management, release requests, investigation when it is needed with no cap on the time we spend, a written monthly summary, the two-session onboarding, a one-time SaaS security posture report within the first 90 days, and 24/7 support. No setup fee, no multi-year contract.
So the question is not which number is lower. It is whether you are buying a product to run or a function to hand off. If you already pay another vendor for a license and run it yourself, the beat on your quote is the number to compare. If the work of running it lands on whoever notices, compare the managed price against what that costs you now.
Question 4: what happens when something gets through?
Something will, on either route; a filter is one layer, and we will not tell you otherwise.
The difference is who moves next.
License only: your admin sees the message, decides what to do, and uses Check Point's console and Check Point's support under the plan on your quote. We tell you before you buy which support plan that is and who to call. At the monthly check-in we go over what the platform's report shows and what Check Point released, but the day-of response is yours.
Managed: your staff forward the message to us and a person answers, with support available 24/7. We investigate; where a request needs confirming, we check it through a channel we already trust, a phone number on file or a known contact, not the email that asked; we tune the policy to reduce the chance of a repeat, and the monthly summary tells you what was blocked, what was released, what changed and why, and what we could not conclude.
Question 5: how do you want to start?
Both routes start the same way, with the free two-week email security assessment: Check Point Email Security connected to your Microsoft 365 or Google Workspace by API, no MX change, in Monitor only mode. The platform inspects mail after delivery and reports; it does not sit in the mail path, and per Check Point, in this mode quarantine is "available after delivery to the user mailbox." During the assessment it takes no action: it watches what arrives and how it flows, and we quarantine nothing; your current filter keeps working. Two weeks is Check Point's default trial length, with the full feature set. At the end we show you what reached your inboxes and, for each example that matters, what we would have done in the same situation. You keep the report whether or not you buy, and whichever route you choose.
From there the routes split. License only: we quote the matching Check Point tier against your quote; when you say so, the policy moves from Monitor only to Prevent (Inline), which per Check Point "scans the emails prior to delivery to the user"; your admin retires the old product, you run it, and the monthly check-in begins the first month. Managed: two onboarding sessions, the first with your admin to approve the connection, the second about two weeks later to sign off on the policies together, and from day one the work is ours.
If you are still not sure
Pick license only if you can name the person who works the quarantine and you want the lowest price on a product you will run. Pick managed if you want email security off your plate and a person who answers. If you pick license only and a year from now the Tuesday quarantine has become a burden, the platform is already connected, so ask us about moving to managed and we will tell you what changes. If you start managed and later want to run it yourself, ask us about the license-only route at the end of the agreement. Neither route is a penetration test or a vulnerability scan, and we do not sell either; neither writes your policies or certifies compliance.
How to start
Tell us which route you are leaning toward, or tell us you are not sure, and send the renewal quote if you have one. We come back with the trial date and, depending on the route, the Check Point tier that matches and the price against your quote, or the managed agreement at the offer price. We work with small and medium businesses and nonprofits nationwide, including Washington DC, Northern Virginia, and Maryland. To start, book a free 15-minute call, or see the services page.
Sources: Check Point Email Security administration guide (Email Protection modes; Threat Detection Policy; Trial information); cAIberOps service terms as published in the Managed Email Security, year-end offer, first 90 days, Check Point license and renewal posts on caiberops.com.
