Check Point Integrates Email Security Data with CrowdStrike’s SIEM Platform
Event summary
- Check Point announced a new integration enabling email security telemetry from Check Point Email Security to flow into CrowdStrike Falcon Next-Gen SIEM.
- The integration allows security teams to correlate email-based activity with downstream identity and endpoint signals during investigations.
- Jonathan Gold Shalev, Head of Product Management for Email Security at Check Point, highlighted the importance of extending visibility across the attack chain.
- The connector is available as of March 17, 2026.
- This integration enhances Check Point’s existing integrations across its broader security portfolio, including Hybrid Mesh, Exposure Management, and Workspace solutions.
The big picture
This integration underscores the growing trend of unified security platforms that consolidate disparate data sources into a single workflow. By enabling seamless correlation between email security and endpoint signals, Check Point and CrowdStrike are addressing the fragmented nature of modern security operations. The move aligns with broader industry shifts toward comprehensive threat detection and response capabilities, particularly as email remains a primary vector for cyberattacks.
What we're watching
- Integration Adoption
- How quickly security teams adopt this integration to streamline investigations and improve threat detection.
- Market Positioning
- Whether this move strengthens Check Point’s competitive position against other cybersecurity vendors.
- Strategic Expansion
- The pace at which Check Point expands its Open Garden strategy with additional third-party integrations.
Related topics