IT AI Index
Index Vendors › Check Point Harmony SASE · September 2026 Edition
Check Point · 3 categories · Ranked

Check Point Harmony SASE

137Judge labels
6First choices
29Negative labels
12 of 12Models named it
3Categories
September 2026 Edition. Every number here is derived from the raw labels under vendor table vv2026-09.2, every buyer segment counted.
Best standing
6% in SASE for small business buyers
Rank 5 of 43 in the mid-market standingaccepted challenger
0 of 12 models made it the first choice on the direct prompt; 13% of its 15 labels there were negative.
By buyer segmentRead the same way at every buyer size.
In sase · each standing computed within its segment · bars are 0 to 100 · the accent bar is the product's own best reading

Standing by category

Every category where a model named Check Point Harmony SASE for a mid-market B2B company. Share is first choices across the direct, paraphrase, budget and scale prompts; rank is within every product named in that category.
CategoryFunctionShareRankNegative rateLabelsQuadrant
SASE platformsNetwork and edge5%5 of 4313%15accepted challenger
Zero trust network accessNetwork and edge2%7 of 7127%30criticized challenger
Next-generation firewallsNetwork and edge0%39 of 1000%1under 10 labels · led by Fortinet FortiGate at 61%

Movement

This is the first edition on this tier, so no move can be computed for Check Point Harmony SASE yet. From the next edition this section shows, per buyer segment, whether its share moved by more than the measured noise floor.

By model

How each model treated Check Point Harmony SASE across every prompt where it was named for a mid-market B2B company. Twelve models, six prompts per category.
ModelFirst choiceAlternativeMentionNegativeLabels
Claude Haiku 4.501214
GPT-5.4 mini00101
Gemini 3.5 Flash03014
Perplexity Sonar12104
Grok 4.1 Fast03216
Mistral Small02002
DeepSeek V4 Flash01236
Llama 4 Maverick20002
Qwen 3.7 Flash01113
Kimi K202125
GLM 4.7 FlashX03104
MiniMax M2.503115

By framing

Which of the six questions produced the naming. By model says how often; this says asked what. The first-choice count on the right carries the marks of the models that produced it.
FramingLabels by classFirst choices
Direct24 labels2
Paraphrase20 labels4
Comparative39 labelsNone
Budget-constrained14 labelsNone
Scale-constrained13 labelsNone
Negative27 labelsNone
First choiceAlternativeMentionNegative137 labels in all, every segment counted; 6 of the 6 first choices count toward share, since the comparative and negative framings do not. The bar is one segment per label class, to scale within the framing.

What the models said for it

Verbatim evidence the judge attached to positive labels.

“Perimeter 81 - Best for small to mid-sized businesses seeking an easy-to-deploy, affordable ZTNA solution with VPN capabilities.” Llama 4 Maverick · ZTNA · paraphrase prompt · first choice
“1. Check Point Harmony SASE: A cloud-native zero-trust access solution that grows into full SASE without changing vendors.” Llama 4 Maverick · SASE · paraphrase prompt · first choice
“I would recommend Check Point Harmony SASE as the default choice” Perplexity Sonar · SASE · paraphrase prompt · first choice
“popular with SMB and mid-market companies that want a more unified edge security stack without stitching together multiple vendors” Claude Haiku 4.5 · SASE · direct prompt · alternative

And against it

Verbatim evidence attached to negative labels. A warning on a product with few labels is a warning; on a product with many, it is one voice among them.

“(Perimeter 81/Harmony SASE) | Hard-coded encryption keys in diagnostic logs | Customer data exposure” Kimi K2 · ZTNA · negative prompt · hard negative
“Research exposed critical vulnerabilities across Check Point, Zscaler and Netskope that fell into three primary categories: authentication bypasses, credential storage failures and cross-tenant exploitation.” Claude Haiku 4.5 · ZTNA · negative prompt · soft negative
“Check Point (Perimeter 81): Contained hard-coded SFTP credentials in diagnostic logs, exposing JWT tokens that could be reused to impersonate users.” Gemini 3.5 Flash · ZTNA · negative prompt · soft negative
“Incumbent Firewall/VPN Vendors (Fortinet, Cisco, Checkpoint) — may offer ZTNA modules, but verify they offer true app-level segmentation” Kimi K2 · ZTNA · scale prompt · soft negative

Named alongside

The products named in the same answers as Check Point Harmony SASE, over the 132 answers that named it. Took the first choice instead counts the answers where the other product was the first choice and Check Point Harmony SASE was named but was not.
ProductSame answerTook the first choice insteadHead to head
Cloudflare One79 of 13239Not in the top three
Twingate60 of 13225Not in the top three
Cato Networks39 of 1329Not in the top three
Zscaler Zero Trust Exchange37 of 1322Not in the top three
Tailscale36 of 1326Not in the top three
Zscaler Private Access33 of 13211Not in the top three
Fortinet FortiSASE33 of 1320Not in the top three
Palo Alto Networks Prisma Access28 of 1323Not in the top three
NordLayer25 of 1322Not in the top three
Netskope One23 of 1321Not in the top three
A head-to-head page exists where both products are in a category's top three. The other rows are the same fact without a page behind them, so they link to the product instead.

What carried it into the answer

The sites and pages cited by the answers that named Check Point Harmony SASE. A fact about retrieval, not a lever on the model.

Citations exist only for the models that return a source list, four of the twelve in this edition, so these counts come from 113 of the 132 answers that named Check Point Harmony SASE and are not a share of its labels.

Domains cited

cybersecuritynews.com58
cyberpress.org49
gartner.com44
petronellatech.com39
g2.com32
blog.openvpn.net31
aimultiple.com29
expertinsights.com27
portnox.com27
reddit.com26

362 of the 362 domain citations in answers naming Check Point Harmony SASE came from somebody else's page.

Pages cited

Pages are listed as the models cited them.

Names read as Check Point Harmony SASE

What the judge wrote, as written, with how often. The vendor table decides that these count as Check Point Harmony SASE; a claim can dispute any of them.
Check Point 8Perimeter 81 6Check Point Harmony SASE (formerly Perimeter 81) 5Check Point Harmony SASE (ex-Perimeter 81) 3Check Point Harmony 2Check Point (Harmony SASE/Perimeter 81) 1Check Point (R8x / Harmony Endpoint) 1Check Point Harmony Connect 1Check Point Harmony SASE / Perimeter 81 1Check Point Perimeter 81 1Checkpoint 1Perimeter 81 / Check Point 1
Is this your product?

Claim this page

Claiming is free and changes nothing in the data. A claimed page shows a verified contact who is told when each edition publishes and when Check Point Harmony SASE's standing changes by more than the noise floor; the right to propose corrections to the vendor table, meaning names the judge wrote that should or should not read as Check Point Harmony SASE, applied by version and listed in the change log; and a one-line description supplied by the vendor and marked as such.

It does not get any change to labels, shares or verdicts, any preview, or any say over which quotes appear. A verification link goes to your work email; an address at checkpoint.com is approved on the spot, any other address is reviewed by hand.

Your name and company appear on the claimed page, or the company alone if you ask below. A title and a LinkedIn address appear there too if you give them, and are left off if you do not. Your email address is never published.

Subscribe to the pack