MITRE Engenuity ATT&CK® positions Check Point as a leader in endpoint security

Check Point Software Technologies Ltd., a global provider of cyber security solutions, announced that Harmony Endpoint has been named a leader in MITRE Engenuity ATT&CK® Evaluations for the second year in a row for providing the most comprehensive threat detection and visibility.

The evaluation results from MITRE Engenuity highlight Check Point Harmony Endpoint’s ability to automatically and immediately block, remediate, and recover from ransomware and other cyber threats before the damage spreads. Simultaneously, security teams can use the solution to detect, investigate, and respond to threats, leveraging the industry’s most comprehensive correlation with the MITRE ATT&CK® framework.

MITRE Engenuity tested 30 endpoint security providers and their products for this evaluation. Vendors were evaluated based on real-world observations against a MITRE-developed knowledge base of adversary tactics and techniques. MITRE Engenuity this year tested vendors’ ability to detect attack techniques used by Wizard Spider, a financially motivated criminal group, and Sandworm, a Russian threat group known for targeting Ukrainian electrical companies and carrying out NotPetya attacks. These two threat actors were chosen for their complexity, market relevance, and how well MITRE Engenuity’s staff could accurately impersonate the adversary.

“The sophistication and frequency of attacks has increased dramatically over the past year, reaching new peaks. In this reality, organizations should adopt a threat-informed security strategy. MITRE Engenuity ATT&CK® Evaluations help them achieve that by evaluating cybersecurity solutions’ ability to defend against real-world cyberattacks and threat groups,” said Ofir Israel, Vice President of Threat Prevention at Check Point Software Technologies. “Endpoint security plays a crucial role in protecting the hyper distributed workspace. The latest ATT&CK® Evaluations results highlight Check Point Harmony Endpoint’s leadership for the 2^nd consecutive year, as an industry-leading threat detection and full attack visibility capabilities. Harmony Endpoint’s customers get all the endpoint protection they need against all imminent threats like ransomware, malware, phishing while enjoying robust detection and response capabilities at the best TCO.”

“This latest round indicates significant product growth from our vendor participants. We are seeing greater emphasis in threat informed defense capabilities, which in turn has developed the infosec community’s emphasis on prioritizing the ATT&CK Framework,” said Ashwin Radhakrishnan, acting General Manager of ATT&CK Evaluations at MITRE Engenuity. 

Key highlights from the test include:

• Harmony Endpoint delivered the highest technique detection level with 100% detection of attack steps
• Harmony Endpoint delivered the most extensive visibility and context across 100% of Sub-Step detection. In 98% of sub steps detected, delivered the highest technique detection level providing additional data enrichment to help user thoroughly understand the attack
• Harmony Endpoint provided 98% detection for financial advanced persistent threat (APT) Wizard Spider, responsible for notorious malwares such as Emotet, Trickbot, and Ryuk 
• Check Point provided immediate alerts with zero delays in all its detections

For full results and more information about the evaluations, please visit: https://attackevals.mitre-engenuity.org/enterprise/wizard-spider-and-sandworm/.