Check Point ThreatCloud vs. VirusTotal

As I'm working for the banking sector, our utmost importance is the security of the network. Check Point ThreatCloud helps to ensure the security by making sure the threats are monitored and treated according to the Bank's IT policy. When it comes to the ATM Network, Check Point ThreatCloud plays a severe role.

Incentivized

VirusTotal is good for ad-hoc analysis of suspicious files, but it's not a replacement for an anti-virus / anti-malware or EDR solution. It's a good way to confirm if suspicious activity is actually malicious or benign.

Incentivized

• anti virus
• anti bot

Incentivized

• File Analysis
• URL Analysis
• User Interface
• Community Participation

Incentivized

• SOAR integration, Checkpoint does not have built in SOAR
• Automation throughout the findings of [Check Point] ThreatCloud
• Special team for threat intelligence
• K8s threat cloud integration and K8S forensics
• Native SIEM integration

Incentivized

• Integration with common AV clients for a second opinion would be good

Incentivized

If you have the Checkpoint firewalls, the only real solution is the Check Point ThreatCloud to be used. If you have PAN - Autofocus or Fortinet-fortiguard. One advantage of Check Point ThreatCloud is the elimination of web security services, as the checkpoint with the threat cloud replaces the web security solutions with its vast features. Check Point products are very easy to use, and operation costs are much lower than the other vendors.

Incentivized

Honestly, we have always used VirusTotal, its a leader in the industry and meets our needs perfectly so we have never had the need to look elsewhere

Incentivized

• High score rates [are] seen on breach systems after deploying systems integrated with [Check Point] ThreatCloud
• Catch rates are very high compared to other vendors
• One missing thing is the detection for localized URLs and IPs
• Purchasing within the 3-year perspective is cheap compared to other solutions; ROI is generally six months
• [Check Point] ThreatCloud eliminates the need [for] other additional services that may need to be deployed like dedicated IPS, Dedicated Sandbox, DNS solution, etc.

Incentivized

• Teaching users to use VirusTotal allows for some self service and quicker turnaround for users with questions about whether links or files are "safe".
• The API integration with our anti-phishing system provides an extra degree of confidence in results vs. a single detection engine technology.

Incentivized