Avanan
What Avanan actually does
Avanan connects to Microsoft 365 and Google Workspace through API integration. It scans email after it passes the native security layer but before it hits the inbox. This inline-plus-API approach means you skip MX record changes entirely, which removes one of the biggest headaches with traditional secure email gateways.
The platform catches phishing, business email compromise, malware, and account takeover attempts. It also extends protection to collaboration tools like Teams, Slack, and SharePoint. The ML models are trained on data across its customer base, so detection improves as the install base grows.
Check Point acquired Avanan in 2021 and rebranded it as Harmony Email & Collaboration. The standalone Avanan product still exists, but new customers are increasingly pushed toward the Harmony bundle. If you are evaluating Avanan today, you are really evaluating Check Point’s email security roadmap.
Who it’s best for
- Mid-market and enterprise teams running Microsoft 365 as their primary email platform
- Security teams tired of managing MX record changes and mail flow rules with legacy SEGs
- Organizations that also need protection for Teams, SharePoint, or OneDrive file sharing
- Companies already in the Check Point ecosystem looking to consolidate email security
- IT teams with limited staff who want fast deployment — API integration takes hours, not weeks
Pricing reality check
Avanan does not publish pricing. Expect per-user, per-month licensing. Industry benchmarks put it in the $4-$7/user/month range for the full suite, though Check Point bundles can shift this. Smaller organizations may find the per-seat cost higher than competitors like Abnormal Security or Microsoft Defender for Office 365 Plan 2.
Watch for multi-year lock-in during negotiation. Check Point’s sales team will push three-year terms for deeper discounts. If you are a sub-500-seat organization, make sure the discount actually justifies the commitment.
Alternatives to consider
Abnormal Security — Takes a pure API approach similar to Avanan but focuses heavily on behavioral AI for BEC detection. Better fit if business email compromise is your primary concern.
Microsoft Defender for Office 365 Plan 2 — Already included in E5 licensing. If you have E5, test it seriously before paying for a third-party overlay.
Proofpoint Targeted Attack Protection — The incumbent SEG with deep threat intelligence. Better for large enterprises that want granular policy control and extensive email archiving.
Mimecast — Strong SEG with good awareness training integration. Consider it if you want email security and security awareness in one vendor.
The Charting Cyber take
Buy Avanan if you are on Microsoft 365, your current email security is underperforming, and you want deployment measured in hours rather than weeks. The API-based approach genuinely reduces operational overhead compared to traditional SEGs. The detection quality for phishing and BEC is strong.
Skip it if you already have Microsoft E5 licensing — test Defender for Office 365 Plan 2 first. Also think twice if you are not a Check Point shop and do not want to become one. The product roadmap is now tied to Check Point’s Harmony platform, and that matters for your three-year plan.