Check Point Software Technologies unveiled its generative artificial intelligence (AI) (genAI) powered security copilot tool, dubbed Infinity AI Copilot, designed to streamline and automate cybersecurity management to address the estimated 4 million global shortage of cybersecurity workers and enhance the efficiency and effectiveness of existing security teams.

The Infinity AI Copilot was trained on Check Point’s 30 years of accumulated cybersecurity intelligence. Leveraging genAI, the tool is designed to offer functions both as an administrative aid and an analytical resource, while automating complex security tasks and providing proactive solutions to security threats.

“The design of the product was influenced by our 30 years of being a cybersecurity company,” Dan Karpati, chief technologist of threat prevention at Check Point Software, told SDxCentral in response to questions.

“Essentially, it incorporates our expertise from the past three decades, including all of our admin guides for every product, our Secure Knowledge database which contains 14,000 items, Checkmates knowledge which provides a unique and advanced level of network expertise, access to Threat Cloud containing all our threat knowledge, and it is fine-tuned by our experienced team,” he added.

Additionally, the AI copilot integrates with Check Point Infinity Platform, which offers a range of security features across network, cloud and endpoint infrastructures, according to the vendor.

Karpati said the vendor plans to integrate AI copilot functions into many of its core products in the future. “Ultimately, Infinity AI Copilot will allow access to cross-product information, address inquiries and execute actions seamlessly across multiple consoles.”

Currently, Check Point's threat prevention blocks over 3 billion attacks each year with 50 AI engines and 2 billion security decisions made daily, he added, one key aspect of the AI implementations is the collaborative sharing of threat insights across the platform to prevent attacks effectively.

Check Point claims the key capabilities of this new tool include the following:

• Accelerating security administration: Infinity AI Copilot is designed to cut down the time required for routine administrative tasks, including event analysis, implementation and troubleshooting, by up to 90%.
• Managing and deploying security policies: The AI Copilot can help manage, modify and automatically deploy access rules and security controls, tailored to each customer's policy.
• Enhancing incident mitigation and response: Leveraging AI, the tool comprehends incidents and correlates them with other comparable events or incidents that took place in the corporate setting, Karpati said. “The unique feature is that an analyst can freely search for information in raw data using simple human language. It also incorporates up-to-date threat intelligence and news from Check Point Research to enhance the context of the incident.”
• Easy interaction with natural language processing: The AI Copilot understands and responds via chat in any language, making it easier for users to communicate and execute tasks.

Infinity AI Copilot is currently available in preview, with a full launch anticipated in the second quarter. The first two implementations of AI Copilot are security administration assistant for Check Point’s Quantum Smart 1 Security Management and security analyst assistant for Infinity XDR/XPR (extended detection and response/extended prevention and response). Future developments include proactive assistance and autonomous policy management features.

Many security vendors like Microsoft, Fortinet, CrowdStrike, Cisco and SentinelOne have also integrated genAI into their cybersecurity solutions.

For example, last March, Microsoft unveiled its Security Copilot, claiming it is the first security product that is built on the latest innovations in large language models. Later, the vendor combines security information and event management (SIEM), extended detection and response (XDR) and genAI into a unified security operations platform.

Infinity AI Copilot stands out for its availability and practical Application, including capabilities extending beyond threat analysis to include IT and access policy management, compared to conceptual solutions offered by competitors, Check Point claims.

“Based on our experience, most other genAI-powered copilot services primarily help with threat analysis intended for the SOC [security operations center] analyst,” Karpati said. “Check Point’s copilot goes further by helping manage the firewall, network access, troubleshooting and more, intended for the network/IT admin.”

“Our copilot is trained with all Smart-1 APIs, enabling it to carry out 'write' actions like modifying configurations. We will gradually open this capability throughout 2024,” he added.

Frank Dickson, group VP of security and trust at IDC, said in a statement that “when selecting an AI-powered cyber security solution, Chief Information Security Officer (CISO) are looking for a return on investment through increased productivity and better efficacy.”

“Leveraging AI to drive better security outcomes is top of mind for Chief Information Security Officer (CISO), as they address both the expanding threat landscape and the cyber security talent shortage,” he added.

Image credit: Check Point Software Technologies