Check Point Software and Illumio have announced a significant expansion of their strategic partnership, combining perimeter defence with internal breach containment in a bid to help enterprises survive an era of AI-accelerated attacks.
The joint announcement follows an initial integration unveiled in 2025 and takes the collaboration further by adding deep alignment between Check Point firewall policy and Illumio Segmentation across hybrid and multi-cloud environments.
The AI threat that is reshaping the calculus
At the heart of the announcement is a stark warning about how frontier AI models are transforming attacker tradecraft. What once required weeks of manual reconnaissance, exploitation, and lateral movement can now be compressed into a single automated sequence with little or no human involvement.
Security teams, already stretched thin, can no longer rely on stopping every intrusion at the perimeter. The question, as both vendors frame it, is what happens next: if something gets in, how fast can it be found and contained?
“Security teams are being asked to defend environments that are moving faster and that are more complex — against attackers who are using AI to do in minutes what used to take weeks,” said Paul Barbosa, VP of Cloud & SASE, Check Point.
Andrew Rubin, CEO and founder of Illumio, struck a similar note, arguing that the window between intrusion and catastrophic impact is collapsing and that organisations now need a security posture built for both prevention and containment.
What the expanded integration delivers
Check Point already provides what it describes as prevention-first enforcement at the perimeter, data centre, and network boundary, underpinned by its ThreatCloud AI threat intelligence engine. The new layer adds Illumio Segmentation to the equation.
The Illumio platform gives security teams workload-level visibility into how systems communicate, surfaces risky east-west traffic paths, and applies microsegmentation controls that restrict how far an attacker can move once inside a network. The tighter integration means Check Point firewall policy can now be aligned directly with Illumio’s workload model, reducing unnecessary connectivity and making lateral movement significantly harder to execute undetected.
Illumio Insights, integrated last year, will continue to connect Check Point threat intelligence with workload context to flag suspicious movement and investigate lateral movement risk across hybrid estates.
Joint customers can now also procure Illumio directly through Check Point, a move designed to simplify vendor consolidation and speed up deployment for organisations looking to streamline their security stack.
Industry analyst view
IDC Research Manager Pete Finalle offered third-party validation of the market direction. He noted that IDC forecasts microsegmentation growing at a 23.5 per cent compound annual growth rate as organisations shift from evaluation to scaled deployment, with 96 per cent of buyers reporting a noticeable improvement in security posture, cyber resilience, and ransomware preparedness following adoption.
Finalle also highlighted a key finding from IDC research: 98.3 per cent of microsegmentation buyers prefer their solution to integrate tightly with SASE, firewall, or other zero trust technologies, precisely the gap this partnership is designed to close.
Availability
The expanded integration is available immediately for joint Check Point and Illumio customers. More information is available here: https://blog.checkpoint.com/hybrid-mesh/check-point-and-illumio-expand-partnership-to-secure-hybrid-environments/
