In short
Check Point's support life cycle policy says Workforce AI Security replaces GenAI Protect, which reached end of sale in 2026. Existing customers are supported until contract end, and Check Point says details of migration to Workforce AI Security Essentials at no additional cost will be shared. Several browser, endpoint and SASE packages no longer include GenAI Protect for new customers.
Want help with GenAI Protect migration?
We can plan it with you or do it for you. Tell us where you are up to.
What Check Point has announced
Check Point's support life cycle policy sets out the change in a few lines. In Check Point's words:
- "Workforce AI Security replaces GenAI Protect, and is now Check Point primary offering for employee AI security."
- "Existing customers will be supported until contract end."
- "Migration to Essentials at no additional cost will be shared."
The policy lists GenAI Protect as end of sale in 2026. The dates it gives (for end of sale and for honouring quotes) all fall in the first half of 2026, so GenAI Protect is now past its end of sale. Check Point also gives a contact address for Workforce AI Security questions on that page.
Note the wording on migration: Check Point says the details "will be shared". We do not promise terms on Check Point's behalf, but we can find out what applies to your contract.
Which packages are affected
GenAI Protect was not only sold on its own. It came as part of several Check Point packages. The life cycle policy says the following no longer include GenAI Protect for new customers:
| Package | What changes for new customers |
|---|---|
| Check Point Browser Security Advanced | No longer includes GenAI Protect |
| Endpoint DLP add-on | No longer includes GenAI Protect |
| Endpoint Elite | No longer includes GenAI Protect |
| SASE Complete | No longer includes GenAI Protect |
| SASE Browse Advanced add-on | No longer includes GenAI Protect |
If you bought one of these before the change, you may have GenAI Protect today without having bought it by name. Our sister site covers the packages themselves: Check Point Harmony Browse, Harmony Endpoint Elite and Check Point Harmony SASE.
Not sure which package applies to you? Ask us
Tell us about your organisation and we will point you to the right package.
GenAI Protect vs Workforce AI Security
GenAI Protect worked as part of the data loss prevention policies in those packages, focusing on stopping confidential data being typed or pasted into generative AI tools. Check Point Workforce AI Security is a broader, standalone product:
| GenAI Protect | Workforce AI Security | |
|---|---|---|
| Status | End of sale in 2026; existing customers supported until contract end | Check Point's primary offering for employee AI security |
| How it was sold | Included in browser, endpoint and SASE packages | Its own subscription, in Essentials and Enterprise tiers |
| Data in prompts | DLP for generative AI prompts | Contextual AI-powered DLP, inline redaction with labelled placeholders, file and image redaction with OCR |
| Discovery of AI tools | - | AI application catalogue, risk scoring, use-case classification, managed vs personal accounts |
| Desktop AI, coding assistants, agents and MCP | - | Enterprise tier |
For the detail of the newer product, see how Workforce AI Security works.
What to check in your current contract
Before your renewal, or before Check Point publishes migration details for your account, gather the facts:
- Which package gave you GenAI Protect, and whether it is a standalone item or part of a bundle
- Your contract end date, because Check Point says existing customers are supported until then
- Which users are covered today, and whether that still matches the people using AI
- What you rely on GenAI Protect for: which AI sites and data types your current policies cover
- Whether AI use has moved beyond the browser: desktop AI apps, coding assistants or agents would need Enterprise rather than Essentials
- Who owns the renewal, so the migration does not get lost between security and procurement
We can help you work through this list and ask Check Point the questions on your behalf.
Prefer a hand with this?
We can help you plan it and set it up, alongside your own team.
How to move to Workforce AI Security
A migration is a good moment to improve on what you had, not just replace it:
- Confirm your entitlement. Find out what Check Point offers for your contract, including the Essentials migration once details are shared.
- Run discovery. Deploy Workforce AI Security in monitoring mode with a pilot group to see which AI tools, accounts and agents are in use now.
- Rebuild your rules. Recreate the protections you had in GenAI Protect as Workforce AI Security access and chat (DLP) policies, then add what was missing, such as managed vs personal account rules and redaction.
- Decide on Enterprise. If discovery shows desktop AI, coding assistants or agents, weigh up Workforce AI Security Enterprise.
- Switch over and retire the old policy. Roll out to all users, check the reports, then remove the GenAI Protect rules so you are not running two policies.
Essentials or Enterprise after GenAI Protect?
Check Point names Workforce AI Security Essentials as the migration path, and for many GenAI Protect customers it will be the natural match: both are about AI used through web applications. Enterprise is worth a look if your AI use has grown since you bought GenAI Protect, because it covers the places Essentials does not: desktop AI apps, coding assistants in IDEs, and agents and MCP.
Our Essentials vs Enterprise guide has the side-by-side comparison, and how Workforce AI Security is licensed explains the commercial side.
How Forever Systems helps
We can help you:
- Review your current Check Point contract and identify where GenAI Protect comes from
- Find out what migration terms apply to you once Check Point shares them
- Run a discovery pilot so you choose Essentials or Enterprise on evidence
- Rebuild your policies in Workforce AI Security and plan the switch-over
To talk about moving from GenAI Protect, contact us.
How Forever Systems helps you use AI safely
We are an independent UK IT and cyber security provider. We supply Check Point Workforce AI Security and help organisations put sensible, workable rules around AI at work.
- See what is really in use: we can start with a discovery pilot, so you know which AI tools, browser extensions, coding assistants and agents your people use before anyone writes rules
- Policy you can enforce: we help you decide what to approve, restrict or block, and turn your AI acceptable use policy into Workforce AI Security policies
- The right tier: Essentials for browser-based AI, Enterprise when desktop apps, developer code assistants and agents are in the picture, confirmed at quote
- Staged roll-out: from monitoring to warnings, redaction and blocking at a pace your people can absorb, with reviews along the way
- Around the tool: Microsoft 365 permissions ahead of Copilot, device management for the extension and agent, and safe use of AI training for staff
We work with businesses, schools, charities and public sector organisations. Our guides are general information, not legal advice.
Frequently asked questions
Is Check Point GenAI Protect end of life?
Check Point's support life cycle policy lists GenAI Protect as end of sale in 2026 and says Workforce AI Security replaces it. Existing customers are supported until their contract ends.
What replaces GenAI Protect?
Check Point Workforce AI Security, which Check Point calls its primary offering for employee AI security. It comes in Essentials (web applications) and Enterprise (web, desktop, IDEs, agents and MCP) tiers.
Will migration to Workforce AI Security cost extra?
Check Point says that 'migration to Essentials at no additional cost will be shared'. We do not promise terms on Check Point's behalf; we can find out what applies to your contract.
Which Check Point packages included GenAI Protect?
Check Point lists Browser Security Advanced, the Endpoint DLP add-on, Endpoint Elite, SASE Complete and the SASE Browse Advanced add-on as packages that no longer include GenAI Protect for new customers.
Do I need Essentials or Enterprise after GenAI Protect?
Essentials is the tier Check Point names for migration and covers AI used through web applications. If staff use desktop AI apps, coding assistants or AI agents, Enterprise covers those too.
Still have a question about GenAI Protect migration?
Ask us and a member of our team will reply by email.