Perimeter 81 (now Check Point SASE)
Capability scores
Methodology →- Authentication
- 3.5
- SSO & Federation
- 4.0
- Authorization
- 3.5
- Lifecycle & Provisioning
- 3.0
- MFA & Passwordless
- 3.5
- Governance & Audit
- 3.5
- Developer Experience
- 3.5
- Deployment Flexibility
- 4.0
- Pricing Transparency
- 3.5
- Support & Ecosystem
- 4.0
Scored 0–5 against a published rubric. Independent analysis, no vendor sponsorship.
Overview
Perimeter 81 was an Israeli cloud-delivered remote access and network security service. Check Point announced the deal on 2023-08-10 for about 490 million dollars and closed it on 2023-09-13. The product became Harmony SASE, and in March 2026 it was renamed again: Check Point's product page now reads "Check Point SASE Platform (Formerly Harmony SASE)," and the 2026 release notes record the rebrand reaching UI, email templates, and API references in April 2026. perimeter81.com redirects to sase.checkpoint.com, which still carries the Perimeter 81 name in its page title and login hosts.
What it is good at
Fast setup for smaller teams. The Check Point SASE site groups the service into Private Access (ZTNA, agentless ZTNA, an enterprise browser, a private backbone, and firewall as a service), Internet Access (hybrid secure web gateway, SaaS security, browser and Wi-Fi security), and SD-WAN, delivered from 85 or more points of presence (a vendor figure). The model is a managed cloud network: connect cloud and office resources, push the agent, and write identity-based access rules, with no appliances to rack. That suits SMB and mid-market IT teams without network engineers.
Identity and posture controls are maturing. The 2026 release notes add certificate issuer and root CA checks to device posture (January), MD5 file-hash and multi-version OS rules (generally available in September), SCIM from Microsoft Entra ID keyed on the immutable identifier, and early-availability transparent SSO for the agent on Entra-joined devices. Browser-based RDP with Network Level Authentication went generally available in April 2026. See device posture and SCIM.
Where it falls short
Two renames since 2023 mean documentation, marketplace listings, and third-party reviews are inconsistent, and older Perimeter 81 pricing and feature pages still circulate. The roadmap is now Check Point's, which helps buyers who run Check Point firewalls and endpoint and matters less to others. It is SaaS only; deep on-premises control or an air-gapped deployment is not an option. Several identity features above were early availability when we checked, so confirm general availability for anything you depend on.
Pricing
Quote-based. As of 2026-11-05 the pricing page offers a TCO calculator, a demo, and a "Start Now" sign-up, but no published per-user prices. Perimeter 81's former public tiers no longer appear there.
Best for, and who should look elsewhere
Choose Check Point SASE if you are an SMB or mid-market team that wants ZTNA and web security from one console quickly, and especially if you already run Check Point. For an independent ZTNA, compare Twingate, Tailscale, or Cloudflare. For enterprise SASE with SD-WAN at scale, look at Cato Networks or Zscaler. The best zero trust tools ranking and the consolidation report give context.
Bottom line
Perimeter 81 is now Check Point SASE: still approachable cloud ZTNA for smaller teams, but quote-priced and best bought by Check Point customers.
Perimeter 81 (now Check Point SASE): frequently asked questions
- Is Perimeter 81 still a product?
- Not under that name. Check Point closed its acquisition of Perimeter 81 on 2023-09-13 (about 490 million dollars, per Check Point). The service was sold as Harmony SASE and was rebranded Check Point SASE in March 2026, per Check Point's 2026 portal release notes. The perimeter81.com domain now redirects to sase.checkpoint.com, and login and support still run on perimeter81.com hosts.
- Does Check Point SASE still publish prices?
- No. As of 2026-11-05 the pricing page at sase.checkpoint.com offers a TCO estimate, a demo, and a sign-up, but no per-user list prices. Perimeter 81's old public tiers should not be used for budgeting.
- Which identity providers does it integrate with?
- Check Point's 2026 release notes document SCIM provisioning from Microsoft Entra ID (keyed on the unique identifier so email or UPN changes do not create duplicate users) and an early-availability transparent SSO for the SASE agent on Entra-joined or domain-joined devices, which requires SCIM, a dedicated Azure application, and an MDM.
More Zero Trust vendors
All Zero Trust →- Cloudflare Zero Trust4.6/5
- Tailscale4.5/5
- Zscaler4.5/5
- Cato Networks4.4/5
- Netskope4.3/5
Related on Start with Identity
- VendorBanyan Security (now SonicWall Cloud Secure Edge)
strong_contender
- CVESMB Server Kerberos reflection via Ghost SPNs
October 2025 follow-on to CVE-2025-33073. SMB Server elevation of privilege by combining Kerberos reflection with Ghost SPNs and DNS self-registration.
- CVEWindows SMB Client improper authentication (tampering)
Windows SMB Client improper authentication (CWE-287) that allows tampering. Not an Entra token bug, but it sits in the same Microsoft identity-adjacent patch tr
- CVEWindows SMB Kerberos reflection elevation of privilege
Kerberos authentication reflection on SMB, still abusable via Ghost SPNs after the first fix. High-severity elevation of privilege on Windows.
- BlogA Check Point SmartConsole flaw hands out full admin tokens to unauthenticated attackers
CVE-2026-16232 (CVSS 9.3) lets an unauthenticated remote attacker obtain an application login token for Check Point Security Management and Multi-Domain Managem
- BlogThe developer toolchain is now the busiest identity perimeter
A worm that wipes your home directory when you revoke its stolen token, about 1,900 hijacked GitHub accounts, a publishing trust bound to a reclaimable name, an
By SWI Community Team · Last evaluated 2026-11-05
Independent, community-driven analysis. No vendor sponsorship. Compiled from public research and community input and verified on a best-effort basis, so details may be incomplete or out of date. Scores are opinions, not advice. Trademarks belong to their owners; mention does not imply affiliation or endorsement. See the full disclaimer, or send corrections to community@startwithidentity.com.