Check Point develops AI network firewall tool

Check Point Software Technologies has developed a software-based AI network firewall capability aimed at providing security teams with visibility over AI use by employees, applications and agents.

The solution has been built into the latest Check Point firewall software release. It is designed to analyse and secure the new class of network traffic that has been introduced by advances in AI, consisting of prompts, autonomous agent actions and other such activity, that traditional firewalls were not developed to detect or secure.

Teams can use the solution to discover both sanctioned and unsanctioned AI apps, agents and tools in use and enforce policies to control access to parts of the network. The AI firewall is also designed to prevent common AI-related attacks such as prompt injection and adversarial inputs.

Check Point Research’s AI Security Report 2026 found that 87–93% of organisations experience at least one high-risk generative AI interaction every month. The share of prompts carrying sensitive personal or company data has meanwhile doubled in a year to represent one in every 25 interactions. The company’s research also found security weaknesses in 40% of 10,000 model context protocol servers, and 15,300 indirect injection payloads hidden within public web pages.

Check Point Chief Product Officer Nataly Kremer said these findings show that AI is transforming the enterprise network.

“With the AI Network Firewall, we are transforming the firewall to secure it,” she said. “The network is where every prompt, model call and agent interaction already converges, yet traditional firewalls were never built to see or govern that activity. By bringing AI security into the firewall organisations already run, we give security teams the visibility and control to enable AI adoption safely, in real time.”

The firewall solution is designed to become part of Check Point’s wider AI Defence Plane, which is a unified control plane for discovering, governing and protecting AI across the network, cloud, applications and APIs.

Check Point says it is also extending central policy management capabilities to Check Point SASE and SD-WAN to enable dynamic zero-trust policy enforcement across IT, operational technology and micro-segmentation tools.

Image credit: iStock.com/MF3d