Stop the email that gets through.
Check Point Harmony Email & Collaboration, delivered and run by Summit Cyber Group. It sits behind your existing filtering and catches what gets past it.
Most attacks still arrive by email. Most of them arrive looking legitimate.
Microsoft 365 and Google Workspace include email filtering, and it stops the obvious material. What it consistently misses is the targeted attack — the supplier invoice with changed bank details, the credential page that looks exactly like your login, the compromised account of someone you already trust.
Start with a 14-day trial. See what is getting through before you decide.
Connect
API authorisation to Microsoft 365 or Google Workspace. We need global admin consent to connect, and that is the only access required. No MX record change, no proxy, no appliance, no agent.
FreeTrial
14 days in detect-only mode. Nothing is blocked and nothing changes for your users.
FreeReview
We walk you through exactly what reached your people during the trial. If it is not compelling, we disconnect and that is the end of it.
FreeOnboard
Policy build, mailbox scoping, allow-list and exception tuning, DMARC records, and handover to your team.
One-offLive
Inline prevention enabled. Threats quarantined before delivery.
MonthlyTwo packages. One decision.
Both cover the attacks that cost organisations money, across email and the collaboration suite. Complete adds five things on top: malware sandboxing, data loss prevention, encryption, 10-year archiving and staff training.
| What's included | Essential | Complete |
|---|---|---|
| Anti-phishing and impersonation protection | ||
| Account takeover protection | ||
| Malicious URL protection (click-time) | ||
| Shadow IT visibility | ||
| DMARC configuration and management | ||
| Protection across OneDrive, SharePoint, Teams and Slack | ||
| Advanced malware sandboxing | — | |
| Data loss prevention | — | |
| Email encryption | — | |
| Email archiving — 10-year retention | — | |
| Security awareness training and phishing simulation † | — |
† Security awareness training is available for Microsoft 365 (Exchange Online) mailboxes. All other protections apply to both Microsoft 365 and Google Workspace.
Both packages are priced per mailbox, per month. Larger organisations pay less per mailbox — see pricing at scale.
Optional extras — Incident Response as a Service and SaaS Security Posture Management, each charged per mailbox per month and stepping down at volume. Either can be added or removed at any time, on either package.
The bigger you are, the less you pay per mailbox.
Per-mailbox rates step down as the deployment grows, and the band rate applies to every mailbox rather than only those above the threshold. A large organisation pays materially less per mailbox than a small one.
Get pricingand we will send the worked numbers for your mailbox count and a firm quote.
What's included, and what isn't
Every customer gets full console access. You can see everything we see — quarantine, detections, policy, reporting. Nothing is hidden behind us.
Included in the monthly price
- The platform and licensing
- Summit-managed tenancy
- Adding and removing mailboxes as your headcount changes
- Us as your point of contact with the vendor
Charged separately, so you only pay for what you use
| Onboarding One-off, at the start | Quoted up front |
| On-call support As and when you want it | On request |
On-call covers anything to do with the platform: policy changes, tuning, quarantine work, investigating something one of your people reported, extra reporting, or training your team. Billed in 15-minute increments against actual time. No retainer, no minimum, and the same rate on either package.
Some teams handle the day-to-day themselves and call us a couple of times a year. Others hand most of it over. Both work, and you are not locked into either — you simply use as much or as little of us as you want, and pay accordingly.
Pricing is quoted in AUD, exclusive of GST, per mailbox per month, billed monthly in arrears. Usage is calculated daily, so adding or removing mailboxes is reflected in your next invoice, and there is no minimum seat count. Up to 500 mailboxes the service is month-to-month with no minimum term; from 501 mailboxes the band rate is offered on a 12-month term. See the pricing notes.
What it costs to start
Onboarding is a one-off charge set by deployment size, covering tenant connection, policy build, exception tuning through the first weeks and handover. It is charged only if you proceed after the trial — if you decide not to continue, there is nothing to pay.
Get pricing and we will confirm the onboarding figure and the monthly cost for your mailbox count before you commit to anything.
Where this fits Essential Eight and SMB1001
Email security is not a framework on its own. What it does is close a specific set of controls both frameworks ask for — usually the fastest of them to put in place.
ASD Essential Eight
None of the Eight is "email filtering". This service contributes to:
- Configure Office macro settings — macro-laden attachments stopped before delivery, so the control is never tested at the endpoint.
- User application hardening — click-time URL rewriting blocks the malicious page, not the browser.
- Multi-factor authentication — takeover detection catches the session that survives MFA. It supports the control, it does not replace it.
Not covered: patching, application control, admin privileges, backups.
SMB1001
Controls this service delivers or evidences, tier depending:
- Email security filtering — inline prevention across inbound, outbound and internal mail.
- Email authentication — SPF, DKIM and enforced DMARC configured and managed as part of onboarding.
- Security awareness training — included on the Complete package.
- Incident response support — investigation of reported email, via on-call.
Not covered: MFA, backups, EDR, cyber insurance, IR plan documentation.
Indicative mapping to assist your own assessment, not a certification. Confirm against ASD's current maturity model and the SMB1001 tier your customer or insurer asks for.
What usually settles it
It catches what the built-in filtering doesn't
The 14-day trial usually settles this on its own — most organisations are surprised by what is already reaching inboxes.
Business email compromise is the expensive one
A single redirected supplier payment typically costs more than several years of this service.
Internal and outbound mail is scanned too
A compromised account inside your organisation cannot be used to attack your staff, customers or suppliers.
It protects the whole collaboration suite
OneDrive, SharePoint, Teams and Slack are covered on both packages — not just the inbox.
Nothing to install, nothing to maintain
No hardware, no agents, no mail routing changes.
Your people get better at spotting attacks
Awareness training on the Complete package is included, not an afterthought.
The trial costs nothing and commits you to nothing.
We connect the platform in detect-only mode and, at the end of 14 days, show you exactly what is reaching your people today.
The small print
All pricing is quoted in Australian dollars and exclusive of GST, per mailbox per month unless stated otherwise.
Volume band rates apply to the whole mailbox count rather than marginally, and the applicable band is determined by the number of licensed mailboxes at the start of each billing period. Movement into a lower rate applies from the following billing period and is not backdated. From 501 mailboxes, band pricing is offered on a minimum 12-month term; up to 500 mailboxes the service is month-to-month with no minimum term. Usage is calculated daily and invoiced monthly in arrears.
Onboarding is a one-off charge, payable only if you proceed after the trial. Additional tenancies, hybrid or non-standard mail routing, or a concurrent mail migration will be scoped and quoted before any work begins. On-call support is charged hourly against actual time in 15-minute increments, at the rate quoted to you. Optional extras are charged per mailbox per month for the mailboxes on which they are enabled.
Security awareness training and phishing simulation are available for Microsoft 365 (Exchange Online) mailboxes only. All other protections apply to both Microsoft 365 and Google Workspace. Feature availability is determined by Check Point and may change.
Nothing on this page constitutes an offer. A firm price will be provided in a written quotation, which is valid for 30 days from its date of issue and prevails over this page. All services are supplied subject to Summit Cyber Group Pty Ltd's standard terms of business. Errors and omissions excepted.