Stop the email that gets through.
Check Point Harmony Email & Collaboration, delivered and run by Summit Cyber Group. It sits behind your existing filtering and catches what gets past it.
Most attacks still arrive by email. Most of them arrive looking legitimate.
Microsoft 365 and Google Workspace include email filtering, and it stops the obvious material. What it consistently misses is the targeted attack — the supplier invoice with changed bank details, the credential page that looks exactly like your login, the compromised account of someone you already trust.
Start with a 14-day trial. See what is getting through before you decide.
Connect
API authorisation to Microsoft 365 or Google Workspace. We need global admin consent to connect, and that is the only access required. No MX record change, no proxy, no appliance, no agent.
FreeTrial
14 days in detect-only mode. Nothing is blocked and nothing changes for your users.
FreeReview
We walk you through exactly what reached your people during the trial. If it is not compelling, we disconnect and that is the end of it.
FreeOnboard
Policy build, mailbox scoping, allow-list and exception tuning, DMARC records, and handover to your team.
One-offLive
Inline prevention enabled. Threats quarantined before delivery.
MonthlyTwo packages. One decision.
Both cover the attacks that cost organisations money, across email and the collaboration suite. Complete adds five things on top: malware sandboxing, data loss prevention, encryption, 10-year archiving and staff training.
| What's included | Essential | Complete |
|---|---|---|
| Per mailbox / month ‡ | $12.95 | $19.95 |
| Anti-phishing and impersonation protection | ||
| Account takeover protection | ||
| Malicious URL protection (click-time) | ||
| Shadow IT visibility | ||
| DMARC configuration and management | ||
| Protection across OneDrive, SharePoint, Teams and Slack | ||
| Advanced malware sandboxing | — | |
| Data loss prevention | — | |
| Email encryption | — | |
| Email archiving — 10-year retention | — | |
| Security awareness training and phishing simulation † | — |
† Security awareness training is available for Microsoft 365 (Exchange Online) mailboxes. All other protections apply to both Microsoft 365 and Google Workspace.
‡ The rates above apply up to 100 mailboxes. Larger organisations pay less per mailbox — see pricing at scale.
Optional extras — Incident Response as a Service and SaaS Security Posture Management, $2.95 per mailbox per month each, reducing to $2.25 from 1,000 mailboxes. Either can be added or removed at any time, on either package.
The bigger you are, the less you pay per mailbox.
There is nothing to negotiate and nothing to ask for. The band that matches your mailbox count is the band you pay.
| Mailboxes | Essential | Complete |
|---|---|---|
| 1 – 100 | $12.95 | $19.95 |
| 101 – 250 | $11.95 | $18.95 |
| 251 – 500 | $10.95 | $17.95 |
| 501 – 1,000 | $9.95 | $16.95 |
| 1,001 – 2,000 | $8.95 | $15.95 |
| 2,001 – 3,500 | $7.95 | $14.95 |
| More than 3,500 | On application | On application |
The band rate applies to every mailbox, not just the ones above the threshold. At 1,200 mailboxes you pay $8.95 across all 1,200 — not $12.95 for the first hundred and $8.95 for the rest.
Your band is set from your licensed mailbox count at the start of each billing period, so growth is picked up automatically. From 501 mailboxes, band pricing is offered on a 12-month term. Below that the service stays month-to-month with no minimum term.
What that means for a 3,000-mailbox organisation
| Essential | Complete | |
|---|---|---|
| Per mailbox / month | $7.95 | $14.95 |
| Per month | $23,850 | $44,850 |
| Over twelve months | $286,200 | $538,200 |
| Against the entry rate | $180,000 less per year | $180,000 less per year |
At that size the Essential rate is 39% below the entry rate and Complete is 25% below — a difference of $180,000 a year on either package. Onboarding is charged once at the start, and on-call support only if you draw on it.
What's included, and what isn't
Every customer gets full console access. You can see everything we see — quarantine, detections, policy, reporting. Nothing is hidden behind us.
Included in the monthly price
- The platform and licensing
- Summit-managed tenancy
- Adding and removing mailboxes as your headcount changes
- Us as your point of contact with the vendor
Charged separately, so you only pay for what you use
| Onboarding One-off, at the start | From $995 |
| On-call support As and when you want it | $150 per hour |
On-call covers anything to do with the platform: policy changes, tuning, quarantine work, investigating something one of your people reported, extra reporting, or training your team. Billed in 15-minute increments against actual time. No retainer, no minimum, and the same rate on either package.
Some teams handle the day-to-day themselves and call us a couple of times a year. Others hand most of it over. Both work, and you are not locked into either — you simply use as much or as little of us as you want, and pay accordingly.
All pricing in AUD, exclusive of GST, per mailbox per month, billed monthly in arrears. Usage is calculated daily, so adding or removing mailboxes is reflected in your next invoice, and there is no minimum seat count. Up to 500 mailboxes the service is month-to-month with no minimum term; from 501 mailboxes the band rate is offered on a 12-month term. See the pricing notes.
What it costs to start
Getting this right at the start is the difference between a platform that blocks threats and one that irritates your staff. Onboarding covers mailbox scoping, policy build, allow-list and exception tuning through the first weeks, DMARC record configuration, and handover to your team.
| Organisation size | One-off onboarding |
|---|---|
| Up to 50 mailboxes | $995 |
| 51 – 250 mailboxes | $1,950 |
| 251 – 1,000 mailboxes | $3,950 |
| 1,001 – 3,500 mailboxes | $7,950 |
| More than 3,500 mailboxes | Quoted |
Charged only if you proceed after the trial. If you decide not to continue, there is nothing to pay.
Larger rollouts are phased department by department rather than switched on in one step, and the figures above reflect that. They assume a single Microsoft 365 or Google Workspace tenancy and up to five sending domains — if your environment is more involved than that, we will scope it and tell you the number before we start.
What that looks like in practice
| Organisation | Package | Rate | Per month | One-off onboarding |
|---|---|---|---|---|
| 25-person professional services firm | Essential | $12.95 | $323.75 | $995 |
| 50-person engineering consultancy | Complete | $19.95 | $997.50 | $995 |
| 100-person not-for-profit | Essential | $12.95 | $1,295.00 | $1,950 |
| 250-person mining services business | Complete | $18.95 | $4,737.50 | $1,950 |
| 1,200-person health provider | Essential | $8.95 | $10,740.00 | $7,950 |
| 3,000-mailbox enterprise | Essential | $7.95 | $23,850.00 | $7,950 |
| 3,000-mailbox enterprise | Complete | $14.95 | $44,850.00 | $7,950 |
Monthly is the band rate for your mailbox count, multiplied by your mailbox count, billed monthly in arrears. Onboarding is a single charge at the start, and only if you proceed after the trial. On-call support is charged separately, as and when you use it. Illustrative only. AUD, exclusive of GST.
Where this fits Essential Eight and SMB1001
Email security is not a framework on its own. What it does is close a specific set of controls both frameworks ask for — usually the fastest of them to put in place.
ASD Essential Eight
None of the Eight is "email filtering". This service contributes to:
- Configure Office macro settings — macro-laden attachments stopped before delivery, so the control is never tested at the endpoint.
- User application hardening — click-time URL rewriting blocks the malicious page, not the browser.
- Multi-factor authentication — takeover detection catches the session that survives MFA. It supports the control, it does not replace it.
Not covered: patching, application control, admin privileges, backups.
SMB1001
Controls this service delivers or evidences, tier depending:
- Email security filtering — inline prevention across inbound, outbound and internal mail.
- Email authentication — SPF, DKIM and enforced DMARC configured and managed as part of onboarding.
- Security awareness training — included on the Complete package.
- Incident response support — investigation of reported email, via on-call.
Not covered: MFA, backups, EDR, cyber insurance, IR plan documentation.
Indicative mapping to assist your own assessment, not a certification. Confirm against ASD's current maturity model and the SMB1001 tier your customer or insurer asks for.
What usually settles it
It catches what the built-in filtering doesn't
The 14-day trial usually settles this on its own — most organisations are surprised by what is already reaching inboxes.
Business email compromise is the expensive one
A single redirected supplier payment typically costs more than several years of this service.
Internal and outbound mail is scanned too
A compromised account inside your organisation cannot be used to attack your staff, customers or suppliers.
It protects the whole collaboration suite
OneDrive, SharePoint, Teams and Slack are covered on both packages — not just the inbox.
Nothing to install, nothing to maintain
No hardware, no agents, no mail routing changes.
Your people get better at spotting attacks
Awareness training on the Complete package is included, not an afterthought.
The trial costs nothing and commits you to nothing.
We connect the platform in detect-only mode and, at the end of 14 days, show you exactly what is reaching your people today.
The small print
All prices are in Australian dollars and exclusive of GST. Rates are quoted per mailbox per month unless stated otherwise.
Volume band rates apply to the whole mailbox count rather than marginally, and the applicable band is determined by the number of licensed mailboxes at the start of each billing period. Movement into a lower rate applies from the following billing period and is not backdated. From 501 mailboxes, band pricing is offered on a minimum 12-month term; up to 500 mailboxes the service is month-to-month with no minimum term. Usage is calculated daily and invoiced monthly in arrears.
Onboarding is a one-off charge, payable only if you proceed after the trial. The published figures assume a single Microsoft 365 or Google Workspace tenancy and no more than five sending domains; additional tenancies, hybrid or non-standard mail routing, or a concurrent mail migration will be scoped and quoted before any work begins. On-call support is charged at the published hourly rate against actual time in 15-minute increments. Optional extras are charged per mailbox per month for the mailboxes on which they are enabled.
Security awareness training and phishing simulation are available for Microsoft 365 (Exchange Online) mailboxes only. All other protections apply to both Microsoft 365 and Google Workspace. Feature availability is determined by Check Point and may change.
The figures on this page are indicative and do not constitute an offer. Prices are subject to change. Underlying vendor licensing is set by Check Point in United States dollars and is therefore exposed to movements in the AUD/USD exchange rate; published rates may be revised where vendor pricing or exchange rates move materially. A firm price will be provided in a written quotation, which is valid for 30 days from its date of issue and prevails over this page. All services are supplied subject to Summit Cyber Group Pty Ltd's standard terms of business. Errors and omissions excepted.