Quick Answer
Avanan (Check Point Harmony Email and Collaboration) pricing in 2026 is custom-quoted across four tiers. AWS Marketplace 12-month contracts list Harmony Email Advanced at $83.46 per user per year and Harmony Email Complete at $109.14 per user per year. Historical direct Avanan pricing before Check Point acquisition was Protect $4.30 per user per month and Advanced Protect $6 per user per month. Third-party benchmarks place mid-market deployments at $4 to $8 per mailbox per month (Check Point + AWS Marketplace, August 2026).
Harmony Email is the rebranded Avanan product after Check Point's acquisition. The 4-tier structure (Email Only Advanced/Complete, Email and Collaboration Advanced/Complete) is the new packaging standard.
Last verified: Sep 15, 2026.
At a glance
- Harmony Email Advanced $83.46 per user/year (AWS Marketplace 12-month)
- Harmony Email Complete $109.14 per user/year (AWS Marketplace 12-month)
- Historical direct: Protect $4.30-$5/user/mo, Advanced Protect $6/user/mo
- Third-party benchmark $4 to $8 per mailbox per month mid-market
- Email Archiving add-on $51.36 per user/year (10-year retention)
- IRaaS add-on $15 per user/year, DMARC Management $10.70 per user/year
Harmony Email tiers and what each unlocks
Check Point Harmony Email is sold as four tiers across two deployment scopes. Email Only covers Microsoft 365 Email and Gmail. Email and Collaboration extends protection to OneDrive, Teams, Slack, SharePoint, Dropbox, and Google Drive. Each scope has Advanced Protect (full phishing protection) and Complete Protect (Advanced plus DLP). The financial decision sits in scope choice plus Advanced versus Complete, because the bundle differences are capability boundaries rather than incremental feature additions (Check Point, 2026).
| Tier | Scope | What it covers | AWS Marketplace list per user/year |
|---|---|---|---|
| Email Only Advanced Protect | Microsoft 365 Email and Gmail | Anti-phishing, anti-malware, URL protection, sandboxing, CDR, account takeover, Shadow IT | Custom (direct quote) |
| Email Only Complete Protect | Microsoft 365 Email and Gmail | Advanced plus Data Loss Prevention (DLP) | Custom (direct quote) |
| Email and Collaboration Advanced Protect | Microsoft 365, Gmail, OneDrive, Teams, Slack, SharePoint, Google Drive, Dropbox | All Advanced features extended to collaboration apps | $83.46 per user per year |
| Email and Collaboration Complete Protect | Microsoft 365, Gmail, OneDrive, Teams, Slack, SharePoint, Google Drive, Dropbox | All Advanced features plus DLP across collaboration apps | $109.14 per user per year |
The jump from Email Only to Email and Collaboration roughly doubles the per-user line because the scope expansion covers data loss prevention across multiple SaaS platforms rather than just email. For organizations standardized on Microsoft 365 with Teams and SharePoint, the Email and Collaboration scope is required to protect data movement beyond the email channel. For organizations on Google Workspace, the Email Only tier may be sufficient (Check Point, 2026).
Hidden costs and add-on pricing
Three primary add-ons layer on top of the base subscription. Email Archiving runs $51.36 per user per year with up to 10 years of retention for compliance-driven organizations. Incident Response as a Service (IRaaS) runs $15 per user per year for management and remediation of end-user quarantine release requests and phishing reports by a Check Point analyst. DMARC Management runs $10.70 per user per year for quick and safe transition to and maintenance of strict DMARC record (AWS Marketplace, 2026).
The add-ons are commonly required for compliance-mandated deployments. Healthcare organizations running HIPAA programs typically need Email Archiving plus IRaaS for breach response documentation. Financial services organizations typically need DMARC Management plus IRaaS for sender authentication and incident response. A complete Advanced tier with Archiving plus IRaaS plus DMARC lands at approximately $159 per user per year, or $13.25 per user per month at list (AWS Marketplace, 2026).
How Harmony Email compares to Abnormal and Proofpoint
Harmony Email sits in the budget-friendly range versus Abnormal but slightly higher than Proofpoint at AWS Marketplace list. Abnormal Security lists at $20 to $35 per user per year plus Platform Fee for the Inbound base, putting Abnormal above Harmony Email on capability depth for BEC and account takeover. Proofpoint Advanced Bundle at $18 to $35 per user per year at negotiated enterprise pricing undercuts Harmony Email Advanced at $83.46 per user per year on AWS Marketplace list (CostBench + Vendr, August 2026).
Buyers evaluating Harmony Email against Abnormal or Proofpoint should request direct quotes from Check Point rather than relying on AWS Marketplace list pricing. Direct sales negotiations commonly achieve 15 to 25 percent off list for 50 to 250 user deployments, with additional discounts for multi-year terms. Bundling with Check Point Quantum Security Gateways, CloudGuard, or Harmony Endpoint typically unlocks Infinity Platform pricing that reduces the effective per-user rate by 30 to 50 percent versus standalone procurement (Vendr, 2026).
Negotiation levers and contract structure tips
Three predictable levers move the Harmony Email deal. Multi-year three-year commitments unlock 20 to 30 percent additional discount versus annual contracts. Bundling with other Check Point products under the Infinity Platform umbrella unlocks the deepest discounts for organizations already running Check Point infrastructure. Competitive evaluation against Microsoft Defender for Office 365 P2 (bundled in M365 E5 at zero incremental cost) or Abnormal Security drives Check Point to more aggressive pricing (CostBench + Vendr, August 2026).
Buyers should negotiate explicit price escalation caps into multi-year contracts. Standard renewal escalators run 5 to 10 percent annually if not capped at signing. The cleanest approach is to lock pricing flat across the contract term in exchange for the multi-year commitment, or cap escalation at CPI plus 2 percent maximum. Organizations with seasonal headcount should also negotiate mid-contract seat rate locks to avoid true-up at then-current list rates (Vendr, 2026).









