The Check Point Services organization is extending its penetration testing capabilities with deeper, adversary-led engagements. Customers can now choose anything from a scoped penetration test to an objective-based engagement. Each engagement shows three things: how an attacker could break into the environment, how far the attacker could get, and whether the security team would detect the attack. And because environments never stand still, the testing is proactive and continuous, not a one-time project.

Key Takeaways

  • Every engagement answers three questions: how an attacker gets in, how far they get, and whether your team detects the attack.
  • You choose the depth: a scoped penetration test to validate specific systems, or an adversary-led engagement that works toward a real objective.
  • Experts lead and agentic tools accelerate. Tools take on repetitive discovery and testing; people decide where to go deeper and how to chain findings.
  • Testing is continuous, so each round reflects what is running today and tracks changes in security effectiveness over time.
  • Delivered through CPR Act, testing joins detection and response to produce measurable evidence, not just protection.

Why Penetration Testing Has to Keep Pace with AI-Driven Attackers

Attackers move fast, and AI is making them faster. Check Point Research’s 2026 AI Security Report shows AI conducting live intrusions with minimal human direction, making attacks more autonomous and harder to anticipate. Attackers rarely need one critical flaw; they chain small weaknesses into a full attack path. Scans and checklist testing validate individual controls, but they don’t show how a determined attacker would move through an environment.

The extended penetration testing closes that gap. Cilynx, a team of specialized security practitioners with deep, hands-on expertise in penetration testing, adversary emulation, and threat hunting, will join the CPR Act team within the services organization. CPR Act is a unified operational framework that brings together research-driven intelligence, readiness, detection, and response. It continues the organization’s mission to elevate customers’ security in practice, with a portfolio of more than 40 services delivered globally.

“Environments change constantly, so testing has to keep pace,” said Eitan Lugassi, VP of the Check Point Services organization. “The extended team lets us go deeper and give customers a current, real-world view of their security, not just a point-in-time snapshot.”

From Scoped Tests to Adversary-Led Engagements

A scoped penetration test finds and validates exploitable vulnerabilities within a defined scope, such as an application, a network segment, or a cloud environment. It answers a clear question: what can be exploited, and how serious is it?

An adversary-led engagement goes further. The team works toward a real objective, using the same tactics, techniques, and procedures as threat actors. Small weaknesses that seem insignificant alone are chained into a complete attack path. That shows how far an attacker could move through an environment, and how quickly security teams detect and respond. Customers can start with a scoped test and move to adversary-led engagements as their security program matures.

Scoped penetration test Adversary-led engagement
Goal Find and validate exploitable vulnerabilities Reach a real objective, as a threat actor would
Typical scope An application, network segment, or cloud environment The environment as an attacker sees it
Method Testing within a defined scope The same TTPs as threat actors, chaining small weaknesses into a complete attack path
Question it answers What can be exploited, and how serious is it? How far could an attacker move, and how quickly do we detect and respond?

Built Around the CISO, Powered by Agentic Tools

Every engagement starts with the CISO. The team works alongside the CISO from the first conversation: shaping the objectives, agreeing on what matters most to the business, and helping decide what to fix first. Because testing is continuous, the same team comes to know the environment in depth and stays with the CISO as it changes.

The experts also use agentic tools to match the pace of AI-driven attackers. The tools take on repetitive discovery and testing work, so a single engagement covers more ground and moves faster. Human judgment leads every engagement: The experts decide where to go deeper, how to chain findings, and what matters most.

Continuous Testing, Not a One-Time Project

Environments never stand still. New applications, cloud services, integrations, and business workflows continuously reshape the attack surface. A one-time test is out of date almost as soon as it ends. That is why we deliver penetration testing as a proactive, continuous program that finds new weaknesses before attackers do. Testing continues as the environment changes, so each round reflects what is running today, reveals patterns over time, and tracks changes in security effectiveness.

From Protection to Proof

CPR Act brings security assessments, architecture reviews, governance consulting, managed detection and response (MDR), and incident response into one operational model. That strengthens visibility, speeds decisions, and delivers consistent protection.

Extended penetration testing, delivered through CPR Act, turns that protection into proof. It tests preventive controls, detection, and response under real conditions. The result is measurable evidence that helps organizations find gaps and prioritize improvements with confidence.

Talk to The Penetration Testing Team

See how a determined attacker would approach your environment. Contact us here.

About the Check Point Services Organization

The Check Point Services organization offers a broad portfolio of cyber security services that help organizations manage risk, build resilience, and stay ahead of evolving threats. More than 5,000 enterprise customers trust it. The portfolio spans proactive assessments, professional services, managed security services, incident response, security training, and more. Backed by Check Point’s threat intelligence and a global team of cyber security experts, it helps organizations protect their IT and AI environments with the expertise they need, when they need it.

You may also like