When a healthcare organization serving more than five million members decides to roll out AI tools across its clinical and administrative operations, the security stakes are immediate and enormous. Clalit Health Services, Israel’s largest HMO, is addressing that challenge head-on by partnering with Check Point Software Technologies to build a dedicated security infrastructure for its growing AI deployment, according to a Calcalist report on the deal.
The partnership puts Check Point’s AI security stack directly inside Clalit’s environment, designed to monitor, govern, and protect AI-generated workflows before they reach patients or practitioners. The timing is deliberate: Clalit has been accelerating its use of large language models and AI-assisted tools for tasks ranging from administrative documentation to clinical decision support. As those tools proliferate, so does the attack surface — a dynamic that’s already reshaping how insurers and health systems think about technology risk, as Future Wire has covered in its reporting on AI healthcare costs.
What the Deal Actually Covers
The agreement centers on deploying Check Point’s Infinity AI Copilot and its broader security platform to oversee AI tool usage across Clalit’s network. That includes real-time threat detection for AI-driven applications, data loss prevention tuned specifically for medical records and protected health information, and policy enforcement that governs which AI tools employees and clinicians can access and under what conditions.
Clalit’s infrastructure is not a small target. The organization operates hundreds of clinics and hospitals, employs tens of thousands of staff, and processes a volume of sensitive patient data that would make it attractive to ransomware groups and state-sponsored actors alike. Securing that environment against conventional threats is already a full-time operation; layering AI pipelines on top introduces new vectors — prompt injection, model manipulation, shadow AI usage — that traditional endpoint and perimeter security was never built to catch.
Why This Partnership Points to a Broader Pattern
Check Point is not the only cybersecurity firm chasing the healthcare AI opportunity, but this deal signals something specific: large legacy health institutions are no longer waiting for consolidated AI governance platforms to mature before they commit. Clalit is moving now, and it’s choosing a known enterprise security vendor rather than a purpose-built AI startup to anchor the effort.
That instinct toward incumbent trust in high-stakes verticals tracks with what’s happening elsewhere in the security market. Data security firms with deep enterprise credentials have been attracting major capital precisely because organizations want proven infrastructure, not pilots — a trend visible in moves like $400 million raise from Goldman Sachs to scale its data security platform. The Clalit-Check Point arrangement fits that same logic applied to AI governance specifically.
For Check Point, landing Clalit is a meaningful reference customer in one of the most sensitive verticals imaginable. Healthcare environments demand audit trails, regulatory compliance, and zero tolerance for data leakage — exactly the conditions that stress-test an AI security platform hardest. If the deployment holds under those constraints, it becomes a compelling proof point for hospital systems and insurers everywhere that are wrestling with the same question: how do you let clinicians benefit from AI without handing adversaries a new way in.
