API Security Testing (Coming Soon) | Check Point WAF

CloudGuard WAF API Security Testing

This feature is currently in active development and is scheduled for release in 2026.

CloudGuard WAF is expanding its Prevention First architecture to the pre-production environment. The upcoming API Security Testing module is designed to identify and remediate vulnerabilities early in the development lifecycle (Shift-Left).

Planned Capabilities

To ensure comprehensive API coverage, this module will include:

• Automated and Manual Tests: supports both fully automated security scans for speed and comprehensive manual testing capabilities for in-depth audits.

• CI/CD Pipeline Integration: seamlessly integrates into existing CI/CD workflows to block vulnerabilities before they are released, enforcing security gates at the build stage.

• API Schema Coverage Analysis: validates testing completeness by comparing existing tests against the API schema. The system identifies any endpoints that lack test coverage, ensuring no part of the API is left unchecked.