## CloudGuard WAF API Security Testing

This feature is currently in active development and is scheduled for release in 2026.

CloudGuard WAF is expanding its Prevention First architecture to the pre-production environment. The upcoming API Security Testing module is designed to identify and remediate vulnerabilities early in the development lifecycle (Shift-Left).

### Planned Capabilities
To ensure comprehensive API coverage, this module will include:

- **Automated and Manual Tests:** supports both fully automated security scans for speed and comprehensive manual testing capabilities for in-depth audits.

- **CI/CD Pipeline Integration:** seamlessly integrates into existing CI/CD workflows to block vulnerabilities before they are released, enforcing security gates at the build stage.

- **API Schema Coverage Analysis:** validates testing completeness by comparing existing tests against the API schema. The system identifies any endpoints that lack test coverage, ensuring no part of the API is left unchecked.