GigaOm Names Check Point Software a Leader and Fast Mover in Application and API Security

Q: What did GigaOm say about Check Point WAF in the April 2, 2026 report for CHKP?

GigaOm positioned Check Point as a Leader and Fast Mover in Application and API Security. According to Check Point, the report cites 99.3% detection and 0.81% false positives and praises WAAP, API discovery, and CI/CD integrations.

Q: How effective is Check Point WAF according to the 2026 GigaOm testing for CHKP?

Check Point WAF achieved a 99.3% detection rate with 0.81% false positives in 2026 testing. According to Check Point, this demonstrates high security efficacy while minimizing disruptions to legitimate traffic and availability.

Rhea-AI Impact

(Neutral)

Rhea-AI Sentiment

(Neutral)

Rhea-AI Summary

Check Point (NASDAQ: CHKP) was named a Leader and Fast Mover in GigaOm's April 2, 2026 Application and API Security Radar, marking its third consecutive year in a leadership position. The report highlights Check Point WAF's 99.3% detection rate and 0.81% false positives, plus unified WAAP, API discovery, CI/CD integrations, and hybrid cloud protections that prioritize high accuracy with low disruption.

Positive

99.3% detection rate in 2026 WAF comparison testing
0.81% false positives, indicating high accuracy with low disruption
Third consecutive year as a GigaOm Leader in Application and API Security
Automated API discovery and schema validation for scalable API protection
CI/CD and Terraform integrations embed security into development pipelines

Negative

None.

Key Figures

GigaOm solutions assessed: 17 solutions Detection rate: 99.3% False positive rate: 0.81% +4 more

7 metrics

GigaOm solutions assessed 17 solutions 2026 Application and API Security Radar report

Detection rate 99.3% 2026 WAF comparison testing for Check Point WAF

False positive rate 0.81% 2026 WAF comparison testing for Check Point WAF

Shares outstanding 105,596,035 shares Ordinary shares outstanding in 2025 Form 20-F

Cash and investments $4,342 million Cash, cash equivalents and investments in 2025 Form 20-F

Israeli tax settlement NIS 223.2 million (~$66 million) Tax settlement for 2016–2020 in 2025 Form 20-F

Convertible Senior Notes $2.0 billion, 0.00% Convertible Senior Notes due 2030 in 2025 Form 20-F

Market Reality Check

Price: $145.76 Vol: Volume 1,161,779 is 31% a...

normal vol

$145.76 Last Close

Volume Volume 1,161,779 is 31% above the 20-day average of 886,948, signaling elevated interest into this recognition. normal

Technical Shares at $145.76 trade below the 200-day MA of $189.13 and sit 37.65% under the 52-week high, about 7.32% above the 52-week low.

Peers on Argus

CHKP gained 2.04% while key peers were mixed: FFIV up 1.66%, but IOT, NTNX, GDDY...

1 Up

CHKP gained 2.04% while key peers were mixed: FFIV up 1.66%, but IOT, NTNX, GDDY, and GEN declined between 0.37% and . With only one momentum peer (CPAY up ~2%) and no broad upside in close comparables, the reaction appears stock-specific to the GigaOm leadership recognition rather than a sector-wide move.

Historical Context

5 past events · Latest: Mar 23 (Positive)

Pattern 5 events

Date	Event	Sentiment	Move	Catalyst
Mar 23	AI security launch	Positive	-1.0%	Introduced unified AI Defense Plane for AI security governance and control.
Mar 23	AI blueprint release	Positive	-1.0%	Released AI Factory Security Architecture Blueprint for private AI infrastructure.
Mar 19	Advisory board launch	Positive	+0.9%	Formed Executive Advisory Board to guide AI-driven cybersecurity innovation.
Mar 17	Product integration	Positive	+0.7%	Enabled email security telemetry integration with CrowdStrike Falcon SIEM.
Mar 05	Service launch	Positive	+4.1%	Launched Secure AI Advisory Service for governance and regulatory compliance.

Pattern Detected

Recent AI and product/security launches generally saw modest positive alignment between news and price, with a couple of AI-focused announcements met by small negative moves.

Recent Company History

Over the past month, CHKP has focused on AI-driven and platform integrations. On March 5, 2026, a Secure AI Advisory Service launch saw a 4.07% gain. Subsequent integrations and AI security initiatives on March 17–23 brought smaller moves between -0.97% and 0.89%. Today’s GigaOm leadership recognition reinforces the narrative of strong AI-era application and API security capabilities, consistent with the company’s recent emphasis on AI governance, reference architectures, and ecosystem integrations.

Market Pulse Summary

This announcement highlights independent validation of Check Point’s WAF and API security, including...

Analysis

This announcement highlights independent validation of Check Point’s WAF and API security, including a 99.3% detection rate with only 0.81% false positives in 2026 testing. It reinforces the company’s positioning around AI-era application protection and integrated hybrid-cloud security. Recent history shows a steady stream of AI-focused launches and ecosystem integrations. Against a balance sheet with $4,342 million in cash and investments but also tax and note obligations, investors may watch how such recognition translates into adoption across critical infrastructure and AI workloads.

Key Terms

waf, api, waap, ci/cd, +3 more

7 terms

waf technical

"The analysis recognizes Check Point WAF its high detection accuracy..."

A Web Application Firewall (WAF) is a security layer that sits in front of a company’s websites and online services to block attacks like data theft, fraud, and automated hacking. Investors care because a strong WAF reduces the risk of costly outages, regulatory fines, and reputation damage—much like a lock on a store that lowers the chance of a break-in and protects ongoing sales and customer trust.

api technical

"protect modern web applications and APIs without disrupting legitimate traffic..."

An API, or Application Programming Interface, is a set of rules that allows different software programs to communicate and work together smoothly, much like a waiter translating your order into the kitchen and then bringing your meal back. For investors, APIs are important because they enable real-time access to financial data, trading systems, and other digital services, making it easier to make informed decisions quickly and efficiently.

waap technical

"deliver comprehensive Web Application and API Protection (WAAP) capabilities..."

WAAP (Web Application and API Protection) is a category of cybersecurity tools that guard websites and application programming interfaces (APIs) against attacks like data theft, fraud and service outages. For investors, WAAP matters because breaches or downtime can hit a company’s sales, regulatory standing and reputation—think of it as a digital security guard and filter that helps keep customer data safe and services running smoothly.

ci/cd technical

"With CI/CD integrations, Terraform infrastructure-as-code support..."

CI/CD stands for Continuous Integration and Continuous Delivery (or Deployment), a set of practices and tools that automate the building, testing and releasing of software so code changes reach users quickly and reliably. Think of it as an assembly line that checks each new part before it leaves the factory. For investors, CI/CD lowers the risk of costly bugs, speeds product improvements, reduces development costs, and makes a company’s road map and revenue more predictable.

infrastructure-as-code technical

"Terraform infrastructure-as-code support, and an API-first architecture..."

Infrastructure-as-code is a method of managing and provisioning computing resources — servers, networks, storage and cloud services — by writing and running text files that describe the desired setup instead of configuring systems by hand. For investors it matters because it makes technology changes faster, more consistent and easier to audit, reducing operational risk and costs while enabling rapid scaling and predictable deployments, like using a blueprint and automated factory instead of manual assembly.

zero-day exploits technical

"protection against sophisticated automated attacks, zero-day exploits and emerging API threats..."

A zero-day exploit is an attack that takes advantage of a software or hardware flaw that the maker does not yet know about and therefore has no fix for; think of it as a lock on a safe that nobody knew was broken until a thief used it. For investors, these exploits matter because they can cause sudden data breaches, operational outages, regulatory fines or reputational damage that quickly reduce a company’s value and increase costs for remediation and security upgrades.

microservices technical

"As organizations increasingly rely on APIs, microservices, and AI-driven applications..."

Microservices are a way of designing software systems as a collection of small, independent parts that work together to perform a larger function. Each part handles a specific task, making the system more flexible and easier to update or fix. For investors, understanding microservices can reveal how a company's technology is structured, potentially impacting its agility, efficiency, and ability to innovate.

AI-generated analysis. Not financial advice.

04/02/2026 - 09:00 AM

Check Point WAF recognized for industry‑leading detection and a unified platform that protects modern web and AI‑driven applications with simplicity and speed

REDWOOD CITY, Calif., April 2, 2026 /PRNewswire/ -- Check Point® Software Technologies Ltd. (NASDAQ: CHKP), a pioneer and global leader of cyber security solutions, today announced that GigaOm has named Check Point a Leader in its Application and API Security Radar report, marking its third consecutive year in a leadership position. The analysis recognizes Check Point WAF its high detection accuracy and ability to protect modern web applications and APIs without disrupting legitimate traffic or business operations.

"Our evaluation shows that Check Point delivers precise, reliable protection against sophisticated automated attacks, zero-day exploits and emerging API threats," said Kirk Ryan, analyst at GigaOm. "Check Point WAF performs exceptionally well in high security environments where accuracy is critical and false positives must remain low, while still preserving the performance and availability that digital businesses depend on."

GigaOm assessed 17 leading application and API security solutions, and positioned Check Point in the Maturity and Platform Play quadrant. The report highlights Check Point's ability to deliver comprehensive Web Application and API Protection (WAAP) capabilities that protect modern applications across hybrid and multi-cloud environments while simplifying operational management.

Additional key strengths highlighted in the report include:

Stronger threat protection with fewer disruptions: Check Point WAF's dual AI engine architecture combines pattern recognition with contextual and behavioral analysis to detect sophisticated and unknown zero-day threats with high accuracy, without relying on signatures or manual tuning. This helps organizations block attacks while minimizing false positives that can interrupt legitimate traffic
Simplified and more reliable API protection: Automated API discovery, schema validation, and built-in protections against common API attacks such as BOLA and BOPA help organizations quickly identify exposed APIs and secure them as environments scale
Security integrated into modern development workflows: With CI/CD integrations, Terraform infrastructure-as-code support, and an API-first architecture, Check Point WAF enables security teams and developers to embed protection directly into development pipelines, supporting faster releases while maintaining strong security and compliance

The report also highlights Check Point's focus on delivering strong security efficacy. In the 2026 WAF comparison testing, Check Point achieved a 99.3% detection rate with only 0.81% false positives. Check Point WAF also scored above the market average across key evaluation criteria including machine learning capabilities, security event management, and core protection.

Integrated with Check Point's Hybrid Mesh Network Security architecture, the platform enables unified protection across network, cloud, and application layers, helping organizations reduce complexity while strengthening their overall security posture.

As organizations increasingly rely on APIs, microservices, and AI-driven applications, security teams must protect rapidly expanding attack surfaces without slowing down innovation. Check Point WAF extends protection beyond traditional WAAP capabilities by helping organizations secure emerging AI-enabled applications and services.

"Applications and APIs are the backbone of modern digital businesses," said Paul Barbosa, VP of Cloud Security at Check Point Software Technologies. "GigaOm's recognition highlights how Check Point WAF enables customers to operate in prevention mode from day one, delivering accurate protection with the simplicity needed for modern and AI-driven applications. This approach allows us to stop emerging threats early, as seen when Check Point WAF protected customers from React2Shell before it was exploited in the wild."

Check Point WAF protects the applications behind online banking, government services, retail platforms, critical infrastructure, and emerging AI workloads. The platform helps ensure legitimate users can access services without disruption while automatically blocking zero-day attacks and advanced API abuse.

Download the Report

Download the GigaOm Radar for Application and API Security to see how Check Point leads in prevention-first security, exceptional security efficacy, and cloud‑native innovations.

Follow Check Point on LinkedIn, X (formerly Twitter), Facebook, YouTube and our blog.

About Check Point Software Technologies Ltd.

Check Point Software Technologies Ltd. (www.checkpoint.com) is a global cyber security leader protecting more than 100,000 organizations worldwide. Its mission is to secure enterprises' AI transformation. With a prevention-first approach and an open ecosystem architecture, Check Point helps organizations block advanced threats, prioritize exposures, and automate security operations across complex digital environments. The unified architecture simplifies protection across hybrid networks, multi-cloud environments, digital workspaces, and AI systems. Structured around four strategic pillars, Hybrid Mesh Network Security, Workspace Security, Exposure Management, and AI Security, Check Point delivers consistent protection and visibility across multivendor environments, enabling organizations to reduce risk, improve efficiency, and accelerate innovation without increasing complexity.

Legal Notice Regarding Forward-Looking Statements
This press release contains forward-looking statements. Forward-looking statements generally relate to future events or our future financial or operating performance. Forward-looking statements in this press release include, but are not limited to, statements related to our expectations regarding our products and solutions, our expectations regarding future growth, the expansion of Check Point's industry leadership, the enhancement of shareholder value and the delivery of an industry-leading cyber security platform to customers worldwide. Our expectations and beliefs regarding these matters may not materialize, and actual results or events in the future are subject to risks and uncertainties that could cause actual results or events to differ materially from those projected. The forward-looking statements contained in this press release are also subject to other risks and uncertainties, including those more fully described in our filings with the Securities and Exchange Commission, including our Annual Report on Form 20-F filed with the Securities and Exchange Commission on March 31, 2026. The forward-looking statements in this press release are based on information available to Check Point as of the date hereof, and Check Point disclaims any obligation to update any forward-looking statements, except as required by law.

View original content to download multimedia:https://www.prnewswire.com/news-releases/gigaom-names-check-point-software-a-leader-and-fast-mover-in-application-and-api-security-302732408.html

SOURCE Check Point Software Technologies

FAQ

What did GigaOm say about Check Point WAF in the April 2, 2026 report for CHKP?

GigaOm positioned Check Point as a Leader and Fast Mover in Application and API Security. According to Check Point, the report cites 99.3% detection and 0.81% false positives and praises WAAP, API discovery, and CI/CD integrations.

How effective is Check Point WAF according to the 2026 GigaOm testing for CHKP?

Check Point WAF achieved a 99.3% detection rate with 0.81% false positives in 2026 testing. According to Check Point, this demonstrates high security efficacy while minimizing disruptions to legitimate traffic and availability.

What API protection features did GigaOm highlight for Check Point (CHKP)?

GigaOm highlighted automated API discovery, schema validation, and protections against BOLA and BOPA. According to Check Point, these features help identify exposed APIs quickly and secure them as environments scale.

How does Check Point WAF integrate with development workflows for CHKP customers?

Check Point WAF offers CI/CD integrations and Terraform support to embed security into pipelines. According to Check Point, this API-first approach enables faster releases while maintaining security and compliance across environments.

Which environments does the GigaOm report say Check Point WAF protects for CHKP?

The report notes protection across hybrid and multi-cloud environments and integration with Hybrid Mesh Network Security. According to Check Point, this enables unified protection across network, cloud, and application layers.

What operational benefits for customers did GigaOm attribute to Check Point WAF (CHKP)?

GigaOm credited Check Point with blocking sophisticated attacks while keeping false positives low to avoid business disruption. According to Check Point, the platform preserves performance and availability important to digital businesses.

GigaOm Names Check Point Software a Leader and Fast Mover in Application and API Security