Check Point Software Achieves FedRAMP Certification for Check Point WAF, Empowering U.S. Federal Agencies with Prevention-First Application and API Security

The certification adds WAF to Check Point's existing government platform and its FedRAMP Marketplace offering.

Rhea-AI Summary

Check Point Software Technologies (NASDAQ: CHKP) has achieved FedRAMP Certification for its Web Application and API Security platform, expanding its government-certified offering.

The addition of Check Point WAF extends the FedRAMP-certified platform the company first brought to government in 2025. It provides application and application programming interface protection for federal, state, local and education agencies. Check Point is listed on the FedRAMP Marketplace, with WAF included in the certification, allowing federal mission owners to discover, evaluate and procure the solution.

Positive

• Minor pointFedRAMP Certification for Check Point WAF expands the company's certified government security platform.

Negative

• None.

Key Figures

Threat detection rate: 99.5% False positive rate: 0.56% Zero-day attacks blocked: 100%

Threat detection rate

99.5%

Check Point WAF; WAF Comparison Project

False positive rate

0.56%

Check Point WAF; WAF Comparison Project

Zero-day attacks blocked

100%

Check Point WAF; WAF Comparison Project

Key Terms

fedramp, zero-day, ddos protection, prompt injection, +1 more

5 terms

fedramp regulatory

"has achieved FedRAMP Certification"

FedRAMP (Federal Risk and Authorization Management Program) is a U.S. government initiative that sets security standards for cloud computing services used by federal agencies. It ensures that these online platforms protect sensitive information, similar to how a security system safeguards a building. For investors, FedRAMP indicates that a cloud service meets strict security requirements, which can influence its reliability and trustworthiness in handling data.

zero-day technical

"blocks known, unknown, and zero-day threats"

A zero-day is a software flaw that the maker does not yet know how to fix or has no available patch for, so attackers can exploit it immediately. Investors should care because a successful exploit can cause data breaches, service outages, regulatory fines and lost customer trust—outcomes that can reduce revenue and damage a company’s stock value, similar to a hidden broken lock that lets thieves in before anyone notices.

ddos protection technical

"built-in bot mitigation and DDoS protection"

DDoS protection is a set of tools and services that defend a website or online service against distributed denial-of-service attacks, where many compromised devices flood a target with traffic to slow it down or make it unavailable. For investors, it matters because reliable protection keeps a company’s online operations running—like security guards and extra doors preventing a crowd from blocking entry—helping preserve revenue, customer trust, uptime and avoiding costly outages or regulatory trouble.

prompt injection technical

"blocks prompt injection, data leakage, and harmful content"

A prompt injection is a deliberate attempt to trick an AI system by inserting misleading or malicious instructions into the text it reads, causing the system to behave in unintended ways or reveal sensitive information. Like slipping a fake note into a stack of instructions, it matters to investors because it can lead to data breaches, regulatory breaches, faulty decisions, reputational damage, and unexpected costs for companies that rely on AI-driven tools.

false positive rate technical

"a 0.56% false positive rate"

The false positive rate is the share of cases a test or system flags as positive when in fact nothing is present — like a smoke detector that sounds for burnt toast instead of a real fire. For investors it measures how often a product, clinical test, or algorithm gives misleading alerts, which can drive extra costs, regulatory concerns, lower trust, and affect revenue or adoption forecasts.

AI-generated analysis. How Rhea-AI works. Not financial advice.

See more from StockTitan in Google Search and AI answers. Adds StockTitan as a preferred source · opens Google

Add on Google Not now

WAF joins the Check Point Platform for Government with FedRAMP Certification to protect government agencies from AI-powered cyber threats

REDWOOD CITY, Calif., Nov. 12, 2026 /PRNewswire/ -- Check Point® Software Technologies Ltd. (NASDAQ: CHKP), a pioneer and global leader of cyber security solutions, today announced that Check Point Web Application and API Security platform (WAF) has achieved FedRAMP Certification, expanding the FedRAMP-certified platform Check Point first brought to government in 2025. The addition of Check Point WAF gives federal, state, local, and education agencies prevention-first protection for the web applications, digital services, and AI tools they now run, all through the same government-certified platform they already trust.

The certification comes as government organizations move more services online, deploy citizen self-service portals, and integrate AI into mission-critical workflows. Each new capability creates a new potential entry point for attackers. According to Check Point Research, in August 2026 the average number of weekly cyber-attacks per US government organization reached 1,840, which is a 28% increase year over year. With the increasing deployment of AI, cyber risks are further increasing. Check Point's 2026 Cloud Security Report found that 70% of organizations already run GenAI workloads in production, but most are flying blind. Only 5% have full visibility into how AI is being used, and just 14% actively enforce and audit an AI security policy. This is a gap government agencies can't afford as they bring AI into public-facing services.

"Government agencies are being asked to modernize faster than ever, and that means trusting more of their mission-critical operations to the cloud and to AI. Security can't be the thing that slows that down," said Damon Cabanillas, VP of US Public Sector at Check Point Software. "With FedRAMP Certification for Check Point WAF, we're giving federal agencies a way to move forward with confidence, protecting the applications citizens and employees depend on every day, without compromising on the compliance and trust the government requires."

This expansion of Check Point's FedRAMP-certified platform builds on the company's continued innovation in network and AI security. Check Point was recently named a Leader in the 2026 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall, and a Leader in The Forrester Wave™: Enterprise Firewall Solutions, Q4 2026, following the launch of the first AI Network Firewall. By bringing visibility, governance and protection for AI activity into the network, Check Point is helping organizations, including government agencies, modernize securely while maintaining consistent control across users, applications and infrastructure.

Security Built to Keep Pace with Government's Digital Shift

Today's public sector runs digital citizen portals, cloud-native applications, and AI-enabled services that connect identity, records, contractors, and partner organizations across government. At the same time, attackers are using AI to find and exploit weaknesses faster than traditional, signature-based defenses can keep up. Check Point WAF is built to close that gap in three ways:

• Stop attacks before they land: Check Point WAF pre-emptively blocks known, unknown, and zero-day threats without waiting on signature updates or emergency patches
• Keep essential services online: built-in bot mitigation and DDoS protection defend the citizen- and employee-facing services agencies can't afford to lose
• Secure AI as agencies adopt it: built-in GenAI security blocks prompt injection, data leakage, and harmful content as agencies bring AI into everyday operations

That protection is powered by an AI-driven detection model that learns and adapts to each agency's environment rather than relying on static rules. According to the WAF Comparison Project, Check Point WAF delivers a 99.5% threat detection rate, a 0.56% false positive rate, and blocks 100% of zero-day attacks, including pre-emptively stopping threats such as React2Shell, Log4Shell and Spring4Shell before signatures existed. Most recently, the Check Point WAF engine pre-emptively blocked a remote shell execution attempt connected with two critical vulnerabilities in PHP, the programming language behind a large share of the world's websites, online stores and internet services, which are being actively targeted.

Available Through the FedRAMP Marketplace

Check Point is listed on the FedRAMP Marketplace, with Check Point WAF included in the certification, making it easier for federal mission owners to discover, evaluate, and procure the solution. Learn more in the companion blog.

Follow Check Point on LinkedIn, X, Facebook, YouTube and the Corporate Blog

About Check Point Software Technologies Ltd.
Check Point Software Technologies Ltd. (www.checkpoint.com) is a leading AI-powered, cloud-delivered cyber security platform provider protecting over 100,000 organizations worldwide. Check Point leverages the power of AI everywhere to enhance cyber security efficiency and accuracy through its Check Point Platform, with industry-leading catch rates enabling proactive threat anticipation and smarter, faster response times. The comprehensive platform includes cloud-delivered technologies consisting of Check Point Workspace Security to secure the workspace, Check Point to secure the cloud, Check Point to secure the network, and Check Point Core Services for collaborative security operations and services.

Legal Notice Regarding Forward-Looking Statements
This press release contains forward-looking statements. Forward-looking statements generally relate to future events or our future financial or operating performance. Forward-looking statements in this press release include, but are not limited to, expectations regarding our products and solutions and customer demands, our ability to capture growth opportunities and drive sustainable and steady growth in the future, statements made by our CEO, and our participation in investor conferences and other events during the fourth quarter of 2026. Our expectations and beliefs regarding these matters may not materialize, and actual results or events in the future are subject to risks and uncertainties that could cause actual results or events to differ materially from those projected. These risks include our ability to continue to develop platform capabilities and solutions; customer acceptance and purchase of our existing solutions and new solutions; the market for IT security continues to develop; competition from other products and services; and general market, political, economic, and business conditions, including acts of terrorism or war. The forward-looking statements contained in this press release are also subject to other risks and uncertainties, including those more fully described in our filings with the Securities and Exchange Commission, including our Annual Report on Form 20-F filed with the Securities and Exchange Commission on March 31, 2026. The forward-looking statements in this press release are based on information available to Check Point as of the date hereof, and Check Point disclaims any obligation to update any forward-looking statements, except as required by law.

View original content to download multimedia:https://www.prnewswire.com/news-releases/check-point-software-achieves-fedramp-certification-for-check-point-waf-empowering-us-federal-agencies-with-prevention-first-application-and-api-security-302937848.html

SOURCE Check Point Software Technologies

FAQ

AI-generated questions and answers. How Rhea-AI works. Not financial advice.

What received FedRAMP Certification at Check Point Software (CHKP)?

Check Point's Web Application and API Security platform, WAF, achieved FedRAMP Certification. It joins the company's government platform, which first received FedRAMP certification in 2025.

Where can federal agencies find Check Point's FedRAMP-certified WAF?

Federal agencies can discover, evaluate and procure the solution through the FedRAMP Marketplace, where Check Point is listed with WAF included in its certification.