Radware buys Pynt to bolster pre-production API security

Radware has acquired API security testing specialist Pynt, adding pre-production testing to its API security product line.

The buyer said the deal closed and that key Pynt staff, including its founders, have joined Radware. Radware did not disclose financial terms.

Radware said the transaction is not expected to have a material impact on its 2026 financial results.

The acquisition follows Radware's launch of its API Security Service. Radware said it now combines Pynt's testing with its own API discovery, posture management, business logic protection and runtime defence.

Lifecycle focus

APIs sit at the centre of many web and mobile applications. Companies expose APIs to connect services and exchange data. The approach has also expanded the attack surface for cyber criminals, with misconfigurations, weak authentication and business logic flaws often cited as common issues.

Radware positioned the deal around covering the stages of API development and operation. It said security gaps often remain hidden until an API goes live. It said it can now address design and testing as well as deployment and runtime.

"API security cannot stop at the code or start only in production," said Haim Zelikovsky, Vice President, Cloud Security Business, Radware. "With Pynt, we close the gap between shift-left and shift-right strategies, helping customers focus on real API security risk, reduce noise, and protect business-critical APIs with a single, integrated platform."

Radware said Pynt's product will continue to be available as a standalone offering. It also plans to integrate the technology into its broader application security and API protection portfolio.

Testing angle

Pynt markets tools that test APIs before production. Radware said the combination gives customers earlier visibility of API security risks during the development lifecycle. It also said it maintains continuous protection in production.

The company framed the move as part of a unified approach across design, testing, deployment and runtime. It said the integrated portfolio spans API discovery and posture management, alongside runtime protections.

"Becoming part of Radware provides our team with the resources and platform to further develop our vision for modern API security testing while integrating it with industry-leading runtime protection and threat intelligence," said Tzvika Shneider, CEO and Co-Founder, Pynt. "Radware's technology, scale, and commitment to API security make it a great home for our team and our ideas, and together we can deliver far more value to customers."

Market backdrop

The acquisition lands as organisations continue to modernise application architectures and rely more heavily on APIs for internal integration and external access. This has brought API security into sharper focus for security teams and developers, especially as companies add new endpoints more frequently and expose services across multiple cloud environments.

Radware said its portfolio includes application, infrastructure and API security products for multi-cloud environments. It sells into enterprises and carriers, and positions its products around protection from web and application attacks, DDoS attacks, API abuse and automated bot traffic.

The company did not provide a timeline for deeper product integration. It said Pynt remains available as a standalone solution, alongside integration into Radware's wider portfolio.