Check Point Software Achieves FedRAMP Certification for Check Point WAF, Empowering U.S. Federal Agencies with Prevention-First Application and API Security

WAF joins the Check Point Platform for Government with FedRAMP Certification to protect government agencies from AI-powered cyber threats

REDWOOD CITY, Calif., Nov. 12, 2026 /PRNewswire/ -- Check Point® Software Technologies Ltd. (NASDAQ: CHKP), a pioneer and global leader of cyber security solutions, today announced that Check Point Web Application and API Security platform (WAF) has achieved FedRAMP Certification, expanding the FedRAMP-certified platform Check Point first brought to government in 2025. The addition of Check Point WAF gives federal, state, local, and education agencies prevention-first protection for the web applications, digital services, and AI tools they now run, all through the same government-certified platform they already trust.

The certification comes as government organizations move more services online, deploy citizen self-service portals, and integrate AI into mission-critical workflows. Each new capability creates a new potential entry point for attackers. According to Check Point Research, in August 2026 the average number of weekly cyber-attacks per US government organization reached 1,840, which is a 28% increase year over year. With the increasing deployment of AI, cyber risks are further increasing. Check Point's 2026 Cloud Security Report found that 70% of organizations already run GenAI workloads in production, but most are flying blind. Only 5% have full visibility into how AI is being used, and just 14% actively enforce and audit an AI security policy. This is a gap government agencies can't afford as they bring AI into public-facing services.

"Government agencies are being asked to modernize faster than ever, and that means trusting more of their mission-critical operations to the cloud and to AI. Security can't be the thing that slows that down," said Damon Cabanillas, VP of US Public Sector at Check Point Software. "With FedRAMP Certification for Check Point WAF, we're giving federal agencies a way to move forward with confidence, protecting the applications citizens and employees depend on every day, without compromising on the compliance and trust the government requires."

This expansion of Check Point's FedRAMP-certified platform builds on the company's continued innovation in network and AI security. Check Point was recently named a Leader in the 2026 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall, and a Leader in The Forrester Wave™: Enterprise Firewall Solutions, Q4 2026, following the launch of the first AI Network Firewall. By bringing visibility, governance and protection for AI activity into the network, Check Point is helping organizations, including government agencies, modernize securely while maintaining consistent control across users, applications and infrastructure.

Security Built to Keep Pace with Government's Digital Shift

Today's public sector runs digital citizen portals, cloud-native applications, and AI-enabled services that connect identity, records, contractors, and partner organizations across government. At the same time, attackers are using AI to find and exploit weaknesses faster than traditional, signature-based defenses can keep up. Check Point WAF is built to close that gap in three ways:

• Stop attacks before they land: Check Point WAF pre-emptively blocks known, unknown, and zero-day threats without waiting on signature updates or emergency patches
• Keep essential services online: built-in bot mitigation and DDoS protection defend the citizen- and employee-facing services agencies can't afford to lose
• Secure AI as agencies adopt it: built-in GenAI security blocks prompt injection, data leakage, and harmful content as agencies bring AI into everyday operations

That protection is powered by an AI-driven detection model that learns and adapts to each agency's environment rather than relying on static rules. According to the WAF Comparison Project, Check Point WAF delivers a 99.5% threat detection rate, a 0.56% false positive rate, and blocks 100% of zero-day attacks, including pre-emptively stopping threats such as React2Shell, Log4Shell and Spring4Shell before signatures existed. Most recently, the Check Point WAF engine pre-emptively blocked a remote shell execution attempt connected with two critical vulnerabilities in PHP, the programming language behind a large share of the world's websites, online stores and internet services, which are being actively targeted.

Available Through the FedRAMP Marketplace

Check Point is listed on the FedRAMP Marketplace, with Check Point WAF included in the certification, making it easier for federal mission owners to discover, evaluate, and procure the solution. Learn more in the companion blog.

Follow Check Point on LinkedIn, X, Facebook, YouTube and the Corporate Blog

About Check Point Software Technologies Ltd.
Check Point Software Technologies Ltd. (www.checkpoint.com) is a leading AI-powered, cloud-delivered cyber security platform provider protecting over 100,000 organizations worldwide. Check Point leverages the power of AI everywhere to enhance cyber security efficiency and accuracy through its Check Point Platform, with industry-leading catch rates enabling proactive threat anticipation and smarter, faster response times. The comprehensive platform includes cloud-delivered technologies consisting of Check Point Workspace Security to secure the workspace, Check Point to secure the cloud, Check Point to secure the network, and Check Point Core Services for collaborative security operations and services.

Legal Notice Regarding Forward-Looking Statements
This press release contains forward-looking statements. Forward-looking statements generally relate to future events or our future financial or operating performance. Forward-looking statements in this press release include, but are not limited to, expectations regarding our products and solutions and customer demands, our ability to capture growth opportunities and drive sustainable and steady growth in the future, statements made by our CEO, and our participation in investor conferences and other events during the fourth quarter of 2026. Our expectations and beliefs regarding these matters may not materialize, and actual results or events in the future are subject to risks and uncertainties that could cause actual results or events to differ materially from those projected. These risks include our ability to continue to develop platform capabilities and solutions; customer acceptance and purchase of our existing solutions and new solutions; the market for IT security continues to develop; competition from other products and services; and general market, political, economic, and business conditions, including acts of terrorism or war. The forward-looking statements contained in this press release are also subject to other risks and uncertainties, including those more fully described in our filings with the Securities and Exchange Commission, including our Annual Report on Form 20-F filed with the Securities and Exchange Commission on March 31, 2026. The forward-looking statements in this press release are based on information available to Check Point as of the date hereof, and Check Point disclaims any obligation to update any forward-looking statements, except as required by law.

SOURCE Check Point Software Technologies