Pynt
AI-aware API security testing generated from the tests you already run.
Acquired — still operating
acquired by Radware Jan 2026
About
Pynt is an API security testing platform that learns real API behavior from existing test runs, then generates security tests for the endpoints teams forgot they had. Its AI-aware coverage now extends past REST APIs to LLM endpoints and MCP servers, mapped against both the OWASP API Top 10 and the OWASP LLM Top 10, treating prompt injection as another API-layer attack.
The developer-first tool integrates with Postman, Newman, and GitHub Actions, delivering verified vulnerabilities with suggested fixes in minutes and no configuration. Founded in Tel Aviv in 2022, Pynt raised $6 million and was acquired by Radware in January 2026 (directory-reported). Lifecycle note: it now operates within Radware's portfolio.
What it can do
- Security tests auto-generated from real API traffic
- Coverage for LLM endpoints and MCP servers
- Zero-configuration simulated attacks with verified findings
- CI/CD integration with Postman, Newman, and GitHub
Setup
Start from the Postman public workspace, wrap Newman runs, or add the GitHub Action.
Prerequisites
Existing API functional tests in Postman, Newman, or a CI pipeline.
Use cases
Works with
Trust score — 8/10
Scored 8/10 (verified tier, metrics-v1). Evidence: Verified via vendor site/docs/GitHub and reputable coverage, wave 121; Trending score 76/100 from researcher assessment.
Sources
Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.