What Pynt does

Pynt is an Israeli API security testing company founded in 2022, headquartered in Sarona, Israel with US incorporation in Wilmington, Delaware. It builds a context-aware, shift-left security testing platform that discovers and tests traditional APIs, LLM-backed APIs, and Model Context Protocol (MCP) endpoints. The platform ingests real API traffic from sources including Postman, Burp Suite, Selenium, HAR files, and live eBPF or ALB mirrors, then runs automated attack simulations aligned to the OWASP API Top 10, OWASP LLM Top 10, and Pynt's own vulnerability taxonomy. Core modules include API Discovery, Behavior-Based Discovery & Testing, API Security Testing, LLM Security Testing, MCP Runtime (an agent-based firewall for MCP endpoints), MCP Server, and an Automated Pen-testing Report. Pynt monetizes via annual commercial subscriptions with a 30-day freemium evaluation tier and combines a product-led growth motion (self-serve, CLI-first, integrated into Postman/Burp/Selenium) with enterprise field sales targeting Healthcare, FinTech, and eCommerce verticals; named customers include Telefonica, AON, Halodoc, Stryker, and Cyber Risk Management Group. The company raised a $6 million seed round in September 2023 led by Joule Ventures, joined the Microsoft for Startups Pegasus Program in November 2025, and was acquired by Nasdaq-listed Radware Ltd. (RDWR) on January 26, 2026, after which it operates as a wholly-owned subsidiary with its technology available both standalone and integrated into Radware's API security portfolio.

Name

Pynt

Legal name

Pynt, Inc.

Website

https://pynt.io

Company type

Private

Founded year

2022

Operating status

Acquired

Headcount range

51–100 employees

Short description

Pynt is an Israeli API security platform (founded 2022) that uses context-aware attack simulation to discover and test traditional, LLM, and MCP APIs, integrating natively with Postman, Burp Suite, and major CI/CD tools; now a wholly-owned subsidiary of Radware following its January 2026 acquisition.

Ownership category

akta.pro rank

Product category

API Security Testing

NAICS

Computer Systems Design and Related Services (54151)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Endpoint Security Managed Services (EDR/XDR) (BPAEADAH)

Keywords

• API security testing
• LLM security testing
• Shift-left security
• Automated penetration testing
• CI/CD security integration

Headquarters

HQ city

Sarona

HQ country

Israel

HQ region

Middle East

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations

Revenue model

1. Subscription Software: Software licensed on a subscription basis with rights to use the Software limited to the subscription period. Option to extend subscription for continued access. Non-extension requires discontinuation of use and complete removal of software.

Pricing tiers

Go-to-market motion2 records

Distribution channels4 records

Marketing channels6 records

Core offering

Pynt provides an AI-aware API security platform that discovers and tests traditional APIs, LLM APIs, and Model Context Protocol (MCP) endpoints using context-aware attack simulation that mirrors real-world attack journeys rather than synthetic fuzzing. The platform is delivered as subscription software with native integrations into developer tools (Postman, Burp Suite, Selenium) and CI/CD pipelines, enabling shift-left automated security testing with zero configuration. Customers include 500+ global brands in FinTech, Healthcare, eCommerce, Telecommunications, and Insurance verticals.

Product overview

Pynt is an AI-aware API security platform that offers a unified solution for discovering and securing traditional APIs, LLM APIs, and MCP (Model Context Protocol) tools. The platform consists of six core modules: API Discovery (live-traffic inventory), LLM Discovery (reveal LLM APIs in code), Behavior-Based Discovery & Testing (real API behavior inventory), API Security Testing (real exploit simulation), LLM Security Testing (OWASP LLM Top 10), and MCP Runtime (agent-based MCP firewall). Pynt also provides an MCP Server integration, Automated Pen-testing Reports, and Sensitive Data Exposure detection. The platform is designed for shift-left security testing, integrating natively with developer tools like Postman, Burp Suite, and Selenium, as well as CI/CD pipelines including GitHub Actions, GitLab, Jenkins, and Azure DevOps.

Differentiator

Problem solved

Functional benefit

Products and services

• Pynt API Discovery Live-traffic API inventory product that captures and analyzes actual API traffic (testing-tool logs, browser/Burp logs, eBPF, ALB mirroring) to build a comprehensive catalog of external, internal, shadow, and undocumented API endpoints. Sold to enterprise development and AppSec teams needing an accurate API asset inventory.
• LLM Discovery Reveals LLM APIs hidden in application code by analyzing codebases to identify Large Language Model integrations. Targets enterprise teams adopting generative AI who need visibility into LLM-enabled APIs.
• Behavior-Based Discovery & Testing Uses real API behavior to build a complete inventory and improve security tests by understanding actual API usage patterns. Sold to enterprise AppSec teams needing context-driven discovery and testing.
• API Security Testing Automated security testing that uses real exploits rather than synthetic fuzzing to identify API vulnerabilities aligned with the OWASP Top 10. Targets developers and AppSec engineers needing fast, accurate, CI/CD-integrated testing.
• LLM Security Testing Tests LLMs against the OWASP LLM Top 10 vulnerabilities to identify security risks in LLM implementations. Sold to enterprise teams deploying generative AI who need automated LLM-specific security testing.
• MCP Runtime Agent-based Model Context Protocol (MCP) firewall enabling full disable or control of MCP tools and connections. Sold to enterprise teams adopting MCP-enabled AI agents that need runtime protection.
• MCP Server Model Context Protocol server integration enabling AI agents to interact with and secure APIs through the MCP standard. Sold to enterprise teams building AI agent workflows.
• Automated Pen-testing Report

Quantifiable outcome

• 12X faster API security testing compared to manual testing
• +2 more outcomes

Named customers6 records

Segments4 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration18 records

AI capability4 records

Feature7 records

Partnerships

Nine partnerships are on record, tiered flagship and core.

• RadwareflagshipStrategic or Co-development Partner · 26 January 2026Radware acquired Pynt on January 26, 2026, integrating Pynt's pre-production API security testing capabilities with Radware's existing API Security Service. The acquisition enables continuous, risk-driven API security across development and production stages. Key Pynt employees including founders joined Radware. Pynt technology remains available as standalone and integrated component.
• Microsoft for StartupscoreGTM or Marketing Partner · 20 November 2025Pynt was selected for the Microsoft for Startups Pegasus Program in November 2025, aiming to help high-growth startups scale reach and strengthen enterprise readiness. The collaboration provides access to Microsoft's sales channels, cloud infrastructure, and technical resources to expand API security offerings globally.
• PostmancoreTechnology or IntegrationNative integration with Postman API testing platform, enabling automated security testing directly within the Postman workflow.
• Burp SuitecoreTechnology or IntegrationNative integration with PortSwigger's Burp Suite, allowing Pynt to ingest XML recordings from Burp and generate deeper, automated security tests based on real traffic.
• SeleniumcoreTechnology or IntegrationNative integration with Selenium browser automation framework for API security testing integration.
• GitHub ActionscoreTechnology or IntegrationCI/CD pipeline integration with GitHub Actions for automated security testing in development workflows.
• GitLabcoreTechnology or IntegrationCI/CD pipeline integration with GitLab for automated security testing in development workflows.
• JenkinscoreTechnology or IntegrationCI/CD pipeline integration with Jenkins for automated security testing in development workflows.
• Azure DevOpscoreTechnology or IntegrationCI/CD pipeline integration with Azure DevOps for automated security testing in development workflows.

Scale indicators8 records

Recent moves6 records

Direct peers

• StackHawk: Developer-first application and API security testing platform with shift-left CI/CD integration. Closely comparable to Pynt in target buyer (developers/AppSec), DAST/API testing focus, and PLG motion.
• PortSwigger (Burp Suite): Creator of Burp Suite, the dominant penetration testing platform that Pynt directly integrates with and explicitly compares against on its website. Targets the same developer and security-tester persona for API and web app testing.
• Salt Security: API security platform focused on runtime API protection and behavioral analysis. Competes with Pynt for API security budget at enterprise customers, though with a runtime rather than pre-production focus.
• Noname Security: API posture management and runtime API security vendor. Competes with Pynt for enterprise API security spend, particularly in regulated industries like financial services.
• 42Crunch: API security platform combining design-time auditing, testing, and runtime protection. Overlaps with Pynt on shift-left API testing and developer-tool integrations.
• Traceable AI: API security and observability vendor with shift-left testing and runtime protection. Targets the same AppSec and platform-engineering buyers as Pynt.
• DataTheorem: Mobile and API security testing vendor with shift-left and runtime coverage. Comparable to Pynt in serving developer and AppSec teams with automated testing integrated into CI/CD.
• Wallarm: API security platform offering discovery, testing, and runtime protection for APIs. Competes with Pynt for enterprise API security budgets, particularly in cloud-native environments.

Broad incumbents

• Invicti (Netsparker): Established web application and API security testing vendor (Netsparker/Acunetix). Broader application security portfolio than Pynt but overlaps directly on DAST and API scanning for enterprises.

Emerging players

• Astra Security: Continuous automated penetration testing platform with API and web app security scanning. Smaller and more SMB-leaning than Pynt, but with overlapping testing-as-a-service functionality.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/pynt_io
• GitHubgithub.com/pynt-io/pynt
• YouTubeyoutube.com/channel/UChVWpFhgkeiTIfH71IJmd6g
• LinkedInlinkedin.com/company/pynt

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds1 record

Investors4 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Pynt