CloudGuard website screenshot

CloudGuard

Check Point CloudGuard is a Cloud Native Application Protection Platform (CNAPP) that delivers cloud security posture management (CSPM), cloud workload protection (CWPP), code security, network security, and intelligence/CDR capabilities across AWS, Azure, GCP, Alibaba, Oracle, Kubernetes, and on-premises environments. The CloudGuard public REST API (originally Dome9) is used to onboard cloud accounts, run posture assessments, manage compliance bundles, retrieve findings, and configure policies and alerts.

CloudGuard publishes 5 APIs on the APIs.io network, including CloudAccounts API, Compliance API, Findings API, and 2 more. Tagged areas include Check Point, CNAPP, Cloud Security, Compliance, and CSPM.

The CloudGuard catalog on APIs.io includes 1 JSON-LD context and 1 Spectral governance ruleset.

CloudGuard’s developer surface includes authentication, documentation, getting-started guide, support, engineering blog, and 11 more developer resources.

48.7/100 developing ▬ flat Agent 31/100 agent aware Full breakdown ↓
scored 2026-07-28 · rubric v0.6
AccessFreemiumSelf serve⚡ Free to try
9 APIs
Check PointCNAPPCloud SecurityComplianceCSPMCWPPPosture Management

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-28 · rubric v0.6
Composite quality — 48.7/100 · developing
Contract Quality 14.4 / 25
Developer Ergonomics 9.1 / 20
Commercial Clarity 10.0 / 20
Operational Transparency 6.2 / 13
Governance 2.5 / 12
Discoverability 6.5 / 10
Agent readiness — 31/100 · agent aware
Machine-Readable Contract 18 / 18
Agentic Access Contract 10 / 10
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/cloudguard: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 9

Individual APIs this provider publishes, each with its own machine-readable definition.

CloudGuard Workload Protection (CWPP) API

Workload protection capabilities exposed through the CloudGuard platform for Kubernetes admission control, image assurance/CI scanning, runtime protection, and serverless functi...

CloudGuard Code Security (Spectral) API

CloudGuard Code Security (formerly Spectral) provides developer-first SAST, infrastructure-as-code scanning, secrets detection, and SCA via CLI and API integrations into CI/CD p...

CloudGuard WAF API

CloudGuard WAF (CloudGuard AppSec) protects web applications and APIs with contextual machine-learning-based threat prevention; the platform exposes management APIs for policy, ...

CloudGuard Network Security API

CloudGuard Network Security delivers cloud-native firewalling and threat prevention with management APIs for gateway provisioning, rule management, and integrations with CI/CD p...

CloudGuard CloudAccounts API

The CloudAccounts API from CloudGuard — 4 operation(s) for cloudaccounts.

CloudGuard Compliance API

The Compliance API from CloudGuard — 1 operation(s) for compliance.

CloudGuard Findings API

The Findings API from CloudGuard — 5 operation(s) for findings.

CloudGuard Notifications API

The Notifications API from CloudGuard — 2 operation(s) for notifications.

CloudGuard Policies API

The Policies API from CloudGuard — 1 operation(s) for policies.

Scroll for all 9

Open Collections 1

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

Pricing Plans 1

Published pricing tiers and plan structures.

Rate Limits 1

Documented rate limits and quota policies.

Cloudguard Rate Limits

5 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Semantic Vocabularies 1

JSON-LD contexts and semantic vocabularies used across these APIs.

Cloudguard Context

0 classes · 5 properties

JSON-LD

Spectral Rules 1

Spectral governance rulesets for linting and validating these APIs.

CloudGuard API Rules

9 rules · 4 errors 5 warnings

SPECTRAL

Security Posture 2

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Cloudguard Authentication

http · 1 scheme

SECURITY

Cloudguard Domain Security

TLSv1.3 · HSTS · DNSSEC · DMARC

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Cloudguard Agentic Access

17 operations · 11 acting

17 operations · 11 acting

AGENTIC

Resources

Get Started 2

Portal, sign-up, and the first successful call

Documentation 1

Reference material describing how the API behaves

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 2

Pagination, idempotency, versioning, errors, and events

Access & Security 3

Authentication, authorization, and security posture

Operate 3

Status, limits, changes, and where to get help

Commercial 1

Pricing, plans, and the legal terms of use

Company 2

The organization behind the API

Other 1

Properties that don't map to a standard resource type

Source (apis.yml)

apis.yml Raw ↑
aid: cloudguard
url: https://raw.githubusercontent.com/api-evangelist/cloudguard/refs/heads/main/apis.yml
name: CloudGuard
tags:
- Check Point
- CNAPP
- Cloud Security
- Compliance
- CSPM
- CWPP
- Posture Management
type: Index
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: false
  try_now: true
  public: false
  label: Freemium · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/cloudguard.png
access: 3rd-Party
created: '2024-01-01'
modified: '2026-04-26'
position: Consumer
kind: company
x-company: Check Point Software Technologies
description: Check Point CloudGuard is a Cloud Native Application Protection Platform (CNAPP) that delivers cloud security
  posture management (CSPM), cloud workload protection (CWPP), code security, network security, and intelligence/CDR capabilities
  across AWS, Azure, GCP, Alibaba, Oracle, Kubernetes, and on-premises environments. The CloudGuard public REST API (originally
  Dome9) is used to onboard cloud accounts, run posture assessments, manage compliance bundles, retrieve findings, and configure
  policies and alerts.
apis:
- aid: cloudguard:cloudguard-workload-api
  name: CloudGuard Workload Protection (CWPP) API
  tags:
  - Container Security
  - CWPP
  - Image Assurance
  - Kubernetes
  humanURL: https://sc1.checkpoint.com/documents/CloudGuard_Dome9/Documentation/Workload/Overview.htm
  properties:
  - url: https://sc1.checkpoint.com/documents/CloudGuard_Dome9/Documentation/Workload/Overview.htm
    type: Documentation
  description: Workload protection capabilities exposed through the CloudGuard platform for Kubernetes admission control,
    image assurance/CI scanning, runtime protection, and serverless function security.
- aid: cloudguard:cloudguard-code-security-api
  name: CloudGuard Code Security (Spectral) API
  tags:
  - Code Security
  - Secrets Detection
  - SAST
  humanURL: https://docs.spectralops.io/
  properties:
  - url: https://docs.spectralops.io/
    type: Documentation
  description: CloudGuard Code Security (formerly Spectral) provides developer-first SAST, infrastructure-as-code scanning,
    secrets detection, and SCA via CLI and API integrations into CI/CD pipelines.
- aid: cloudguard:cloudguard-waf-api
  name: CloudGuard WAF API
  tags:
  - API Security
  - WAF
  - Web Application Firewall
  humanURL: https://sc1.checkpoint.com/documents/CloudGuard_AppSec/Documentation/Default.htm
  properties:
  - url: https://sc1.checkpoint.com/documents/CloudGuard_AppSec/Documentation/Default.htm
    type: Documentation
  description: CloudGuard WAF (CloudGuard AppSec) protects web applications and APIs with contextual machine-learning-based
    threat prevention; the platform exposes management APIs for policy, asset, and event configuration.
- aid: cloudguard:cloudguard-network-security-api
  name: CloudGuard Network Security API
  tags:
  - Cloud Firewall
  - Network Security
  humanURL: https://www.checkpoint.com/cloudguard/cloud-network-security/
  properties:
  - url: https://www.checkpoint.com/cloudguard/cloud-network-security/
    type: Documentation
  description: CloudGuard Network Security delivers cloud-native firewalling and threat prevention with management APIs for
    gateway provisioning, rule management, and integrations with CI/CD pipelines.
- aid: cloudguard:cloudguard-cloudaccounts-api
  name: CloudGuard CloudAccounts API
  description: The CloudAccounts API from CloudGuard — 4 operation(s) for cloudaccounts.
  humanURL: https://docs.cgn.portal.checkpoint.com/reference
  tags:
  - CloudAccounts
  properties:
  - type: OpenAPI
    url: openapi/cloudguard-cloudaccounts-api-openapi.yml
  - type: Documentation
    url: https://docs.cgn.portal.checkpoint.com/reference
  - type: Authentication
    url: https://sc1.checkpoint.com/documents/CloudGuard_Dome9/Documentation/API-Authentication.html
  - type: Terraform Provider
    url: https://registry.terraform.io/providers/dome9/dome9/latest/docs
- aid: cloudguard:cloudguard-compliance-api
  name: CloudGuard Compliance API
  description: The Compliance API from CloudGuard — 1 operation(s) for compliance.
  humanURL: https://docs.cgn.portal.checkpoint.com/reference
  tags:
  - Compliance
  properties:
  - type: OpenAPI
    url: openapi/cloudguard-compliance-api-openapi.yml
  - type: Documentation
    url: https://docs.cgn.portal.checkpoint.com/reference
  - type: Authentication
    url: https://sc1.checkpoint.com/documents/CloudGuard_Dome9/Documentation/API-Authentication.html
  - type: Terraform Provider
    url: https://registry.terraform.io/providers/dome9/dome9/latest/docs
- aid: cloudguard:cloudguard-findings-api
  name: CloudGuard Findings API
  description: The Findings API from CloudGuard — 5 operation(s) for findings.
  humanURL: https://docs.cgn.portal.checkpoint.com/reference
  tags:
  - Findings
  properties:
  - type: OpenAPI
    url: openapi/cloudguard-findings-api-openapi.yml
  - type: Documentation
    url: https://docs.cgn.portal.checkpoint.com/reference
  - type: Authentication
    url: https://sc1.checkpoint.com/documents/CloudGuard_Dome9/Documentation/API-Authentication.html
  - type: Terraform Provider
    url: https://registry.terraform.io/providers/dome9/dome9/latest/docs
- aid: cloudguard:cloudguard-notifications-api
  name: CloudGuard Notifications API
  description: The Notifications API from CloudGuard — 2 operation(s) for notifications.
  humanURL: https://docs.cgn.portal.checkpoint.com/reference
  tags:
  - Notifications
  properties:
  - type: OpenAPI
    url: openapi/cloudguard-notifications-api-openapi.yml
  - type: Documentation
    url: https://docs.cgn.portal.checkpoint.com/reference
  - type: Authentication
    url: https://sc1.checkpoint.com/documents/CloudGuard_Dome9/Documentation/API-Authentication.html
  - type: Terraform Provider
    url: https://registry.terraform.io/providers/dome9/dome9/latest/docs
- aid: cloudguard:cloudguard-policies-api
  name: CloudGuard Policies API
  description: The Policies API from CloudGuard — 1 operation(s) for policies.
  humanURL: https://docs.cgn.portal.checkpoint.com/reference
  tags:
  - Policies
  properties:
  - type: OpenAPI
    url: openapi/cloudguard-policies-api-openapi.yml
  - type: Documentation
    url: https://docs.cgn.portal.checkpoint.com/reference
  - type: Authentication
    url: https://sc1.checkpoint.com/documents/CloudGuard_Dome9/Documentation/API-Authentication.html
  - type: Terraform Provider
    url: https://registry.terraform.io/providers/dome9/dome9/latest/docs
common:
- type: AgenticAccess
  url: agentic-access/cloudguard-agentic-access.yml
- type: DomainSecurity
  url: security/cloudguard-domain-security.yml
- type: Authentication
  url: authentication/cloudguard-authentication.yml
- type: Website
  url: https://www.checkpoint.com/cloudguard/
- type: Documentation
  url: https://docs.cgn.portal.checkpoint.com/
- type: DeveloperPortal
  url: https://docs.cgn.portal.checkpoint.com/reference
- type: GettingStarted
  url: https://sc1.checkpoint.com/documents/CloudGuard_Dome9/Documentation/Getting-Started/Getting-started-with-CloudGuard.htm
- type: Authentication
  url: https://sc1.checkpoint.com/documents/CloudGuard_Dome9/Documentation/API-Authentication.html
- type: Support
  url: https://support.checkpoint.com/
- type: Community
  url: https://community.checkpoint.com/
- type: StatusPage
  url: https://status.dome9.com/
- type: PrivacyPolicy
  url: https://www.checkpoint.com/privacy/
- type: Terraform Provider
  url: https://registry.terraform.io/providers/dome9/dome9/latest/docs
- type: JSONLD
  url: json-ld/cloudguard-context.jsonld
- type: Spectral
  url: rules/cloudguard-rules.yml
- type: Blog
  url: https://blog.checkpoint.com/feed/
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
specificationVersion: '0.19'