One of only five vendors to meet both of SecureIQLab’s “Secure by Design” and “Secure by Default” criteria
SAN FRANCISCO, Sept. 15, 2026 /PRNewswire/ — Harness, the platform for the autonomous SDLC, announced that SecureIQLab has named Harness Web Application & API Protection (WAAP) a Leader in its Cloud WAAP v5.0 CyberRisk Validation Comparative Report. The analysis involved lab testing across 12 leading Cloud WAAP vendors. Harness was one of just six to earn Leader status, and one of only five to meet SecureIQLab’s Secure by Design and Secure by Default criteria. Harness, whose solution was published as Traceable by Harness in SecureIQLab’s 2025 Cloud WAAP v4.0 CyberRisk Validation, was classified as a Leader in both the 2025 and 2026 evaluations, and met both criteria in both years.
The Results We’re Proud Of
The SecureIQLab results reflect how Harness’s WAAP protection performs under real, independent lab testing. SecureIQLab evaluated WAAP vendors using its Cloud WAAP v5.0 CyberRisk Validation Methodology, assessing both security efficacy and operational effectiveness. Harness achieved a 99.8% Security Efficacy score and a 98.2% Operational Efficiency score, reflecting strong protection across modern web application, API, and AI security scenarios and placing Harness in the Leader segment of the CyberRisk Ripple.
A few results stand out:
A 100% OWASP LLM Security Score against prompt injection and improper output handling, compared with a 93.06% group averageA 100% GenAI & LLM Operational Efficiency Rating against a 73% group average, including a HIGH rating for Full-Stack LLM Observability (note: this rating was scored independently and does not feed into the overall operational efficiency score)100% effectiveness against the OWASP API Security Top 10, compared to a group average of 80.3%100% coverage for advanced threats, which SecureIQLab defines as bot attacks, AI-assisted bot attacks, Layer 7 DoS and DDoS attacks, resiliency, and WAAP vulnerability assessmentA Total False Positive Avoidance Score of 100.0% across 1,452 test cases.100% for ease of deployment and 100% for ease of management
Source: SecureIQLab, WAAP v5.0 CyberRisk Validation Report, August 2026.
Independent testing conducted by SecureIQLab Inc. under the Cloud Web Application and API Protection CyberRisk Methodology v5.0.
“Independent validation like this matters because our customers can’t afford to guess whether their security actually holds up,” said Rahul Sood, GM of Application Security at Harness. “This report classifies us as a Leader, and it shows we deliver real-world protection that covers exactly what our customers are dealing with today: securing their APIs and their AI applications at the same time, in production, without slowing anything down.”
Extending Security Across the Agent Delivery Lifecycle
Separately, Harness has continued to extend protection across the agent delivery lifecycle. Harness launched its Secure Agent DLC, adding five new security capabilities: Primitive Scanning, AIBOM, AI Testing, Agent Discovery, and AI Firewall. It also expanded its partner ecosystem with new integrations for Google Cloud Apigee and Kong covering API and AI gateway security, deepened its work with AWS on AgentCore Gateway and AgentTrace, and launched the Harness AppSec Alliance to bring partners together around a shared approach to securing modern applications.
Harness offers one platform that covers the full range of what AI has introduced into the security landscape, from the agents already running in an environment to the ones being built next, so security teams don’t need a separate tool for every layer.
Availability
Read the full SecureIQLab report here, or book a demo to see how Harness protects APIs and AI applications across the software delivery lifecycle.
About Harness
Harness is the AI Software Delivery Platform™ company, enabling engineering teams to build, test, and deliver software faster and more securely. Powered by Harness AI and the Software Delivery Knowledge Graph, the platform brings intelligent automation to every stage of the software delivery lifecycle after code — removing toil and freeing developers from manual, repetitive work. Companies like United Airlines, Morningstar, and Choice Hotels use Harness to accelerate releases by up to 75%, cut cloud costs by 60%, and achieve 10x efficiency across DevOps. Based in San Francisco, Harness is backed by Goldman Sachs, Menlo Ventures, IVP, Unusual Ventures, and Citi Ventures.
View original content to download multimedia:https://www.prnewswire.com/news-releases/harness-named-a-leader-in-secureiqlabs-cloud-waap-v5-0-cyberrisk-validation-report-for-the-second-year-in-a-row-302879682.html
SOURCE Harness
