# /security stops working

Calls to /security/* on Fastly API stopped working on April 22, 2026.

On April 22, 2026, legacy /security/* endpoints were permanently removed from the Fastly API. Calls directed to these routes fail since that date.

## What to use instead

Replace the /security base path with /ngwaf/v1, such as /ngwaf/v1/workspaces. Schemas and authentication remain unchanged.

- API: Fastly API (api.fastly.com)
- Kind: Endpoint removal
- Announced: April 22, 2025
- Takes effect: April 22, 2026
- Calls after that day: fail
- Calls it hits: `/security/*`
- Source: [Announcement](https://www.fastly.com/documentation/reference/changes/2025/04/migrate-routes-from-security-to-ngwaf-v1)
- Verified: November 6, 2026, against Fastly API's own pages
- Page: https://www.okapi.bot/providers/fastly-api/breaking-changes/security-stops-working/

## Fastly API's words

> The new endpoints are available now, and legacy /security routes will remain operational until April 22, 2026, when they will be permanently removed.

Okapi finds the calls this change hits in your repo and opens the pull request with the fix: https://github.com/apps/okapi-agent