---
title: Next-Gen WAF API routes now versioned, legacy Security routes removed
summary: null
url: >-
  https://www.fastly.com/documentation/reference/changes/2026/05/move-client-side-protection-standalone
---

[As announced](https://www.fastly.com/documentation/reference/changes/2025/04/migrate-routes-from-security-to-ngwaf-v1/), Next-Gen WAF API routes have been updated to versioned paths at `/ngwaf/v1/*`, and legacy `/security/*` routes have been permanently removed. The Client-Side Protection API now appears as a standalone top-level page in the documentation. All Next-Gen WAF endpoint documentation (events, redactions, requests, rules, time series, virtual patches, and workspaces) now appears under the [Next-Gen WAF API](https://www.fastly.com/documentation/reference/api/ngwaf/).