API Management

Four Pillars of API Security

By | Date posted: August 18, 2017

API Security is complex! Vendors like Forum Systems, IBM, CA and Axway have invested almost 2 decades of engineering effort and significant capital in building API Security stacks to lockdown APIs. The API Security stack diagram shown below is essential for rapidly locking down APIs. In this article, we review “The Four Pillars of API Security” — SSL, Identity, Content Validation and Architecture.

API Security Stack

Before addressing the Four Pillars of API Security, it is essential to recognize that a robust PKI is a must for enterprise-grade API Security. Without proper key life-cycle management, the API Security Pillars cannot be built.

Once a solid PKI foundation is in place, an organization can build API Security Pillars on this foundation. Without a robust PKI foundation to stand on, API security pillars will collapse. With a solid foundation and strong pillars, a corporation’s API attack surface area is significantly reduced. To deploy API Security, we recommend the following four pillars:

Read more

Why API Management Caught Google’s Eye

By | Date posted: October 27, 2016
api

Anytime one of the world’s largest and most innovative brands puts more than a half-billion dollars into an M&A deal, the market sits up and takes notice. But, when the deal involves one of the key players in the API Management space, well, it takes on an added significance.

It has been a little more than a month since Apigee announced its acquisition by Google for $625 million. What does the event mean to the broader industry – for us here at Forum Systems?

Read more

Forum Systems Teams with Trustis to Deliver API Security Solutions on the G-Cloud 7 Framework

By | Date posted: January 26, 2016
News-Icon

Strategic Partnership Enables UK Government Agencies to Procure Leading API Security Management Technology on Crown Commercial Service’s Digital Marketplace


 

BOSTON, January 26, 2016 – Forum Systems Inc. today announced a strategic partnership with Trustis to deliver its award-winning API Security Management platform to UK public sector organizations on the G-Cloud 7 framework. Forum Sentry, which serves as the foundation of Trustis’ API Management & Cloud Gateway solution, can now be obtained in the Crown Commercial Service’s (CCS) online catalog, the Digital Marketplace. Read more

Forum Systems Drives Secure Enterprise-to-Cloud Integration with Industry-first Google Analytics, Policy and Identity Capabilities

By | Date posted: December 8, 2015
News-Icon

New Features Advance State-of-the-Art in API Security Management

BOSTON, December 8, 2015 – Forum Systems Inc. today announced significant enhancements to its flagship Forum Sentry API Gateway that enable enterprises to achieve seamless, secure integration with multiple cloud providers while satisfying users’ ever-increasing demands for anytime, anywhere mobility through the flexibility of Single Sign-On (SSO).

Read more

Forum Systems to Participate at ISSA International Conference and SC Congress Chicago

By | Date posted: October 12, 2015
News-Icon

Company to Showcase Industry-Leading API Security Management Technology

BOSTON, October 12, 2015 – Forum Systems Inc. announced today that it will be showcasing its award-winning API Security Management solutions at key cybersecurity events, including the 2015 ISSA International Conference and SC Congress Chicago.

Read more

KuppingerCole Names Forum Systems a Leader in API Security Management

By | Date posted: August 26, 2015
Forum

Premier Analyst Firm Recognizes Forum Systems as the Only API Management Vendor “with a Primary Focus on Security” 

Lauds Company as Top Vendor in Product and Innovation Categories

Forum Systems Inc. announced today that leading European analyst firm KuppingerCole has named the company an Overall Leader in its July market analysis of API Security Management solutions. Read more

Three Federated API Requirements for Enterprise Cloud Computing

By | Date posted: May 15, 2014
API-100

Successful enterprise API implementations are built on a set of localized, project-level efforts with services that have clearly identified and accountable business and technology owners. Ownership defines an API domain. Deciding what services are core to a business owner and should be implemented within the owner’s API domain versus consumed from a third-party API domain becomes a critical part of building a Federated API.

Read more