API security is a hot topic across enterprises of all types in the digital economy. Understanding what data is authorized to go where is not enough to address data loss prevention. It is critical for security administrators to know what data is being passed internally and with business partners, particularly as malicious ‘bad actors’ get more sophisticated. The next step in the evolution of this market is a turnkey product that can manage API security in real-time that is independent of platform (cloud, hybrid, premise), and simple for security administrators.
The team is excited to announce the release of the Trapize Secure Digital Services Broker (SDSB) that offers security administrators a single turnkey product that simplifies API and microservices security. While there are many disparate API security tools on the market, Trapize has productized and improved the functionality into a complete cohesive product.
Until today, API security tools fell into three primary market categories:
- Cloud Access Security Brokers (CASB) – focus is on API security between an enterprise and cloud hosted services such as O365, SFDC, ADP. They rely in part on the cloud providers API security capabilities. A few examples of CASB vendors include Forcepoint and Skyhigh.
- API Management Platforms – focus is on creating, publishing, and protecting an API. Development teams who create APIs that are consumed both internally and externally rely on these tools as they write their applications. A few example API management vendors include Apigee, CA, and Mulesoft.
- Proxy Management – focus is on decrypting all enterprise traffic, scanning, and reporting on any anomalies. Different solutions are typically used for different types of traffic – web, email, chat. A few examples of proxy management vendors include Symantec/Bluecoat, Barracuda, and Zscaler.
While each of these tools has their strengths, no single tool does it all until now. Figure 1 below compares the functionality of each of these tools against the new Trapize SDSB.
Key features of the Trapize Secure Digital Services Broker:
- Complete Product – plug & play installation and a simple, but effective product to be used by security administrators
- Real-time – ensuring that all data performance, governance, and compliance requirements are done in real-time
- Analytics – discover, map, and classification of data is done automatically, and this intelligence leads to the effectiveness of this solution
- Security Enforcement – while an API call may include 100s of different data fields, instead of denying the entire call, the data that needs to be tokenized or redacted can be done in real-time without breaking or modifying the application
Deployment scenarios, where we bring value to our customers:
- API security on all external connections. Many enterprise security groups struggle managing shadow IT, for example managing all AWS accounts. AWS has tools such as Macie for API management, however, Macie must be turned on first for these tools to work. Enterprises can have hundreds of test/dev accounts that can leak data that the security team is not aware of. The Trapize SDSB provides immediate value by delivering API security on all external connections.
- Real-time security enforcement with analytics. Containers and microservices are all the rage and TLS connections are established between them, but this approach is lacking. The Trapize SDSB provides immediate value by delivering a turnkey API platform across the entire environment that can do real-time security enforcement — with analytics and monitoring — that empowers security administrators to control where what data goes.