ArecaBay Information

API is the “new TCP/IP”: enterprise applications interconnected with APIs are becoming the interface to business-critical data. While API Gateways offer some security features for Public APIs (e.g. API exposed for 3rd party developers), a vast majority of Enterprise Private APIs are still being treated as just payloads of “web traffic”. With adoption of the Cloud and new app architectures such as micro-service mesh, increasing number of Private APIs will be exposed externally as Outer APIs to support clients such as mobile apps or Line of Business web apps. Conventional tools such as WAF or proxy are lacking in providing deep activity and object level observability to API calls traversing through them, let alone the Service Mesh lateral/east-west APIs that are largely unmanaged. This is the reason why Gartner predicts in a report (ID: G00342236) that API abuses will be the major vector leading to data breaches.   ArecaBay enables InfoSec and DevOps teams to discover, monitor, and secure APIs, especially Private APIs that are Cloud-enabled. Rather than forcing Private API calls through yet another inline gateway (be it on-premises or Cloud), we enhance the existing application infrastructure by super-imposing a Network Engine layer of Micro-Sensors that enables API Observability and Security without any modification to the application code or runtime environment.   The same Network Engine is used for two products:   ArecaBay X-Ray for API Observability for DevOps   Arecabay Force-Field for API Security for InfoSec and SecOps Headquartered in Los Altos, CA, ArecaBay is founded by a team of serial entrepreneurs with track-record of co-founding and building successful enterprise products such as Netskope and IntruVert/McAfee IntruShield. Please visit our website at https://www.arecabay.com and follow us on twitter at @ArecaBay.