Home / Different approaches to your IT infrastructure / API Security
Who calls our APIs, and how often?
API Security
Every API you expose is a door into your environment. We route all requests through an API Gateway and bring authentication, authorisation, rate limiting and logging into one place. Depending on the need, we set up open-source or enterprise gateway solutions.
What we ask first
- How many APIs do you have, and which are exposed to the outside?
- Do you know who every request comes from?
- What happens if one client sends thousands of requests per second?
- Where are API keys stored, and when were they last rotated?
What we do
- API inventory and risk assessment
- API Gateway setup: open source or enterprise
- Authentication and authorisation (OAuth 2.0, JWT, mTLS)
- Rate limiting and abuse protection
- Request logging, monitoring and alerts
- Versioning and API documentation
Traffic through the gateway
- Verified requests✓ passed
- Request without identity✕ blocked
- Over the limit✕ throttled
First step: An inventory of exposed APIs and a week of traffic logs.
Other questions
- IT Infrastructure ConsultingIf a server fails, how long does our business stop?
- Security and AuditIf someone broke in, how long until we noticed?
- Performance and MonitoringWhy are our systems so slow?
- AutomationWe do the same tasks by hand every day.
- Software DevelopmentWe can't find the software we need.
- AIHow can we use AI in our business?