Systems | Development | Analytics | API | Testing

Security

What Is ISO 9001?

ISO 9001 gives specific requirements and criteria for an organization's quality management system (QMS). It is a broad, international standard that is used by any type of organization of any size. The most recent version of ISO 9001 was released in 2015 and aims to help companies improve customer experience, meet regulatory requirements, manage supplier and partner relationships, and achieve continual company success.

In the Driver's Seat with Konnect - Uplevel Your API Management Strategy

Join Manjiri Tapaswi (Senior Software Engineer, Konnect at Kong) for a ride around your Konnect organization’s administrative management! Learn how to secure and govern your environment by setting up Teams and Roles, or enable SSO through an external authenticator. We’ll go over how to leverage System Accounts for hardening your automation and integrations. Tune up your security risks monitoring, compliance maintenance, and responding to potential security incidents when they occur, by setting up and tracking Audit Logs.

Zero Trust Security: The What, Why and How

If you’ve been researching API security, you’ve likely seen the term “Zero Trust.” And you may already know that organizations can use Zero Trust to help protect their APIs from attacks. What you may not know is that Zero Trust is one of the best models for API security. According to Microsoft, “96 percent of security decision-makers state that Zero Trust is critical to their organization’s success.” But what is Zero Trust exactly?

Understand the Differences: API Authentication vs API Authorization

If you landed on this blog post, chances are that you care about keeping your API secure. It’s an important topic to discuss: API exploits are on the rise, and you don’t want unauthorized users accessing your data. A big part of that security is implementing API authentication and API authorization. These API access control measures are a foundational aspect of API security.

What Is Static Analysis? Static Code Analysis Overview

Static analysis helps development teams that are under pressure. Quality releases needed to be delivered on time. Coding and compliance standards need to be met. And mistakes are not an option. That’s why development teams are using static analysis tools / source code analysis tools. Here, we discuss static analysis and the benefits of using static analysis tools.

GraphQL Authorization with Konnect, OPA and OIDC

🚀 Join us live to learn about how to implement authentication and authorization for GraphQL APIs using OIDC and OPA with Konnect! 🤝 This tutorial focuses on the solution that can solve for the Authentication and Authorization concerns at the gateway layer. We'll first authenticate users, and if authenticated, then the user’s fine-grain permissions will be evaluated to determine if the user has permission to run the incoming GraphQL request (whether the request is nested or using query variables).

ThoughtSpot Sage: data security with large language models

With the recent announcement of ThoughtSpot Sage, we launched a number of enhancements to our search capabilities including AI-generated answers, AI-powered search suggestions, and AI-assisted data modeling. In this article we will walk you through the steps we take to secure your data during the LLM interaction.