It’s fair to say that the pandemic has not only wreaked havoc on how individuals live their daily lives but also on how they work. The global changes led to an immediate shift to remote working and unfortunately, not all enterprises were prepared for it. Companies did not have adequate time to prepare and allocate necessary security resources to ensure strong network and device protection for employees working remotely.

API security starts with authentication and authorization, then data security and availability. In this post, I will review security considerations for an API gateway and how the capabilities of the Kong Gateway address them. First, let’s review different aspects of API security in detail.

The word “trust” is simply not in the cybersecurity solution providers’ vocabulary. They trust no one and nothing. They develop Zero Trust network architectures to protect clients against external attacks, insider threats, and inadvertent errors that could impact security. And they’re always on the lookout for emerging vulnerabilities across internal and external networks. Trust is a luxury they can’t afford to have — or can they?

In February 2021, we announced the GA of Kong Konnect, the first cloud native service connectivity platform that gives organizations the flexibility of protecting their API and service traffic while simultaneously taking advantage of 10x ops improvements via the cloud control plane.