Microservices Apps Prompt New API Security Solutions

Charlotte Dunlap – Principal Analyst, Application Platforms

Summary Bullets:

• New trends in API security include supporting Istio service mesh technology as part of API management/security solutions

• Vendors are targeting solutions at developers looking to inject security early on in the API lifecycle.

Along with new application development architectures come heightened security concerns within the DevOps process. Enterprises are beginning to move into application modernization projects, adopting new architectures such as microservices and serverless computing. These next-generation architectures, which create distributed applications, require security participation beyond operations and security teams so that app developers and architects can help address new types of vulnerabilities. There is also greater interest in segmenting and monitoring the new app architecture (e.g., access control, authentication, metering, and throttling) so that enterprises have a better understanding of, not only security vulnerabilities, but also how their infrastructure is being used.