Explore ArecaBay Solutions

From containers to AWS services, ArecaBay enables non-intrusive multi-cloud architecture deployments. Our MicroSensors integrate with existing infrastructure and provide API payload monitoring at the parameter/object level. ArecaBay’s Dynamic API Risk Tracker and API DLP secure the enterprise against API data breach.

 

Powerful Integrations 

ArecaBay provides purpose-built MicroSensors for easy integration with a multitude of technologies.

This includes native and custom built software for Virtual and Docker container-based infrastructures, as well as deep-context extraction plugins for application load balancers, API gateways, and serverless solutions. These integrations are supported on VMWare, KVM, AWS, Azure, and GCP.

 Deploy across the entire Enterprise stack

 
 

Conventional WebApp With API Gateway

Platform or runtime approaches fail to cover legacy or third-party applications. ArecaBay addresses legacy and third-party apps with our unique technology, further integrating into existing web proxy and API Gateways.

 
 
 

Micro-Services With Sidecar Proxies

Conventional front-end WAF fails to protect the Service Mesh. ArecaBay works with container-based architectures with near-zero impact through the use of sidecar sniffers in tandem with Envoy (Istio, AWS App Mesh, Google Cloud), Linkerd, NGINX and others.

 
 
 

Serverless

Serverless architectures cause security specialists to rethink access control well beyond code level safety. ArecaBay operates with serverless architectures such as AWS Lambda with the same easy-to-implement fashion as other architectures.

 
 
 

Edge Computing

End-point security isn’t practical because there are so many methods to evade legacy security solutions. ArecaBay monitors all activity within the deployment space, end-to-end.

 
 
 

Traditional monolithic And multi-tiered applications with load balancers and layer 7 proxies

While many security solutions can help with API security in traditional application environment, they do not expand beyond that. ArecaBay operates with traditional and new deployments models, in private, public and hybrid environments.

 

 Kubernetes Deployment

Simply add the below lines to the Pod deployment YAML to enable any Kubernetes deployment to enjoy full API traffic visibility and monitoring. ArecaBay Micro-gateways are deployed as a container sidecar, and do not impact performance or require application changes – and a single sidecar provides services to the entire host.

apiVersion: extensions/v1beta1
kind: Deployment
spec:
    spec:
      containers:
      - image: registry.arecabay.net/arecabay-sniffer:latest
        name: abnet-sniffer
        volumeMounts:
        - mountPath: /etc/profile.d/arecabay_setenv.sh
          name: dplet-config-sidecar
          subPath: arecabay_setenv.sh
        - mountPath: /sys/fs/cgroup
          name: dplet-sys-sidecar
          readOnly: true
        - mountPath: /run
          name: dplet-run-sidecar

 Docker Deployment

Simply run docker-compose with the ArecaBay service configuration YAML to enable any Docker host to enjoy full API traffic visibility and monitoring. ArecaBay Micro-gateways are deployed as a container sidecar, and do not impact performance or require application changes – and a single sidecar provides services to the entire host.

version: '2'
services:
arecabay-sniffer:
image: registry.arecabay.net/arecabay-sniffer:latest
volumes:
- "${PWD}/abnet_setenv.sh:/etc/profile.d/abnet_setenv.sh"
- "/sys/fs/cgroup:/sys/fs/cgroup:ro"
- "/tmp/`mktemp -d`:/run"
$ docker-compose -f ./arecabay-sniffer.yml up -d

VMware Deployment

Simply deploy ArecaBay ovf, a pre-configured virtual machine image, ready to run on VMware environments. ArecaBay utilizes the virtual TAP to monitor API traffic within a virtual environment, and the only requirement is that virtual switches be configured in SPAN/mirror mode – and a single ovf can provide services to the entire virtual environment.

Amazon Web Services

Simply deploy ArecaBay’s Amazon Machine Image (AMI), a pre-configured virtual machine image, ready to run on Amazon EC2 instances. AWS provides the ability to log and monitor the traffic flowing between instances, subnets or the entire VPC.

Kong

We have created a purpose-built Kong plugin that once deployed enables enterprises to Discover, Monitor, and Secure APIs at object-data level. Developers and DevOps, can also use Kong’s plugin to monitor and log application API calls with selective object level data.