Feeds

Apigee beefs API service for payment card transactions

PCI for API

Remote control for virtualized desktops

Apigee – a Silicon Valley startup offering various tools for managing and using APIs across the interwebs – has announced a new online service for providing financial-transaction APIs that comply with the Payment Card Industry Data Security Standard (PCI-DSS).

Known as Apigee Enterprise Cloud PCI, the service is operated from within PCI-compliant data centers run by webhost Datapipe, the same outfit that hosts Apigee's new API delivery network.

"This is crucial for retail and financial services companies that are rapidly growing their API volumes and need to turn all their interactions into money," says vice president of strategy Sam Ramji, who once oversaw open source at Microsoft.

Since its launch two years ago, Apigee has offered both an online service and a locally-installed software package for managing their APIs. According to Ramji, Apigee handles 40 billion APIs calls a month on its online service and "many billions more" through software installed inside customers' private data centers.

Previously, the company offered PCI-compliance with private installations, but not on its "cloud" service. PCI covers not only how an application talks to a back-end service, but also how the back-end service its implemented. "It looks at what's happening to the data, how it's following, and if it's at rest, where it's resting. And then it looks at who has access to the data and the machines, Ramji says. "It lets you provably demonstrate that the data hasn't been exposed."

Visa and Mastercard laid down the PCI standard roughly a decade ago, according to Ramji, and it's now widely used across the web. "If you want to transact, you need PCI for your API," Ramji tells The Reg. "It's the transactional equivalent of HIPA [the standard for controlling the use of for health records]." ®

Choosing a cloud hosting partner with confidence

More from The Register

next story
Be real, Apple: In-app goodie grab games AREN'T FREE – EU
Cupertino stands down after Euro legal threats
Download alert: Nearly ALL top 100 Android, iOS paid apps hacked
Attack of the Clones? Yeah, but much, much scarier – report
Microsoft: Your Linux Docker containers are now OURS to command
New tool lets admins wrangle Linux apps from Windows
Bada-Bing! Mozilla flips Firefox to YAHOO! for search
Microsoft system will be the default for browser in US until 2020
Facebook, working on Facebook at Work, works on Facebook. At Work
You don't want your cat or drunk pics at the office
Soz, web devs: Google snatches its Wallet off the table
Killing off web service in 3 months... but app-happy bonkers are fine
prev story

Whitepapers

Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
How to determine if cloud backup is right for your servers
Two key factors, technical feasibility and TCO economics, that backup and IT operations managers should consider when assessing cloud backup.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Protecting against web application threats using SSL
SSL encryption can protect server‐to‐server communications, client devices, cloud resources, and other endpoints in order to help prevent the risk of data loss and losing customer trust.