IBM API Connect vs. Salt Security API Protection Platform

IBM API Connect is a great tool for interface analysis and for tracking API usage and activity. I can use the IBM API with different products and apps, which further proves its versatility.
Even if IBM API is excellent and helpful, there are situations when its sophisticated features are difficult to comprehend. Additionally, IBM API Connect subscription and licensing can be prohibitively expensive at times.

Incentivized

Salt is highly recommended for anyone who wants to discover, monitor and protect their APIs against various types of attacks. Salt should not be used as a SIEM.

• Security. I would say creating and applying scopes to each operation is intuitive and clear.
• Managing multiple path at the same time. Creating new path and operation is straightforward.
• The analytics tab is good to see what APIs have trouble with errors

Incentivized

• PII identification in API traffic.
• Divergence between API traffic and documentation (swagger files).
• Potential attacks with information to take counter measures.

• One thing that could be improved is that it requires heavy hardware support. So making it less dependent on the hardware could free up the resources.
• The hardware comes at a high cost which easily cross your budget if you try to scale the business through it.
• It is quite time consuming and complex to setup and requires a technical person to set it up which again can increase the overall cost.

Incentivized

• The platform could have more options for exporting detailed data from attackers' dashboards.
• The Attackers dashboard could also have more options of filters in order to support the investigations of the attack.
• The OAS analysis could present a more detailed view of the found issues.

It is an extremely easy platform to manipulate and productively develop. The IBM API Connect features and dashboard are very easy to access, and the navigation strategy is also cost-effective. IBM API Connect offers some capabilities that simplify the entire development operations while providing the most accurate and profitable data results, and the development project management is amazing.

Incentivized

IBM API Connect and Apigee are both robust API management platforms. IBM API Connect was selected for its strong integration capabilities, hybrid cloud deployment options, and comprehensive analytics. It aligns well with organizations seeking flexibility and control over their API ecosystems, especially when dealing with complex integration scenarios across diverse environments.

Incentivized

We tried controls offered by the IaaS providers but these were hard to manage and did not provide the visibility we wanted. We also protected APIs with a normal WAF but this was only helpful for assets we knew about and API attacks were not caught by the WAF.

• I consider IBM API Connect as a business capability enabler - the ROI level is practically secondary.
• With this platform at the core, associated architectural framework and guardrails ensure that we can progress with distributed development and automation in autonomous teams - a key factor to deliver required time to market performance.
• At this time, security and trust is key. A flexible yet secure API manager layer is necessary to ensure our relationships with partners and customers.

Incentivized

• Salt Security API Protection Platform has provided detailed information that is helping us to identify and investigate attacks in our environment