Click here to close now.


@CloudExpo Authors: Pat Romanski, Mehdi Daoudi, Jennifer Gill, Elizabeth White, Flint Brenton

Related Topics: Microservices Expo, Java IoT, Industrial IoT, Microsoft Cloud, Containers Expo Blog, @CloudExpo

Microservices Expo: Interview

API Platform Transforms Business Potential with API Management

Interview with Alistair Farquharson, CTO of SOA Software

What led to the creation of SOA Software'sEnterprise API Platform?

Alistair Farquharson, CTO of SOA Software: As industry-leader in SOA Governance we spend a lot of time tracking industry trends, and also in front of senior IT executive at F500 type companies. We saw an emerging trend around internet companies calling externally facing RESTful services APIs as early as 2008, and anticipated enterprise interest in these APIs. We recognized that the companies that were failing in their early markets and so were pivoting towards API Management were on the wrong track for enterprise APIs, and so began a product management and engineering initiative to deliver a solution that would meet the needs of large enterprises.

What needs does the platform address?

Farquharson: It helps customers use APIs to transform and drive their business. It spans the entire lifecycle of an API program, helping customers:

  • Make sure they build the right APIs for their business
  • Build those APIs the right way so that customers (developers) can use them properly
  • Make sure their APIs are behaving right (are secure, reliable, meeting SLA goals)
  • Promote and support their APIs through the developer community, including within their own branded community or the public open community

What makes your offering unique?

Farquharson: The product is unique in a few ways:

Support for the full API lifecycle from planning and development through operations and community

  • Enterprise-class - we have been delivering software and services solutions to large enterprise IT for years and understand the requirements, including security, integration with existing infrastructure, performance and reliability, and much more
  • Social Developer Community - other solutions offer API or Developer portals, but they don't provide the social aspects to drive network effect for API and App promotion across all developers in a community
  • Federation between enterprise and Open communities allowing enterprise customers to promote their APIs through the Open community
  • Multiple deployment options - the platform is available as on-premise software, Open (free) PaaS, Enterprise PaaS and a hybrid of these.

The SOA Software Enterprise API Platform is the first solution to address enterprise requirements across the entire API lifecycle, with planning, development, runtime and community management capabilities. With this solution enterprises can finally take advantage of the opportunities APIs present without compromising their security or brand integrity.

Other solutions only address a small sub-section of the overall requirements; focusing solely on API monitoring, or API security with no developer community capabilities; or offering only cloud or on-premise deployment options but not both. None of the other vendors in the market offer an adequate solution for managing the lifecycle of APIs, this is critical for any serious API initiative, especially for large enterprises with brands to protect. Furthermore, other solutions typically ignore existing investments in SOA platforms and SOA Governance despite the fact that most enterprise APIs will be built on top of existing SOA services. The Enterprise API Platform provides a comprehensive solution addressing all of these requirements and offering optional seamless integration with existing SOA Governance infrastructure and services to ensure end-to-end security, monitoring, management and impact analysis.

How broad is its platform support?

Farquharson: This is pretty much irrelevant in the API world, but we are entirely platform-independent supporting any standards-based (REST, SOAP, XML, JSON, etc) API regardless of the platform(s) exposing and consuming it

Does it integrate with existing enterprise infrastructures?

Farquharson: The EAP offers extensive integration with existing enterprise infrastructure. It works with:

  • Most common enterprise identity and access management systems - extending them to add support for standards like OpenID and OAuth
  • Enterprise database systems including Oracle, SQL Server, and DB2 as well as open database platforms
  • Enterprise monitoring and reporting systems

Does it tie in with other SOA Software offerings?

Farquharson: Yes, it integrates seamlessly with your existing SOA Governance infrastructure ensuring end-to-end security; monitoring and lifecycle integration (makes sure that dependent services are ready when needed to support APIs, provides capacity planning and impact analysis)

What are users' deployment options?

Farquharson: The platform is available as on-premise software, Open (free) PaaS, Enterprise PaaS and a hybrid of these

What is your pricing model, and how does it compare with competitive offerings?

Farquharson: On-premise software is priced per CPU for the runtime (API Proxy) components and per user (developer) for the Community. Open PaaS is free, allowing up to 10 million API transactions per month. Enterprise PaaS is priced on consumed bandwidth, starting at $6k per month for 100Gb. Competitive offerings are typically more expensive for their PaaS offerings, and most don't offer on-premise or hybrid options.

What are your support options?

Farquharson: Support is available online through the Open platform's build in discussion boards, and for enterprise customers it is available via email, phone or direct access to our online helpdesk.

Do you offer branding?

Farquharson: Yes, we (or the customer) can brand the on-premise or Enterprise PaaS solutions to provide the customer with their own developer community stamped with their own brand look and feel.

What are the main differentiators between the SOA Software Open platform you just announced and the SOA Software Enterprise API Platform?

Farquharson: Open is limited to 10 million API transactions per month, is not brandable, doesn't offer enterprise security system integration, and doesn't offer any form of guaranteed SLA.

What are the key benefits for API providers?

Farquharson: Full API lifecycle (the right API built the right way), API Security (OpenId, OAuth, Encryption, Signature), API Promotion and Support, App Provisioning, Developer Management

Is building a developer community key to API success?

Farquharson: Of course, without a developer community, who is going to use your API? Even in the case of small partner centric (B2B) API communities there is still scope to leverage the community for creative commons and self-support.

How does the Enterprise API Platform help in building such a community?

Farquharson: It provides a social platform with features like integrated discussions, ticketing systems, alerts, documentation, and innovate resource following concepts allowing users to track activity for resources they are interested in.

What is the impact of the SOA Software Enterprise APIPlatform on development time?

Farquharson: By offering comprehensive API development governance integrated with enterprise SOA Governance processes, the EAP helps ensure the alignment of SOA services with APIs (makes sure that dependent services are ready when needed to support APIs, provides capacity planning and impact analysis). It applies enterprise guidelines, rules and policies to the API development process to make sure that you are building the right APIs the right way.

Can it provide both security and openness?

Farquharson: Yes, that is the delicate balance in enterprise APIs and one which the EAP is designed from the ground up to deliver. By integrating with enterprise security systems, providing built-in PKI and supporting modern security standards it enables controlled, open access to APIs without compromising enterprise security.

Who are you looking to adopt the platform?

Farquharson: From an API provider perspective it's all about large enterprise with the on-premise solution, large and SME for the Enterprise PaaS, and the public developer community for SOA Software Open.

Are you targeting particular developers, such as the mobile app community?

Farquharson: Not particularly. We are targeting all App developers regardless of their chosen target platform. APIs support Apps on mobile devices, Webapps, and desktop apps, there is no particular preference.

Is SOA Software's Enterprise API a game changer?

Farquharson: Yes, it allows enterprises to confidently take advantage of the opportunities provided by the API world to unleash their business.

Thank you for your time! Oh, one more thing: how do I get the Enterprise API Platform?

Farquharson: My pleasure. The SOA Software Enterprise API Platform is available now. Pricing is based on throughput. Please contact us for details.

About SOA Software
SOA Software is a leading provider of Enterprise API Management and SOA governance products that enable customers to plan, build, run and share enterprise services and APIs. The world's largest companies including Bank of America, Pfizer, and Verizon use SOA Software products to harness the power of their technology and transform their businesses. Gartner placed SOA Software in the Leaders Quadrant for the 2011 "Magic Quadrant for SOA Governance Technologies." The company is also recognized as a "Leader" by the Forrester ResearchWaves for Integrated , SOA Management, and SOA Life Cycle Management.  For more information, please visit or follow the SOA on Facebook at

More Stories By Xenia von Wedel

Xenia von Wedel is a Tech blogger and Enterprise Media Consultant in Mountain View, serving clients in a variety of industries worldwide. She is focused on thought leadership content creation and syndication, media outreach and strategy. She mainly writes about Enterprise, B2B solutions, social media and open source software, but throws the occasional oddball into the mix. Buy her a coffee if you like her article:

@CloudExpo Stories
Actifio is powering new application development and testing services from Net3 Technologies (N3T), a managed cloud services provider. N3T's new Symmetry DevOps™ service builds on its existing Palmetto Virtual Data Center (PvDC) Cloud services for data backup and disaster recovery (DR) based on the Actifio Copy Data Virtualization platform. Previously, N3T's data protection and DR services were challenged by overlapping and inefficient legacy hardware and software platforms from multiple vendo...
Most of the IoT Gateway scenarios involve collecting data from machines/processing and pushing data upstream to cloud for further analytics. The gateway hardware varies from Raspberry Pi to Industrial PCs. The document states the process of allowing deploying polyglot data pipelining software with the clear notion of supporting immutability. In his session at @ThingsExpo, Shashank Jain, a development architect for SAP Labs, discussed the objective, which is to automate the IoT deployment proces...
Countless business models have spawned from the IaaS industry – resell Web hosting, blogs, public cloud, and on and on. With the overwhelming amount of tools available to us, it's sometimes easy to overlook that many of them are just new skins of resources we've had for a long time. In his general session at 17th Cloud Expo, Harold Hannon, Sr. Software Architect at SoftLayer, an IBM Company, broke down what we have to work with, discussed the benefits and pitfalls and how we can best use them ...
In demand-intensive mobile and web applications, an emerging pattern is to host the Systems of Engagement in the cloud (for maximum responsiveness) but keep the Systems of Record with the other important business systems in the company datacenter, often on a tightly secured mainframe. But what about the space in between? In this IBM Redpaper publication, we show that the IBM Bluemix cloud platform offers technologies that make it easy for cloud-based SoEs to securely connect to on-premises IBM...
Discussions of cloud computing have evolved in recent years from a focus on specific types of cloud, to a world of hybrid cloud, and to a world dominated by the APIs that make today's multi-cloud environments and hybrid clouds possible. In this Power Panel at 17th Cloud Expo, moderated by Conference Chair Roger Strukhoff, panelists addressed the importance of customers being able to use the specific technologies they need, through environments and ecosystems that expose their APIs to make true ...
Microservices are a very exciting architectural approach that many organizations are looking to as a way to accelerate innovation. Microservices promise to allow teams to move away from monolithic "ball of mud" systems, but the reality is that, in the vast majority of organizations, different projects and technologies will continue to be developed at different speeds. How to handle the dependencies between these disparate systems with different iteration cycles? Consider the "canoncial problem"...
Too often with compelling new technologies market participants become overly enamored with that attractiveness of the technology and neglect underlying business drivers. This tendency, what some call the “newest shiny object syndrome” is understandable given that virtually all of us are heavily engaged in technology. But it is also mistaken. Without concrete business cases driving its deployment, IoT, like many other technologies before it, will fade into obscurity.
We all know that data growth is exploding and storage budgets are shrinking. Instead of showing you charts on about how much data there is, in his General Session at 17th Cloud Expo, Scott Cleland, Senior Director of Product Marketing at HGST, showed how to capture all of your data in one place. After you have your data under control, you can then analyze it in one place, saving time and resources.
The Internet of Things is clearly many things: data collection and analytics, wearables, Smart Grids and Smart Cities, the Industrial Internet, and more. Cool platforms like Arduino, Raspberry Pi, Intel's Galileo and Edison, and a diverse world of sensors are making the IoT a great toy box for developers in all these areas. In this Power Panel at @ThingsExpo, moderated by Conference Chair Roger Strukhoff, panelists discussed what things are the most important, which will have the most profound...
As organizations shift towards IT-as-a-service models, the need for managing & protecting data residing across physical, virtual, and now cloud environments grows with it. CommVault can ensure protection & E-Discovery of your data - whether in a private cloud, a Service Provider delivered public cloud, or a hybrid cloud environment – across the heterogeneous enterprise.
Growth hacking is common for startups to make unheard-of progress in building their business. Career Hacks can help Geek Girls and those who support them (yes, that's you too, Dad!) to excel in this typically male-dominated world. Get ready to learn the facts: Is there a bias against women in the tech / developer communities? Why are women 50% of the workforce, but hold only 24% of the STEM or IT positions? Some beginnings of what to do about it! In her Day 2 Keynote at 17th Cloud Expo, San...
Apps and devices shouldn't stop working when there's limited or no network connectivity. Learn how to bring data stored in a cloud database to the edge of the network (and back again) whenever an Internet connection is available. In his session at 17th Cloud Expo, Ben Perlmutter, a Sales Engineer with IBM Cloudant, demonstrated techniques for replicating cloud databases with devices in order to build offline-first mobile or Internet of Things (IoT) apps that can provide a better, faster user e...
SYS-CON Events announced today that Catchpoint, a global leader in monitoring, and testing the performance of online applications, has been named "Silver Sponsor" of DevOps Summit New York, which will take place on June 7-9, 2016 at the Javits Center in New York City. Catchpoint radically transforms the way businesses manage, monitor, and test the performance of online applications. Truly understand and improve user experience with clear visibility into complex, distributed online systems.Founde...
In today's enterprise, digital transformation represents organizational change even more so than technology change, as customer preferences and behavior drive end-to-end transformation across lines of business as well as IT. To capitalize on the ubiquitous disruption driving this transformation, companies must be able to innovate at an increasingly rapid pace. Traditional approaches for driving innovation are now woefully inadequate for keeping up with the breadth of disruption and change facin...
I recently attended and was a speaker at the 4th International Internet of @ThingsExpo at the Santa Clara Convention Center. I also had the opportunity to attend this event last year and I wrote a blog from that show talking about how the “Enterprise Impact of IoT” was a key theme of last year’s show. I was curious to see if the same theme would still resonate 365 days later and what, if any, changes I would see in the content presented.
The revocation of Safe Harbor has radically affected data sovereignty strategy in the cloud. In his session at 17th Cloud Expo, Jeff Miller, Product Management at Cavirin Systems, discussed how to assess these changes across your own cloud strategy, and how you can mitigate risks previously covered under the agreement.
Cloud computing delivers on-demand resources that provide businesses with flexibility and cost-savings. The challenge in moving workloads to the cloud has been the cost and complexity of ensuring the initial and ongoing security and regulatory (PCI, HIPAA, FFIEC) compliance across private and public clouds. Manual security compliance is slow, prone to human error, and represents over 50% of the cost of managing cloud applications. Determining how to automate cloud security compliance is critical...
Culture is the most important ingredient of DevOps. The challenge for most organizations is defining and communicating a vision of beneficial DevOps culture for their organizations, and then facilitating the changes needed to achieve that. Often this comes down to an ability to provide true leadership. As a CIO, are your direct reports IT managers or are they IT leaders? The hard truth is that many IT managers have risen through the ranks based on their technical skills, not their leadership ab...
In his General Session at DevOps Summit, Asaf Yigal, Co-Founder & VP of Product at, explored the value of Kibana 4 for log analysis and provided a hands-on tutorial on how to set up Kibana 4 and get the most out of Apache log files. He examined three use cases: IT operations, business intelligence, and security and compliance. Asaf Yigal is co-founder and VP of Product at log analytics software company In the past, he was co-founder of social-trading platform Currensee, which...
The Internet of Things (IoT) is growing rapidly by extending current technologies, products and networks. By 2020, Cisco estimates there will be 50 billion connected devices. Gartner has forecast revenues of over $300 billion, just to IoT suppliers. Now is the time to figure out how you’ll make money – not just create innovative products. With hundreds of new products and companies jumping into the IoT fray every month, there’s no shortage of innovation. Despite this, McKinsey/VisionMobile data...