{"id":186,"date":"2022-04-08T14:05:53","date_gmt":"2022-04-08T13:05:53","guid":{"rendered":"https:\/\/42crdev.prexihost.com\/?page_id=186"},"modified":"2024-02-13T10:15:30","modified_gmt":"2024-02-13T10:15:30","slug":"how-it-works","status":"publish","type":"page","link":"https:\/\/staging2022.42crunch.com\/how-it-works\/","title":{"rendered":"How it works"},"content":{"rendered":"\n\n\t\t<h1>\n\t\t\tHow it Works\n\t\t\t\t\t\t\t\t\t\t\tDiscover how the API Security platform works in practice\n\t\t<\/h1>\n\t\t\t<p>Our Developer-First <a href=\"https:\/\/staging2022.42crunch.com\/api-security-platform\/\">API Security Platform<\/a> makes it easy for developers to build and automate security into their API development pipeline speeding up the delivery cycle as opposed to slowing it down. Security teams retain full visibility and control of the security policy enforcement. <\/p>\t\t\n\t\t\t\t<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/2022\/08\/42C-Website-DiagramPlatform-vAug01-1536x520.png\" alt=\"42C Website DiagramPlatform vAug01\" itemprop=\"image\" height=\"520\" width=\"1536\" title=\"42C Website DiagramPlatform vAug01\" onerror=\"this.style.display='none'\"  \/>\n\t\t\t\t<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/2022\/08\/42C-HowItWorks_01-API-Discovery-.png\" alt=\"42C HowItWorks_01 API Discovery\" itemprop=\"image\" height=\"209\" width=\"196\" title=\"42C HowItWorks_01 API Discovery\" onerror=\"this.style.display='none'\"  \/>\n\t\t<h2>\n\t\t\t01 \n\t\t\t\t\t\t\t\t\t\t\tAPI Discovery\n\t\t<\/h2>\n\t<p>Quickly discover and create an inventory of all your APIs at both design and runtime via the platform&#8217;s Github repository integration. API discovery via network traffic monitoring can also be used at runtime to discover APIs.<\/p>\n\t\t\t\t<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/2022\/08\/42C-HowItWorks_02-Design-Audit.png\" alt=\"42C HowItWorks_02 Design &amp; Audit\" itemprop=\"image\" height=\"209\" width=\"196\" title=\"42C HowItWorks_02 Design &amp; Audit\" onerror=\"this.style.display='none'\"  \/>\n\t\t<h2>\n\t\t\t02\n\t\t\t\t\t\t\t\t\t\t\tDesign &#038; Audit\n\t\t<\/h2>\n\t<p>Define all the elements of your API in an OpenAPI contract. OpenAPI contract can be created or edited using our free\u00a0 <a href=\"https:\/\/staging2022.42crunch.com\/free-tools\/\">OpenAPI(Swagger) Editor<\/a> extension available for leading IDEs. There are multiple advantages to this design-first approach to API development. Security teams also have the capability to provide security policies that can be integrated into the OpenAPI contract at design stage.<\/p>\n<p>The OpenAPI contract is audited using <a href=\"https:\/\/staging2022.42crunch.com\/api-security-audit\/\">API Audit<\/a> directly from the IDE extension.\u00a0 It conducts a static analysis of your API definitions and looks at the quality of the OpenAPI contract in terms of structure and security vulnerabilities. The tool scores and suggests fixes for any identified weaknesses.<\/p>\n\t\t\t\t<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/2022\/08\/42C-HowItWorks_03-Develop-Scan.png\" alt=\"42C HowItWorks_03 Develop &amp; Scan\" itemprop=\"image\" height=\"209\" width=\"196\" title=\"42C HowItWorks_03 Develop &amp; Scan\" onerror=\"this.style.display='none'\"  \/>\n\t\t<h2>\n\t\t\t03\n\t\t\t\t\t\t\t\t\t\t\tDevelop &#038; Scan\n\t\t<\/h2>\n\t<p>Once the OpenAPI contract is of sufficient quality then the API can be written by the development team.\u00a0 It is possible to auto create the code directly from the OpenAPI contract using code generator tools such as OpenAPI Generator or Swagger Codegen.<\/p>\n<p>Operations within the API are scanned by our <a href=\"https:\/\/staging2022.42crunch.com\/api-conformance-scan\/\">API Scan<\/a> tool within the IDE to ensure they conform to the approved OpenAPI contract. <a href=\"https:\/\/staging2022.42crunch.com\/developers\/\">Developers<\/a> quickly ensure individual operations match the design before they move onto the next operation.<\/p>\n<p>Once complete the API can also be scanned by the <a href=\"https:\/\/staging2022.42crunch.com\/api-conformance-scan\/\">API Scan<\/a> tool in the <a href=\"https:\/\/staging2022.42crunch.com\/cicd-api-integrations\/\">CI\/CD<\/a> pipeline. The tool gives instant security scoring for prioritization and remediation advice. Scanning at this stage is particularly useful for both development and <a href=\"https:\/\/staging2022.42crunch.com\/security\/\">security teams<\/a> as it ensures conformance of the API with the design and security policies, prior to deployment.<\/p>\n\t\t\t\t<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/2022\/08\/42C-HowItWorks_04-Deploy-Protect.png\" alt=\"42C HowItWorks_04 Deploy &amp; Protect\" itemprop=\"image\" height=\"209\" width=\"196\" title=\"42C HowItWorks_04 Deploy &amp; Protect\" onerror=\"this.style.display='none'\"  \/>\n\t\t<h2>\n\t\t\t04\n\t\t\t\t\t\t\t\t\t\t\tDeploy &#038; Protect\n\t\t<\/h2>\n\t<p>The <a href=\"https:\/\/staging2022.42crunch.com\/micro-api-firewall-protection\/\">API Protect<\/a> API micro-firewall enforces the API security policy at runtime.\u00a0 It uses the OpenAPI contract to create an &#8220;allow list&#8221; to constrain the API traffic both on request and responses. Security teams retain full control over the security policy and the firewall automatically updates each time the API changes. This positive security approach ensures low false positives and low false negatives. There is also minimal impact on latency (less 1 millisecond) allowing it to be deployed at scale across your entire enterprise.<\/p>\n<h2>\n\t\tReady to Learn More?\n\t<\/h2>\n\t<p>Developer-first solution for delivering API security as code.<\/p>\n\t\t\t<a href=\"https:\/\/staging2022.42crunch.com\/get-started\/\" target=\"_self\" rel=\"noopener\">\n\t\t\t\t\t\t\tGet Started\n\t\t\t\t\t<\/a>\n\n","protected":false},"excerpt":{"rendered":"<p>How it Works Discover how the API Security platform works in practice Our Developer-First API Security Platform makes it easy for developers to build and automate security into their API development pipeline speeding up the delivery cycle as opposed to slowing it down. Security teams retain full visibility and control of the security policy enforcement. [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"Discover how the API Security platform works","_seopress_titles_desc":"The API Security Platform lets you discover APIs, Document and Audit the API contract, scan the API for vulnerabilities and enforce security policy at runtime.","_seopress_robots_index":"","site-sidebar-layout":"no-sidebar","site-content-layout":"page-builder","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"disabled","ast-hfb-above-header-display":"disabled","ast-hfb-below-header-display":"disabled","ast-hfb-mobile-header-display":"disabled","site-post-title":"disabled","ast-breadcrumbs-content":"disabled","ast-featured-img":"disabled","footer-sml-layout":"disabled","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"class_list":["post-186","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/pages\/186"}],"collection":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/comments?post=186"}],"version-history":[{"count":1,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/pages\/186\/revisions"}],"predecessor-version":[{"id":18398,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/pages\/186\/revisions\/18398"}],"wp:attachment":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/media?parent=186"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}