APIs for Innovation, Intelligence, and Impact

Welcome & Opening Words

Mehdi Medjaoui

Author of Continuous API Management - Founder and Chairman of Apidays Conferences

Five Most Common Pitfalls of API Adoption

APIs are ubiquitous and used by almost all organizations. However many find they do not get the anticipated benefits and face more challenges driving adoption than expected.

This session will outline the five main issues Gartner sees and provide guidance on how to avoid them

Andrew Humphreys

Senior Director Analyst, APIs and Integration - Gartner

Getting the Numbers for API-driven Transformation to Add Up

APIs have been around long enough. And won't be going anywhere quickly. APIs are becoming an ever-more significant part of large organisations' digital footprint. Underpinning wider digital transformation.

Whether to simplify the tech landscape; speed up innovation with API reuse; or launch new APIs as digital products to grow revenue streams and third party partnerships. The opportunities are endless.

However, the ways to quantify the investment required, let alone clearly show where the benefit will be realised, can seem harder than it looks. Particularly in heavily regulated industries such as financial services or healthcare.

Claire Barrett

Director - APIsFirst and Co-lead of Women In APIs

ABLOY goes API economy – Transformation story

ABLOY has over 100 years of experience in providing high quality locking solutions. Our digital journey started 1987 and for over 10 years our solutions have had interfaces enabling integrations. APIs provide a lot of value to our customers, but API economy requires much more than just the APIs. This session highlights learnings from ABLOYs journey to API economy.

Hanna Sillanpää

Head of Digital Solutions PU - Abloy

Panel Discussion: The State of the API Economy

Mehdi Medjaoui

Author of Continuous API Management - Founder and Chairman of Apidays Conferences

Hanna Sillanpää

Head of Digital Solutions PU - Abloy

Claire Barrett

Director - APIsFirst and Co-lead of Women In APIs

Andrew Humphreys

Senior Director Analyst, APIs and Integration - Gartner

Driving change in an Event Driven World

Join us for "Driving Change in an Event Driven World," a dynamic workshop showcasing Gravitee.io.

Witness a live Scalextric demo that drives events to a Kafka cluster through the Gravitee API Gateway.

Discover how Gravitee simplifies event mediation, enabling seamless integration and real-time data processing.

Elesh Mistry

Lead Solution Engineer - Gravitee.io

GitOps for Gateways: Empowering API Developers with Kubernetes Gateway API

Workshop by Solo.io

In the rapidly evolving landscape of API development, Kubernetes Gateway API has emerged as a powerful tool to simplify how APIs are exposed, managed, and secured.

This talk delves into how the separation of concerns in Kubernetes Gateway API and Gloo Gateway aligns neatly with GitOps practices, and shows how different personas in the API management workflow can work autonomously to craft custom routes and policies, apply authentication and authorisation, or implement edge security depending on their responsibilities.

Developers can be further empowered with progressive delivery, allowing updates to services to be rolled out incrementally and validated at each step.

Join us as we explore how this fusion empowers API developers, enhances collaboration, and elevates the agility and security of modern API ecosystems.

Declan McAleese

Field Engineer, EMEA - Solo.io

There’s no AI without API, but what does this mean for Security?

Timo Rüppell

VP of Product - FireTail.io

Leveraging AI for your API Governance

Let's navigate the intricate journey of establishing and scaling API governance frameworks within large organizations, from insurance companies to healthcare, showing that you can adapt the same framework everywhere.

This talk aims to shed light on the critical challenges, including enforcing standardized policies, managing security risks, and ensuring compliance amidst rapid technological change and growth, even more with all the new regulatory process that needs to be implemented - DORA for example.
By sharing practical insights and strategies, the session aims to guide attendees through the complex process of scaling API governance effectively, ensuring that it not only meets the current demands but is also adaptable to future developments.

Jean Burellier

Principal Engineer, Platform Team Lead - Sanofi

Security Vulnerabilities in your APIs

APIs are the backbone of modern software, enabling seamless communication between applications.

While their importance is undeniable, APIs can be susceptible to security breaches if not properly secured. This talk dives into the OWASP and CWE top security vulnerabilities, established frameworks that identifies the most critical API security vulnerabilities.

We'll explore real-world examples of these vulnerabilities, along with corresponding code samples, to illustrate the potential threats and their impact.

Through this exploration, you'll gain a deeper understanding of how to fortify your APIs against malicious actors, ensuring the safety and reliability of your software ecosystem.

Lukáš Ďurovský

Staff Software Engineer - Thermo Fisher Scientific

APIs, Industries, and Ecosystems (Oh my!)

For decades, software has been seen primarily as a source of automation and cost reduction. But that is changing and enterprises need to drive new revenue with the powerful integration of APIs.

Today, every large company is a software developer. The software content of everything, even a No. 2 pencil is, increasing (think: manufacturing, supply chain, pricing and demand, e-commerce, etc.). Everything we do and manufacture has some form of services behind it. Those services are driven by software. It is impossible to separate company strategy from software design. We implement one by executing on the other. Leading in competitive markets requires a software strategy that can drive revenue through new services, new channels, and new partners.

We will look at the history of APIs through the lens of software design, industry structures, vertical integrations, service delivery and technology-enabled services. By understanding the best practices and business requirements around offering APIs as products, companies can successfully expand their product and service portfolios and create new revenue streams. APIs are core to the newest digital revolution.

Alex Walling

Chief Strategy Officer - Nokia

The European Data Act is coming - Are you compliant?

GDPR and PSD2 regulations in Banking have had an impact on data sharing across the EU. Next in the EU regulation pipeline is the Data Act, which is unleashing data opportunities across industries.

How can you be compliant, share data in a trustworthy way while emphasizing fair access, usage rights and ensuring protection of personal data?

Janne Uggeldahl

Chief Commercial Officer - Platform of Trust

Keynote 1: APIs ahoy, the case of Customer Booking APIs in Finnlines and Grimaldi Lines, ShortSea

Room: Honka

Vesa Vähämaa

Head of Group IT, Software - Finnlines Plc

Keynote 2: Quantum Computing: Current Landscape and the Future Role of APIs

Room: Honka

The talk will present the state of the art in quantum computing, the challenges in talking it from the lab to the real world, enabling use cases and how APIs can open ecosystems.

Vlad Stirbu

Post-doctoral Researcher - University of Jyväskylä

Building APIs for Big Data Services

Data volumes are increasing at an unprecedented rate, exploding from terabytes to petabytes and sometimes exabytes of data. Traditional API approaches are laid out for transactional data and can’t handle these data volumes because they don’t scale well enough and are too expensive.

At the same time, organisations are looking to monetise big data by exposing it through APIs. This allows partners and customers to analyse data to gain competitive insights, to support strategic decision making and to train AI applications.

In this session, we will look at modern data architecture, review a real-world use case, understand requirements of big data applications and discuss potential solutions to building APIs for big data services.

Alexander Günsche

Senior Solutions Architect - Amazon Web Services

From Chaos to Calm: Navigating Emerging API Security Challenges

Explore the lifecycle of an API with a focus on evolving security measures that have become paramount in today’s digital era.

We will showcase how adopting a strong API security program leads to many different lenses of visibility including discovery, risk audits, and behavioral detection.

Eli Arkush

Principal Solutions Engineer, API Security - Akamai

Using API Management to Create the Perfect Serverless Based System!

Using serverless functions in your event driven system either in cloud or on prem, has many advantages. You only pay for what you use, development is fast and you can auto scale as needed. But, managing a large system with many serverless functions can be a daunting task. This is where API management systems and methodologies come to the rescue to make it an easy, precise and even fun task (e.g. catalog, identity, Open API documentations, etc.). Let me show you how.

Dan Erez

Lead Architect - ZIM

What is next now that your organization created a (significant) set of APIs?

Organizations created a large set of APIs, with different quality of technologies/API Gateways and use cases.

Question: What is next? How do we get:
1. Full visibility on all APIs?
2. Proper quality of all APIs?
3. Easy re-use of APIs to scale our efforts?

You will get answers to those questions and how many organizations moved to the next level of API maturity

Rogier van Boxtel

Director, Pre Sales Consulting - Axway

OAI Track Introduction and the State of OpenAPI

Erik Wilde

OAI Ambassador @ OpenAPI Initiative - API Strategist and Content Creator at Getting APIs to Work

Simplify your service integration - Build SDKs easily

Having your API available through language specific SDKs is perceived as a sign of quality. Most integration engineers and developers strongly prefer Client SDKs over "raw" API calls when working with third-party services.

In this talk, we're gonna explore the advantages of providing an SDK, along with examples of how, if you have a robust OpenAPI Spec, the operational overhead of providing this service can be extremely small by leveraging on code generation utilities.

Daniel Hervás

Lead Engineer - Reckon Digital

The Arazzo Specification: A Tapestry for API Workflows

Officially announcing the Arazzo Specification which enables the ability to define and document workflows, a series of API calls, that when woven together accomplish a specific business objective. The new specification was developed under the OpenAPI Initiative, and complements current specifications, including OpenAPI and AsyncAPI.

Arazzo provides a deterministic recipe for using APIs and enables code generation tooling for a given API based on use-cases. Additionally, Arazzo improves regulatory checks and bridges gaps where use-case flows span multiple API descriptions.

The new specification provides a sufficient level of predictable determinism to AI models, allowing them to offer a natural language abstraction on top of the business use cases, while in parallel giving interoperability benefits to the actual API providers. The result is more value, with less vendor lock-in, and consistent API offerings for both humans and the new wave of AI consumers.

In general, there’s enormous potential to enhance the developer experience (DX) and API documentation by enabling graphical rendering of API workflows. The specification also improves human understanding of how to consume API endpoints to achieve a specific goal.

Arazzo descriptions can stay up-to-date and be assertable against the underlying APIs. This reduces the need for out-of-band documentation sharing, reduces the time and effort required to implement complex workflows, and automates testing and other repetitive tasks. Overall, the Arazzo Specification improves the capability of API specifications to tell the story of the API in a manner that improves interoperability across industries.

Frank Kilcommins

Principal API Technical Evangelist - SmartBear

OpenAPI: Where It's Been and Where It's Going

Covering the past, present, and future of OpenAPI and what the next generation of companies using OpenAPI will look like.

Ishraq Khan

CEO & Founder - Kodezi

Data Ecosystems Driving the Green Transition

Sustainability has become a key factor across industries and is no longer seen as a sidetrack, but a clear business goal infusing companies with purpose and enabling new business.


In his talk, Olli will discuss sustainability especially in the built environment and how APIs, data and ecosystems can be drivers in the transition towards cleaner, greener future.

Olli Kilpeläinen

VP, Data Platform & Ecosystem - Betolar

Sustainable IT and API Performance - How to Bring Them Together

A well-performing API is part of a good developer experience. What does a slow API response reveal about the API? What can be done to improve the performance? And what does Green IT has to do with API performance?

This talk analyzes key factors of an API performance and provides best practices towards a well-performing API together as part of the Green and Sustainable IT.

Merja Kajava

Founder - Aavista Oy

Scalability and speed for gaming integrations with API Management platform

Veikkaus is changing the concept of how online casino games will be integrated into the Veikkaus back-office systems.

API management platform with integrated developer portal have a central role in this journey.

I will walk through our business case and plans to transform the current integration practices into a managed one.

Olli Nilsson

Technology Manager - Veikkaus Oy

Booking & Payment API for Integrated Mobility

We executed a two part study to increase understanding about existing European API's used in booking & payment in multimodal mobility services.

Aim was to approach the topic with the traffic data ecosystem actors to increase understanding what options could serve domestic and international business cases, what are evident development needs and how mature the solutions are.

Jaakko Rintamäki

Development Manager, Mobility Data - Finntraffic

Data, API’s and Banks, with AI on top

Banks are fueled by data. The withdrawal fee, interest rate for mortgages, amount of memory we need on our enterprise bus workers, everything boils down to having data available for analysis. And banks are an ecosystem where usually it is hard to get. Data is there but how to get from the sources?

You can use AI (think of chatGpt like applications) to ask for the data, what goes underneath to know what you actually need? We are on a journey to liberate data to applications and analysts. I am going to show you:
- The challenges of liberating data in a bank
- Which steps to have an integration solution
- How AI can be used to help finding the data you need

Sergio Giraldo

IT Lead - ING

Mastering the Multiverse: Scaling API Products Across Clouds with API Gateways and Service Mesh

In the dynamic realm of modern technology, orchestrating API products across diverse cloud environments is akin to mastering multiple universes.

To navigate this complex multiverse with finesse, understanding the pivotal roles of API gateways and service mesh is paramount.

Whether you're a seasoned API owner or embarking on your journey, this talk will equip you with the knowledge and strategies to conquer the challenges of scaling in a distributed, cloud-native landscape.

Duncan Doyle

Product Manager, EMEA - Solo.io

Scalable, Performant Decentralized APIs

Most APIs are deployed highly regional (think us-east-1). However, to meet performance and scale criteria, I'd like to present a new paradigm of lobal/decentralized API deployments that use only one region: Earth.

Gift Egwuenu

Developer Advocate - Cloudflare

Evolution of API Management and Emerging Trends

Join us for "Evolution of API Management and Emerging Trends," a workshop exploring the latest advancements in API management.

Discover how the Gravitee API Gateway now supports event-driven use cases alongside traditional REST and SOAP APIs, providing a comprehensive solution for modern integration needs.

Benjamin Bandali

Account Director Nordics & Benelux - Gravitee.io

Getting Started with Event-Driven APIs & AsyncAPI

You have mastered synchronous APIs like REST, GraphQL, and gRPC, but are you wondering how to get started with Event Driven Architecture? Time decoupling is becoming a new requirement for modern applications to scale at the multi-cloud level expected.

Event-driven architecture (EDA) provides a tried-and-true set of patterns for implementing this decoupling. However, we must move forward in order to match the developer experience provided for similar application connectivity, such as REST APIs. Enter event-driven APIs, which make the transition from synchronous to asynchronous communication easier.

This session will cover the following topics:
The requirement for APIs for event-driven architecture
The significance of using a contract-first approach when developing event-driven APIs
What is AsyncAPI, and how does it help you define endpoints and schemas?
Simple steps to get started with the AsyncAPI ecosystem

Hugo Guerrero

Developer Advocate - Kong

Navigating the Jungle of the AsyncAPI Ecosystem

Which tooling from the AsyncAPI ecosystem can you employ when faced with challenges when it comes to APIs and event-driven systems?

This talk helps you to confidently navigate the jungle of the AsyncAPI ecosystem, regardless of your experience level.

Jonas Lagoni

Lead Software Engineer - Postman

AsyncAPI in Production - The True Potential

Learn why you should use AsyncAPI, not from a maintainer point of view but by learning its practical applications through real-world use cases. AsyncAPI is not only for docs, there is much more potential in it.

Lukasz Gornicki

Open Source Maintainer - Brain Fart Services

Using Test Containers for AsyncAPI Unit Testing and Mocking

If you have been developing your applications using modern techniques, you might have heard about unit testing. As they say, "testing is the art of doubt!" However, in the age of event driven architecture, configuring the full testing environment might be intimidating.

Testcontainers have established themselves as a go-to solution for database, middleware, and cloud services integration testing, but what about your regular asynchronous business services and APIs? Enter Microcks, an open-source cloud-native tool (CNCF Sandbox project), ready to work with Testcontainers, and provide a solution for mocking and testing APIs without extensive coding.

This collaboration simplifies the process of configuring complex settings, allowing for the adoption of a strong Shift-Left approach to integration testing. The beauty of it is that this methodology is universally applicable, catering to a wide range of protocols, whether Apache Kafka, gRPC, GraphQL, or REST, regardless of your technological stack, be it Java, Go, Node, or others.

We will demonstrate an incredible developer experience that truly brings joy to your Java Spring Boot and Quarkus applications and empowers you to build extensive and reliable integration tests, ensuring your microservices communicate as expected every time.

Hugo Guerrero

Developer Advocate - Kong

Designing APIs for AI Consumers

Experiences from real-life cases using AI APIs to provide our customers RAG systems when needed.

APIs are the foundation of how we build AI-systems.

Tommi Kostilainen

CTO & Founder - TekstiAI

Prototype-first - A modern API development workflow

The current conversation around API design and development is dominated by the design-first vs. code-first debate.

Both approaches involve very different tradeoffs in terms of time to market, design quality and developer experience. Design-first is often framed as the ideal but impractical option while code-first the pragmatic compromise.

However, there is another option - API prototyping. In this session you’ll hear why starting with an API prototype combines many of the benefits of these approaches, and how you may already have be doing it without realizing.

Tom Akehurst

CTO and Co-Founder - WireMock

Designing APIs for Humans

APIs are the cornerstone of communication between services, yet we still treat the design of them as an afterthought. We spend huge amounts of time considering UIs and how users interact with them, why don't we do the same for APIs?

In this talk, Paul leverages 5 years of API experience at Stripe to discuss why we should start designing our APIs for the humans behind them. He'll show examples, share some horror stories and hopefully convince you on some best practises when designing and implementing your API.

Paul Asjes

Developer Experience Engineer - WorkOS

APIs should be Products, Devportals too - Or shouldn't they?

That APIs should be treated as products instead of projects does not need further elaboration. Not doing so threatens the security and reliability of an organisation's interfaces.

In this talk I will explain why it is impossible to treat APIs as products if the devportal, which is the interface through which they are accessed and supported, isn't also treated as a product.

Kristof Van Tomme

CEO & Co-Founder - Pronovix

Building Platforms: Masterclass on Platform Strategy and Engineering

Registration required, read more, https://bit.ly/apidayshelsinkimasterclass

Platforms have become a hot topic recently, and for a good reason. They span a wide range of topics ranging from platform business models to the more technical side of developer and API platforms.

In this masterclass you will learn how to boost developer productivity, best practice, service reliability and resilience with technology platforms.

Understand the types and characteristics of platforms, engineering practices, and how to craft your platform strategy to build communities, support platform adoption and supercharge your organization.

Erik Wilde

OAI Ambassador @ OpenAPI Initiative - API Strategist and Content Creator at Getting APIs to Work

API Compliance by Design

Marjukka Niinioja

APItalista & Founding Partner - Osaango

Bridging the Gap Between Backend and Frontend API Testing with K6

A very key aspect of software engineering is ensuring your application performs optimally under heavy load. In this talk, the speaker will introduce K6, an open source tool that integrates protocol-based load testing and browser testing.

The talk will start off by introducing the audience to the basics of protocol based load testing and how it can empower developers to assess the resilience and scalability of backend systems. Next, we’ll dive deep into the nitty gritty of k6, learning how it can enable us to simulate real-world user scenarios and uncover bottlenecks. After that, we will see how k6 provides valuable insights about an application under heavy load and how it can bring backend and frontend performance evaluations together.

By the end of this session, the audience will be armed with the knowledge and tools needed to supercharge your performance testing strategy, ensuring that applications not only withstand the most demanding conditions but also deliver an exceptional user experience.

Ayush Goyal

Senior Software Engineer - Grafana Labs

Taming The Beast: Navigating Complex API Environments

You drank the cool aid, and now you have 1000+ APIs/Microservices. Now what?

Allan Knabe

CEO & API Product Manager - apiable.io

TBA

Tracking Client Developers Experience via Tickets

How to set up ticketing system in the way to keep everyone happy: client developers, client product, client ops on one side and own product, ops and technical support (DevEx) on the other. Without spending too much of the budget.

Also we have a Slack to ZenDesk APP that we're aiming to open source by the event.

It might be interesting for the fintechs, as it doesn't require too much of the access permissions as native one does.

Andrii Melnychuk

Developer Experience Lead - Upvest

The REST API Myth

In the first part of the talk, I will explain that no such thing as a “REST API” actually exists.

In the second part, we will discuss how to design REST APIs nevertheless.

Sergey Konstantinov

Staff Software Engineer, Group Tech Lead - Bolt Technology (Estonia)

End of Day 2 - Closing Words

Mehdi Medjaoui

Author of Continuous API Management - Founder and Chairman of Apidays Conferences