Days

Hours

Minutes

Seconds

The API Economy in the AI Era

etc.venues 360 Madison, New York

April 30 & May 1, 2024

1,000+
participants

1,000+
companies

50+
sessions

50+
speakers

Apidays New York is supported by

Choose your conference experience

In-Person

Keynotes, sessions & workshops
Online exhibition hall and immersive experiences
Access all the content from anywhere in the world
Peer networking & 1:1 meetings with API experts
Complimentary happy hour cocktail
Networking breakfast & lunch with the community
Meet our partners in the Partner’s Village
Official apidays certificate of participation
API training & certification with the API Academy

Virtual

Keynotes, sessions & workshops
Online exhibition hall and immersive experiences
Access all the content from anywhere in the world

1000+ Participants from

WHAT IS APIDAYS?

100,000+ attendees

CIOs, CTO, CDOs, SVPs, VPs, Heads of Innovation, Heads of API, API Architects, Developers, Software Engineers, Infrastructure & Cloud Managers, IT Managers, Product Managers, Consultants & Analysts

5,000+ speakers

Learn from the best about Business Models, Design & Documentation, Lifecycle Management, Security & Identity Management, Testing & Monitoring, Banking APIs and Open Banking, Developer Marketing, Digital Transformation, GraphQL, Microservice Architecture, Mobile & IoT APIs

A global community

70+ events

APIs automate interactions between IT systems, and with AI in the equation, interactions will scale to a point we can’t yet imagine. The full potential of the API Economy will only be fulfilled when AI has explored all possible API consumptions to generate business value. Imagine what AI and APIs can do when, in a few minutes, you can consume 100+ API sources to build the best possible application with the best of the programmable world. It is the time for endless capabilities in the Programmable economy.

This 5th edition of apidays New York will focus on:

A Convergence of Minds and Ideas on the Future of APIs
In-depth exploration of AI and API Integration
Understanding API Monetization and Promotion in the AI Context

2023 Talks & Presentation Slides

Play

CHECK THE SLIDES

Previous slide

Next slide

2024 SPEAKER LINEUP

8:30 am

Welcome Breakfast

Partners Village

9:15 am

Welcome & Opening Remarks

Room: Venture 3

Mehdi Medjaoui Founder and Chairman of Apidays Conferences, Author of Continuous API Management - Apidays

APISecure Conference Room: Venture 3	Workshop Sessions Room: Venture 1	Workshop Sessions Room: Capital	Masterclass
9:30 am Adversarial AI - Lying Chatbots, Deep Fakes and more… Jeff Crume Distinguished Engineer, CTO IBM Security - IBM 9:30 am Adversarial AI - Lying Chatbots, Deep Fakes and more… This presentation will explore the potential dangers of adversarial AI, lying chatbots, and deep fakes. We will discuss how these technologies are becoming more sophisticated and how they can be used to deceive people, spread disinformation, and even cause harm. Through real-world examples and demonstrations, we will explore the implications of these technologies for society in order to gain a better understanding of these emerging technologies and the risks they pose. Jeff Crume Distinguished Engineer, CTO IBM Security - IBM 9:55 am Putting AI into API Security Corey Ball Author and Sr. Manager Pentest - Moss Adams 9:55 am Putting AI into API Security Large Language Models are becoming more important for all aspects of APIs. I will demonstrate how an AI-driven approach to security can help identify weaknesses and test APIs at scale. This presentation will explore the application of AI for enhancing the effectiveness, quality, and efficiency of API security testing. We will explore the use of Hacking APIs GPT, PostBot, as well as leveraging a PrivateGPT for testing APIs. I will discuss the strengths and weaknesses of the current state of these tools to help us understand their role in API security. Corey Ball Author and Sr. Manager Pentest - Moss Adams 10:20 am Post-Quantum API Security: Preparing your APIs for Q-day Francois Lascelles CTO - Layer7 10:20 am Post-Quantum API Security: Preparing your APIs for Q-day Quantum computing seems like a distant-future technology, but if you consider the pace of enterprise modernization, the quantum threat may be just around the corner - and APIs are a primary target. When is Q-day exactly? Nobody knows yet, but equally unknown is the scale of the corrective measures that will be required of your API infrastructure. In this presentation you will learn: - How quantum computing introduces a new security risk - What is the API-specific exposure associated with this threat - How and when do you need to start preparing your APIs - What will be the costs in terms of computing resources and API retrofit projects - What we are learning from post-quantum API security research and initial tests so far Francois Lascelles CTO - Layer7 10:45 am APISecOps Culture Fireside chat discussion with Jean Burelier, Tech Lead Platform Team and Brenton House Brenton House Digital Strategist and Influencer Jean Burellier Principal Engineer, Platform Team Lead - Sanofi 10:45 am APISecOps Culture Fireside chat discussion with Jean Burelier, Tech Lead Platform Team and Brenton House Brenton House Digital Strategist and Influencer Jean Burellier Principal Engineer, Platform Team Lead - Sanofi	9:30 am Utilizing the Kubernetes Gateway API and Kong for API Management Workshop by Kong Felderi Santiago VP of Solutions Engineering - Kong 9:30 am Utilizing the Kubernetes Gateway API and Kong for API Management Workshop by Kong This hands-on session is designed to empower attendees with practical skills in API management using the Kubernetes Gateway API and Kong. Through guided exercises, participants will discover the nuances of API exposure, route creation, and policy enforcement using Kong plugins. By the end of the workshop, attendees will be adept at manipulating traffic within Kubernetes environments, integrating custom plugins, and optimizing routing configurations for enhanced performance. Objectives: Grasp the foundational concepts of the Kubernetes Gateway API. Acquire proficiency in creating routes using the Gateway API. Explore the capabilities of HTTPRoute resources and their synergy with Kong plugins. Develop expertise in traffic manipulation within Kubernetes environments. Learn to seamlessly integrate custom plugins into Kubernetes configurations. Master the art of managing and optimizing routing configurations effectively. Prerequisites: Completion of Kong Academy sign-up (account): Kong Academy Laptop Internet Connection Felderi Santiago VP of Solutions Engineering - Kong 10:20 am Beyond Inbound: Unlocking the Secrets of API Egress Traffic Management Workshop by Lunar.dev Sean Keegan Head of Developer Relations - Lunar.dev 10:20 am Beyond Inbound: Unlocking the Secrets of API Egress Traffic Management Workshop by Lunar.dev Delving into the roles of outbound and inbound data interactions, explore the significance of monitoring, security considerations, and challenges for both API consumers and providers. Discover how to get actionable insights from lunar.dev to optimize your organization's API strategy and drive better decision-making. Sean Keegan Head of Developer Relations - Lunar.dev	9:30 am Platform Engineering Meets Open Banking: A Comprehensive Strategy Workshop by Sensedia Filipe Torqueto Head of Solutions - Sensedia 9:30 am Platform Engineering Meets Open Banking: A Comprehensive Strategy Workshop by Sensedia Transforming API Management into a Powerful, Flexible, and Reliable Tool tailored platform for financial services. Filipe Torqueto Head of Solutions - Sensedia 10:20 am Next Gen API Ecosystem Workshop by Ostia Leo Cullen Head of Business Development - Ostia John Power CEO - Ostia 10:20 am Next Gen API Ecosystem Workshop by Ostia Join us for a look into the next generation of API Ecosystem design and deployment, led by industry experts John and Leo. In this workshop, you'll learn how a No-Code approach can transform the API lifecycle: enabling rapid development, and fostering greater collaboration among stakeholders. We'll tackle common challenges head-on, including ensuring consistency across environments (Sandbox, Test & Production) and refining partner, developer and end-user experiences. Leo Cullen Head of Business Development - Ostia John Power CEO - Ostia	9:30 am API Design: Masterclass on the Fundamentals of Designing and Building Great Web API Mike Amundsen Author of "Design and Build Great APIs", API Strategist & Advisor - amundsen.com, Inc. 9:30 am API Design: Masterclass on the Fundamentals of Designing and Building Great Web API This module offers a big picture overview of the process of the API lifecycle including details on designing, building, deploying, and maintaining great APIs. We’ll talk about the Foundations of API-First and the connection between HTTP, the Web, and REST. We’ll review the API Design process including modeling, designing, and describing your APIs. We’ll also cover the process of building production APIs from your designs including the importance of API sketches and prototypes before you commit to the final build. We’ll also review the importance of testing and securing your APIs along with the process of automated deployment including continuous integration, continuous delivery, and continuous deployment. Finally, we’ll cover the work of safely modifying existing production APIs including the “First do no harm” principle, the three rules of modifying existing APIs and how to handle both testing and deployment of API modifications. We’ll even talk about the right way to shut down an existing production API without causing needless pain to your existing users. Whether you’re new to the API space or an experienced developer, designer, or maintainer, this summary course will help you in your journey to designing and building great APIs. Mike Amundsen Author of "Design and Build Great APIs", API Strategist & Advisor - amundsen.com, Inc.

11:10 am

Coffee Break / Networking / Expo

Partners Village

APISecure Conference Room: Venture 3	APISecure Conference Room: Venture 2	Workshop Sessions Room: Venture 1	Workshop Sessions Room: Capital	Masterclass
11:35 am LLM API Security Ankush Jain Co-Founder and CTO - Akto.io Ankita Gupta Co-Founder and CEO - Akto.io 11:35 am LLM API Security In this session, we will talk about API security of LLM APIs, addressing key vulnerabilities and attack vectors. The purpose is to educate developers, security teams, API designers, architects and organizations about the potential security risks when deploying and managing LLM APIs. 1. Overview of Large Language Models (LLMs) APIs 2. Understanding LLM Vulnerabilities: – Prompt Injections – Sensitive Data Leakage – Inadequate Sandboxing – Insecure Plugin Design – Model Denial of Service – Unauthorized Code Execution – Input attacks – Poisoning attacks 3. Best practices to secure LLM APIs from data breaches Ankush Jain Co-Founder and CTO - Akto.io Ankita Gupta Co-Founder and CEO - Akto.io 12:00 pm API Secret Tokens Exposed: Insights from Analyzing 1 Million Domains Tristan Kalos Co-founder and CEO - Escape Antoine Carossio Co-Founder & CTO - Escape 12:00 pm API Secret Tokens Exposed: Insights from Analyzing 1 Million Domains Join Escape's co-founder and CTO, Antoine Carossio, together with co-founder and CEO, Tristan Kalos, for insights on critical risks from exposed API tokens. Their groundbreaking research, analyzing 1 million domains, uncovered 18,000+ API tokens and RSA keys accessible without authentication. 41% were highly critical. They will share his unique web scanning methodology, delve into sensitive API data found revealing potential severe financial losses, and draw parallels to standard API security threats. Going beyond the findings, they'll present actionable remediation strategies and provide a practical API security checklist. Leave equipped with a clear path to secure your APIs. Tristan Kalos Co-founder and CEO - Escape Antoine Carossio Co-Founder & CTO - Escape 12:20 pm From API Security to AI Security - The Solution or the Problem? Erez Yalon VP of Security Research - Checkmarx 12:20 pm From API Security to AI Security - The Solution or the Problem? In an era where APIs define the digital ecosystem, securing them against evolving cyber threats has become paramount. Just as the industry began to adapt to the intricacies of API security, the sudden introduction of AI into our digital lives has presented a new frontier of opportunities and challenges. In this session, we will examine the transformative potential of AI in strengthening API defenses while also navigating the novel challenges it introduces. We'll delve into AI-driven security strategies, addressing the promise they hold and the perils they pose, including ethical dilemmas and risks of misuse. Just as we began to grasp the nuances of API security, the advent of AI has reshaped the battlefield, compelling us to adapt swiftly. We need to equip ourselves with the knowledge to navigate this new terrain, balancing the innovative benefits of AI with the responsibility to address its emerging complexities and challenges. Erez Yalon VP of Security Research - Checkmarx 12:45 pm Passkeys: Developing APIs to enable passwordless authentication Cody Salas Sr Developer Advocate \| Solutions Architect - Yubico 12:45 pm Passkeys: Developing APIs to enable passwordless authentication It's a common occurrence to open the news and hear of another data breach, ransomware attack, or other forms of cyber crime. At the root of almost every incident is a compromised credential. Passwords, and legacy forms of multi factor authentication, have been the defacto standard in authentication for decades, but ultimately have failed in protecting user accounts. One of the most effective ways we can prevent cyber crime is through strong, phishing-resistant authentication. Passkeys offer a ubiquitous way to offer cryptographic based credentials, at scale, to consumers, and enterprises. Passkeys are powered by the open source FIDO2 standard, which ensures operability across all mainstream platforms, browsers, and authentication devices. Passkeys are now available to a large segment of the consumer market, whether it's through a security key, or your personal mobile device, So, what's preventing adoption? Many developers are still unaware of the technology itself, or may be unsure how to go about building or architecting a solution. This session aims to close that skill gap by providing an overview on how developers should structure, design, and develop the APIs required to enable passwordless authentication. The more developers are aware of passkeys, the more they will adopt them into their applications, which will lead to a safer, more secure web for everyone. Cody Salas Sr Developer Advocate \| Solutions Architect - Yubico	11:35 am The Four Pillars of API Security: Layer7 - A Comprehensive API Security Infrastructure APISecure Workshop by Broadcom Francois Lascelles CTO - Layer7 Jeremy Suo-Anttila Customer Engineer - Layer7 Greg Thompson PM - Layer7 11:35 am The Four Pillars of API Security: Layer7 - A Comprehensive API Security Infrastructure APISecure Workshop by Broadcom Deep dive into the infrastructure that controls access to APIs based on four pillars of security; real time security and integration, API Ops at Scale, API Management, and API intelligence. We will explore how these pillars combine to provide an effective and comprehensive solution for large-scale API security. Demos: - API Ops - Access control - API management - API observability and intelligence Francois Lascelles CTO - Layer7 Jeremy Suo-Anttila Customer Engineer - Layer7 Greg Thompson PM - Layer7 12:20 pm Learn GraphQL Security: Process, Tools, & Examples APISecure Workshop by Akto Ankita Gupta Co-Founder and CEO - Akto.io Ankush Jain Co-Founder and CTO - Akto.io 12:20 pm Learn GraphQL Security: Process, Tools, & Examples APISecure Workshop by Akto GraphQL Security workshop is for API developers and application security teams, focusing on practical security checks of GraphQL APIs. Participants will gain insights from hands-on experience with the Damn Vulnerable GraphQL Application (DVGA). The workshop covers essential topics including GraphQL security basics, introspection, overfetching, exploiting recursive types, managing excessive errors, object and key manipulation, and CSRF vulnerabilities. Attendees will learn to automate these security checks within CI/CD pipelines, enhancing their ability to secure GraphQL APIs effectively. This workshop will equip participants with the knowledge and tools needed for rigorous automated GraphQL security. Ankita Gupta Co-Founder and CEO - Akto.io Ankush Jain Co-Founder and CTO - Akto.io	11:35 am How to build a self-service API platform Workshop by Gravitee.io Michael Field Senior Solutions Engineer - Gravitee.io 11:35 am How to build a self-service API platform Workshop by Gravitee.io Join in and learn more about how to use Gravitee to: -Enable seamless, self-service API access -Build an API-as-a-service program as a part of a larger Platform Engineering initiative -Create, expose, and publish APIs as API products BYOD if you would like to follow along Michael Field Senior Solutions Engineer - Gravitee.io 12:20 pm Enhancing API Security and Privacy Through Hardening the Access Token Workshop by Curity Jonas Iggbom Director of Sales Engineering - Curity 12:20 pm Enhancing API Security and Privacy Through Hardening the Access Token Workshop by Curity API security should be approached holistically. This means that sometimes hardening the API’s security might not actually happen in the API itself. This is the case with the access token — an important part of a secure API. The access token allows clients to call APIs, which means that when the token is compromised an attacker can easily extract valuable data using legitimate credentials. Jonas Iggbom Director of Sales Engineering - Curity	11:35 am Automate your APIOps with Treblle Workshop by Treblle Vedran Cindrić Founder & CEO - Treblle 11:35 am Automate your APIOps with Treblle Workshop by Treblle Learn how Treblle can help you transform and automate most of the work in every stage of the API lifecycle with it’s groundbreaking end-to-end APIOps platform. In this interactive demo, with Treblle’s founder and CEO, you’ll see how Treblle can help you solve challenges with API Observability, Documentation, Analytics, Testing, Governance and Security. Vedran Cindrić Founder & CEO - Treblle 12:20 pm Omni-Channel Communication Live Demo with PrivateGPT Workshop by FreeClimb from Vail Harrison Goscenski Senior Technical Lead - FreeClimb from Vail 12:20 pm Omni-Channel Communication Live Demo with PrivateGPT Workshop by FreeClimb from Vail How do you ensure that your LLM isn't lying to your customers? This workshop will be a live coding demonstration utilizing FreeClimb from Vail's easy-to-use voice and SMS API to connect with https://github.com/imartinez/privateGPT, providing an on-prem auditable LLM system. We will spin up an instance of privateGPT, index some data, and power a voice call. After we have demoed a voice call, we will connect up SMS messaging, then write a quick web application to chat with our privateGPT instance. If you would like to follow along, you should preload your machine with privateGPT and the LLM you would like to use to power privateGPT. At the end of the presentation a more polished repo will be provided for reference. Harrison Goscenski Senior Technical Lead - FreeClimb from Vail	11:00 am Building Platforms: Masterclass on Platform Strategy and Engineering Erik Wilde OAI Ambassador @ OpenAPI Initiative - API Strategist and Content Creator at Getting APIs to Work 11:00 am Building Platforms: Masterclass on Platform Strategy and Engineering Platforms have become a hot topic recently, and for a good reason. They span a wide range of topics ranging from platform business models to the more technical side of developer and API platforms. In this masterclass you will learn how to boost developer productivity, best practice, service reliability and resilience with technology platforms. Understand the types and characteristics of platforms, engineering practices, and how to craft your platform strategy to build communities, support platform adoption and supercharge your organization. Erik Wilde OAI Ambassador @ OpenAPI Initiative - API Strategist and Content Creator at Getting APIs to Work

1:05 pm

Lunch / API Secure Welcome Coffee / Networking / Expo

Partners Village

APISecure Conference Room: Venture 3	APISecure Conference Room: Venture 2	API Design Room: Venture 1	The New API Management Stack Room: Capital
2:00 pm APIs with ChatGPT 4-Turbo and Attack Path Visualization Doug Dooley Chief Operating Officer - Data Theorem 2:00 pm APIs with ChatGPT 4-Turbo and Attack Path Visualization ChatGTP-4 Turbo powers a new class of Enterprise AI assistances. The fuel that powers these new AI assistants is large quantities of data from APIs in the cloud. Defending APIs from exploit without a deeper contextual understanding of these modern attacks is growing problem for businesses looking to protect their data. Learn how visualizing the attack path of these modern API exploits are helping customers protect their data. Doug Dooley Chief Operating Officer - Data Theorem 2:25 pm DevOps Worked... Why Hasn't Security Kept Up? Joni Klippert Co-Founder and CEO - StackHawk 2:25 pm DevOps Worked... Why Hasn't Security Kept Up? DevOps has changed the way software is built, delivered, and operated in production. Features are pushed out faster than ever before, applications are more resilient, and improvements in the development pipeline have given engineers the power to own the complete delivery of their application. Behind the improvements that we have seen from the advent of the DevOps movement are DevOps teams, cultural shifts, and tooling that was built to serve the engineers themselves. While the world has shifted left and a best-in-class standard has been established for software engineering, API and application security has remained stagnant. Joni Klippert Co-Founder and CEO - StackHawk 2:50 pm You’ve Had an API Breach, Now What? Axel Grosse Global Head of Presales - 42Crunch 2:50 pm You’ve Had an API Breach, Now What? Axel Grosse Global Head of Presales - 42Crunch 3:15 pm Your Defense Must Be Informed by the Offense: API Attack Patterns, the Rise of AI, and What Defenders Need to Know Chuck Herrin Field CISO & Customer Advocate - F5 Corey Ball Author and Sr. Manager Pentest - Moss Adams 3:15 pm Your Defense Must Be Informed by the Offense: API Attack Patterns, the Rise of AI, and What Defenders Need to Know Attacks on API endpoints are now over 90% of attacks seen by F5, and many defenders are not aware of how API attacks differ from the attacks your WAF was built for. In this compelling session, we are bringing together two seasoned experts from opposite sides of the cybersecurity battlefield. Veteran CISO and now Field CTO for F5 API Security Chuck Herrin and Corey Ball, a renowned API hacker and author of "Hacking APIs," will share their perspectives on the most pressing API attack patterns, providing attendees with a rare glimpse into the attacker's playbook. This session is designed to bridge the gap between attack and defense, offering practical insights on how defenders can think proactively to secure their application and API environments. We’ll also share what’s coming, as generative AI makes attackers jobs easier while driving even more API usage and another new attack surface. Chuck Herrin Field CISO & Customer Advocate - F5 Corey Ball Author and Sr. Manager Pentest - Moss Adams	2:00 pm Powering DevSecOps With DevSecTrust Yossi Rifold Head of Product Management at SAST & Engines - Checkmarx 2:00 pm Powering DevSecOps With DevSecTrust DevSecOps has been around the industry for over a decade now and has ridden the hype cycle into accepted best practice —but best practice doesn’t mean easy. Join us for an in-depth discussion on the current state of DevSecOps, as you hear from your peers on how they’re balancing speed, agility, and security in their SDLC. With the grow th of IaC, the use of third-party and open-source code, serverless architecture, and other technological advancements, organizations need to understand the actual practice of DevSecOps beyond the theory. In this roundtable, we’ll explore topics such as: • Obstacles your peers have faced implementing DevSecOps, and how they’ve overcome them • The importance of trust and collaboration between AppSec and Developer teams • The role of security and developer leadership in setting the tone and driving adoption Yossi Rifold Head of Product Management at SAST & Engines - Checkmarx 2:50 pm Beyond Red, Yellow and Green, Bringing Context to API Security APISecure Workshop by Data Theorem Richard Smith Director - Data Theorem 2:50 pm Beyond Red, Yellow and Green, Bringing Context to API Security APISecure Workshop by Data Theorem As the need for an API Security program continues to grow, organizations are seeing new challenges emerge. Like any security tool, understanding what is a real threat in the noise of red, yellow and green alerts is always a challenge. In this workshop, we will review how to bring context to your API security programs to produce actionable results. Richard Smith Director - Data Theorem	2:00 pm Interface Portfolio Strategy: Harnessing DevPortals to Defend Against Commoditization Kristof Van Tomme CEO & Co-founder - Pronovix 2:00 pm Interface Portfolio Strategy: Harnessing DevPortals to Defend Against Commoditization In January, I sparked controversy with my #APIFutures article "APIs are interface utilities". In it I challenged the conventional wisdom by proposing that APIs should be viewed as utilities rather than products. This notion seemingly contradicts the prevailing belief that APIs should be treated as products. In a follow up webinar I was told that utilities sound like commodities, and that mentioning commodities is the fastest way to get your API program defunded. In this session I will explain what an Interface Portfolio Strategy is, and how it can turn this threat into an opportunity. I will then also explore the crucial role your developer portal has in executing your Interface Strategy, and helping you side-step commoditization. Expanding the value of your API program through a more holistic Interface approach. Kristof Van Tomme CEO & Co-founder - Pronovix 2:25 pm Beyond API Design Standards Dugald Morrow Developer Advocate - Atlassian 2:25 pm Beyond API Design Standards In recent years, organisations have become more aware of the need to create standards that their APIs need to conform to. However, there are many practices relating to API maintenance and API stakeholder management that organisations also need to standardise. This talk will outline why API producers need comprehensive extensibility standards covering API design, API change management and API collaboration. Dugald Morrow Developer Advocate - Atlassian 2:50 pm RESTful API Patterns and Practices Mike Amundsen Author of "Design and Build Great APIs", API Strategist & Advisor - amundsen.com, Inc. 2:50 pm RESTful API Patterns and Practices The work of creating and maintaining an API program involves lots of things. Designing, Coding, Documenting, Building, Securing, Testing, Releasing, and more. In this talk, we'll cover dozens of proven API Patterns and practices that you can use to add stability and scalability to your API program. Along with an introduction to the use of patterns in design and development, this talk will identify 75+ re-usable patterns covering A{I design, writing robust client apps, building reusable services, handling distributed data, and supporting general workflow across services and even organizations. Whether you are primarily a designer, architect, developer, or maintainer, this talk can help you create flexible, resilient, implementations that solve real problems with clear, concise patterns. Mike Amundsen Author of "Design and Build Great APIs", API Strategist & Advisor - amundsen.com, Inc. 3:15 pm API Adoption in the Age of AI Code Assistants: Limitations and Opportunities Adeel Ali Co-Founder & CEO - APIMatic.io 3:15 pm API Adoption in the Age of AI Code Assistants: Limitations and Opportunities This is solid and very timely material, as Adeel will be covering an analysis of the existing AI-based tools helping developers to integrate APIs. Adeel Ali Co-Founder & CEO - APIMatic.io	2:00 pm Down the AI Rabbit Hole: Leveraging AI in your projects without ending up lost in wonderland Shane Utt Staff Software Engineer - Kong 2:00 pm Down the AI Rabbit Hole: Leveraging AI in your projects without ending up lost in wonderland Generative AI is transforming the world around us, and is quickly becoming a part of the conversation as we greenfield new features and applications. It is very alluring to deliver AI features into our existing products, and think about new projects we might build around AI. However, you might have already found that the journey into the realm of AI often feels like tumbling down the rabbit hole into wonderland - a maze of complexity and uncertainty. In this talk we'll dive into some of that complexity and uncertainty and discuss the AI/ML landscape as it is today. We'll discuss practical strategies for experimentation and how to even get started in this space. We'll cover how we've been approaching AI at Kong, and the importance of remembering that these AI services are ultimately served via APIs - and how API management is needed in order to move these projects from experimental to production. If you're currently looking at how to leverage AI in your projects and how to mitigate complexity and risks, join us to share in the journey and our experiences together. We'll cover how you might avoid falling down the rabbit hole, or maybe discuss the situations where you might just want to visit wonderland after all? Shane Utt Staff Software Engineer - Kong 2:25 pm APIs at Scale: What 1 Billion Requests Reveal About the Future of AI and APIs Vedran Cindrić Founder & CEO - Treblle 2:25 pm APIs at Scale: What 1 Billion Requests Reveal About the Future of AI and APIs We’ve analysed 1 billion requests across 10 thousand APIs and produced an industry-first report based on actual usage data, not surveys. In this talk we’ll go over the findings in our report and you’ll learn about: - API Design: how people are building APIs, what technologies they use, and how they structure them and similar - API Performance: what does performance look like on an average API, what technologies have better performance metrics and similar - API Security: what is the state of security on an average API, are they using HTTPS, are API requests authenticated and similar - API Market: which industries are using APIs the most, what are the most popular countries and cities that use APIs and similar Vedran Cindrić Founder & CEO - Treblle 2:50 pm How to stop your integrations from breaking Gil Feig Co-Founder & CTO - Merge 2:50 pm How to stop your integrations from breaking Are you tired of spending unlimited effort on integrations that eventually break? Join Merge’s Co-Founder & CTO, Gil Feig, as he shares how to overcome the inherently reactive nature of integrations. Gil will discuss how to move and build integrations in an efficient, proactive manner, essential within today's tech climate. Gil Feig Co-Founder & CTO - Merge 3:15 pm API Discovery - From Crawl to Run Rob Dickinson VP Engineering - Graylog 3:15 pm API Discovery - From Crawl to Run Discovering the attack surface presented by your APIs is the first step to improving API security. But APIs are fundamentally dark and constantly changing, which presents serious challenges for security teams trying to assess and manage new risks. There are several reasonable ways to perform API discovery, but each has its own tradeoffs and implications about what is actually being counted. This talk covers taking an API discovery program from start to best-of-breed, and how Graylog API Security helps you measure and manage your API attack surface. Rob Dickinson VP Engineering - Graylog

3:40 pm

Coffee Break / Networking / Expo

Partners Village

APISECURE Conference Room: Venture 3	The New Banking API Stack Room: Venture 2	Open Banking and APIs Room: Venture 1	The New DX/API Tooling Stack Room: Capital
4:05 pm Panel Discussion: Open Banking Frameworks for Secure Data Sharing Figen Ceceli SVP, Head of Data Aggregation Product - Fidelity Investments Kathy Wong Head of Product for Export Aggregation - Chase Awah Teh VP, Data Governance & Privacy Engineering - Capital One Shekhar Sahgal Senior Vice President Data Access, Open Banking - Mastercard Danny Weitzner Founding Director, MIT Internet Policy Research Initiative & Research Scientist - MIT 4:05 pm Panel Discussion: Open Banking Frameworks for Secure Data Sharing To align with new open banking policy proposals, technology integrations that enable secure data sharing are top of mind for many in the industry, from financial institutions to security experts to fintechs. This panel is a cross-section of leaders across the industry sharing different perspectives on: - Ways to use technology to support secure open banking - The benefits of API solutions and the move away from screen scraping - The risks accumulating in the open banking ecosystem - What you can do to support data traceability - What’s next when it comes to APIs in enabling secure data sharing Figen Ceceli SVP, Head of Data Aggregation Product - Fidelity Investments Kathy Wong Head of Product for Export Aggregation - Chase Awah Teh VP, Data Governance & Privacy Engineering - Capital One Shekhar Sahgal Senior Vice President Data Access, Open Banking - Mastercard Danny Weitzner Founding Director, MIT Internet Policy Research Initiative & Research Scientist - MIT 4:45 pm A Journey through API Security API Security Workshop by F5 Peter Scheffler Sr. Cyber Security Solutions Architect - F5 API Security 4:45 pm A Journey through API Security API Security Workshop by F5 Take a real-world look at some dangerous and common API exploits, highlighting practical techniques for protecting your most critical digital assets. Peter Scheffler Sr. Cyber Security Solutions Architect - F5 API Security	4:05 pm Test driven API security: From API Discovery to tested Web APIs APISecure Workshop by StackHawk Dan Hopkins VP of Engineering - StackHawk 4:05 pm Test driven API security: From API Discovery to tested Web APIs APISecure Workshop by StackHawk You can't secure what you don't know about. First you need to understand your API and web application attack surface and then put effective security coverage in place. In this session, we will use the StackHawk platform to discover applications and APIs in GitHub repositories and then the StackHawk scanner to run best-of-breed security tests and ensure your API and Web applications are secured. Dan Hopkins VP of Engineering - StackHawk 5:05 pm API Security Fundamentals Workshop Dan Barahona Founder - APIsec University 5:05 pm API Security Fundamentals Workshop Join this 1-hour workshop to understand API Security risks and best practices to keep them safe. The session will cover: 1. Why Attackers love targeting APIs 2. Real-world API Breaches 3. OWASP API Security Top 10 4. How to keep you APIs safe Attendees will also be eligible for an APIsec University certificate and badge Dan Barahona Founder - APIsec University	4:05 pm Modernizing Securities Finance Madhu Subbu Managing Director, Head of Securities Finance Technology - Clear Street 4:05 pm Modernizing Securities Finance Clear Street is on a mission to modernize the brokerage ecosystem by replacing the legacy infrastructure used across capital markets. In this session, Clear Street’s Madhu Subbu discusses the Securities Finance business and its significance, value chain, and how modern APIs can unlock business value. He also covers Clear Street’s journey in modernizing this business and what lies ahead. Madhu Subbu Managing Director, Head of Securities Finance Technology - Clear Street 4:25 pm Accelerating FinTech Innovation: Unleashing API Economy and GenAI Vasa Krishnan Chief Technology Officer - FinResults 4:25 pm Accelerating FinTech Innovation: Unleashing API Economy and GenAI ▪ Rapid Innovation ▪ Competitive Advantage ▪ Faster time-to-revenue ▪ Competitive Advantage ▪ Create Quick Value Vasa Krishnan Chief Technology Officer - FinResults 4:45 pm The Good, the Bad and the Governed - Why is governance a dirty word? David O'Neill Chief Operating Officer - APIContext 4:45 pm The Good, the Bad and the Governed - Why is governance a dirty word? APIs have now been with us for 20 years, and they are starting to grow up and become a core part of the business and not just something for engineering. With regulated standards and business requirements governance is more important than ever, but what does governance really mean and are APIs getting better? This talk will look at the history of APIs, what makes a good API and the coming intersection of government regulation and API governance. David O'Neill Chief Operating Officer - APIContext 5:05 pm Panel Discussion: The New API Stack under Open Banking Regulation Moderated by Eric Newcomer Eric Newcomer Principal Analyst - Intellyx Madhu Subbu Managing Director, Head of Securities Finance Technology - Clear Street Vasa Krishnan Chief Technology Officer - FinResults David O'Neill Chief Operating Officer - APIContext 5:05 pm Panel Discussion: The New API Stack under Open Banking Regulation Moderated by Eric Newcomer Eric Newcomer Principal Analyst - Intellyx Madhu Subbu Managing Director, Head of Securities Finance Technology - Clear Street Vasa Krishnan Chief Technology Officer - FinResults David O'Neill Chief Operating Officer - APIContext	4:05 pm Prototype-first - A modern API development workflow Tom Akehurst CTO and Co-Founder - WireMock 4:05 pm Prototype-first - A modern API development workflow The current conversation around API design and development is dominated by the design-first vs. code-first debate. Both approaches involve very different tradeoffs in terms of time to market, design quality and developer experience. Design-first is often framed as the ideal but impractical option while code-first the pragmatic compromise. However, there is another option - API prototyping. In this session you’ll hear why starting with an API prototype combines many of the benefits of these apps. Tom Akehurst CTO and Co-Founder - WireMock 4:25 pm Build a terrible API for people you hate Jim Bennett Principal Developer Advocate - liblab 4:25 pm Build a terrible API for people you hate We've all been there - you've been asked to build an API to be used by someone you really dislike. Maybe it's the person who keeps stealing your milk from the company kitchen, or the one who asks long winding questions just as the 5pm Friday meeting is about to end. It's someone who annoys you, and you have to build them an API. So malicious compliance time! You have to build them an API, but no-one said it has to be good. Here's your chance to get revenge on this person by building the Worst. API. Ever. This session will show you how, covering some of the nastiest ways to create an API that is terrible to use. From lack of discoverability, to inconsistent naming, this session will have it all! And maybe if you have to create an API for someone you love, this might give you some pointers as to what not to do... Jim Bennett Principal Developer Advocate - liblab 4:45 pm Modernizing banking for a mid-sized financial institution Sheldon Schwart zenberger Manager, Enterprise Applications - Prospera 4:45 pm Modernizing banking for a mid-sized financial institution In this talk, Sheldon will be sharing the journey of the challenges and technology used to move a mid-sized financial institution in Canada towards cloud native finance. He will be talking about how they are removing the bloat of their distributed monolithic banking system and enabling the shift to EDA and APIs. Sheldon Schwart zenberger Manager, Enterprise Applications - Prospera 5:05 pm Supergraph(QL): Scalable API strategy for your data using GraphQL Eric Belisle Sales Engineer - Hasura 5:05 pm Supergraph(QL): Scalable API strategy for your data using GraphQL Add 1 part platform engineering + 1 parts GraphQL to bring IaC magic to the world of application development. Adopt a compiler-based APIs approach to build data APIs using declarative configuration, and deploy them at planet scale using the same configuration. The use of GraphQL allows multiple engineering teams to safely and efficiently own and operate their domains, leveraging the guardrails of a type system. The same type system also helps solve the problem of siloed data in enterprises – compounding the value your developers can generate with self-serve composable access to all your data. Your developers are now free to craft magical user experiences! Eric Belisle Sales Engineer - Hasura 5:25 pm Scaling Fintech API Programs in the Age of AI A Panel Discussion led by Ameer Hassan, Co-Founder & VP, Strategy, APIMatic.io Rahul Dighe Director of Product Management - Paypal Adeel Ali Co-Founder & CEO - APIMatic.io Ameer Hassan Co-Founder & VP Strategy - APIMatic.io Nestor Salinas Senior Product Manager - Maxio 5:25 pm Scaling Fintech API Programs in the Age of AI A Panel Discussion led by Ameer Hassan, Co-Founder & VP, Strategy, APIMatic.io Managing APIs is easy at first, but the problems surface when hundreds of thousands of developers start consuming your APIs. At that scale, what are the design and developer experience challenges of FinTech APIs? How are the leaders leveraging AI for growing the API programs? Rahul Dighe Director of Product Management - Paypal Adeel Ali Co-Founder & CEO - APIMatic.io Ameer Hassan Co-Founder & VP Strategy - APIMatic.io Nestor Salinas Senior Product Manager - Maxio

5:45 pm

End of Day 1

8:30 am

Welcome Breakfast

Partners Village

9:15 am

Welcome and Opening Remarks

Room: Venture 1, 2 & 3

Mehdi Medjaoui Founder and Chairman of Apidays Conferences, Author of Continuous API Management - Apidays

Keynotes Room: Venture 1, 2 & 3	Masterclass
9:30 am Keynote 1: The State of APIs and API Management in 2024 Mark O’Neill VP Analyst, Chief of Research for Software Engineering - Gartner 9:30 am Keynote 1: The State of APIs and API Management in 2024 Gartner’s 2024 API Survey highlights new API trends driven by AI, greater variation in API types beyond REST, and a continued requirement for API skills. In this session, Mark O’Neill shares Gartner’s latest findings on the API world, including API management trends. Mark O’Neill VP Analyst, Chief of Research for Software Engineering - Gartner 10:00 am Keynote 2: APIs in 2030: The Risk of Technological Sleepwalk Paolo Malinverno Growth Advisor - The Business of Technology 10:00 am Keynote 2: APIs in 2030: The Risk of Technological Sleepwalk Consider the intended and unintended consequences of API usage, and the API economy in the AI era. Paolo Malinverno Growth Advisor - The Business of Technology	9:30 am API Product Manager: Masterclass on the Basic Principles of an API Product Management Jeremy Glassenberg Product Lead, APIs - DocuSign 9:30 am API Product Manager: Masterclass on the Basic Principles of an API Product Management I’m an experienced Product leader of over 16 years with a proven track record of building APIs and growing developer ecosystems at successful startups such as Box and Tradeshift. I’ve managed and expanded communities of tens of thousands of developers, executed high-profile integrations promoted by Salesforce and Google, and led application marketplaces that were key to their companies’ growth and retention. While focused on Product Management and APIs, I also manage developer relation programs and application marketplaces. Jeremy Glassenberg Product Lead, APIs - DocuSign

Keynotes

Room: Venture 1, 2 & 3

Masterclass

9:30 am

Keynote 1: The State of APIs and API Management in 2024

Mark O’Neill VP Analyst, Chief of Research for Software Engineering - Gartner

10:00 am

Keynote 2: APIs in 2030: The Risk of Technological Sleepwalk

Paolo Malinverno Growth Advisor - The Business of Technology

9:30 am

API Product Manager: Masterclass on the Basic Principles of an API Product Management

Jeremy Glassenberg Product Lead, APIs - DocuSign

10:30 am

Coffee Break / Networking / Expo

Partners Village

API Driven Transformation Room: Venture 3	API Product Lifecycle Room: Venture 2	API Management and AI Room: Venture 1	API Architecture and Event Driven Room: Capital	Masterclass
11:10 am Unlocking the Enterprise with APIs James Higginbotham Executive API Consultant - LaunchAny 11:10 am Unlocking the Enterprise with APIs James will discuss how APIs are the digital front door to the organization, how they are transforming today’s businesses, and the steps necessary to implement a successful API program. He will also share some insights from recent engagements on how APIs have driven transformational change for organizations around the world. James Higginbotham Executive API Consultant - LaunchAny 11:30 am Revolutionizing Banking: A Client-Centric Digital Transformation Journey Rajendra Agashé Director of Treasury Product Management - BNY Mellon 11:30 am Revolutionizing Banking: A Client-Centric Digital Transformation Journey My talk will touch on the key developments in banking and focus on digital transformation within banks, enabling banks to offer innovative, efficient, and personalized services. Digitizing the customer value chain involves APIs which play a crucial role in changing how banks operate, deliver services, and interact with clients. This not only enhances the customer experience but also automates processes and deliver increased efficiencies. I will cover real world applications of advanced technologies in the transformation journey and Treasury Services use cases provided by BNY Mellon. Rajendra Agashé Director of Treasury Product Management - BNY Mellon 11:50 am TBD Vamshi Amerishetty Vice President of Product Management - JPMorgan Chase & Co. 11:50 am TBD Vamshi Amerishetty Vice President of Product Management - JPMorgan Chase & Co. 12:10 pm API and App Modernization journey , enabling Digital Transformation Ado Trakic Enterprise API Architect - Capital One Rangarajan Lakshminara yanachar Senior Manager Software Engineering - Capital One 12:10 pm API and App Modernization journey , enabling Digital Transformation In modern app development landscapes, organizations harness REST as well as GraphQL APIs for architectural modernization and efficient integration. API management software is pivotal, offering tools for API creation, security, and monitoring. Key features include a developer-friendly portal, a secure API gateway, and analytics for insightful policy management. This streamlined approach bolsters system integration, security, and business agility, accommodating diverse API development and testing needs. Advanced capabilities support scalable API-based business strategies and governance. Ado Trakic Enterprise API Architect - Capital One Rangarajan Lakshminara yanachar Senior Manager Software Engineering - Capital One 12:30 pm Fireside Chat with Bill Doerrfeld, Editor-in-Chief of Nordic APIs Mehdi Medjaoui Founder and Chairman of Apidays Conferences, Author of Continuous API Management - Apidays Bill Doerrfeld Tech Journalist / Editor-in-Chief - Nordic APIs 12:30 pm Fireside Chat with Bill Doerrfeld, Editor-in-Chief of Nordic APIs Mehdi Medjaoui Founder and Chairman of Apidays Conferences, Author of Continuous API Management - Apidays Bill Doerrfeld Tech Journalist / Editor-in-Chief - Nordic APIs	11:10 am API Documentation and Developer Experience - Rebuilding API Docs Max Sadlowski Staff Solutions Engineer at Wise - CEO at BentoSMB 11:10 am API Documentation and Developer Experience - Rebuilding API Docs We'll discuss how Wise rebuilt our API docs, what impact it's had, and how we are focusing on delivering the right interface for each type of user journey (sales, engineer, product manager, etc) Max Sadlowski Staff Solutions Engineer at Wise - CEO at BentoSMB 11:30 am Enhancing API Design through Interaction with ChatGPT Rahul Dighe Director of Product Management - Paypal 11:30 am Enhancing API Design through Interaction with ChatGPT In the evolving landscape of software development, the integration of artificial intelligence (AI) tools has significantly transformed traditional methodologies, enabling more efficient and sophisticated processes. This talk explores the innovative use of ChatGPT, an advanced natural language processing model, as a co-pilot in the design of application programming interfaces (APIs). I will provide guidelines/prompts for effectively incorporating AI co-pilots like ChatGPT into the API design workflow, ensuring both enhanced productivity and high-quality output. Rahul Dighe Director of Product Management - Paypal 11:50 am API Mastery: From the Design to Development Hamida Rebai Cloud Solutions Architect - Revenu Quebec 11:50 am API Mastery: From the Design to Development Embark on a journey of API mastery in this session. Explore the holistic approach to API success, covering design, development, and thriving in the API ecosystem. Uncover the secrets to seamless API lifecycle management, from inception to deployment. Learn best practices for user-friendly API design, ensuring an exceptional developer experience. Whether you're a seasoned architect or an aspiring developer, this session offers valuable insights to elevate your API game. Join us to unlock the full potential of API design and development for unparalleled success in the digital landscape. Hamida Rebai Cloud Solutions Architect - Revenu Quebec 12:10 pm API Design in FinTech: Challenges and Opportunities for next-gen APIs Jeremy Glassenberg Product Lead, APIs - DocuSign 12:10 pm API Design in FinTech: Challenges and Opportunities for next-gen APIs After years of FinTech companies site-scraping bank websites, we’re finally seeing APIs. Plaid now lets you go to Chase bank directly, log in, and get secure, reliable, API access. And as those much needed APIs came, the industry now has several “decacorns” and a longer list of unicorns. FinTech APIs came later than others, but experienced a growth spurt shocking even to the tech industry. And while we’ve seen well-designed APIs that adopted good standards already present, differences and inconsistencies between FinTech APIs show that these APIs aren’t at the quality they could be. FinTech API businesses are debating internally what standards and designs work best - formats, user representations, etc - all the while, ensuring security and privacy in APIs where stakes are higher. We’ll highlight differences among successful APIs in the space to identify the open questions that lead to more solid standards for the FinTech space. Jeremy Glassenberg Product Lead, APIs - DocuSign 12:30 pm The subtle art of API rate limiting Josh Twist Co-founder & CEO - Zuplo 12:30 pm The subtle art of API rate limiting Let’s talk about what really matters when it comes to API rate limiting. Spoiler: It’s not token-bucket algorithm vs sliding window! Here, we get into the nitty-gritty of what really matters when protecting your API and balancing the tradeoffs of consumer experience and performance. Josh Twist Co-founder & CEO - Zuplo	11:10 am How APIs Carried an Architect's Rise to CIO Kleber Bacili Founder and CEO - Sensedia 11:10 am How APIs Carried an Architect's Rise to CIO Join us for a captivating journey through the evolution of a traditional insurance provider and a visionary architect amidst API glut and governance challenges, navigating the shift from SOA to widespread APIs. Kleber Bacili Founder and CEO - Sensedia 11:30 am APIs and AI: Building Intelligent Applications Suman Devarasetti Vice President, Software Engineering Director - U.S. Bank 11:30 am APIs and AI: Building Intelligent Applications This presentation, titled "APIs and AI: Building Intelligent Applications," presented by Suman Devarasetti, explores the transformative integration of Artificial Intelligence (AI) with Application Programming Interfaces (APIs) to foster the development of intelligent, adaptive applications. It delves into how APIs are pivotal in making advanced AI technologies accessible, thereby enabling efficiency, personalization, and automation across various sectors including customer service, healthcare, finance, and retail. The discussion will navigate through the challenges of integrating AI with APIs, such as data privacy and security, and offer best practices for seamless AI integration. Highlighting real-world use cases and future trends, the presentation aims to equip the audience with insights into leveraging AI through APIs for creating more personalized and intelligent applications, encouraging exploration and innovation in this dynamic field. Suman Devarasetti Vice President, Software Engineering Director - U.S. Bank 11:50 am How AI is transforming API Consumption Jake Dreyfuss COO - PolyAPI 11:50 am How AI is transforming API Consumption We will walk the audience through a LIVE DEMO showcasing how to go from a question about an API to a successful API request in a matter of minutes Jake Dreyfuss COO - PolyAPI 12:10 pm Augmenting RAG with API Management and Integration Ruben Gonzalez API Management and Integration Specialist - Google Cloud 12:10 pm Augmenting RAG with API Management and Integration Large Language Models (LLMs) hold immense potential for revolutionizing how businesses operate. However, their effectiveness hinges on access to relevant and diverse data. This is where the challenge arises: connecting RAG applications to the heterogeneous landscape of enterprise data sources–each with its own format and security protocols–can be a complex undertaking. During this session we’ll explore the challenges and opportunities API Management and Integration to provide secure, managed, and reliable access to enterprise systems of record. Ruben Gonzalez API Management and Integration Specialist - Google Cloud 12:30 pm Power of OpenAI in API Testing Anubha Gaur Executive Director, DevSecOps and API Management - Quest Diagnostics 12:30 pm Power of OpenAI in API Testing In this talk, we will dive deep into API Testing Lifecycle, and how to bring efficiency in API Testing using OpenAI and primary challenges in API teams. You will learn a step by step approach to enable GenAI and key benefits in API quality, improved QA velocity and faster time-to-market. Anubha Gaur Executive Director, DevSecOps and API Management - Quest Diagnostics	11:10 am Building Future-Proof API Platforms: Adapting to Evolving Financial Industry Needs Irakli Nadareishvili Managing Director, Global Banking Platform - JPMorgan Chase & Co. 11:10 am Building Future-Proof API Platforms: Adapting to Evolving Financial Industry Needs In this talk we will share some of the lessons learned from building mission-critical API Platforms at several of the world's largest financial institutions. Specifically the focus of our interest is techniques and approaches that deliver wholistic business value by providing complete solutions for business problems, rather than individual APIs, and how to build platforms that survive changing needs over time, while continuing to delight the customers building on top of those platforms. Irakli Nadareishvili Managing Director, Global Banking Platform - JPMorgan Chase & Co. 11:30 am Scaling API-first – The story of a global engineering organization Ian Reasor Senior Computer Scientist - Adobe Radu Cotescu Senior Computer Scientist - Adobe 11:30 am Scaling API-first – The story of a global engineering organization On Adobe’s Experience Manager team, we have had to navigate the complex challenge of aligning over 300 engineers in developing seamless and consistent APIs, to drive a best-in-class developer experience. To be successful, we needed to equip our teams with the essential building blocks and tools that would ensure consistency while allowing them to maintain the autonomy needed to be nimble and efficient. Participants will gain valuable insights into the resources we developed to achieve this goal, including a library of reusable schema references, a set of guidelines for API design, and tooling for bootstrapping API development, such as project archetypes and linter extensions. Ian Reasor Senior Computer Scientist - Adobe Radu Cotescu Senior Computer Scientist - Adobe 11:50 am Driving API & EDA Success: Comparing CoE & C4E Models for Organizational Enablement Marcelo Caponi Global Product Manager - API & Integration - Danone 11:50 am Driving API & EDA Success: Comparing CoE & C4E Models for Organizational Enablement In today's rapidly evolving digital landscape, effective API management & Event-driven architecture (EDA) play pivotal roles in shaping organizational success. As businesses strive to innovate and adapt, the choices between a Center of Excellence (CoE) and a Center for Enablement (C4E) become crucial. Throughout this session, we'll delve into the nuanced differences between these two approaches, exploring how each contributes to organizational enablement in the context of APIs and Event-driven systems. Marcelo Caponi Global Product Manager - API & Integration - Danone 12:10 pm API Security is Dead; Long Live API Security Chuck Herrin Field CISO & Customer Advocate - F5 12:10 pm API Security is Dead; Long Live API Security In this session, former veteran CISO, Wib CTO, and now Field CTO for F5 API Security Chuck Herrin will discuss the state of the API Security sector, as well as the challenges companies will face as the rapid rise in AI adoption will strain resources and introduce new attack patterns to APIs. We will cut through the segmentation of the analyst categories relevant to API security, briefly discuss the history of API security as a category, and discuss what’s coming next as the industry hits an inflection point at the intersection of multiple technology ‘hype cycles’. We will also discuss what to expect in the coming 18-36 months as APIs are now over 90% of observed attacks and 90% of web traffic, and based on our analysis of historical trends, why Chuck thinks API security may should never have existed as a standalone category at all. Don’t miss this one! Chuck Herrin Field CISO & Customer Advocate - F5 12:30 pm API Authentication Unbroken - How to Achieve the Highest Level of API Security Jonas Iggbom Director of Sales Engineering - Curity 12:30 pm API Authentication Unbroken - How to Achieve the Highest Level of API Security In this talk, Jonas Iggbom will explore ways that authentication is handled in APIs. And what you can do to make your APIs more secure. This talk will be full of actionable information and advice that you can use to level up your API security. Jonas will discuss basic, digest, transport-level, and token-based authentication. They will also explain how to authenticate an end user and convey that identity to the API in a safe way. The state of the art using sender-constrained tokens will also be discussed. Given that broken authentication is #2 of the OWASP top 10 API security risks, you will not want to miss this talk! Jonas Iggbom Director of Sales Engineering - Curity	11:00 am Unlock the Power of APIs: Masterclass on Strategy and Monetization Mehdi Medjaoui Founder and Chairman of Apidays Conferences, Author of Continuous API Management - Apidays 11:00 am Unlock the Power of APIs: Masterclass on Strategy and Monetization Discover the secrets to leveraging APIs effectively in your business strategy with our comprehensive masterclass. Learn how to design, deploy, and manage APIs to drive innovation and maximize revenue streams. From crafting a robust API strategy to implementing successful monetization models, this course equips you with the knowledge and tools needed to thrive in the digital ecosystem. Mehdi Medjaoui Founder and Chairman of Apidays Conferences, Author of Continuous API Management - Apidays

12:50 pm

Lunch / API Secure Welcome Coffee / Networking / Expo

Partners Village

API Driven Transformation Room: Venture 3	API Product Lifecycle Room: Venture 2	API Management and AI Room: Venture 1	GraphQL Room: Capital
1:50 pm Chalk Talk: APIs & Today's Digital Revolution Alex Walling Chief Strategy Officer - Rapid 1:50 pm Chalk Talk: APIs & Today's Digital Revolution For decades, software has been seen primarily as a source of automation and cost reduction. But that is changing and enterprises need to drive new revenue with the powerful integration of APIs. Today, every large company is a software developer. The software content of everything, even a No. 2 pencil is, increasing (think: manufacturing, supply chain, pricing and demand, e-commerce, etc.). Everything we do and manufacture has some form of services behind it. Those services are driven by software. It is impossible to separate company strategy from software design. We implement one by executing on the other. Leading in competitive markets requires a software strategy that can drive revenue through new services, new channels, and new partners. We will look at the history of APIs through the lens of software design, industry structures, vertical integrations, service delivery and technology-enabled services. By understanding the best practices and business requirements around offering APIs as products, companies can successfully expand their product and service portfolios and create new revenue streams. APIs are core to the newest digital revolution. Alex Walling Chief Strategy Officer - Rapid 2:10 pm API Governance - One size? Seema Murthy Principal Enterprise Architect - ADP 2:10 pm API Governance - One size? One of the myths that most of us walk into governance is that one size should fit all. And pretty soon we have run into "edge" cases where a policy will no longer work. Are these truly "edge" cases or should we be saying diversity is the norm? Seema Murthy Principal Enterprise Architect - ADP 2:30 pm How APIs are automating the supply chain from manufacturing to end users? A panel discussion led by Mehdi Medjaoui, Founder and Chairman of Apidays Conferences Mehdi Medjaoui Founder and Chairman of Apidays Conferences, Author of Continuous API Management - Apidays Bertier Luyt CEO - Ades.io 2:30 pm How APIs are automating the supply chain from manufacturing to end users? A panel discussion led by Mehdi Medjaoui, Founder and Chairman of Apidays Conferences Mehdi Medjaoui Founder and Chairman of Apidays Conferences, Author of Continuous API Management - Apidays Bertier Luyt CEO - Ades.io 3:10 pm Balance your API marketing: Combine clear messaging and technical complexity Dave Katz Principal Evangelist, Advertising API - Amazon 3:10 pm Balance your API marketing: Combine clear messaging and technical complexity Ideas for educating and empowering your marketing team to drive API adoption. Equip your marketing team to simplify your customer value propositions while also creating the complex details necessary for developers to evaluate your capabilities. Maximize your messaging to help developers through the full customer journey. Dave Katz Principal Evangelist, Advertising API - Amazon 3:30 pm The value of a flexible API Management solution for Open Banking Steve Melan Manager for IT Innovation and Architecture - State's and Saving's Bank of Luxembourg 3:30 pm The value of a flexible API Management solution for Open Banking A flexible API Management plays a crucial role in the implementation of the Payment Services Directive (PSD2) and the upcoming PSD3, as well as in the broader context of a successful open banking security. In my presentation I will discuss and demonstrate how the choice of the API Management is impacting the success of implementing an open banking architecture at the State's and Saving's Bank of Luxembourg. Steve Melan Manager for IT Innovation and Architecture - State's and Saving's Bank of Luxembourg	1:50 pm Orchestrating Microservices and AI for Enterprise-Grade Workflows Olivier Poupeney Head of Developer Relations - Orkes 1:50 pm Orchestrating Microservices and AI for Enterprise-Grade Workflows As the number of microservices in enterprises grows far and wide, architects and developers need to continue building complex applications as requirements and capabiltiies scale. The era of artificial intelligence also creates new challenges in managing a modern architecture stack that is cross-functional in nature. This session aims to introduce how orchestration can help to streamline the coordination of distributed microservices and effectively manage AI integrations using enterprise-grade workflow executions. Olivier Poupeney Head of Developer Relations - Orkes 2:10 pm Don’t Let API Growth Become a Security Risk Travis Spencer CEO - Curity 2:10 pm Don’t Let API Growth Become a Security Risk APIs are great enablers for digitalization and continue to grow in usage and importance. You must prepare to manage this growth of internal and external APIs and secure access efficiently. In this talk, Travis Spencer will discuss why unsecured APIs are a risk and explain how to prevent unauthorized access and keep users safe using a zero trust approach built around identity. Travis Spencer CEO - Curity 2:30 pm Design Declarative-Friendly APIs Yusuke Tsutsumi Senior Staff Software Engineer - Cruise / ex-Google 2:30 pm Design Declarative-Friendly APIs At Google, I spent 2 years improving API guidance to enable better CLIs, UIs, SDKs, and declarative tooling. I'd like to talk about the nuances of designing APIs for clients, and specific decisions we made to enable them. Yusuke Tsutsumi Senior Staff Software Engineer - Cruise / ex-Google 2:50 pm The Hidden Currents of API Consumption: Strategies for Effective Egress Traffic Control Eyal Solomon Co-Founder and CEO - Lunar.dev 2:50 pm The Hidden Currents of API Consumption: Strategies for Effective Egress Traffic Control In a world where APIs serve as the linchpin of digital transformation, the journey often begins with a successful integration. However, the narrative seldom explores the aftermath—what happens after the integration is completed? The proposed lecture zooms in on API Egress traffic and into the less-discussed terrain of post-integration challenges and pragmatic solutions within the API economy. Eyal Solomon Co-Founder and CEO - Lunar.dev 3:10 pm Orchestrating Complex Applications Rapidly Workshop by Orkes Olivier Poupeney Head of Developer Relations - Orkes 3:10 pm Orchestrating Complex Applications Rapidly Workshop by Orkes This is a hands-on session that will demonstrate the use of the Orkes Conductor platform to rapidly build out a complex application from inception to implementation to operational monitoring and troubleshooting. Participants will be guided on how to use the platform and will build out their own workflows to solve a given business challenge. Olivier Poupeney Head of Developer Relations - Orkes	1:50 pm Palm API and the design the enterprise Future with innovation Lakshmanan Sethu Sankarana rayanan TAM - GenAI/AI, ML & Data Solutions - Google 1:50 pm Palm API and the design the enterprise Future with innovation The PalM API stands as a robust instrument empowering enterprises to harness the immense potential of Google's expansive language models (LLMs), enabling the creation of innovative and impactful applications. This presentation delves into the vast possibilities offered by the PalM API for businesses. The discussion encompasses its applications in elevating customer service standards, amplifying marketing and communication strategies, optimizing internal processes, and catalyzing the development of novel products and services. Additionally, we shed light on the advantages of integrating the PalM API into Google Cloud's Vertex AI platform, offering enterprises the essential elements of scalability, security, and compliance necessary for deploying LLMs seamlessly at scale. Lakshmanan Sethu Sankarana rayanan TAM - GenAI/AI, ML & Data Solutions - Google 2:10 pm ML-Driven API Standardization: Boosting Efficiency & Developer XP Bharath Bhushan "BB" Sreeravindra Senior Manager, API Experience - Capital One Anoop Gupta Senior Engineering Manager - Capital One 2:10 pm ML-Driven API Standardization: Boosting Efficiency & Developer XP In large enterprises where thousands of APIs with various versions are produced, it's common for both central governance teams and API consumers to face challenges in understanding the represented data . Explore how teams can harness the capabilities of machine learning models to introduce data standardization at the outset of the API lifecycle's design phase. This approach enhances the efficiency of API producers, governance processes which in turn accelerates the time-to-market for APIs. This process not only refines API design but also elevates the developer experience. Furthermore, it establishes a fundamental framework for standardization, effectively eliminating arbitrary uniqueness barriers that often hinder seamless interaction across developers, data scientists and product partners across the organization. Bharath Bhushan "BB" Sreeravindra Senior Manager, API Experience - Capital One Anoop Gupta Senior Engineering Manager - Capital One 2:30 pm API Governance in the Age of AI Olga Podolyako Principal API Architect - Microsoft 2:30 pm API Governance in the Age of AI This talk will investigate the current best practices in API Governance and its vital role in enabling seamless integration with AI technology. As APIs continue to be a cornerstone of modern software architecture, understanding their management and evolution is crucial, especially within the AI integration landscape. I will begin by introducing the Microsoft Graph platform briefly and setting the stage for a deeper discussion on the adaptation of governance practices in light of emerging technology trends. The presentation will highlight the influence of AI agents on API platforms and conclude with valuable strategies for handling APIs at scale. Olga Podolyako Principal API Architect - Microsoft 3:10 pm Supercharge RAG App Development: Streamlining Enterprise Context Retrieval with Apigee and Application Integration Workshop by Google Ruben Gonzalez API Management and Integration Specialist - Google Cloud 3:10 pm Supercharge RAG App Development: Streamlining Enterprise Context Retrieval with Apigee and Application Integration Workshop by Google During this session we’ll show how Apigee and Application Integration can empower AI Practitioners and Developers to concentrate on building their RAG applications without getting bogged down by the complexities of enterprise systems and integration dependencies. We’ll also highlight the benefits of using a vertically optimized platform to build and deploy AI applications at scale. Ruben Gonzalez API Management and Integration Specialist - Google Cloud	1:50 pm The year ahead for GraphQL Federation: Combining APIs for the AI era Matt DeBergalis Founder & CTO - Apollo GraphQL 1:50 pm The year ahead for GraphQL Federation: Combining APIs for the AI era Forget what you’ve heard about GraphQL – it’s not a REST alternative, graph database, or just for frontend developers. GraphQL is about combining together the APIs you already have. In this talk, you’ll learn how a federated GraphQL architecture brings a platform approach to API composition, where fits into the API stack, and what is coming next to help teams build tomorrow’s AI products and experiences on today’s APIs. Matt DeBergalis Founder & CTO - Apollo GraphQL 2:10 pm Graphlets - Completely declarative GraphQL APIs Ashpak Shaikh Senior Staff Software Engineer - Intuit 2:10 pm Graphlets - Completely declarative GraphQL APIs Graphlet is an artifact that combines GraphQL SDL with a Domain Specific Language for resolvers, to create a completely declarative GraphQL API's that is dynamic and does not require service/container restarts thereby increasing the overall development velocity. Graphlet goes beyond the traditional orchestration mechanisms supported by schema stitching and federation by allowing conditions and data transformations between service calls solving complex GraphQL federation use cases. Ashpak Shaikh Senior Staff Software Engineer - Intuit 2:30 pm Build an API composition layer with Apollo GraphQL Workshop by Apollo GraphQL Michael Berger Solutions Engineer - Apollo GraphQL Keith Halsall Solutions Engineer - Apollo GraphQL 2:30 pm Build an API composition layer with Apollo GraphQL Workshop by Apollo GraphQL Use GraphQL to accelerate developer velocity by creating a composition layer for your microservices. Orchestrate data by creating a query that spans your REST APIs and delivers exactly the data your application requires. What you’ll learn: How to build your first GraphQL query The value of GraphQL to a microservice architecture. Michael Berger Solutions Engineer - Apollo GraphQL Keith Halsall Solutions Engineer - Apollo GraphQL 3:10 pm A Deep Dive into the Supergraph Architecture Workshop by Hasura Chris Toth Global Director of Sales Engineering - Hasura 3:10 pm A Deep Dive into the Supergraph Architecture Workshop by Hasura Developers today must contend with scores of heterogeneous data sources filled highly complex data while building and maintaining multiple API endpoints. The consequences? Slower time-to-market, costly technical debt, and even more burden on the teams managing the data and running the applications. In this live demo, we will show you how Hasura is helping enterprises streamline data integration, federation, and API development by leveraging GraphQL’s single endpoint for queries within a unified supergraph architecture. Chris Toth Global Director of Sales Engineering - Hasura

3:50 pm

Coffee Break / Networking / Expo

Partners Village

API Driven Transformation Room: Venture 3	API Product Lifecycle Room: Venture 2	Open API And API Standards Room: Venture 1	GraphQL Room: Capital
4:15 pm Supergraph, a Graph to Rule Them All Giuseppe Abrignani Senior Software Engineer - The LEGO Group 4:15 pm Supergraph, a Graph to Rule Them All "Supergraph, a Graph to Rule Them All" will delve into the innovative Supergraph architecture in the realm of distributed GraphQL APIs. In an increasingly complex landscape of services and microservices, Supergraph emerges as a promising solution to consolidate and simplify interactions among different components in a distributed system. We will explore the advantages of Supergraph, such as reducing API call complexity and optimizing performance, while critically overviewing potential drawbacks. The discussion will also cover common challenges and best practices in Supergraph implementation, providing viewers with a comprehensive understanding of opportunities and practical considerations tied to this emerging technology. A thorough analysis of Supergraph will help outline its overall applications and address critical questions within the distributed API landscape. Giuseppe Abrignani Senior Software Engineer - The LEGO Group 4:35 pm Getting the numbers for API-driven transformation to add up Claire Barrett Director - APIsFirst and Co-lead of Women In APIs 4:35 pm Getting the numbers for API-driven transformation to add up APIs have been around long enough. And won't be going anywhere quickly. APIs are becoming an ever-more significant part of large organisations' digital footprint. Underpinning wider digital transformation. Whether to simplify the tech landscape; speed up innovation with API reuse; or launch new APIs as digital products to grow revenue streams and third party partnerships. The opportunities are endless. However, the ways to quantify the investment required, let alone clearly show where the benefit will be realised, can seem harder than it looks. Particularly in heavily regulated industries such as financial services or healthcare. Claire Barrett Director - APIsFirst and Co-lead of Women In APIs 4:55 pm Driving business agility and growth through API best practices: A fireside chat with IBM and Tapestry Rashmi Kaushik Director, Product Management, Integration Portfolio - IBM Madhukar Kakaraparthi Senior Director, Integration Technologies - Tapestry 4:55 pm Driving business agility and growth through API best practices: A fireside chat with IBM and Tapestry This session will highlight recent market shifts that are influencing the use of APIs and how leading companies are applying the latest API security and governance best practices to drive business agility and growth. We’ll hear from multinational luxury fashion retailer Tapestry, the parent company of major brands including Coach and Kate Spade. Madhukar Kakaraparthi, who leads Tapestry’s application integration delivery on a global scale, will discuss how they have used APIs to integrate their diverse systems, apps, and data in order to get a 360-degree view of their customers and business, and the top-level business outcomes these efforts have driven. Rashmi Kaushik Director, Product Management, Integration Portfolio - IBM Madhukar Kakaraparthi Senior Director, Integration Technologies - Tapestry	4:15 pm Cloud Scale Benefits with On-Prem Guarantees Jake Schmitz Senior Director of Application Development - FreeClimb from Vail 4:15 pm Cloud Scale Benefits with On-Prem Guarantees In an industry as cyclical as Information Technology, the only constant is change. Over the past few years there has been a drive to take applications to the cloud in an attempt to leverage the unprecedented scalability and flexibility offered by the hyper-scalar cloud providers. This concentration of development effort has centralized significant risks, leading to large outages across the Internet. FreeClimb from Vail's easy-to-use voice and SMS API has been designed to operate with the benefits of the hyper-scalar providers, offering flexibility of pricing and scale in addition to the resiliency of a large provider. The design and operation of FreeClimb gives you the assurance that your customers can still contact you, even if your cloud provider of choice is experiencing an issue. We will discuss how we have utilized cloud-native technologies in an on-prem environment to provide the necessary security and reliability to the FreeClimb platform. Jake Schmitz Senior Director of Application Development - FreeClimb from Vail 4:35 pm APIs aren't enough: Why SaaS leaders are investing in IPaaS Ian Buchanan Principal Partner Engineer - Atlassian 4:35 pm APIs aren't enough: Why SaaS leaders are investing in IPaaS Today, everyone has an API, and many product companies are augmenting their product strategy with platform elements to spur their growth. An increasing number of SaaS companies are going beyond the usual REST/GraphQL APIs to launch managed infrastructure offerings for their developer ecosystems. Think Google AppScript, Salesforce Apex, Slack Functions, Atlassian Forge, or GitHub Actions — all are custom PaaS or IPaaS solutions designed to simplify the process of building API consumers for their respective product ecosystems. Designing and building an IPaaS is a significant investment, but can dramatically improve the security and quality of apps and integrations built for your products, while simultaneously lowering the bar for developers to get started with your APIs. In this session, I’ll share the rationale for building an IPaaS, and the business and technical lessons we’ve learnt at Atlassian over the past 24 months that the Forge platform has been in General Availability. Software Engineers, DevOps Engineers, and Technical Product Managers working in the platform space will get the most from this talk. Ian Buchanan Principal Partner Engineer - Atlassian 4:55 pm The 7 Commandments for a Successful API Program Sandip Dhummad Director, Enterprise Architecture - Canada Pension Plan Investment Board (CPPIB) 4:55 pm The 7 Commandments for a Successful API Program Enterprises have seen significant benefits from their digital trans-formation efforts over the past 12 months, but only a small percentage (20%) are achieving all of their objectives. These organizations are planning to further leverage cloud, APIs, and microservices to improve the gains they’ve already made and deliver on the rest of their goals. 66% of organizations say their API programs are “medium” to “low” in terms of maturity, with only 34% rating themselves as “high maturity.” - The Digital Crunch Time: 2022 State of APIs and Applications, Google Cloud In this talk, I'll guide you through our process of building a successful API program. I will primarily focus on the real challenges we experienced in establishing and implementing our API strategy, as well as how we overcame them in order to reap the full benefits and achieve high API program maturity. Sandip Dhummad Director, Enterprise Architecture - Canada Pension Plan Investment Board (CPPIB)	4:15 pm The API Workflows Specification: The Missing Piece of the API Puzzle! Frank Kilcommins Principal API Technical Evangelist - SmartBear 4:15 pm The API Workflows Specification: The Missing Piece of the API Puzzle! Learn about the API Workflows Specification, developed under the OpenAPI Initiative, which complements current specifications, including OpenAPI and AsyncAPI. The new specification enables the ability to define and document workflows, a series of API calls, that together accomplish a specific business objective. This provides a deterministic recipe for using APIs and enables code generation tooling for a given API based on use-cases. Additionally, the specification improves regulatory checks and bridges gaps where use-case flows span multiple API descriptions. The new specification provides a sufficient level of predictable determinism to AI models, allowing them to offer a natural language abstraction on top of the business use cases, while in parallel giving interoperability benefits to the actual API providers. The result is more value, with less vendor lock-in, and consistent API offerings for both humans and the new wave of AI consumers. In general, there’s enormous potential to enhance the developer experience (DX) and API documentation by enabling graphical rendering of workflows. The specification also improves human understanding of how to consume API endpoints to achieve a specific goal. Workflow descriptions can stay up-to-date and be assertable against the underlying APIs. This reduces the need for out-of-band documentation sharing, reduces the time and effort required to implement complex workflows, and automates testing and other repetitive tasks. Overall, the Workflows Specification improves the capability of API specifications to tell the story of the API in a manner that improves interoperability across industries. Frank Kilcommins Principal API Technical Evangelist - SmartBear 4:35 pm Simplifying Consuming APIs for SDK Haters Darrel Miller Member of the Open API Initiative Technical Steering Committee & API Architect - Microsoft 4:35 pm Simplifying Consuming APIs for SDK Haters Many API Producers go to great expense to build SDKs to make it easier for developers to consume their APIs. Despite this, data shows, a significant number developers do not use them. There are many valid reasons developers choose to roll their own client code. This talk will present an alternative approach to consuming APIs using OSS tooling we have built that addresses many of the objections developers have raised to using packaged SDKs. Come explore an alternative solution for having a consistent, secure, robust, easy to use API client for any part of an OpenAPI described API. Your developer toolbox will thank you. Darrel Miller Member of the Open API Initiative Technical Steering Committee & API Architect - Microsoft 4:55 pm Next gen open source OpenAPI tooling Dave Shanley Founder / Chief Buckaroo - Princess Beef Heavy Industries 4:55 pm Next gen open source OpenAPI tooling There is a long-standing issue within the OpenAPI tools ecosystem - inconsistent and subpar tools for interpreting OpenAPI documents. More often than not, the existing tools sacrifice either speed, features, or quality and are notably incompatible with OpenAPI 3.1. Princess Beef Heavy Industries emerged from these challenges. This talk showcases open-source tools like 'vacuum,' 'openapi-changes,' 'wiretap,' and 'libopenapi. ' Together, they create a super fast and powerful toolkit for OpenAPI quality analysis, compliance, and change detection. Learn about what they do and how they function. Dave Shanley Founder / Chief Buckaroo - Princess Beef Heavy Industries	4:15 pm Benefits of Idiomatic Code First GraphQL Development Derek Kuc Principal Engineer - Apollo GraphQL 4:15 pm Benefits of Idiomatic Code First GraphQL Development GraphQL is a query language for APIs and a runtime for fulfilling those requests with your existing data. In the GraphQL world, the schema plays a central role as it defines all the fields and types that can be queried by the clients. This makes GraphQL APIs extremely powerful as clients use this information to custom tailor their queries to only ask for the data they need. There are two approaches to building a GraphQL server - starting with an SDL and providing matching resolver logic OR by generating schema directly from the source code. In this talk we’ll explore some of the benefits of idiomatic code first GraphQL development backed by examples using GraphQL Kotlin implementation. See how idiomatic code first approach can lead to a better developer experience and make your GraphQL APIs more consistent and easier to maintain. Derek Kuc Principal Engineer - Apollo GraphQL 4:35 pm The secrets to Graph success, from inception to general availability Leah Hurwich Adler Associate Director \| Technical Strategist \| Team Leader \| Culture Builder \| Skilled Communicator 4:35 pm The secrets to Graph success, from inception to general availability Building an API platform for a Fortune 100 retailer, capable of handling over 600 million requests per day, requires a highly distributed ecosystem and federated graph. Drawing from her firsthand experience, Leah will share insights on building an internal API community, setting up governance models, and igniting leaders' enthusiasm for your platform vision. Join this talk to uncover the keys to launching a successful GraphQL platform, through lessons that merge technology with strategic and leadership insights. Leah Hurwich Adler Associate Director \| Technical Strategist \| Team Leader \| Culture Builder \| Skilled Communicator 4:55 pm Increase your productivity with no-code GraphQL mocking Hugo Guerrero Chief Software Architect, APIs & Integration Developer Advocate - Red Hat 4:55 pm Increase your productivity with no-code GraphQL mocking You're about to embark on a new adventure that incorporates GraphQL! Here's a filthy method for becoming a ten-time engineer: fake it until you make it! Mocking GraphQL allows you to better serve the business by providing clear descriptions of schemas, types, and examples. This also aids in the separation of front-end and back-end activities. Join this session to learn more about getting started with GraphQL mocking without having to worry about coding or constructing your own fake server. Hugo Guerrero Chief Software Architect, APIs & Integration Developer Advocate - Red Hat

5:35 pm

Conference Closing Remarks

Mehdi Medjaoui Founder and Chairman of Apidays Conferences, Author of Continuous API Management - Apidays

Don't Miss Out!

In-Person

Virtual

SELECTED SPONSORS

PLATINUM SPONSORS

GOLD SPONSORS

SILVER SPONSORS

BRONZE & COMMUNITY

F5 is a multicloud application security and delivery company committed to bringing a better digital world to life. F5 partners with the world’s largest, most advanced organizations to secure every app—on premises, in the cloud, or at the edge. F5 enables businesses to continuously stay ahead of threats while delivering exceptional, secure digital experiences for their customers. For more information, go to f5.com. (NASDAQ: FFIV)

You can also follow @F5 on X (Twitter) or visit us on LinkedIn and Facebook for more information about F5, its partners, and technologies.

A lightweight SDK for accelerated REST-based API development, see metadata for every API request with real-time API traffic monitoring, get powerful analytics and API governance features alongside API automated docs, and automated API security audits for every single request. Simplify workflows, and enhance security with support for 18+ languages and frameworks for seamless integration. Empower your teams to build, ship, and maintain APIs faster. https://www.treblle.com

Curity is a leading supplier of API-driven identity management, providing unified security for digital services. Curity Identity Server is used for logging in and securing millions of users’ access to web and mobile applications as well as APIs and microservices. Built on open standards and designed for development and operations teams, Curity is trusted by large organizations in financial services, teleco, retail, energy, and government services that need enterprise-grade API access security. https://curity.io

Data Theorem is a leading provider of modern application security, helping customers prevent AppSec data breaches. Its products focus on API security, cloud (serverless apps, CSPM, CWPP, CNAPP), mobile apps (iOS and Android), and web apps (single-page apps). Its core mission is to analyze and secure any modern application anytime, anywhere. https://www.datatheorem.com

One hub for all your APIs to build, discover, and govern. https://rapidapi.com

Google Cloud accelerates every organization’s ability to digitally transform its business. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology – all on the cleanest cloud in the industry. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems. https://cloud.google.com/apis

Gravitee.io is an end-to-end solution for both synchronous and asynchronous API lifecycle management, built on an event-native API Gateway with support for REST, SOAP, Websockets, Webhooks, Kafka, MQTT, and more. Because of its breadth of capabilities and unique support for streaming data, Gravitee enables developers and business users all around the world to build, manage, and secure all their APIs in one place. https://www.gravitee.io

Sensedia enables, simplifies, and accelerates companies seeking to become more digital, connected and open through a technology platform and expertise in APIs and Microservices. Whether aiming to integrate channels, enable partner ecosystems or create modern multi-cloud/hybrid architectures, innovative enterprises rely on Sensedia as a partner in API Management, Microservices, Service-Mesh, Open Banking, and enabling rapid legacy integration. More at Sensedia.com.

FreeClimb Voice and SMS API gives developers access to the industry’s most tunable, enterprise-grade, 32-year hardened communications platform. Unparalleled support from expert engineers and IVR designers included. So you can build flexible, scalable, and feature-rich solutions in-house, without breaking the bank. https://www.freeclimb.com

Broadcom Inc. (NASDAQ: AVGO) is a global technology leader that designs, develops and supplies a broad range of semiconductor and infrastructure software solutions. Broadcom’s category-leading product portfolio serves critical markets including data center, networking, enterprise software, broadband, wireless, storage and industrial. Our solutions include data center networking and storage, enterprise and mainframe software focused on automation, monitoring and security, smartphone components, telecoms and factory automation. For more information, go to www.broadcom.com.

As part of the Broadcom Software solutions Layer7 API Security has been providing secure and scalable solution on-premises and in the cloud for over twenty years. Layer7 provides industry leading certified API security solutions used across all industries and environments where security is vital.

WireMock optimizes developer productivity in an API dependent environment. By allowing developers to mock and virtualize APIs they depend on, WireMock empowers teams to reduce dependencies, thereby improving development productivity, facilitating parallel development, and accelerating time to market.
https://www.wiremock.io

Akto is the world’s only pro-active open-source API Security platform. Akto allows you to discover all your APIs in CI/CD and find vulnerabilities by running 100+ built-in tests or writing your own custom tests to suit your needs. https://www.akto.io

Hasura makes data access easy, by instantly composing a GraphQL API that is backed by databases and services so that the developer team (or API consumers) get immediately productive. The nature of GraphQL itself and Hasura’s dynamic approach makes integration and iteration easy. https://hasura.io

Kong is the cloud native API platform with the fastest, most adopted API gateway in the world. Loved by developers and trusted with enterprises’ most critical traffic volumes, Kong helps startups and Fortune 500 companies build with confidence. https://konghq.com

Companies like Netflix, Wayfair, and the New York Times rely on Apollo to build feature-rich, omnichannel applications at scale. These companies power their applications with a supergraph – a GraphQL layer that sits on top of existing APIs and enables developers to fetch data across them from a single endpoint. By building a supergraph with the Apollo GraphOS platform instead of handwriting a sprawl of countless backends-for-frontends or experience APIs, software teams can focus less on service aggregation or orchestration and more time on the features that fuel growth. https://www.apollographql.com

Manage and scale your app traffic with API egress controls. Lunar.dev offers a full management and optimization platform for 3rd party APIs at enterprise scale. No more hunting down root causes or fixing issues in production. Lunar.dev enables granular controls for optimal outbound traffic, like smart caching, rate throttling, delayed queues, and observability at enterprise grade. https://www.lunar.dev

Ostia’s API Sandbox-as-a-Service provides the ability to create an exact simulation of any API environment in a matter of hours: a collaborative and risk-free environment to streamline and enhance your API production and consumption lifecycles. https://www.ostia.io

StackHawk integrates API and AppSec testing into software delivery. The platform allows engineering teams to find and fix app bugs at any stage of software development and gives security teams insight into the security posture of apps and APIs being developed. https://www.stackhawk.com

Orkes Unified Distributed Application Orchestration Platform. Used by 1000’s of organizations, Conductor runs core business flows. The Orkes Platform built on Conductor by the inventors of Conductor, unifies, simplifies and speeds the creation and execution of distributed business flows by 10X-30X. https://orkes.io

Discovering the attack surface presented by your APIs is the first step to improving API security. But APIs are fundamentally dark and constantly changing, which presents serious challenges for security teams trying to assess and manage new risks. There are several reasonable ways to perform API discovery, but each has its own tradeoffs and implications about what is actually being counted. This talk covers taking an API discovery program from start to best-of-breed, and how Graylog API Security helps you measure and manage your API attack surface. https://graylog.org

Traefik Labs helps organizations adopt and scale cloud-native architectures by providing a modern, intuitive, and open platform that reimagines application connectivity and API management, paving the way for seamless operations and enhanced productivity. https://traefik.io

One API to add hundreds of customer-facing integrations to your product https://www.merge.dev

Built for developers, by developers. The efficient, reliable, and secure Platform-as-a-Service (PaaS) that gives development teams control and peace of mind while accelerating the time it takes to build and deploy applications. https://platform.sh

Want to combine REST and AsyncAPIs in a single portal? Got any other documentation? Pronovix offers developer portal solutions that grow with your API program: we partner with you to build a unified portal for your entire interface portfolio. Go beyond template API strategy, and align your developer portal with your business objectives. https://pronovix.com

Liblab automates high quality SDK and documentation generation from API specifications, making APIs more accessible and easy to use for developers. https://liblab.com

Zuplo is reinventing API management for the multi-cloud era. Deploy unlimited environments to the edge, each in under 20s. Natively powered by OpenAPI – Zuplo is the developer-friendly gateway: fully programmable and fits neatly into your workflow with support for gitops built-in. zuplo.com

The enterprise ready webhook sending service. Reliably delivering billions of webhooks a year for companies both large and small. https://www.svix.com

APIMatic is an SDK-first developer experience platform that enables faster integrations of your API by auto-generating multi-language SDKs with API reference docs, dynamic code samples, assisted authentication and more. www.apimatic.io

Digibee is a born in the cloud, low-code iPaaS, built for developers, that scales integrations, optimizes developer resources, and helps IT leaders deliver powerful products and services. https://www.digibee.com

Moss Adams is a fully integrated professional services firm dedicated to assisting clients with growing, managing, and protecting prosperity. https://www.mossadams.com/home

Moesif is a powerful API analytics and billing platform to grow and monetize API products. Try it now: https://www.moesif.com

The API Economy in the AI Era

Apidays New York is supported by

Choose your conference experience

In-Person

Virtual

1000+ Participants from

WHAT IS APIDAYS?

100,000+ attendees

5,000+ speakers

A global community

70+ events

2023 Talks & Presentation Slides

2024 SPEAKER LINEUP

SCHEDULE DETAILS Explore the 2024 Agenda

Welcome Breakfast

APISecure Conference

Workshop Sessions

Workshop Sessions

Masterclass

Coffee Break / Networking / Expo

APISecure Conference

APISecure Conference

Workshop Sessions

Workshop Sessions

Masterclass

Lunch / API Secure Welcome Coffee / Networking / Expo

APISecure Conference

APISecure Conference

API Design

The New API Management Stack

Coffee Break / Networking / Expo

APISECURE Conference

The New Banking API Stack

Open Banking and APIs

The New DX/API Tooling Stack

End of Day 1

Welcome Breakfast

Keynotes

Masterclass

Coffee Break / Networking / Expo

API Driven Transformation

API Product Lifecycle

API Management and AI

API Architecture and Event Driven