The Future API Stack for Mass Innovation

Latest Trends in API Management

Mark O'Neill

VP Analyst, Chief of Research for Software Engineering - Gartner

API Strategies to Accelerate Productivity and Digital Business: A Fireside Chat with IBM and MHP, A Porsche Company

Join us to learn about the latest practices and trends we are seeing in the API space, including event-driven integration, advanced API security, API-focused generative AI, and more.

We’ll discuss the market shifts that have led to these trends and how you can implement API strategies that capitalize on them to drive business value.

Eileen Lowry

Vice President, IBM Automation - Integration - IBM

Adrian Grünther

Senior API Management Consultant - MHP - A Porsche Company

The API Journey of the Paris 2024 Olympic & Paralympic Games

During this talk you will have an overview of the API journey for Paris 2024 Olympic & Paralympic games.

The speakers will replay the Paris 2024 countdown from D-1000 to D-day focusing on APIs.

You will have an overview of what was put in place for the API management strategy to ensure Paris 2024 IT systems will be ready to meet the challenges of this worldwide event.

David Pillant

Head of IT Architecture - Paris 2024 - Organizing Committee for the 2024 Olympic and Paralympic Games

Ivan Frain

Cloud Transformation Director - PwC France et Maghreb

7 Mistakes When Putting In Place An API Program

A wise man learns from his mistakes, a wiser man learns from the mistakes of the others.

Let's shares a top 7 common mistakes when putting in place an API program , for each of them we will cover the mistakes , the consequences , the solutions, and a secret sauce.

Spoiler alert : Top 1 being under underestimate the coordination effort , concluding with the last one on security aspect of API .

Come to get them all.

Just for you 😉

Here being the overall :

1 : Underestimate the coordination effort
2 : Taking a classical approach
3 : Overestimating the future revenue
4 : Underestimating the documentation effort
5 : Underestimating the devops part
6 : Believing that your API actually works
7 : Security is not an addon

Francois Lasne

Senior API Product Manager - Murex

State-of-the-Art API Management for API Designers and Developers

In my presentation, I will describe how the API Management concept and associated tools can help API Designers and API Developers with advanced, challenging, and yet very practical tasks of managing APIs during their different life cycle stages.

I will cover most typical and practical advanced scenarios with Design options such as designing different Gateway APIs for the same backend API, aggregation of multiple backend microservices by a single Gateway API, Gateway mockup APIs for API security testing, and APIs’ version control at design and run times.

Andrew Slivker

Chief Technology Officer - Nevatech

API Operations Done Right: Modernizing API Management With GitOps

The surge in Kubernetes adoption is transforming software delivery and operations with GitOps. Join us to explore how modern approaches enable effective API operations, utilizing stateless, declarative, and automated checks and deployments.

Learn how DevOps and platform teams can simplify API Day 2 operational challenges, promote developer self-service, and foster an environment of reliability, teamwork, and efficiency.

Erwan Paccard

Head of Product - Traefik Labs

Michaël Matur

Distinguished Engineer - Traefik Labs

The API Gateway Cookbook: Ingredients for Tomorrow's API Management

Josh has been a vendor, customer and worked at companies that built their own API Gateway.

In this talk Josh laments the progress in API gateway design, outlines some key ingredients to make a delicious new API Gateway that is ready for the future.

Josh Twist

Co-founder & CEO - Zuplo

API Governance at L'Oreal

The presentation will talk about L’Oréal strategy around APIs and Data Governance. How we enabled the business teams to take over the governance of theirs APIs. How we are working with the business teams to do the design of business APIs.

Liliana Jena

Business API Manager - L'Oréal

Marina Passoubady

API Product Owner - L'Oréal

Demystifying API Governance: Building Success Through Understanding

You may have heard that to leverage APIs successfully, you need API governance.

But it has a very bad reputation. People don't like it. It's complicated. It limits. It slows down. It's expensive. And in the end, it doesn't work. And that's unfortunately sometimes true.

What if the problem wasn't governance, but misunderstanding? What is API governance? Why do we need it? What is its real purpose?

That's what we're going to find out in this session. We'll discover the true nature of API governance, how to make it work, how to make it successful, and maybe even how to make people love it.

Arnaud Lauret

Author of "The Design of Web APIs", and API Governance Lead - Postman

Building APIs At Scale: Delivering Products Faster

Combination of API governance practices, standardization, API Lifecycle tools, coaching, automation, and training is enabling 1000s of Capital One producing teams to deliver high-quality APIs fast.

The API review process (DX Review) is very collaborative. The Producing team brings its unique domain knowledge and expertise to ensure their API captures the business capability clearly and accurately.

In turn, the Platform Services COE team offers guidance and suggestions to help the producing team craft a clear and usable API that meets Capital One’s API Standards.

Ado Trakic

Enterprise API Architect - Capital One

API Design & Governance: Concept & Open Source Tools

In today's digital landscape, APIs have become the backbone of software systems, enabling seamless integration and data exchange between diverse applications. However, building and maintaining APIs that align with best practices and effectively serve the needs of developers can be a challenging task.

This talk aims to explore the relationship between choosing a(n) (API) Design First approach, create API Design Guidelines and using Open Source tools (OST) in achieving great governance for API development.

The talk will begin by highlighting commons problems with a bad API design, its impact on developer experience, scalability, and security. We will delve into the complexities with managing APIs at scale and the need for robust governance mechanisms to maintain consistency and adaptability.

Next, we will delve into the significance of Design First and API Guidelines. Establishing well-defined and consistent design principles is crucial for creating APIs that are intuitive, interoperable, and future-proof.

By having API Guidelines, organizations can ensure a standardized API ecosystem, facilitate collaboration, and minimize integration hurdles.

Furthermore, we will discuss the role of Open Source tools in supporting API governance. We will showcase some of the popular open source tools that can aid in API design, documentation and testing.

To conclude, this talk will emphasize the transformative power of combining OST with API guidelines to facilitate effective governance.

Aurelien Ianni

Software Engineer - Groupe BPCE

Romain Cabane

API Governance/Design Expert - Groupe BPCE

How Can Asynchrony Break The Legacy Lockdown?

In this lecture Jessy and Thomas, we will be exposing an issue we faced at Decathlon regarding our legacy stock system. Nowadays API are expected to deliver fresh and reliable data and our ERP API was struggling to meet those needs.

By leveraging event sourcing and CQRS we were able to face the challenge of breaking the constraints of legacy applications.

During this lecture we will dive into software principle architecture and technologies that enabled us to achieve our goals while providing feedback on this tremendous adventure.

Thomas Dangleterre

Software Engineer - Decathlon

Jessy Declerck

Software Engineer - Decathlon

The Meaningfulness of Events via Standardization

The event driven design with it's full pack of pros has as well some difficult to solve challenges, we discover during this session how to settle a standard to better solve these problems.

Omid Eidivandi

Solution Architect - Groupe La Centrale

Kafka In Event-Driven Architectures

In the age of distributed systems and real-time data processing, event-driven architectures have emerged as a powerful paradigm for building responsive, scalable, and flexible applications. Central to the success of such architectures is Apache Kafka, a robust event streaming platform that enables seamless communication between components, services, and systems.

In this presentation, we will delve into the pivotal role of Kafka in event-driven architectures and Async APIs.

We will explore how Kafka transforms traditional application communication by providing a reliable, scalable, and distributed backbone for exchanging events and data. Through real-world use cases,
we will uncover the ways Kafka facilitates decoupling, enhances scalability, and enables seamless integration between disparate parts of the ecosystem.

Key topics covered will include:
Understanding the core concepts of event-driven architectures and why they are essential for modern applications.
An in-depth overview of Kafka's architecture, including topics, partitions, producers, and consumers.
How Kafka enables asynchronous communication, ensuring loose coupling between components and services.
Real-world examples of how Kafka empowers applications with real-time data processing, analytics, and event-driven decision-making.
Exploring the role of Kafka in supporting microservices and enabling event sourcing and CQRS (Command Query Responsibility Segregation) patterns.
Best practices for designing, implementing, and managing event-driven architectures using Kafka.

Whether you are a developer, architect, or tech enthusiast, this presentation will provide valuable insights into leveraging Kafka to unlock the potential of event-driven architectures.

Join us as we navigate the world of real-time data streaming and discover how Kafka can revolutionize the way we design, build, and operate modern applications.

Hassane Moustapha

Senior Technical Architect - ENGIE

Scale Your Event-Driven APIs And Put Your Events To Work

From new orders to inventory changes to customer queries and more, there are thousands of business events continuously flowing through every part of your organization every day. Just like APIs, the sources of events need to be cataloged and managed. That’s how we scale up usage of events to detect and respond to new trends, customer issues or competitive threats in real-time.

This session will cover how you can extend API management practices to an event-driven architecture to ensure consistency, governance, and security, and how you can work with real-time events to generate business insights and create new sources of valuable events.

Stephane Mery

Distinguished Engineer & CTO, Event Integration - IBM

AIvolution or AIPocalypse

Cyril Vart

Executive Vice-President - Fabernovel

AI APIvolution: Intelligent Interfaces Unleashed

Explore the revolutionary convergence of Artificial Intelligence (AI) and Application Programming Interfaces (APIs).

Delve into the disruptive potential of AI-driven APIs for the future of hyperconnected ecosystems.

Discover how these intelligent interfaces are reshaping development practices, enhancing interactions, and enabling innovative AI-powered solutions.

Pierre-Olivier Patin

VP / CTO Cloud & DevOps - Sogeti

Rapid Innovation Via AI Powered API Consumption

We will show a new AI powered approach to API discovery and consumption which unifies application development with integration for both APIs and Events.

Darko Vukovic

Founder & CEO - PolyAPI

Jake Dreyfuss

COO - PolyAPI

Everything AI? Opportunities at the Intersection of AI and APIs

ChatGPT has inspired the world's imagination - attracting 100 million users in 2 months, which makes it the fastest-growing technology ever. Everyday we hear of new AI-based applications, and maybe your manager has approached you to "add the AI thing" into your digital products, applications, and API portfolios. So, what does the AI trend mean for us API practitioners?

In this talk, we study the relationship between AI and APIs, such as the use of AI as an API-based component in applications, the creation of more powerful AI services with the help of API-based data, and the impact of AI on the process of designing and developing APIs.

As it becomes clear that AI and APIs are complementary technologies, and better if used together in the right way, we develop a framework of architectural patterns for API-based, AI-powered applications. While potential implications of bringing these two technologies together look promising and allow to more dynamic distributed systems, concerns for safety and security need to be taken serious. To mitigate these risks, proper AI & API governance become more important than ever.

Matthias Biehl

API Strategist - Software AG

A Maturity Model for Increased API Security

A few years ago, Curity coined the term "API security maturity model". This models talks about the levels or progression that an organization must go through in order arrive at a secure and robust APIs. The model consists of these levels:

Level 0: API Keys and Basic Authentication
Level 1: Token-Based Authentication
Level 2: Token-Based Authorization
Level 3: Centralized Trust Using Claims

Attendees are encouraged to review the model before this talk (https://curity.io/resources/learn/the-api-security-maturity-model/), but, in it, Travis Spencer, API security expert and CEO of Curity, will summarize the model and its levels.

He will then talk about other levels higher up in the model. Attendees will be presented with information to help them achieve high API security, even military-grade.

He will help attendees see which protocols and standards should be used in implementing such robust security.

Attendees will leave prepared and knowledgeable about how to increase the level of security used in their API deployments.

Travis Spencer

CEO - Curity

Crafting an API Factory: Journey with Amadeus and Volkswagen

What happens when two API experts from two different industry domains speak about 'API-as-a-Product' at the API Days event?

AMADEUS, a leader in the Travel industry (providing IT solutions for Airlines, Hospitality, Car Rental, and other Travel-centric products), has been producing APIs for 25 years!

Volkswagen Financial Services (VWFS), the financial backbone for the Volkswagen Group, mainly responsible for digitalizing financing, leasing, insurances, and the mobility platform.

Disclaimer: This is a neutral talk without any commercial product or partnership.

It's just 'Techies' sharing good practices and experiences to draw inspiration from well-established use cases lead to crafting API Factories.

Santiago Gómez Sáez

Cloud Architect & API Platform Owner - Volkswagen Financial Services AG

Patrick Brosse

Head of API and Data Model Governance - Amadeus

Become a Platform If You Want to Fasten Dev of Ecosystem Business

As per Conway law, monoliths will never be fit to build agile and robust solutions for ecosystem business.
Thus, to become a successful company in this fast growing area, you first need to build an enterprise -wide approach to fasten information flows on your information system and optimize interactions within your organisation.

During the talk, we will see how strategic approach based on Distributed Domain-Driven Architecture, APis and Events in a Resource Oriented Architecture and organisational transformation towards a governed federation/mesh model has helped big companies in the retail and insurance industry optimize their of IS + software architecture and their team organization. Allowing them to fasten their transformation into the platform business model and learn how to rapidly integrate technical and business partners into their business value proposition.

Bertrand Masson

Platform & IS Architect - Ptah Consulting

How to Build a Successful API Product

In this talk, I'll guide you through the dynamic realm of API product management.

Join me as we delve deep into designing and supporting API products that not only meet but exceed user needs.

You'll also learn actionable techniques for development, distribution, and maintenance that will empower you to drive your API products to resounding success.

Don't miss this opportunity to elevate your API product management skills!

Bruno Pedro

API Product Builder

Q&A With Our Speakers

The Butterfly Effect: Transforming Legacy Documentation

Polina Zaichkina

Senior Technical Writer - Codat

Tame Internal and External Developer Portal Experience

In this conference talk, we want to share our experiences, insights, and best practices in constructing an internal developer portal and extending it to meet our unique requirements and software lifecycles, while simultaneously ensuring seamless self-service capabilities and consistent documentation styles compared to our external developer and partner portal and its APIs.

Whether you're a developer, DevOps practitioner, or business leader, in this talk, we want to present tangible insights into optimizing developer collaboration and satisfaction with some with real-world examples and actionable tips.

Robin Meißner

Head of Technology - TUI AG

Fostering Developers' Peak Performance: User-Centered Design on Developer Portals

The UX team of Pronovix will unveil what happens when developers experience the rewarding state of deep focus and productivity, and how a developer portal can support that. The presenters will highlight good practices from the DPA nominee pool.

Nóra Farkas

UX Designer - Pronovix

Mónika Mikházi

UX Researcher - Pronovix

You Are Not Your User: Improving Your Documentation Using a Framework Built on Data Signals

Join us for an insightful talk on overcoming challenges for improving our documentation.

Discover how conflicting signals and biases can stall progress and learn strategies to break through.

At TomTom, we defined a framework for gaining valuable insights through the combination of customer interviews, usability studies and metrics gathering to paint a holistic picture of the state of our documentation and set us in the right direction for improvements.

This didn’t come from the top though. It started from a healthy level of doubt from the bottom that broke down our organization’s bias towards the state and direction of our documentation, giving birth to a company-wide accepted strategy to enable developer experience as a product metric.

Ioana Kanda

Product Manager - TomTom

Miguel Martin Sioco

UX Researcher - TomTom

SFPN's Role: Supporting the Structuring of the NoCode/LowCode Market

Bringing NoCode and LowCode players together around major evangelization initiatives (organization of the NoCode Summit / NoCode "Tour de France") and working on cross-functional projects in the interests of the entire industry (chairing the AFNOR standardization project, responding to France Compétence's call for applications for emerging NoCode professions), the French Syndicate of NoCode Professionals (SFPN) aims to support the structuring of the NoCode and LowCode industry.

Eric Monnoyer

President of the Nocode/Lowcode Standardization project with AFNOR - SFPN - French Union of NoCode Professionals

Modern Approach to Integration - Grow and Keep Your Customers Longer

In today's competitive business landscape, a modern integration strategy is not just an advantage—it's a necessity.

The convergence of integration modernization and AI presents a unique opportunity for IT leaders to streamline their integration efforts and accelerate time to market.

Our proposed talk delves into the vital role automation and integration play in product development, adoption, and customer retention.

We'll explore the formidable challenges in achieving these objectives, from securing product buy-in to allocating engineering resources and getting that essential IT support.

Additionally, we aim to showcase the power of harnessing no-code, low-code, and traditional coding approaches together to break down departmental barriers and expedite digital transformation efforts.

From developers to front-line managers, attendees will gain valuable insights to help them prioritize their integration roadmap.

By understanding the benefits of a unified integration strategy that leverages diverse approaches to suit each team's strengths, we'll equip them to scale their automation initiatives effectively.

Grace Brodie

Team Lead - EMEA Sales - Tray.io

Alex Cox

Customer Engineering Manager - Tray.io

APIs, E-Commerce, Credit Insurance: A Successful Transformation

1. Réexpliquer : qui sommes-nous, d’où nous venons.
2. Le contexte : on travaille sur l’APIsation de nos services – les bénéfices
3. Le use case : parcours d’achat en temps réel avec de l’assurance embarquée. Comment nous avons transformé un model d’achat

Mickael De Sa

Chief Digital Officer - Allianz Trade en France

Sovereignty In Space With APIs For Satellites In Europe

A single person is using many satellites everyday without knowing it. From Internet to television, weather to ecology or even military applications, they are strategic commercial and governmental assets. Embark to Earth orbit "farwest" and discover how your life and business are connected to it.

Julien Eballard

Space Surveillance System Architect - ArianeGroup

Cloud Sovereignty Does Matter (EMEA Perspective)

Cloud Sovereignty does matter. While EU is pushing fast on new regulation for Security, Privacy and Resiliency, there is still no standard for 'Sovereign Cloud'. Hyperscalers are announcing 'Sovereign' offering ? It does create confusion.

Let's talk about the key requirements and the responses from the Cloud industry (residency, privacy, data protection, immunity to external jurisdiction, API to fully control Data and Metadata, interoperability and portability).

JB Piacentino

Cloud Diplomat - Clever Cloud

Building An Evolutionary API Factory

More and more businesses rely on external APIs : sometimes requiring integrating many different players in order to increase geographic or user base coverage. However, integrating APIs has a cost : ensuring a good understanding of the data contract, integrating, and building trust with each partner.

In this talk, I will describe how building an evolutionary API factory allows scaling by:
- Having Product oriented approach both for the users the end experience and the developers using the factory
- Creating a radical quality culture through fitness functions and defect analysis involving the partners
- Increasing API integration throughput through a Toyota inspired Kanban and pull system

Woody Rousseau

CTO and Co-founder - Sipios (FinTech by Theodo)

The API Journey Towards Bank Platformization & Open Finance

- Presentation of the Tech'Inno / ""Open Platform & API program"" included in the strategic Plan (why?how?, governance, organization...)
- Goals : Employees API acculturation, identify & launch new API use cases to deploy new Platform models, provide API management & adapted tools for IT teams
- Presentation of the 2 types of Platform launched in the Group : Bank as a Service & Bank as a Platform
- API enable the openess of the Bank: from Open Banking to Open Finance

Antoine Zweifel

Head Of Tech 4 Business & Open Finance - Groupe BPCE

Harmonizing Cloud Horizons: A Journey to a Resilient Hybrid APIM in GCP, Azure, and On-Premises

In this insightful presentation, we delve into a transformative journey towards establishing a robust and resilient Hybrid Cloud API Management (APIM) system, spanning across Google Cloud Platform (GCP), Azure, and on-premises environments.

We will explore the pioneering strategies employed by our team to seamlessly integrate these diverse platforms under the umbrella of a cloud-native infrastructure.

Key discussion points include overcoming interoperability challenges, ensuring high availability, and maintaining consistent security protocols across platforms.

Attendees will gain valuable insights into leveraging multi-cloud resources for enhanced efficiency, security, and scalability in the fast-paced world of global logistics and API technology.

Harry Bouras

Manager of API Delivery - DHL IT Services

Alexey Leyman

Head of API, Blockchain & IoT, Digital Solutions - DHL IT Services

Smart Proxization Of Your API To Open Your Business

Taking time at your proxy design phase to place it within your global urbanization strategic plan makes your information system more agile.

Use your API layer as the required abstraction layer to connect intern and third parties to your back-end services enhancing developer experience and reducing internal redoes.

Christophe Bandini

COO and Partner - Naoplay

Arnaud Gavazzi

API/Cloud Expert Consultant - Naoplay

Embedded Insurance and Global API Management Strategy at MunichRe, powered by Apinity

MunichRe Cyberinsurance - Using Google Cloud APIs for cyber insurance pricing
Global API Management strategy at MunichRe.
Turning APIs into first-class, business-relevant digital products with apinity
The ever changing environment - FIDA regulatory requirements for insurance
Background: MunichRe is the largest cyber insurer in the world. They are also insuring Google. MunichRe will present how they have access to 50+ APIs from Gcloud which they access in order to asses the cyber protection of a new customer and do the underwriting (calculate the pricing) of the policy.

Dr. Dirk Heiss

Head of Digital Platforms - Munich Re

Dr. David Vazquez Cortizo

Managing Director, Technology and Operations - apinity

Unlocking Collaboration with Internal Developer Portals & Marketplaces: Democratizing API Access

In today's digital age, APIs are the unsung heroes, the secret ingredients powering our businesses and making seamless, innovative experiences possible. But, what happens when these powerful tools are hidden in silos or lost in the organisational labyrinth? That's where Internal Developer Portals and Marketplaces come in to save the day!

In this talk, we'll take a deep dive into how creating a centralised hub for all your APIs not only lowers the access barrier but also fosters a culture of collaboration and innovation. Imagine a place where everyone - from developers and product managers to sales and marketing teams - can easily discover, understand and use APIs to enhance their projects!

We’ll share tales of companies that have embarked on this journey, the challenges they faced, the successes they celebrated, and the lessons we can all learn from them. By the end, you’ll have a roadmap to start creating your own internal developer portal and marketplace, unlocking the potential of APIs across your entire organisation.

So, whether you're a code wizard, an operations guru, or a curious newbie keen to learn more about the inner workings of your organisation, there's something for you in this talk. Let’s democratise API access together!

Daniel Kocot

Head of API Experience and Operations - codecentric AG

API : Buzzword to a BS?

These days, we hear a lot of talk about buzzwords (Cloud, AI, etc.) and especially APIs.

Some people use this term just to sell licenses for their tools without mastering anything that could lead to BS, others to show off and some others to do real work on it.

This means that some IT and non-IT people shy away from the concept for fear of being out of their depth, while others are directly interested in it because they're a fan of the buzzword and what it can do for them.

In this talk, we'll give you an overview of the word API without the BS, describe the different populations involved, and give you an operating procedure on how to deal with buzzwords and avoid BS.

Rafik Ferroukh

Software Architect - Allianz Technology

De-automate Yourself! The Impact of Automation on People & Biosphere

The promise of automation was to raise our productivity and spare our time to create and innovate. Today, I want to question this promise and get it back to the center of conversations.

I am a great fan of Gilbert Simondon and Bernard Stiegler, therefore in addition to question the humanity of machines, I’d like to question the « machinity » of human beings.

We need to change our inner Software to have a regenerative impact on our environnement. To sum up, Automate everything but you!

Audrey Huvet

Head of Research Center - Devoteam Revolve

Event & Unified API Management - Self-Service Access to Events Using AsyncAPI

More and more use cases developers are asked to implement require real-time, event driven interactions in addition to traditional synchronous (REST) API calls.

Gaining access to events however often proves to be challenging as the broker infrastructure often is managed using a classical, centrally governed middleware approach.

In this session we will discuss how Unified Event API Management can provide developers easy, self-service access to Event APIs enabling them to incorporate events for an improved user experience.

We will describe the key role of Async API as a means to create the developer experience as well as a basis to set up resources on a broker environment once a developer creates a subscription to a specific API.

We will also describe how Event APIs can be integrated into the synchronous API world to provide a one-stop shop for developers for all their API needs.

By attending this session, you will gain an insight into how Event API Management and Async API can help you to provide a seamless developer experience allowing you to scale up adoption of event driven architecture and re-use of your events without the need for centralised governance and manual intervention.

Swen-Helge Huber

Senior Director, Office of the CTO - Solace

AI Enabled Orchestration & Retrieval-Augmented Generation

Olivier Poupeney

Head of Developer Relations - Orkes

Federated API Management (> Integration, Governance & Culture)

Enterprises increasingly embrace advanced API management as strategic enabler for digital transformation and business building but hereby often struggle with the usage of multiple platforms, tensions between central IT and business divisions as well as lack of business imagination to unleash the full potential.

Against this background, we will discuss in this talk federated API management as method of resolution backed by concrete experience made in multiple client engagement.

Focus is on integration of APIs into an enterprise-wide catalog, set up of overspanning governance moderated by dedicated CoE and the development of a sharing culture with product mindset.

The attendees will take aways concrete insights to succeed in their journeys.

Dr. Bernd Schulze

Global Practice Lead API Management - Nagarro

Luc Boilly

Senior Manager Digital Portfolio & Alliances - Nagarro

Sachin Hebbar Mahabaleshwar

Chief Enterprise Architect - Nagarro

API Design With Chat GPT As Your Co-Pilot

In the ever-evolving landscape of API design and development, the integration of Chat GPT emerges as a catalytic force, offering a transformative approach to ideation, creation, and refinement.

This talk is a deep dive into leveraging Chat GPT as an indispensable co-pilot, strategically enhancing the process of crafting innovative and user-centric APIs.

The session concentrates on elucidating how Chat GPT becomes an invaluable asset in the design phases of API creation.

It explores methods to harness the conversational AI's capabilities to ideate, prototype, and refine APIs, catalyzing creativity, and expediting the design lifecycle.

Rahul Dighe

Director of Product Management - Paypal

AGI & APIs: Crafting the Future of Intelligent Integration at Scale

Artificial General Intelligence (AGI) represents the next frontier in the evolution of machine intelligence, promising systems that can perform any intellectual task that a human can.

As we stand on the precipice of this groundbreaking era, the role of Application Programming Interfaces (APIs) becomes even more pivotal.


In this talk, we will delve into the symbiotic relationship between AGI and APIs. We'll explore how APIs can serve as the bridges connecting AGI components, fostering greater adaptability, scalability, and ease of integration.

Furthermore, we'll discuss the challenges and opportunities that lie ahead, offering insights into best practices and innovative strategies to leverage AGI within the API ecosystem.

Join us to gain a deeper understanding of how AGI and APIs will shape the next wave of digital transformation.

Marcel Meyer

Senior Solutions Architect - adorsys

Beyond Code: Developers at the Forefront of AI and API Integration

Radoslav Rusev

API & Web3 Evangelist - Siemens

Mahran Meißner

Global Business Owner IT - Siemens

The New API Wave with Generative AI

This session dives deep into the groundbreaking synergy between this cutting-edge technology and Apigee, allowing you to unlock unprecedented levels of innovation and efficiency. We also explain the unique challenges and considerations associated with exposing and securing GenAI-based services through API management.
Through a fireside chat with Julien Brun from l’Oréal,we will pull back the curtain on how companies are actually navigating the hype and exploring the real potential of GenAI for APi management, what are their current expectations and challenges.

Christophe Lalevée

Lead Apigee Specialist and Senior Solution Architect - Google Cloud

Kevin Bouwmeester

Apigee Head of Customer Engineering - Google Cloud

Julien Brun

Head of APIs Center of Excellence - L'Oréal

APIs, Fighting the New Cybercrime Eldorado?

In a digital era where APIs are the backbone of modern applications and services, safeguarding them is paramount. These APIs are largely undefended and the next frontier for abuse.

How do you explain this technical issue to colleagues, and communicate succinctly the security problems caused by this exponential proliferation of APIs?

Join our session and learn the intricacies of API security, explore emerging threats, and provide actionable insights to fortify your digital ecosystem.

Romain Baraut

Senior Solution Engineer - Web & Security - Akamai

API Programs - Security by Design, Privacy by Default

APIs are built to access data using well formed and consistent interfaces.

However more often than not, the data you’re attempting to expose will be sourced from systems that were originally designed and secured with the assumption that its data would only be exposed to the system, network and users it was designed for.

Our digital transformation programs and regulatory requirements unlock open data initiatives, such as external account management, on-line transaction processing and reporting, but what are the risks and rules of using that data?

Can traditional distributed RBAC data controls really meet new demands or is a new security access mindset and patterns required?

Frederick Purcell

Software Solution Owner - eXate

Robert Greenwood

Chief Product Officer - eXate

IAM for API Security Strategy

Ensuring data confidentiality and integrity is critical in an era where many companies rely especially on cloud services and expose data through APIs.

Users and clients must be properly identified, authenticated and authorized to access data and applications without compromising the security of credentials and without impacting the resource server code base which exposes APIs.

IAM (Identity and Access Management) is the solution: enable the right individuals to access the right resources at the right times for the right reason.

During this talk we will present the framework, the different protocols and the different implementations.

Danielle Kayumbi

Software Engineer - Capgemini

Long is the Road for Hardening a Linux Embedded Project

Hardening a Linux embedded project is a long road so I will be your guide for this journey from the town of hardware to our last stop the software update of your project.

You will see with me the main important steps and I will try to give you some tips to ease the travel.

Pierre Roullet

Senior Network Architect - Safran

The Impact of API in E-Commerce

In today's fast-paced digital era, the integration and utilization of Application Programming Interfaces (APIs) in E-commerce has redefined how businesses operate.

This talk will delve into the transformative role of APIs, highlighting their influence in streamlining operations, fostering innovation, and enhancing the customer experience.

We'll explore real-world examples of how APIs have bridged gaps in the E-commerce ecosystem, facilitating seamless interactions between platforms, tools, and services.

Attendees will gain insights into the future of E-commerce, where APIs will be central to emerging trends and strategies, ensuring adaptability in an ever-evolving marketplace.

Feliana Citradewi

Founder & CEO - LiVert

Gemba Walks with a Product Owner Looking to Maximize the Value of His API Products

As a Product Owner / Product Manager, you considers APIs as a Digital Product, providing service to consumers.

Great! But APIs, being technical system to system & self services artifacts, you might face challenges to discover key values areas and the best approach to maximize adoption?

Let's look at this though concrete examples based on the market.

Antonin Lemblé

Senior Product Manager - Braincube

Productizing and Monetizing APIs

This high-level talk walks through monetizing APIs. We'll walk through different ways to think about pricing and packaging. Then, what are some metrics to track the success of your API business.

Derric Gilling

CEO - Moesif

Driving an API Mindset in a Complex Organisation

Paul Williamson

VP Architecture and Solutions, Digital Customers and Markets - BP

Product Managers and API Documentation

In this talk I will focus on Product Managers being involved in API documentation - making sure they are viewing their APIs as part of their product and customers and developers are focused on and that they are constantly improving the experience, as well as my experience of trying to do so.

Gareth Faull

Senior Product Manager - Platform API Gateway & Access - London Stock Exchange Group

Harnessing BDD Techniques like Example Mapping for Effective API Docs

For APIs to be good, they need to be useful, useable, and findable. Adding longevity can make them successful. To ensure API longevity and promote adoption, it's essential to keep focus at the intersection of design, governance, and empathy for the human actors involved.

In this talk, I'll explore Behavioral-Driven Development (BDD) as an enabler for human-centered and agile API delivery.

Humans effectively learn through examples, and the "Example Mapping" technique can aid and embed API governance into the human collaboration of a team or organization. Combining this with the power of API specifications (like OpenAPI) can take living documentation to a new level.

Frank Kilcommins

Principal API Technical Evangelist - SmartBear

Let's Bring Science Into API Documentation

During the talk, we will explore the fusion of scientific principles and effective technical communication in API documentation and understand how developers consume information online and its connection to cognitive styles.

I will guide you through a few scientific papers in an easy-going way and together we will seek for a real-workd application of those principles in API documentation and see how they may help us to improve developer experience.

Lana Novikova

Technical Writer - JetBrains

Navigating the Path to Digital Accessibility Maturity

This talk will highlight how organisations, with the help of an Accessibility Change Management Framework, can move from being on a low maturity level in digital accessibility to becoming independent and mature.

Lennart Engelhardt

Founder & CEO - Funka

Why Can't You Ignore Product Management As A No-Code Engineer

Product Management and No-Code... 2 of my passions, but which unfortunately do not communicate enough in my opinion.

My vision is to institutionalize a professional use of No-Code, which I call 2.0 (Technical and process scalability, Documentation, Technical debt reduction, DSI compliant).

All this in an iterative logic and continuous improvement, at the service of users.

As a No-Code engineer, our #1 goal every day should be to onboard our customers, save money and time, and bring as much value as possible to our users.

Let's see how we can create bridges between these universes, in a simple and pragmatic way.

Manon Mercier

Lead Product Builder / Product Manager No-Code

How To Use NoCode As A Microservice In A Complex Software Architecture

By attending this session, participants will:

1. Understand how standard development and NoCode complement each other rather than opposing one another.
2. See a concrete demonstration of integrating NoCode within a software architecture.
3. Gain the ability to be agile and swift in product development by embracing this innovative approach.

NoCode enables the rapid development of complex automations, facilitating smooth interaction across multiple interfaces. However, integrating this ecosystem into our existing infrastructure, with its technical and business constraints, proves to be a challenge.

Considering NoCode as a microservice offers the opportunity to harness its power and flexibility within a standard architecture. The coexistence of these two interfaces raises various issues, including the creation of an effective communication environment between NoCode teams and developers, as well as between different systems.

In this presentation, we will share our experience, highlighting our successes and failures, to show you how we successfully implemented this integration.

Benjamin Buléon

Sr Software Engineer - Gojob

Anthony Manto

Product Builder - Gojob

To be announced

EcoStruxure Openness Platform - Schneider Electric Forges Co-innovation through an Ecosystem of Partners

The increasing convergence of IT and operational technology (OT), and the demand for connected and smart devices has never been higher as sectors such as building and construction, energy generation, and data centers seek to minimize energy waste and comply with environmental or ‘green’ regulations. Schneider Electric (SE) leverages this IT-OT convergence and sees data as being the foundation for building effective digital offerings around its products.

SE has built a powerful digital ecosystem using two comprehensive digital platforms – the Schneider Exchange Marketplace and the EcoStruxure digital platform that powers Exchange. Together, they connect SE’s global base of partners and customers, forge communities and enhance customer experience.

Schneider Electric “Exchange” is an open business platform that brings together a marketplace (sell/buy services & products) and community (solve challenges). EcoStruxure, SE’s IoT-enabled, interoperable platform, powers the Exchange marketplace by populating it with software and content that brings unprecedented integration across the domains of an enterprise: industry/infrastructure/power/buildings as well as lifecycle stages of assets.

SE offers productized open APIs to customers and ecosystem partners to allow them to build their own applications and to define and operate their own business models around them. EcoStruxure is one of the most collaborative ecosystems where SE is working together with a varied range of partners in the market.

Farooq Syed Mehboob

VP of Customer Success - THIS

Philippe Raffin

Vice President EcoStruxure Openness - Schneider Electric

Connecting People With Best-In-Class Logistics APIs

Changing market conditions and shifting consumer behavior is considerably changing the way companies are engaging with their customers.

DHL Group has been at the forefront of this transformation by taking an API-first approach for its digitalization efforts to meet customer demands.

Join this session to learn how DHL Group is moving to modern, harmonized APIs with best-in-class developer experience to power its business.

Karsten Wagner

Vice President Center of Excellence Group APIs - DHL

Platform Economics & API Role in the Future of Payments

Trend and adoption of API in payment industry by using a core platform, maximising economies of scale in terms of addressable market, unit cost, functionalities delivered and technology.

Nicolas Dykmans

Head of Europe Technology Enablers - Swift

Lucien Huang

Solution Architect - Swift

The API Marketplace, A Key Component For A Successful API Strategy

Katharina Haack

Product Owner, API Strategy & Governance - Commerzbank

Emmanuel Méthivier

Catalyst & Business Program Director - Axway

Navigating the API Maturity Labyrinth: From Initial Awareness to Analytics Excellence

This presentation explores the journey through API Programme Maturity Levels, guiding organizations from basic API management to data-driven analytics excellence. It addresses challenges like multi-gateway visibility, API sprawl, and monetization strategies, highlighting essential capabilities at each maturity level.

Tailored for business strategists, it offers insights into optimizing API governance and investment in a multi-cloud landscape.

For the Q&A:
Focus on overcoming challenges in multi-gateway and multi-cloud API management.
Discuss advancing through API maturity levels and best practices in API governance.

Marco Tedone

CTO - Digital API Craft

Building Your API Platform Strategy - A Bandersnatch Experience

During this session Ryan will be building out an API platform strategy on the spot using inputs based on the audience. This choose-your-own adventure, bandersnatch inspired talk, aims to bring to life how to adapt and apply playbooks and frameworks to your company’s API platform strategy.

He will cover topics like:
- Understanding how APIs fit within your business model
- Determining where to focus your efforts for APIs and developer experience
- How to approach implementation within your organisation
- How to drive adoption

Join this experimental conference talk format to see a strategy playbook be brought to life based on your needs.

Ryan Clifford

Platform Group Product Manager - APIs & Integrations - Spendesk

Natixis IM: How to Use API to Connect Your Ecosystem

Listen to Onkar Dahne, IT Architect at Natixis IM explaining how they are using API to connect their ecosystem, accelerate their time to market and deliver a 360 view of their customers with MuleSoft.

Onkar Dhane

IT Architect - Natixis Investment Managers

Samira Elmanferrah

Senior Principal Customer Success Manager - MuleSoft

Accelerating and Securing Transversal Processes Automation with an API approach

Ranto Rafidinitrimo

B2B/EAI Solution Manager - STMicroelectronics

API for IT Integration and Seamless User Experience

Role of API in modern IT environment with more and more ERP and SaaS solutions.

Lamine Guerfi

Director of User Support Services - SNCF

Explicit Magic, About Composable Infrastucture

The talk centers around the different types of Magic in software Design.

We all love things to be automagical. But magic comes with a price and there are multiple ways to achieve an API that feels magical.

We will present forms of magic that are based on what we call "industrial magic" compare it to "abstract magic" and propose a mix as a "Framework for Progressive Engagement", where the simple is made trivial, and the complex made possible.

This will encompass ideas about forward design for APIs and the "curse of defaults" and how design choices can paint you into a corner.

Ori Pekelman

Chief Strategy Officer & Co-Founder - Platform.sh

Modern Customer Master Data Management - Accelerator APIs

Data Quality By design- Introduce new customer creation process across business systems with real-time APIs from Customer Data Link & Dun & Bradstreet.

Simplify the creation process with the new CDL APIs to stop bad data creation.Deploy Reltio as Customer MDM system for Data Stewards

All Data Stewards manage govern Customer data records in Customer Data Link consume mastered customer data records from customer data link as the governed authoritative source

Assimilate Data Governance Establish Data Governance Organizations in Every Zone to sustain change

Achieve Data Quality KPIs

Implement control over 8 critical attributes

Complete Business transformation deliverables

Tania Petkova

Master Data Architecture & Delivery Director - Schneider Electric

How We Have Implemented Micro Frontend In Allianz Technology

For 1 year, a working group of architects, techleads and developers have been collaborating around the subject of frontend microphones at Allianz.

During this talk, I will show you and describe our journey from simple SPA to Micro Frontend:
The existing
The Multi and Mono repo
Security and Micro frontend
Our sticking points and difficulties
Our Successes
Findings

Fabien Brunet

Frontend Software Architect - Allianz Technology

The Federated Future: Reimagining Banking with Strategic API Management

In an era defined by digital transformation, the banking industry stands at the crossroads of innovation and evolution.

This talk delves into the profound impact of strategic API management on reshaping the future landscape of the finance industry, ushering in a new era of federated API Management. We will shine a light at different but real customer situations moving into the area of Federated API Management like the APIIDA API Control Plane deliveres.

The talk will also address the challenges and considerations inherent in this transformative journey, including cost, security, compliance, and the imperative need for robust governance framework delivered by the APIIDA API Control Plane.  

It will underscore the importance of balancing openness with security, empowering banks to navigate the delicate equilibrium between innovation and risk mitigation.

Tim Biedenkapp

CTO - adorsys

An API-based Approach to Data Protection and Residency for LLMs

Preserving the privacy of sensitive data like names and social security numbers is a top priority for any global business. But protecting sensitive data and easing compliance without sacrificing data usability requires sophisticated, API-based solutions. The compliance landscape is increasingly complex, with an ever-growing number of distinct privacy regulations going into effect worldwide, including the EU’s GDPR and Brazil’s LGPD. Privacy regulations often impose data residency requirements that restrict where sensitive data can be stored and processed, creating complex data requirements for global businesses. At the same time, businesses are eager to harness the power of generative AI large language models (LLMs) like ChatGPT, but are wary of the dangers LLMs can pose to data privacy.

Your company can’t afford to ignore the promise of entering new markets, or compliance requirements in current markets. And, you can’t afford to leave it to your competitors to harness LLMs due to privacy concerns. But, the stakes are high. You need deep expertise to deliver effective data privacy, and the consequences of a mistake are massive: eye-popping fines for regulatory non-compliance, or even a data breach that can damage your brand and undermine customer trust. The solution lies in leveraging the expertise of privacy experts with a data privacy vault, delivered as an API.

In this talk, I’ll discuss the data privacy vault architectural pattern, and how API-based solutions let businesses isolate, protect, and govern sensitive data.

I’ll also show how using a data privacy API lets you keep sensitive data within national borders to comply with data residency requirements and protects sensitive data in LLM-based workflows, so your business can seize new opportunities with confidence.

Sean Falconer

Head of Developer Relations and Marketing - Skyflow

Beyond Text: Training Generative AI for New Dimensions in API Docs

In the dynamic world of API development, documentation remains the linchpin that ensures usability, adaptability, and success. The traditional text-based approach, though effective, often falls short in keeping pace with the rapid evolution of APIs. Enter Generative AI — a trailblazer poised to revolutionize how we perceive, create, and interact with API documentation.

In this enlightening session, delve into the crux of training Generative AI models to autonomously generate, manage, and enhance API documentation. Explore how this burgeoning technology not only streamlines documentation processes but opens new avenues for interactive, user-centric API docs that evolve in tandem with the APIs they represent.

We'll journey through the practicalities and potentials of blending AI with API documentation — from training bespoke models that mirror your API’s complexity, to creating immersive documentation experiences that redefine user engagement. Drawing from the core functionality of Theneo, an advanced AI-driven platform, witness firsthand the transformative power of Generative AI in augmenting API documentation.

Dive beyond the conventional text and discover a new dimension where API documentation is not just a manual, but a dynamic, AI-powered companion adapting to the rhythmic shifts in API development. Join us as we unravel the future of API docs, embroidered with the finesse of Generative AI, and molded by the hands of those daring enough to venture beyond the known.

This talk will not only ignite a spark of innovation but provide a roadmap for those eager to pioneer the uncharted terrains of API documentation management.

Ana Robakidze

Founder & CEO - Theneo

Generative APIs: Building with the Combination of Generative AI and APIs

API usage is on the rise and sees no signs of slowing down. At the same time, Generative AI technologies such as OpenAI's ChatGPT, Google Bard, and GitHub Co-Pilot have burst onto the scene and continue to grow in popularity.

In this session, Nylas Senior Developer Advocate Ram Bansal will explore the convergence of these two technologies and how developers and technical leaders can combine the two in order to move fast and innovate at scale.

Ram Bansal

Senior Developer Advocate - Nylas

Artificial Intelligence in API Management for API Producers and Consumers

Explore the transformative impact of Artificial Intelligence on API Management for producers and consumers. From automated design and security enhancements to personalized experiences, discover how AI optimizes efficiency and elevates the API ecosystem.

Dorian Blanc

Lead Solution Engineer - Gravitee.io

Cloud APIs, ChatGPT 4-Turbo, and Attack Path Visualization

ChatGTP-4 Turbo powers a new class of Enterprise AI assistances. The fuel that powers these new AI assistants is large quantities of data from APIs in the cloud. Defending APIs from exploit without a deeper contextual understanding of these modern attacks is growing problem for businesses looking to protect their data. Learn how visualizing the attack path of these modern API exploits are helping customers protect their data.

Doug Dooley

Chief Operating Officer - Data Theorem

Scaling-up API Security: Applying the GitOps and API Policy-as-Code Patterns

How can a large enterprise effectively govern API security at scale? This talk will explain how our largest deployments manage and organize their API security rules. Specifically, we will look at the application of the gitops and policy-as-code patterns as a way to automate the enforcement of dynamic API security across distributed systems.

Francois Lascelles

CTO - Layer7

Securing Microservice-based APIs

Security is never a simple task, the same applies to APIs. Properly securing APIs gets even more challenging when the API ecosystem grows substantially.

It’s naturally easier for a company to protect a few endpoints than hundreds. As the API ecosystem grows, merely starting to use OAuth may not be enough. Proper handling of OAuth tokens and utilising different features that OAuth offers is required.

In the talk I will describe:
- The different views of what constitutes a large API ecosystem (it’s not only APIs that expose a lot of endpoints!)
- Common security issues and how to address them

Michał Trojanowski

Product Marketing Engineer - Curity

Effective API Security - Building Bridges between Developers, DevOps and Security Teams

Jeremy Snyder, CEO at FireTail, looks at what it takes to build effective API security across an organisation.
Collaboration is key to protecting APIs and addressing vulnerabilities.

It requires effective cooperation and a continuous feedback loop between developers, DevOps and security teams.

In this talk, Jeremy will identify why all of these teams need to be on the same page and he will provide practical advice on how to foster collaboration.

With real-world examples and insights rooted in data from more than a decade of API breaches, you’ll learn how to strengthen your API defenses while getting your entire engineering org pulling in the right direction.

Jeremy Snyder

Founder and CEO - FireTail

How to Scale APIs-as-Product for Future Success

Discover the key challenges in scaling API-as-a-Product, focusing on the imperative task of designing robust APIs in resource-constrained organizations. Join me to learn how cultivating the right mindset, leveraging technology, and optimizing processes can set your API-as-a-Product journey for success.

Samir Amzani

AsyncAPI Team Lead - Postman

How Technology Influences APIs-as-Product

Marjukka Niinioja

APItalista & Founding Partner - Osaango

Beyond REST Calls: Making APIs Chat-Ready for ChatGPT Plugins

Let's be honest, ChatGPT is a fantastic conversational tool, but it has its limitations. Luckily, plugins are available to enhance its capabilities and make it even more interesting.

Developers can leverage OpenAI to create their own plugins. In this presentation, I will share my experience building the Typeform ChatGPT Plugin.

During this talk, we will discuss the steps involved in creating a plugin from A to Z, including how to start building your own and what to do if you already have an existing API.

Drawing from my experience, I will share some valuable tips and tricks that I have learned along the way.

We will also explore best practices and recommendations to ensure that your OpenAPI spec is compatible with ChatGPT.

In the grand scheme of things, ChatGPT plugins and agents are a game-changer. For all of us API developers and OpenAPI enthusiasts, it's like watching our dreams get supercharged. Automation and machine-readability are no longer just buzzwords; they're our reality.

Nicolas Grenié

Developer Advocate - Typeform

Debate: Behind the API hype

During this session Mike and Ryan intend to have a lively debate unpacking the hyped topics surrounding APIs. They will be covering strategy, design, build and manage topics such as:
- Code first vs design first
- AI & APIs
- Is there a need for API product managers?
- Are frameworks good or bad?

Ryan Clifford

Platform Group Product Manager - APIs & Integrations - Spendesk

Mike Amundsen

Author of "Design and Build Great APIs", API Strategist & Advisor - amundsen.com, Inc.

Exploring Developer Portal Trends in 2023: A Panel Discussion featuring the Jurors of the DevPortal Awards

Hosted by: Kristof Van Tomme

Ryan Clifford

Platform Group Product Manager - APIs & Integrations - Spendesk

Marco Spinello

Technical Writer - Sanity.io

Kristof Van Tomme

CEO & Co-founder - Pronovix

How AI Is Going To Change Radically The Nocode/Lowcode Industry

All the Nocode/lowcode industry is about to integrate the AI révolution. Already this summer, Notion, Airtable, Make but also Flutter flow or Powerapps updated their tools with new AI capabilities.

All those new features are about to give more accessibility to manage APIs to non technical people.

Lucien Tavano

Chief Innovation Officer - Alegria.group

To be announced

Transform Your APIs: What The Best Companies Do Differently

After talking with hundreds of companies about their APIs and data access, I noticed a pattern: almost all of the happiest and most successful ones use a similar approach to access data from their frontend and mobile clients. Join me as we dissect and compare the approaches companies use to access data today and let's uncover what really sets the most successful API strategy apart.

Max Stoiber

Co-founder & CEO - Stellate

GraphQL Security Vulnerabilities In The Wild

What scanning 2000+ endpoints has told us about securing the GraphQL in production? Discover exclusive research on GraphQL security vulnerabilities based on scanning 2000+ endpoints.

This State of GraphQL Security 2023 talk unveils crucial insights into securing GraphQL in production, offering valuable knowledge on current trends, potential risks, and effective countermeasures to protect your applications.

Tristan Kalos

Co-founder and CEO - Escape

Antoine Carossio

Co-Founder & CTO - Escape

How To Not Break Your GraphQL Clients

This talk explores the challenges of maintaining a stable GraphQL schema in applications with one or many clients and highlighting the role of schema and client registries.

You will see how you can manage schema changes across different environments without breaking existing client applications and learn about the nuances of breaking changes in GraphQL schemas.

Pascal Senn

Application Engineer - ChilliCream

Kubernetes Gateways: Crafting Seamless Cloud-Native API Management Architectures

Discover the evolving landscape of API gateways within cloud-native ecosystems and Kubernetes deployments.

This presentation provides a historical perspective on the development of API gateways, tracing their transformation from monolithic components to essential tools for managing microservices.

Delve into their significance and the challenges they address in modern software architectures.

Explore the dynamic intersection of API gateways and Kubernetes environments. Learn about the intricate role API gateways play in ensuring security, optimizing performance, and efficiently managing APIs within the Kubernetes context.

The discussion extends to the Kubernetes Gateway API project, an emerging standard designed to revolutionize API gateway integration and management in Kubernetes clusters.

Join with me to uncover how API gateways are reshaping the cloud-native landscape. Gain insights into the pivotal role they play within Kubernetes and understand the implications of the Kubernetes Gateway API project.

Embrace the future of API management and its deep-rooted connection with Kubernetes, as I navigate the evolving dynamics of API gateways in this transformative era.

Pubudu Gunatilaka

Senior Technical Lead - WSO2

API vs Mesh vs PaaS: Building A Multi-Cloud Kubernetes

If Kubernetes today is everywhere there are still different ways of building it depend on each environment from on-prem to cloud and what kind of Apps we plan to deploy.

In this talk we will use different real-life projects to share some thoughts about leveraging OSS API or Mesh or PaaS. We will try to show the Pro & Con in different contexts...

Jonathan Le Lous

CTO - Capgemini

The Future of API Management

In this engaging talk, we'll explore the transformative impact of cloud-native technologies and the GitOps approach on the world of API management. The era of monolithic architectures and UI-driven API designs is giving way to a landscape dominated by microservices, automated workflows, and infrastructure-as-code principles.

Building on this foundation, we'll introduce three innovative products that are helping customers navigate and excel in this new paradigm:

Gloo Mesh Core: This tool is pivotal in managing the lifecycle of Istio within a cloud-native ecosystem. It simplifies the orchestration of microservices across multiple clusters, offering critical insights and observability, and ensuring seamless integration with GitOps workflows.

Gloo Mesh Enterprise: This layer extends the capabilities of Gloo Mesh Core, introducing an abstraction over the Istio API to facilitate multi-tenancy and simplify the implementation of zero-trust security models. It's designed to align with cloud-native and GitOps methodologies, enhancing API management in a distributed environment.

Gloo Mesh Gateway: Enhancing the Istio Ingress Gateway, this gateway integrates additional features like external authentication, rate limiting, and advanced security measures, all while supporting GitOps practices. Its developer portal, with Backstage integration, exemplifies the commitment to a code-centric, cloud-native API management experience.

Join us to understand how these tools collectively empower organizations to fully embrace the cloud-native and GitOps revolution, setting a new standard for API management in a world where agility, security, and scalability are paramount.

Denis Jannot

Director of Field Engineering - EMEA - Solo.io

Everything You Always Wanted To Know About AsyncAPI

From this talk you will learn what is AsyncAPI and AsyncAPI Initiative. You will see how we grow, but also what pains we have, and what are the painkillers. After this session you will know everything needed to join our community.

Lukasz Gornicki

Developer Relations Manager - Postman

Event-Driven Architecture And REST-APIs: It’s Not A Competition

As organizations decouple monolithic software into multiple microservices, the need for inter-process communication increases due to the greater number of services in the ecosystem.

This communication is often handled through synchronous REST APIs - not without consequences. Synchronous communication presents challenges that can be most efficiently addressed by adopting an event-driven architecture.

In this session we will take a look at how EDA can be integrated into a landscape dominated by REST APIs, taking into account modern standards such as CloudEvents and AsyncAPI.

Manuel Ottlik

Product Owner Global Integration Platform - HDI Global SE

Syncing Design & Runtime: EDA's Future With AsyncAPI & Agile CI/CD

Event-Driven Architectures (EDAs) are gaining momentum, and AsyncAPI has emerged as a powerful tool for streamlining development, encompassing vital aspects such as documentation, code generation, discovery, and event management.

However, while documentation and code generation receive ample attention, the equally critical aspects of discovery and event management often remain overlooked.

In this session, we will delve into the practical application of AsyncAPI to address the challenge of keeping your EDA design and runtime in sync in today's fast-paced and iterative world. Through an interactive hands-on demo, we will demonstrate how AsyncAPI can seamlessly integrate with Continuous Integration and Continuous Deployment (CI/CD) practices and the Solace Event Portal to automatically update your design in response to runtime changes.

By attending this session, you will gain practical insights into the implementation of AsyncAPI as a core component of your EDA workflow, understanding how to seamlessly incorporate CI/CD processes to keep your design and runtime in harmony. Our goal is to provide technical professionals with a deep understanding of the benefits and methodologies involved in using AsyncAPI to enhance discovery, event management, and maintain the synchronisation of design and runtime in real-world scenarios.

Hari Rangarajan

Developer Advocate - Solace

Building APIs That Developers Love: Feedback Collection Tips

Do you want to build APIs that developers love?

Join us in this talk to explore how to collect feedback from various sources, such us developer communities, events, GitHub and more in order to build an attractive product roadmap.

We'll discuss how to evaluate the feedback, prioritize features, and allocate your budget.

Plus, we'll share tips on how to respond quickly to feedback and communicate the changes properly to help your users make the most out of it.

Anna Tsolakou

Developer Advocate - Amadeus

Gaël Imperial

API Product Manager - Amadeus

Safely Improve Your API “Design to Run” Cycles with AI Tools

Many teams are using AI to speed up their development cycles, but most are still in the “move fast and break things” phase. While adopting these tools, you need to consider how your operations will adapt to increased developer velocity, and how you can secure your quickly evolving API landscape.

In this talk we will share concrete examples of AI tools used in the API design space as well as operations (bot detection, misconfiguration detection, DLP checks) and provide concrete recommendations on what to consider in your projects).

Matt Feigal

Google Tulip Co-Founder and Principal Partner Engineering - Google Cloud Sweden

Nejmeddine Ben Ouarred

Senior Staff Engineer - SFEIR

FACT (The Fair API Commitment Terms) for Trustworthy API Ecosystem

This talk will present the FACT framework, a way to create and publish easily Fair API Commitment Terms, making API Terms of Service that are easy to read and understand.

Indeed, the biggest threat on trust in the digital infrastructure we know is the threat on APIs you consume for your software. What if the API provider breaks the API? What if the API provider change its licence? Its version abruptly making it a breaking version without notice? Its pricing making it unaffordable for all users? This is why we have worked to make a framework to make it easy to provide clear open commitment about your APIs to your community.

It is like a Creative Commons for APIs, as it is also easy to read and understand for users about what they can expect about API provider commitments about trust for their API.

This project has been supported by the Ford Foundation, Mozilla foundation and Open Society foundation.

Célya Gruson-Daniel

Consultant and Researcher - Inno3

Battle-Tested APIs: Tech and Business Working Together

APIs are the core solutions of all systems allowing users to interact with a database. Yet this is only tested by the tech teams without control from the business.

With some basics tools and a few - good? - tricks, how was it possible to automatically enforce a new layer of global quality from the business even on the APIs ? From 0 to 500+ endpoints in a year, a success story reproductible by all!

Jean Burellier

Principal Engineer, Platform Team Lead - Sanofi

From 2.5 Weeks To 1 Day: Improving API Delivery Outcomes

APIOps is about automating the end-to-end delivery of APIs.

But how do you go about introducing it to your existing process?

In this talk, I'll describe our APIOps adoption journey at 10x Banking and how we have reduced parts of our API delivery workflow from 2.5 weeks to 1 day.

I'll also describe a structured problem-solving and process improvement tool - A3 Thinking - to guide your APIOps adoption and improve your API delivery workflow.

Ikenna Nwaiwu

APIOps Lead - 10x Banking

The Rise and Fall of the 'BAD' API

I will be talking about the rapid explosion of API's since the adoption of the single page application (SPA) and describing how many of these API's were badly implemented and lacked many of the fundamental features of a secure, publicly exposed API.

I will also talk about the many tools that have helped straighten out these API's and provide on-going security, assurance and governance.

David O'Neill

Chief Operating Officer - APIContext

The State of API Security

Dan Barahona

Founder - APIsec University

Earn Confidence In Your API Security

Organizations continue to strengthen their defense in depth, but APIs remain a leading attack vector.

The prevalence of false negatives (instances where real vulnerabilities go undetected) lulls enterprises into a false sense of security, leaving critical data at risk.

Learn how organizations can test the effectiveness of their enterprise vulnerability management programs against APIs.

Corey Ball

Author and Sr. Manager - Penetration Testing - Moss Adams

State of Tech Sustainability 2023: Tools and Organizations

Gaël Duez

Founder - Green IO

How does Orange open Network Capabilities to Developers through CAMARA APIs?

In this session you will discover the powerful benefits and capabilities of Network APIs.

Otilia Anton

Telco APIs Program Director - Orange

Unlock Network Potential Using The Open Gateway API Code

Companies across various industries encounter similar challenges such as fraud, network congestion, and understanding their customers' needs. These issues, among others, can be effectively addressed through Open Gateway.

In this presentation, I will demonstrate how developers can seamlessly integrate Open Gateway's network APIs into their applications.

Moreover, I'll illustrate how Open Gateway functions as a multi-telco solution, offering transparency for developers.

David del Val

Global Director of Open Gateway - Telefonica

Unleashing Telecom Power: Harnessing Operator Networks for building Modern Connected Apps through APIs

In "Unleashing Telecom Power: Harnessing Operator Networks for building Modern Connected Apps through APIs," we explore the integration of telecom networks with app development.

This session focuses on utilizing CAMARA and GSMA's Open Gateway APIs to enhance app functionality.

We'll discuss the essentials of network programmability and practical integration strategies for these APIs.

Participants will gain insights into how they can leverage the advanced capabilities of telecom operator networks through APIs to enhance the functionality and reach of their applications.

Ricardo Villarreal

Director of Product Management, Azure for Operators - Microsoft

Transformation des entreprises et souveraineté numériques : Quels sont les enjeux stratégiques dans un environnement mondialisé?

Nouamane Cherkaoui

Author & Director of the Transformation Department - Chief Transformation Officer - BPCE Solutions Informatiques

Comment les API ont permis une large diffusion de nos technologie d'IA en interne

Siham Essodaigui

Head of Applied AI - Renault

GraphQL Adoption in Enterprises — Security, Analytics & DevTools

GraphQL is relatively straightforward for developers to implement, and the open source API query language offers enterprises transformative advantages over incumbent REST APIs.

However, wielding GraphQL at scale—while efficiently managing and thoroughly securing your APIs—requires overcoming some unique-to-GraphQL operational challenges. This session will tell you what you need to know about GraphQL operability so you can scale (or set up and scale) GraphQL within your organization.

The talk will discuss why standard API and network analytics, monitoring, and security strategies cannot provide the visibility necessary for maintaining safe and efficient enterprise-grade GraphQL deployments.

It’ll discuss why teams are strongly advised to introduce effective GraphQL operations and security capabilities from the beginning of adoption. (Implementing best practices in a greenfield GraphQL environment means avoiding hardcoding mistakes that are challenging to resolve when scaling later, and data exposure risks that can bite an enterprise at any time.)

Shahar Binyamin

CEO and Co-founder - Inigo - GraphQL

E2E Apps Have Shorter Time-to-Value Cycles with GraphQL and Neo4j

We will present the GRANDstack ecosystem (GraphQL, React.js, Apollo, Neo4j Database) and will demo how fast 3-tier apps can be developed, relying on the graph database model, enabling to fully exploit connections between data, on GraphQL API that best fit with graph databases, and on React.js front-end framework.

With a demo, for sure!

Nicolas Rouyer

Sales Engineer - Neo4j

Say Goodbye to API Lock-In: Going from "GraphQL vs REST vs gRPC" to "GraphQL & REST & gRPC"!

There is a lot of FUD and much debate about choosing GraphQL or REST or gRPC as an API protocol & schema for a microservice.

However, regardless of the choice of API protocol, the core principles around design, performance & composability remain the same.

In this talk, we will explore how to take a domain & code first approach to deliver and maintain multiple API protocols and schemas without any overhead!

Jesse Martin

Senior Sales Engineer - Hasura

Evolving GraphQL Schemas - Move Fast But Don't Break Stuff

GraphQL should be used version-less, there exists one graph that contains everything.

But in reality this graph changes all the time!

Breaking changes are often painful or impossible to implement, and they sometimes can’t be avoided.

Let's dive deep and explore what tooling we need to solve this problem.

Thomas Heyenbrock

Software Engineer - Stellate

API Documentation and Developer Experience - Rebuilding API Docs

Discuss how Wise rebuilt or API docs, what impact it's had, and how we are focusing on delivering the right interface for each type of user journey (sales, engineer, product manager, etc).

Max Sadlowski

Staff Solutions Engineer at Wise - CEO at BentoSMB

API Code And Documentation Generation Through AI

In the current state of generative AI the world of APIs can stay behind. Leveraging productivity, reuse and automatic writing of API documentation based on comments in the code or what the AI has learned from the incoming requests and received responses when listening to API calls makes our lives a little bit less stressful and redundant.

In this talk I want to go over de available tools, a step-by-step developer and business integrator guide that uses the power of AI to generate API documentation, API code templates and adaptive / dynamic implementation that can be rebuild on the spot when new functionality is learned.

Robert van Mölken

CEO & Founder - Exoblock

Making the Most of Your OpenAPI Spec

A focus for high growth tech start ups, I will go through how we set up our design-driven API at SAPI and why it is important to always have up to date documentation regardless of the firefighting that goes on day to day. I will go through how make the most of your OpenAPI spec and help you make onboarding more seamless for both new hires and partners as you scale.

Alexander Broadbent

Principal Engineer - SAPI

APIs Should Be Products, Developer Portals Too

That APIs should be treated as products instead of projects does not need further elaboration. Not doing so threatens the security and reliability of an organisation's interfaces.

In this talk, I will explain why it is impossible to treat APIs as products if the devportal, which is the interface through which they are accessed and supported, isn't also treated as a product.

Kristof Van Tomme

CEO & Co-founder - Pronovix

A Guide to the Event-Native World of Open Standards: AsyncAPI, CloudEvents, and Shared Signals & Events

Implementing event-driven architectures and data streaming can be expensive. Luckily, there is a way to both reduce costs AND drive additional streaming and EDA revenue through a modern, event-native approach to APIs and API Management.

In this talk, we’ll run through the ins and outs of data streaming, what to consider when embarking on an asynchronous API/EDA/streaming journey, and how to maximize your real-time ROI by creating and exposing real-time API products.

David Brassely

Chief Technology Officer - Gravitee

How TransferGo Uses AsyncAPI To Improve Developer Experience

TransferGo stands out as one of the pioneering FinTech companies embracing the power of AsyncAPI and PHP. Let me share our journey in documenting, presenting, and validating messages, along with our exciting plans to attain complete asynchronous maturity.

Zbigniew Malcherczyk

Senior Backend Engineer - TransferGo

API Middleware As Data And Function Aggregator

Stellantis Connected Vehicle solutions must be designed and managed across a constellation of 14 iconic automotive brand ecosystems.

Converged APIs must expose new interfaces with functional scopes from different software-defined platforms involved in the Stellantis convergence.

New architectural patterns have been implemented in order to meet the major objective of convergence while maintaining the high performance of the APIs.

Marius Matei

Design Standard Software Architecture for IOT - Stellantis

Sébastien Gladieux

Solutions Architect - Stellantis

Tayeb Yazid

Technical Architect - Stellantis

Demystifying OAuth2 and OIDC

With the increasing use of APIs in exchanges between the different application bricks, whether intra-application (front-to-back) or inter-application (back-to-back), the related subjects of Authentication, Identification, and Authorization arrive very quickly in the implementation.

The OAuth2 and OIDC standards are the references, however, their complexity makes them complicated to master by developers and architects.

In this talk, I will demystify all related concepts and give use cases and best practices related to OAuth2 and OIDC.

Nejmeddine Ben Ouarred

Senior Staff Engineer - SFEIR

Forget TypeScript, Choose Rust to build Robust, Fast and Cheap APIs

In order to quickly build robust API, developers tend to choose TypeScript to achieve type safety and smooth Developer experience.

In my opinion, TypeScript is the wrong tool for long running projects and experienced teams.

Rust answers to this by bringing true type safety, along with high level paradigm.

Bonus : C level speed and cheap CPU/memory cost

Zacaria Chtatar

Backend Software Engineer - HaveSomeCode

Rx: Volcano... It's Good For Your Testing!

In this talk I am going tell you about how the flawed approach of testing UI (ice-cream cone approach) landed us in trouble both technically and delivery wise.

Once faced with challenge which threatened our reputation, we scrambled our forces of exploration, innovation, creativity and collaboration to come out swinging.

I will be sharing about,
- the ways we helped our customer by building this solution
- the questions we asked and tools we used
- the help we did or didn't receive
- the allies we formed
- technical challenges we solved

The applications of the foundational work we did was mostly behavioral and mindset based, which can be easily extended to any testing projects by inverting the pyramid and taste that lava!

Gunesh Patil

Ushur and podcaster - Senior Technical Lead

Everything I learned about API Design I learned from the Support team

API Design tends to be the responsibility of lead developers and product leads, and the results are what you would expect: user requirements are mapped directly to the systems they communicate with, creating short, efficient paths to databases and other services.

This seems great on the surface, but often leads to APIs that users find un-ergonomic at best and unusable at worst. Luckily, the solution is usually sitting right beside you: the support team.

In this talk we’ll go over examples from real-world support, documentation and developer relations organizations that challenge common conceptions of API design. Some things we’ll cover:
- Whether or not a resource-first approach as centered by RESTful APIs actually works in practice
- Why GraphQL might not solve your design problems
- API Design and the businesses’ bottom line: why adopting a user-centric design approach is the most cost-effective option.
- How to build diverse, cross-functional API design teams in your organization

This talk is aimed at engineers and product managers and is designed to highlight the importance of building interdisciplinary API design teams and the power that can bring to your developer experience.

Celeste Horgan

Developer Educator - Aiven

Challenges of API Contract Testing: Quick, No-Code and At Scale

You’ve just deployed this brand new cool API that perfectly suits the business requirements. Or at least, that’s your gut feeling…

You’d like to keep the pace high, avoiding the expense and pain of end-to-end testing to check that. Enter the world of contract testing!

Your challenge: set up something to guarantee both technical and functional conformance quickly. And you need something easy, low-code for non-developers in order to scale with your org whilst still giving you a very high level of confidence. We have a proposition here with Microcks 😉

In this session, we will go through "tools in action" mode to illustrate how Microcks can be used to ensure different kinds of conformance, leveraging existing artifacts like OpenAPI, Postman Collection, or others.

We’ll finally see how to automate this to set up a robust delivery chain.

Laurent Broudoux

Co-founder of Microcks, and Director of Engineering - Postman

From OpenAPI to Postman: Effortless API Testing and Collaboration

The OpenAPI standard has given rise to a broad ecosystem of tools and products aimed at simplifying and streamlining API development. Open-source projects, commercial vendors, industry leaders and tech companies have contributed significantly with a wide range of options for testing, automation, and release management.

One of the most popular and impactful is Postman, a powerful platform for designing, testing, and documenting APIs. While it integrates seamlessly with the OpenAPI specification, allowing users to import their API documentation directly, there is still a gap in making the process truly developer oriented.

Join me in this talk where we will be looking at how OpenAPI specifications can be converted in Postman Collections enriched with examples, variables and dynamic values. How an automated pipeline continuously delivers up-to-date collections as part of the API release cycle. And how "design-first" and "shift-left" principles can be seen in action.

Beppe Catanese

Developer Advocate - Adyen

Getting Into API Security Governance

Defining a clear Security Governance is critical for any organization willing to improve its cybersecurity posture. As APIs expose more and more data & self-care services to customers, it has unsurprisingly become one of the most targeted attack vectors over the years.

In this talk I will introduce the concept of API Security Governance through real-life examples. You will learn about the different challenges of securing APIs and the skills you need to master to tackle them.

Vincent Fely

Information Security Expert - API Security - BPCE Solutions informatiques

API Authentication Overview and Advice

In this talk, Travis Spencer, digital identity expert and CEO of Curity, will describe various ways that authentication is handled in APIs.

He will talk about basic, digest, transport-level and token-based authentication. He will give attendees reference to the specifications and standards that define how to perform such authentication. He will also explain how to authenticate an end user and convey that identity to the API in a safe way.

The state of the art using sender-constrained tokens will also be discussed. This talk will be full of actionable information and advice that you can use to make your APIs more secure. Given that broken authentication is #2 of the OWASP top 10 API security risks, you will not want to miss this talk!

Travis Spencer

CEO - Curity

API Trust : A Broad Framework for Securing APIs

Susan Vrona Béjina

Senior Manager - Cloud Transformation & Assets Development - PwC France et Maghreb

Laurent Broto

Managing Director - Cloud Security - PwC France

Architectural Design Decisions That Undermine API Security

Making design decisions is an important part of building software. It is equally important to know the implication of every design choice you make and be explicit about its tradeoffs, especially when it comes to security.

In this talk, we'll walk through some examples of such design decisions (or lack thereof) that might unknowingly lessen the security of your API, as well as explore some alternative design choices you could intentionally implement in your software to improve its security.

Anas Mazioudi

Senior Software Engineer - Societe Generale

Crafting Sustainable Bytes for a Greener Digital Future

Pindy Bhullar

Green Software Foundation Contributor and PhD Researcher

E-CO Collective: For A More Sustainable E-Commerce

As consumers increasingly question the social, environmental, and health impacts of their lifestyles and purchases, and as they become more attuned to climate, inclusion, and diversity issues, where do e-commerce professionals stand in meeting these new expectations? What are the social and environmental impacts of online sales, and how can they be reduced or mitigated? What actions can e-commerce professionals implement starting today?

In the realm of e-commerce, the E-CO collective has emerged as a pioneering force since 2020, uniting industry professionals dedicated to envisioning a more sustainable future for all facets of online commerce. With a mission spanning consciousness-raising, education, and advocacy, E-CO tackles the paradox of environmentally responsible product offerings versus unsustainable distribution models. Central to their efforts is the imminent release of a comprehensive white paper designed for e-commerce practitioners, aimed at introspection and transformation.

Perrine Tanguy

Founder - Collectif E-CO

Network APIs: How to Bring Innovative APIs to the Market

I will talk about the journey from Deutsche Telekom in the perspective of a product manager to enter the API business with telco APIs.

I will talk about ideation - building first products - tests with cursomers - founding an open source alliance and then about the G2M.

And also I will give some insights into problems and how to bring understanding to people how have no clue about APIs and are in decision levels.

Noel Wirzius

Product Owner / PM Network APIs - Deutsche Telekom

Universal Access Through Open-Source: Shaping the Future of Telecom in the Era of 5G and Edge Computing

Eran Haggiag

Co-Founder - Clearx

Passer de 0 à une multiplication d’APIS … Découvrez une approche différente pour lancer votre initiative API

There a many reasons why you start your API journey, sometimes it's for the hype, sometimes it's because you have a techy that is very prone to APIs usage, sometimes it's because a vendor was very agressive.

As an Enteprise Architect or CIO you need to look at your data asset and think about how you are going to democratize it, how are going to facilitate integration between systems, how to modernize your IT.

So this will be a talk about First THE WHY of API and they what could be a strategy to start, because you have to start somewhere, start with 1, then 2, then 3, then as much as you can, because it's a start and then teams will start to be confident with API and you will grow for Ressource oriented APIs to Product and intelligent APIs.

Ibrahima Ndiaye

Enterprise Architect - RATPgroup

Maintenant que vous avez une API, What's next?

Most company having API are facing that it is only a step to begin their connecting journey with saas and cloud world. How can they connect easily API with other API, what are the biggest challenge, how manage it if your dev team don't have the time to do it, how can generative AI help to acheive it ?

Alexandre Guerfi

CEO - APIZR

Victor Dusautois

CTO - APIZR

Sécuriser des APIs sans effort

Ou sécurisation des APIs à l'insu de leur plein gré !

Stephane Murer

Technical Leader - Malakoff Humanis

Marc Baptista

Head of the Middle Office Entity - Malakoff Humanis

To be announced

Navigating the Depths of GraphQL Subscriptions through API Management Strategies

Join us on a transformative journey into the evolving landscape of GraphQL subscriptions and API management.

This session explores the complexities of real-time data interactions, witnessing the adaptive evolution of API management to meet the escalating demands of the GraphQL world.

Discover the crucial role of a dedicated API gateway, enhancing security, scalability, and performance for real-time requirements.

Explore the separation of the API gateway for improved maintainability, responding to the dynamic needs of real-time data.

Emphasizing comprehensive lifecycle management, including versioning and developer onboarding, the session also covers advanced tactics for rate limiting, quotas, and dynamic adjustments.

This transformative exploration invites you to navigate the depths of GraphQL subscriptions, observing the evolution of API management.

Dushani Wellappili

Associate Technical Lead - WSO2