← Back to Portfolio
VAULTAPI
Zero-trust API gateway for financial services handling 50M+ requests per day with full audit trail.
[ STATUS: DEPLOYED ]
[ YEAR: 2023 ]
[ YEAR: 2023 ]
FIG. 01 — OVERVIEW
// System Description
VaultAPI sits in front of core banking and payments services as a zero-trust gate: mTLS, short-lived tokens, and a HashiCorp Vault-backed secret plane. Every request is attributed, hashed, and written to an immutable audit log that compliance can replay without touching the origin. Kong plugins plus custom Go filters enforce tenant isolation, rate envelopes, and payload redaction before traffic ever reaches the ledger. At 50M+ calls a day the hot path stays boring — that is the point.
// Operational Demo
// Architecture
// Stack
- Go
- Kong
- HashiCorp Vault
- K8s
// Capabilities
- 01mTLS and short-lived tokens
- 02Immutable request audit trail
- 03Tenant isolation at the edge
- 04Payload redaction filters
- 0550M+ daily request envelope
// Access
// Interface Views
// Next Project