F.HASAN
NAVIGATION

BASED IN

Dhaka, Bangladesh

STATUS

Available for Work

← Back to Portfolio

VAULTAPI

Zero-trust API gateway for financial services handling 50M+ requests per day with full audit trail.

[ STATUS: DEPLOYED ]
[ YEAR: 2023 ]
VAULTAPI thumbnail
FIG. 01 — OVERVIEW

// System Description

VaultAPI sits in front of core banking and payments services as a zero-trust gate: mTLS, short-lived tokens, and a HashiCorp Vault-backed secret plane. Every request is attributed, hashed, and written to an immutable audit log that compliance can replay without touching the origin. Kong plugins plus custom Go filters enforce tenant isolation, rate envelopes, and payload redaction before traffic ever reaches the ledger. At 50M+ calls a day the hot path stays boring — that is the point.

// Operational Demo

// Architecture

// Stack

  • Go
  • Kong
  • HashiCorp Vault
  • K8s

// Capabilities

  • 01mTLS and short-lived tokens
  • 02Immutable request audit trail
  • 03Tenant isolation at the edge
  • 04Payload redaction filters
  • 0550M+ daily request envelope

// Access

// Interface Views

// Next Project

NOMADAPP