Overview

Eclypses MTE API Relay is a powerful Encryption-as-a-Service (EaaS) solution that secures HTTP(S) API communications at the transport layer. Powered by FIPS 140‑3 validated and quantum-resistant CRYSTALS‑Kyber encryption, it delivers robust protection now and in the emerging quantum era. The containerized Azure-native solution inserts transparently into your infrastructure—clients send encrypted payloads, the relay decrypts and forwards requests securely to the backend—no changes to code required.

How It Works

• Transparent Proxy: Intercepts and encrypts/decrypts API payloads between clients and backend services at the application layer.
• Payload-Level Encryption: Each API call is individually encrypted, preventing tampering, replay attacks, and token theft.
• Automated Key Management: Secure key rotation and lifecycle support built in.
• No Code or API Changes: Seamlessly works with existing services and gateways.

Primary Use Cases

• Secure sensitive API data exchanges (payment, identity, medical)
• Protect authentication tokens, API keys, and JWTs
• Prevent man-in-the-middle, replay, and credential harvesting attacks
• Comply with GDPR, HIPAA, CCPA, FedRAMP, and more

Deployment Options

• Azure Kubernetes Service (AKS): Fully containerized and orchestrated
• Low-Code Integration: AKS-native Helm charts and ARM templates
• Leverages Kubernetes features such as ingress controllers, autoscaling, and Azure Key Vault

Why Choose Eclypses MTE API Relay?

• Post-Quantum Ready: FIPS 140‑3 validated CRYSTALS‑Kyber keeps your APIs secure today and in the quantum era
• Zero-Trust by Design: Encrypts every payload independent of TLS sessions
• Automated Key Rotation: Simplifies secret management and enhances security
• OWASP-Grade Defense: Protects against 8 of the top 10 API vulnerabilities
• Rapid, Non-Disruptive Integration: No rewrites to your API or app code

Highlights

• Post-Quantum Encryption:
  FIPS 140‑3 validated CRYSTALS‑Kyber secures API data now and in the future
• Stateless Payload Encryption:
  Each call is independently protected—no session reuse or token exposure
• Zero-Code Integration:
  Deploy on AKS in minutes with Helm; works with existing tools and pipelines