Apex Universal Inbound Security standardizes how APIs are protected across the platform

Securing APIs should not be a guessing game. With Apex Universal Inbound Security, inbound security is standardized across all APIs hosted on the platform, giving consumers a consistent and reliable way to connect, and giving publishers the confidence that their APIs are always protected in line with government standards.

Apex removes the complexity of juggling different security implementations for different APIs. Whether your API serves sensitive or public-facing information, we provide a unified and consistent framework that ensures every request is properly authenticated before any requests reaches your API Servers.

Three authentication methods, one consistent experience:

JWT Authentication

Ideal for direct, server-to-server integrations. Self-signed JWT tokens ensure that every API call is tamper proof and replay proof. Payload integrity is verified with every request, delivering strong security without sacrificing performance.
OAuth 2.1 with Corppass (Singpass coming soon)

Perfect for scenarios where applications require end user consent. With built-in scope support, tokens only grant access to exactly what the user has approved. Fully compliant with government identity systems, ensuring sensitive data remains secure.
API Key

The simplest option for less sensitive APIs that still require protection. Lightweight and easy to implement, API keys make it quick for consumers to start integrating.

Learn more about Apex's API Universal Inbound Security

Pricing

Pricing

Singapore Government Developer Portal

Blogs and Forums

Open-source