Frequently Asked Questions about Security and Athento's API

Below are answers to some frequently asked questions about Information Security and the Athento API:

QUESTION 1: Does Athento provide a user management API other than JSON or REST?
ANSWER: The API is JSON or REST; there is also a Python SDK.

QUESTION 2: Does Athento provide an API for querying data in data sets? For example: Open Data Protocol (OData), GraphQL, others.
ANSWER: Yes, GraphQL.

QUESTION 3: What messaging formats does it support for exposing or consuming capabilities, and for what types of operations? For example: JSON-API, Open API Specification (OAS), GraphQL, SWIFT MT, ISO 8583, FIX - FIXML (Financial Information Exchange), Custom XML, ISO 20022, Other? Which ones?
ANSWER: JSON-API for receiving information, such as via RabbitMQ.

The Open API specification is available at the relative URL of each instance /api/v1/redoc/?format=openapi and /api/v1/redoc.

QUESTION 4: Does it have an open or standard-based API for managing client-controlled encryption keys?
ANSWER: Encryption keys are managed using a vault, which can be LastPass or Azure Key Vault, both of which have APIs.

QUESTION 5: Does it have geolocation-based access control?
ANSWER: Yes, based on IP geolocation.

QUESTION 6: What ports and protocols would be used for information traffic between installed agents and the Athento cloud? (Include URL segments that the solution will work with, the port, IP address, and description).
ANSWER: The application operates over HTTPS, port 443, under the domain https://dominio.athento.com.

QUESTION 7: Is SSL packet inspection required?
ANSWER: Not required by Athento.

QUESTION 8: Does Athento require a certificate? If so, who issues it?
ANSWER: Yes, Athento uses a wildcard certificate. If the client requires their own domain, they must obtain the certificate from another provider.

QUESTION 9: Is the traffic unidirectional or bidirectional? Is it generated only from the client?
ANSWER: It is bidirectional.

QUESTION 10: Does Athento run on proprietary tools (vendor lock-in) or on agnostic tools that allow for decoupled deployments?
ANSWER: Athento primarily operates on an Open Source architecture with: Ubuntu Server, Apache 2, PostgreSQL, ElasticSearch, Django 4.2, Python 3.11, React, etc.

This information corresponds to the generic data of Athento; your instance may have differences.