SAN JOSE, Calif., March 11, 2025 -- Atsign, a leader in security through invisibility, today announced the launch of Invisible APIs, powered by its innovative NoPorts technology. This groundbreaking approach to API security eliminates traditional vulnerabilities by making API endpoints undetectable to unauthorized individuals.
APIs are the backbone of modern software, enabling seamless integration across traditional applications and AI-driven systems. However, APIs that rely on open ports are inherently exposed to security threats, including denial-of-service (DoS) attacks, credential spoofing, unauthorized data access, and API key theft.
"The current paradigm of API security is fraught with vulnerabilities," said Barbara Tallent, CEO at Atsign. "All traditional methods leave APIs visible and susceptible to a broad spectrum of attacks. By rendering APIs invisible, NoPorts delivers an unprecedented level of security at a fraction of the cost."
The Inherent Vulnerability of Traditional APIs
APIs typically require open ports to enable client connections, but these exposed endpoints are easily discovered through automated scanning, making them prime targets for credential stuffing, DoS attacks, data scraping, and zero-day exploits. Traditional security measures like ZTNA, API gateways, and tunneling aim to reduce risk but still rely on IP-based access controls, leaving APIs vulnerable to misconfigurations, stolen credentials, and evolving attack methods. As AI-driven threats accelerate, open ports and network-based security models continue to be exploited, making breaches inevitable.
Atsign's Solution: Invisible APIs
Atsign's NoPorts technology addresses these vulnerabilities by making APIs invisible. By eliminating the need for open listening ports on the device hosting the API, NoPorts effectively removes the primary attack vector, rendering the API undetectable to unauthorized people.
Key Advantages of Invisible APIs:
How NoPorts Achieves API Invisibility
NoPorts leverages Atsign's zero-trust infrastructure, the atPlatform, to establish secure, peer-to-peer connections between those authorized and the API, without requiring open listening ports. Both the client and the API utilize outbound ports to establish a direct, peer-to-peer connection following cryptographic authentication. This ensures that only authorized people can access the API, while bad actors remain completely unaware of its existence.
"Imagine an API that's exclusively accessible to authorized individuals, with every request authenticated and encrypted end-to-end," added Tallent. "That's the transformative power of Invisible APIs enabled by NoPorts."
About Atsign
Atsign specializes in embedded security technology infrastructure, software solutions, and SDKs. The company is providing the technology for the next generation of the Internet with simplicity, security, and privacy built in. Atsign’s products are based on the promise of a new approach to networking using public key cryptography and personal data services. Learn more at Atsign.com.
About NoPorts
NoPorts eliminates network & security vulnerabilities by securing connections between people, entities, and things making them invisible to would-be attackers without exposing attack network surfaces. With a zero trust architecture, end-to-end encryption, and no reliance on cumbersome security layers, NoPorts enables seamless and secure communication across virtually any environment. Organizations gain scalability, operational efficiency, and stronger security—all while reducing costs and complexity.
Media Contact
For press inquiries, interview requests, or media assets, please visit our Contact Us page.
