Application Protector

The Protegrity Application Protector (AP) is a high-performance, versatile solution that provides a packaged interface to integrate comprehensive, granular security and auditing into enterprise applications. It eliminates the need for application developers to master the complexities of cryptography, while keeping the security team in control of sensitive data protection and access.

The Protegrity AP is available in multiple programming languages, each with its own installation and API usage guidelines:

• AP Java
• AP Python
• AP .Net
• AP C
• AP Go

Note: The on-premises Immutable Application Protectors on the linux platform from previous versions are incompatible with ESA v10.0.x.
The protector must be upgraded to v10.0.x for immutable policy deployment.
For more information about immutable policy deployment using the REST API call, refer to DevOps Approach for Application Protector.

Features of Protegrity Application Protector

The Protegrity Application Protector (AP) is a robust, high-performance solution designed to integrate granular security and auditing into enterprise applications. It simplifies cryptographic complexity for developers while empowering security teams with centralized control.

Simple Programming Interface

AP offers a streamlined API accessible from multiple programming languages, allowing developers to implement data protection without needing deep cryptographic expertise.

Separation of Duties

To comply with security regulations, AP enforces a strict separation between application developers and security administrators. Developers do not author security policies; instead, AP encapsulates all security functions, granting full audit and control capabilities to administrators.

Centralized Security Policy Management

Security policies are centrally defined and managed via the Enterprise Security Administrator (ESA) Web UI. These policies are deployed to AP endpoints, enabling consistent enforcement, auditing, and reporting across applications.

Policy-Based Access Control

AP enforces role- and user-based access rights, including permissions for protecting, unprotecting, and reprotecting data. It validates both the calling application and user against the corporate policy, ensuring trusted access without requiring additional development effort.

Centralized Key Management

Encryption keys are centrally managed using Protegrity’s patented technology. This ensures secure key operations and disaster recovery readiness. Keys can be shared across environments, enabling secure data usage across locations, for example, encrypting POS data at a store and decrypting it at headquarters.

Encryption and Tokenization Support

AP supports a wide range of protection algorithms and token type, including:

• Encryption: 3DES, AES-128 and AES-256, CUSP 3DES, CUSP AES-128 and CUSP AES-256, FPE-FF1
• Hashing: HMAC-SHA1 and HMAC-SHA256
• Tokenization: Various token elements
• Monitoring: No Encryption

For more information about encryption and tokenization, refer to Encryption and Tokenization.

For more information about deprecated encryption algorithms and token types, refer to Deprecated Data Elements.