Platform Ecosystem — Active
v2.0.0Tyk Enterprise + Apache Camel
Security & Authentication
Zero-trust architecture with differentiated authentication flows per consumer type
Core Principle
Security by Design
Zero-trust architecture with security embedded at every layer. All services enforce authentication, encryption, and data protection from inception.
Authentication Flows by Consumer Type
Consumer Banks
SSO (SAML 2.0 / OIDC)
Federated Single Sign-On for partner bank employees accessing the platform
Provider: Keycloak
Mobile Apps
OAuth 2.0 (no SSO)
Standard OAuth 2.0 token flow for end-user mobile applications
Provider: Tyk Gateway
Developer Portal
SSO (OIDC)
Keycloak-managed SSO for developer registration and API key management
Provider: Keycloak
Service-to-Service
mTLS + API Key
Mutual TLS with API key authentication for backend integrations
Provider: Tyk Gateway
Tier-Based Rate Limiting
Bronze
500 req/min
Burst750
Monthly500K
PriceIncluded
Starter tier for evaluation and small-scale integrations
Silver
2,000 req/min
Burst3,000
Monthly2M
Price£500/mo
Standard tier for production integrations
Recommended
Gold
10,000 req/min
Burst15,000
Monthly10M
Price£2,000/mo
Premium tier for high-volume partners
Enterprise
Custom
BurstCustom
MonthlyUnlimited
PriceCustom
Bespoke limits with dedicated infrastructure
Security Non-Functional Requirements
auth
OAuth 2.0 + mTLS
encryption
TLS 1.3 / AES-256
compliance
FAPI 2.0, PCI DSS L1
zero Trust
Mandatory
pen Testing
Critical/High: 0, Medium: ≤10
sso
SAML 2.0 / OIDC for Consumer Banks
mobile Auth
OAuth 2.0 (no SSO)