As Vordel Ltd releases version 2.0 of its XML security platform this week, CEO Derek O’Carroll said the company has seen demand accelerate unexpectedly in the second half of this year and is close to announcing OEM deals with big web services players.
The company makes VordelSecure, a suite of software for handling the user and content checking of SOAP messages. O’Carroll said demand for XML security beyond what is provided by the main web services platform vendors offer has rocketed beyond Vordel’s expectations recently.
Up to about three or four months ago we had a lot of noise in the market from people in the web services market saying ‘We do security’, and that caused us a lot of problems, said O’Carroll. [But they] all do in the same environment as the business logic is executed, and no chief security officer will accept that.
VordelSecure takes a more distributed approach. A security policy engine, VS Server, forms the main part of the suite. Multiple agents, called VS Enforcers, intercept and inspect XML traffic as it enters SOAP endpoints – web servers such as Apache or IIS – then apply policies drawn from the VS Server.
Leveraging standards including XML Signature, XML Schema, XPath, and SOAP routing, VordelSecure 2.0 checks the content of SOAP messages. The system also integrates into LDAP directories and can use SAML, WS-Security and X.509 digital certificates to authenticate user or device identity.
O’Carroll said the company will announce four large global OEM deals in the coming months with major web services players. These OEMs will embed Vordel’s software in their own products, he said. He did not name the partners, but application server vendors seem like likely candidates.
O’Carroll said Vordel competes against the likes of Westbridge Technology Inc and Reactivity Inc, both fairly new companies targeting the same market. Other, older companies including Check Point Software Technologies Ltd have some of the features Vordel provides but not others. But Vordel has the price-performance edge, O’Carroll contends. The Ireland-based firm has patents pending on its concurrent processing of identity and content. Its products start at $5,750, with the whole suite starting at about $24,000. O’Caroll said rival vendors products start at about $25,000 for a cut-down version.