Every API call your business depends on, checked at the gate.
AIM is a Canadian Broadcom partner licensed to sell Layer7 API Gateway and six related Broadcom enterprise products. We license it, design the policies, deploy it and run it, from our base in Mississauga.
- 01POST /v2/claims/submitinbound
- 02authenticate: OAuth bearer tokenpass
- 03authorize: scope claims.writepass
- 04threat protection: payload inspectionpass
- 05validate: JSON schema v2pass
- 06transform: JSON to SOAP for core systemdone
- 07route: claims-core.internal200
One enforcement point between your APIs and everyone calling them
Layer7 API Gateway controls how services are exposed to and accessed by client applications, partners and mobile apps. It plugs into the PKI, identity, SSO, federation and messaging systems you already run, so existing security extends to your APIs.
Access control
Authentication, authorization, credentialing and key management applied per API, per consumer.
Threat protection
Content inspection and schema validation stop malformed or malicious payloads before they reach backend systems.
Integrity and confidentiality
Message-level signing and encryption for traffic that crosses organizational boundaries.
Transformation and routing
Data transformation and protocol switching let modern REST clients reach older SOAP and messaging systems without rewriting them.
Service levels
SLA enforcement and rate controls protect shared services from runaway consumers.
Audit trail
Logging of every transaction for operations, security review and compliance evidence.
Advise, build, run. One partner from licence to operations.
Buying the licence is the easy part. Most of the value sits in policy design, integration with your identity stack, and keeping the gateway current. AIM covers all three.
Advise
Architecture and licensing
- API estate and exposure assessment
- Gateway topology and form-factor choice
- Licence sizing and quote through AIM
- Roadmap for moving from appliance to container
Build
Deployment and policy engineering
- Installation, clustering and environment setup
- Policy development for security, transformation and routing
- Integration with SiteMinder, Microsoft Entra ID and other identity providers
- Version upgrades and platform migrations
Run
Managed gateway operations
- Policy change management and release
- Monitoring, patching and certificate renewal
- Case coordination with Broadcom support
- Quarterly health and capacity reviews
Six more products AIM is licensed to sell
Many of these carried CA Technologies names before Broadcom acquired them, and your support portal may still list them that way. We show both names so you can match what you own.
Identity and access
Who can sign in, what they can reach, and what privileged users do once inside.
Symantec SiteMinder
Access management for web applications: single sign-on, authentication, authorization, identity federation and session management.
Portal name: SITEMINDER
Symantec Identity Governance and Administration
Identity lifecycle and governance, including Identity Manager, Identity Governance and Identity Portal, to keep access at least privilege.
Portal name: CA Identity Suite
Symantec Privileged Access Manager
Centralized control of high-risk administrator access across physical, virtual and cloud environments, with credential protection and session monitoring.
Portal name: CA Privileged Access Manager (PAM)
PAM Server Control
Host-based control that intercepts sensitive operating-system actions in real time and checks them against policy before they run.
Portal name: CA Privileged Access Manager - Server Control (PAMSC)
Observability
Where transactions slow down and why.
DX Application Performance Management
Application performance monitoring built on the Introscope agent technology, tracing transactions across application tiers.
Portal name: CA APM / Wily / Introscope
Testing
Test earlier without waiting on every dependent system.
Service Virtualization
Virtual services that stand in for systems that are unavailable, costly or unfinished, so development and testing keep moving.
Portal name: Service Virtualization (part of DevTest)
New to Layer7, or already running Broadcom software
Evaluating API management
For architects and security leaders choosing how to protect and expose APIs.
- Working session on your API exposure and integration points
- Reference architecture for your environment
- Proof of value on a real API before you commit
- Licensing quote and delivery plan from AIM
Existing Broadcom customers
For teams that own any of the seven products and want a Canadian partner on the account.
- Renewal review before your term date
- Licence position check against actual deployment
- Upgrade planning for gateways and identity platforms on older versions
- Managed operations for an estate your team no longer wants to carry alone
Broadcom depth with a Microsoft practice beside it
Canadian partner of record
Headquartered in Mississauga, Ontario. Licensing quoted in CAD by a team that also delivers the work.
Microsoft Solutions Partner
Most gateways and SiteMinder estates now sit next to Microsoft 365 and Entra ID. AIM works both sides of that integration.
Licence and services together
The same team that quotes the licence designs the policies and runs the platform, so nothing gets lost between purchase and production.
Book an API security consult
Tell us what you run today and what you need next. A Broadcom specialist at AIM will follow up.
Broadcom, Layer7, Symantec, SiteMinder, DX and related marks are trademarks of Broadcom Inc. or its subsidiaries. AIM is an independent Broadcom partner.