DEVOPSdigest

Postman announced new releases designed to help organizations build APIs faster, more securely, and with less friction.

These new capabilities – Bring Your Own Key (BYOK) Encryption, a new capability that puts data protection fully in the hands of the enterprise, and Spec Hub, a developer-friendly API design and governance solution – mark a major step forward in secure API development at scale.

"Security and governance have long been seen as blockers to innovation, but they don’t have to be,” said Sam Chehab, Head of Information Security, Postman. “With BYOK Encryption and Spec Hub, Postman is redefining how enterprises can scale API development while staying in full control of their data. BYOK Encryption ensures that even in the face of a breach, organizations can instantly isolate risk and maintain compliance, while Spec Hub delivers governance that developers actually want to use—eliminating friction without compromising security. This is the future of secure, scalable API development."

BYOK Encryption gives enterprises complete control over data protection, enabling organizations to manage and safeguard their own encryption keys for data stored in the Postman Cloud. This ensures sensitive information remains private, encrypted, and completely under customer control—even in a zero-trust environment.

Key capabilities of BYOK Encryption include:

- Customer-managed encryption: Protects API environments, globals, and history using organization-controlled keys

- Zero trust security model: Revoke access to sensitive data by disabling your encryption keys—no vendor involvement needed

- Audit-ready controls: Automatically logs encryption events to support internal policies and regulatory compliance

With the introduction of Spec Hub and types in collections, Postman provides developers with a centralized environment to design, manage, and maintain API specifications—eliminating the need to switch between multiple tools or manually sync specifications across platforms. Spec Hub and types in collections provide a seamless experience for developers, regardless of their API development approach—Spec Hub empowers teams embracing a specification-first approach, while types in collections caters to developers who prefer a code-first workflow.

Key capabilities of Spec Hub and types in collections include:

- Multi-format specification support: Integrates with widely-used specifications including OpenAPI 3.0 and AsyncAPI 2.0

- Real-time validation: Allows developers to identify and resolve issues early with built-in linting powered by Spectral

- One-click collection generation and sync: Enables finalized specs to be instantly converted into Postman Collections for downstream use

- Bring structure and consistency to every request​ with types in collections: Adds schema-level structure to collections by letting you define request and response types—enabling smarter authoring, stronger validation, and seamless sync with your API specs.

With BYOK Encryption, Spec Hub, and types in collections, Postman continues to redefine how teams build and scale APIs—bringing security, speed, and structure together in one unified platform. These new capabilities are now available to Postman customers.