Category Archives: News

"Celebrating 7" As Seen By Interns

From the veterans of WSO2 to the newbies…this week we have a top 7 list from our current group of interns at the Colombo office for our ongoing campaign of celebrating 7 years of WSO2. Every year WSO2 trains many interns from the local universities who eventually end up most often working for us too once they graduate.

1. Flat Structure

It is flat as it can ever be. A simple example – at WSO2Con 2011(Where we participated as students) Sanjiva came to the conference room in the middle of a speech. For a seat he had to go through the hall. Instead he sat on the ground while 100s of other employees were sitting in chairs nearby. Then instead of giving a chair to their CEO, one employee took a photo of him to upload to twitter. Nothing else is required to explain how flat the structure is. And truly that is one of the reasons why we choose WSO2 for our internship.

2. Open Culture

Things are pretty cool at WSO2. We can speak and ask help from anyone and they are always ready to help. That is a great advantage for us as we get the chance to talk and work with tycoons of the tech world. Its just amazing.

3. Motivational Working Environment

We can see, that everyone is engaged in their assigned tasks very eagerly. They are driven by their own control and power. Administration operates in such a way (no micro management) that employees truly get the feeling that this is our company.This gives an environment for passionate workers to give their maximum and creative output towards the company.

4. Guidance in the Learning Environment

Mentors are always helpful and willing to guide us on the correct path. So we have a great learning environment as interns.

5. The Way Employees Are Treated

When a company concentrates too much on the end outcome it has to force its employees and get the work done. At WSO2 however we see that employees are highly appreciated and this results in awesome outcomes.

6. Smiling Faces

All the employees here are friendly and we are always greeted with friendly smiles making WSO2 a pleasant place to work.

7. Fun

Having fun while working rather than just working. Occasional laughter is pretty often at WSO2 and Table Tennis, Carom boards and Foosball table will never have a break at lunch and tea times.

– WSO2 Inters 2012: Tishan, Ishara, Pulasthi, Denuwanthi, Thilini, Andun, Harsha, Sameera, Sammera, Sachini, Hasintha, Lasindu, Malinga, Nipuni, Chaamini, Prabath, Isuru, Sajini, Kanarupan, Rajith, Ishan, Buddhima, Hareesan, Sagara, Tharindu

Feel free to post a blog and tweet #mywso2top7 with your top 7 of what WSO2 means to you.

“Celebrating 7” Continues with CTO, Paul

On our ongoing campaign of celebrating 7 years of WSO2, we have CTO, Paul Fremantle’s top 7 of what makes WSO2 great.

1. Our openness

We started open and seven years later we are more open than when we started! Since we started we moved our architecture mailing list out into the public, we do all our development discussion and bug tracking, builds and more in the open. It makes it much easier to collaborate. Of course we still have private bug trackers and email for managing customer information.

2. Our culture

Play hard and work hard. Each year we publish around 50 product releases and many service releases, together with marketing, PR, support and everything else a product takes, and yet we still find time to organize inter-house basketball matches, athletic meets, and even a car rally around Colombo.

3. Our products


4. Our people

We have so many talented people and its simply a pleasure to work with so many bright, dedicated and insightful developers, account managers, marketers, and designers.

5. Our customers

Inspire us to do harder, deeper, more impressive technical solutions every day, and make it a challenge and somewhere where I never get bored.

6. Our vision

We continue to have a vision, that builds off our very first aims, to create a company that makes it easier and more effective to build distributed applications (in the cloud – yeah that is new in the last 7 years!) using a leaner open platform.

7. Our global nature

We really try to operate as a single company worldwide, and we have done since we started with one person in Asia, one in Europe and one in the US. Now we have people in Spain, Canada, Florida as well as Palo Alto and Colombo.

8. Our complete inability to stick to the “rules” and be constrained by the existing marketplace!

Feel free to post a blog and tweet #mywso2top7 with your top 7 of what WSO2 means to you.

Celebrating 7 with Jonathan Marsh

7 years ago this month WSO2 was founded on the belief that there was a better way to do middleware. Today WSO2 has not only reinvented the technology but also support models, business relationships and corporate culture.

As a tribute to the past 7 years of continuous  excellence we will feature the top 7 lists of what it means to be part of this unique company.

We start off with Jonathan’s top 7 and will publish more in the coming weeks.

1. Truly global

From day one where the founder’s “virtual garage” was on three continents, to serving customers around the world, to hiring the best folks wherever they reside, WSO2 shows what it means to operate in today’s global environment.

2. Talent pool

WSO2’s status as one of the premier “creative” organizations in Colombo attracts the cream of the hottest talent for its development team, and retains them with a meritocratic, Silicon Valley-style entrepreneurial culture.

3. Focus on employee first, job second

We know that it’s often more important to have the right attitude, ambition, and raw talent than a credential that matches a static job description.  WSO2 team members regularly adapt and grow in ways that build an exciting career – and redouble their value to WSO2!

4. Pure balls

Taking on the likes of Oracle and IBM in terms of a superior technical vision is no small feat.  Yet that’s what WSO2 was founded to do.  In many ways we’ve already surpassed them, for instance with modularity and cloud nativity, but we also make strides every day to surpass them in customer satisfaction, reliability and responsiveness, fit-for-purpose, and one day in market share ;-).

5. Work globally, help locally

WSO2 consciously strives not just to succeed financially, but never forgets what that success is for: it translates into fulfilling employment, assistance to local enterprises, contribution to the industry and industry groups, presenting models for a “creative economy” in Sri Lanka, and promoting many charitable efforts to lift those around us in need.

6. An honest customer relationship

We’re pushing the envelope on what the software vendor/customer relationship should be – a cooperative model.  We’ve constructed our business model so that we partner with our customers to solve their problems efficiently and effectively – Apache licensed open source shares the code with customers, a menu of services targets a customer’s need directly, pricing that is drop-dead simple, no use of secret discounting structures to squeeze more money from some customers than others, no commissioned salespeople who have incentives to push further than the customer can benefit from.  Simple, straightforward value is our model, not restrictions or gimmicks.

7. Some great, great people at the helm

Paul and Sanjiva continue to amaze, our technical leadership under Samisa, Azeez, Shankar, Prabath, Asanka, and so many others always exceed expectations, and our new hires like Chris and Isabelle are rocking their jobs.  Our customers love these guys – and we get to work with them every day!

Feel free to post a blog and tweet #mywso2top7 with your top 7 of what WSO2 means to you.

2 New White Papers on Cloud Computing

Forrester Research expects the cloud computing market to top $241 billion by 2020. In the last couple of weeks we published 2 new white papers, that address the need for enterprises to radically scale the delivery of services while minimizing costs related to IT infrastructure, application development and deployment, and operations.

In addition, more enterprises are considering how to deploy middleware as a service instead of running multiple, traditional middleware platform silos. There can be potential cost savings when offering ESB-as-a-service across multiple tenants, rather than maintaining on-premise servers and storage.

1. Moving eGovernment to the Cloud

Today eGovernment promises a means for cost effectively delivering information and enabling transactions among the citizens residing within a local geography, as well as the different governmental groups supporting them. However, the role of eGovernment has been limited by the inherent cost and complexity of integrating and managing traditional server-based systems.

This white paper presents an architectural approach for maintaining a central platform-as-a-service (PaaS) working in concert with local private cloud platforms to efficiently leverage computing resources across platforms and locations—while ensuring proper governance. Significantly, this architectural model works equally well in the government and in the private sector among enterprises with multiple locations. The document also reviews how the award-winning WSO2 Stratos cloud middleware platform supports this approach.

Download this eGovernment white paper

2. Cloud Native Advantage: Multi-Tenant, Shared Container PaaS

The white paper describes the architecture components required to deliver multi-tenant, shared application platform services. It also proposes a cost evaluation tool that compares the deployment footprint associated with a multi-tenant, shared application container PaaS versus a single-tenant, dedicated container PaaS (i.e. traditional application server deployment in cloud). The analysis reviews multiple tenant count and application platform service scenarios. An associated TCO worksheet incorporates the application platform license (or subscription) cost, PaaS management service cost, infrastructure expense, and IT management overhead.

Additionally, the paper examines how multi-tenant application platform service instances can host multiple tenants with appropriate resource isolation and deliver a significant cost advantage. It also explores how cloud-native containers are purpose-built to overcome context isolation challenges, deployment tooling issues, and resource sharing impediments. Finally, it explores how cloud application architecture components (e.g. a cloud-aware code deployer, tenant-aware administration screens, and tenant-aware load balancing) create a safe, multi-tenant environment while maximizing resource sharing and lowering cost.

Download this PaaS TCO white paper

Hasmin AbdulCader,
Director, Communications

Hot Summer Releases to Watch Out For!

From an all new API Manager and a software development lifecycle management product (WSO2 AppFactory), to supporting new cloud technologies, totally new versions of WSO2 BAM and WSO2 Message Broker, you won’t want to miss what’s coming up this summer at WSO2.

As the team constantly looks at ways to stay ahead of the game, they’ve also made significant enhancements to the WSO2 Carbon framework and products such as the ESB, Governance Registry, Application Server, and Stratos.

We managed to get a hold of CTO, Paul Fremantle, to give you an overview of what’s in store on this technical update video:

Hasmin AbdulCader, Director, Communications

WSO2 API Manager Beta Program Launched

Chris Haddad, Vice President of Technical Evangelism for WSO2, has introduced the new WSO2 API Management beta program in his blog.  At the end of the post he reveals that…

WSO2 has begun recruiting beta customers for the new WSO2 API Manager product scheduled to launch this summer.  Ideal candidates for the WSO2 API Manager beta program are enterprise IT professionals who are planning or evaluating infrastructure to offer APIs to third parties—whether externally or within the organization. WSO2 requests participant commitment to provide use cases and feedback. For more information please visit the product Web site at and contact us at to join the beta program.

WSO2 API Manager will enable enterprises to extend their data, processes and services out to customers, partners and other business units via APIs while providing the ability to secure, protect and monitor API resource interactions. WSO2 API Manager also will enable developers to rapidly find, subscribe to, and evaluate the APIs that enterprises make available.  Using WSO2 API Manager, enterprises will be able to:

  • Offer APIs to their customers and partners, as well as other internal users.
  • Display and promote APIs in an API store
  • Enable developers to sign up and subscribe to APIs.
  • Collect usage, performance, and quality of service metrics to analyze and understand how APIs are being used.
  • Use a policy-based approach to securing APIs, managing access, and throttling usage.

Re-invent your software delivery and re-invigorate your SOA initiative by adding WSO2 API Manager and encouraging API adoption.

Read the full post, explaining the importance of API management to SOA adoption, “WSO2 API Management Platform Re-invents Software Delivery” at

The related news release is at

Jonathan Marsh, VP Business Development and Product Design
Jonathan’s blog:

WSO2 Joins Cloud Security Alliance

After watching the good work of the Cloud Security Alliance (CSA) for more than a year, WSO2 has joined as a Corporate Member.

As you know, WSO2 offers the very first completely open source Platform as a Service (PaaS). Taking our Carbon-based middleware platform to the next level, WSO2 Stratos offers the most complete, enterprise-grade, open PaaS, with support for more core services than any other available PaaS today. Unlike many cloud platforms, WSO2 Stratos, the software behind the WSO2 StratosLive Java PaaS, is available as a fully supported product that can be installed and run on-premise.

WSO2 Stratos provides the core cloud services and essential building blocks, for example federated identity and single sign-on, data-as-a-service and messaging-as-a-service and more, required for developing SaaS and cloud applications.

Building a cloud PaaS is actually quite a challenge, but no pain, no gain!

We took up the first challenge of getting our Carbon stack running on OSGi runtime, not an easy task and one that some vendors were unable to complete, but one that we found necessary to build cloud nativity deeply into the platform, and to enable incremental upgrades and addition of the platform as a live entity.

Security represents one of the biggest challenges we faced making Stratos a reality.  We had to rebuild the foundations of the system to focus on tenant isolation, data security, restricted operations, tenant-based user stores, standards-based security models, integration with other *aaS models among other concerns. Stratos today supports many of the most popular open standards related to security and identity management including SAML2, OpenID, OAuth, XACML and WS-Security.

A few months back we received some recognition of this work, as a recipient of KuppingerCole’s European Identity Award 2011 for the Cloud Provider Offerings category.  The award recognizes WSO2 specifically for WSO2 Stratos Identity, citing the multi-tenant open source cloud service for its OpenID and XACML support and its innovative features, including the ability to migrate from on-premise to a full cloud service (and back).

Stratos has come a long way, with customers now adopting the platform, and we welcome the opportunity to both share our experiences with other cloud providers and be part of the conversation in moving cloud security forward.

The CSA is a not-for-profit organization with a mission to promote the use of best practices for providing security assurance within Cloud Computing, and to provide education on the uses of Cloud Computing to help secure all other forms of computing.

Among many of our community, questions about whether to move to cloud or not, whether to move to a private or public cloud and so forth mostly revolve around security concerns.  We are looking to helping address those concerns, and contributing to the standards and guidelines promoted by the CSA to educate users about ensuring the future of cloud is secure.

Prabath Siriwardena, Architect & Senior Manager – Carbon Platform & Security

Gartner’s and Cobiacomm’s Analysis of WSO2 SOA Governance

[First published at]

WSO2, the lean enterprise middleware provider, announced that it has been positioned by Gartner, Inc. in the “Visionaries” quadrant of a new report, Magic Quadrant for SOA Governance Technologies [1].

My analysis (from an ex-Gartner research team leader), the placement demonstrates WSO2 team leadership in defining a vision for policy based service governance. When publishing a service API for consumption, tracking published cloud-based service versions, monitoring service consumer connections, and delivering service-consumer interoperability, governance keeps the environment from devolving into chaos. Cloud based services, mobile devices, and multi-enterprise B2B interactions increase the environments where SOA governance technology must be applied. WSO2?s multi-tenant SOA governance infrastructure facilitates configuring models and policies associated with each participant’s business requirements. Many vendors have not yet modified their registries, repositories, and policy management systems to support multi-tenancy. As a result, organizations using single-tenant SOA governance tools are challenged to apply policies across diverse partners, customers, consumers, and internal corporate groups.

The WSO2 Carbon Governance and WSO2 Stratos Governance as a Service supports configuring a wide variety of design-time, development-time, and run-time policies. Built-in run-time policies include security access controls, authorization (via XACML), throttling, alerting, and caching, each of which accesses defined parts of the service message. The governance stack is also used to enforce software development policies when promoting applications and services across lifecycle stages (e.g. development to quality assurance, quality assurance to production). Granular cloud metering and billing is facilitated by collecting performance, faults, and business activity information in conjunction with the WSO2 Stratos Business Activity Management Service. WSO2 has posted good drill-down presentation describing how to use the governance registry.

The WSO2 Governance Registry not only interoperates and integrates with the WSO2 Carbon and WSO2 Stratos stack, but also with Cloud services hosted on other vendor stacks. Integration can occur at the network protocol level (i.e. HTTP, SOAP, FTP, AMQP, WebSphere MQ, POP3/SMTP, FIX, HL7, SAP iDoc/BAPI, and vendor-specific JMS variants), across multiple message formats (i.e. SOAP, XML, JSON, CSV, EDI, FIX, HL7, and REST), and multiple security and identity protocols (i.e. LDAP, SAML2, Kerberos, OpenID, OAuth, and XACMLA).

For more information, visit the WSO2 Governance Registry product page. To try out WSO2 Governance Registry as a Service for free, visit the StratosLive registration page.

[1] Gartner, “Magic Quadrant for SOA Governance Technologies,” by Paolo Malinverno and Daryl C. Plummer, October 17, 2011.

Chris Haddad, Vice President of Technical Evangelism
Chris’ blog:

New Role, New Face: Chris Haddad Joins WSO2

As WSO2 navigates the boundary between start-up and scale-up, we’re finding that one thing doesn’t change — the core of WSO2 is community.  Our open source technology had its genesis in the Apache community, and has spawned our own OxygenTank development portal.  The essence of the astoundingly productive development model is openness, input, and contribution from the community.  Our business model is based on matching needs in the user community with the skills of our community of developer-employees.  Our marketing and communication is about providing valuable information to the community and welcoming new members into that community.

As our community has grown, our ability to engage and serve that community also must scale up.  And since our community includes some pretty savvy folks, growing requires bringing on some pretty capable people.  I’m especially pleased to announce the latest data point in that trend:

Chris Haddad has joined our team in the role of Vice President of Technology Evangelism. Many of you may already be familiar with Chris’ work as a core analyst with Burton/Gartner specializing variously in Java, SOA, SaaS, PaaS, cloud, as those topics have each risen in importance to the industry.

Chris’ job will be (among other things) to help you — our community — understand better the trends, technologies, and tactics that make your technology investments pay off now and in the future.  Chris will also be bringing your stories back to WSO2, where they focus and improve WSO2’s technology and roadmap.

I encourage you to subscribe to Chris’ new blog, which will be full of his impressions as he broadens his exposure to the WSO2 platform.  Look for Chris at upcoming conferences, webinars, articles and more — or just drop him a line if you have a story to tell!

Chris, welcome to the WSO2 family!

Jonathan Marsh, VP Business Development and Product Design
Jonathan’s blog:

YANO (Yet Another New Office) for WSO2

16 September 2011 saw the opening of another new WSO2 office – the second this year, with the expansion of the Colombo “campus” to a third building. 

Starting this week, WSO2 will occupy the top two floors (with a third yet to be constructed) of the ICICI Bank building a couple of blocks from the existing Flower Road buildings.  The new facilities should go a long way to relieving the overcrowding of the existing facilities as the WSO2 team continues to expand, both within Sri Lanka and with growth in overseas offices and the addition of more remote employees around the world.

As customary, the opening ceremony includes employees at all levels who take turns lighting wicks in the jasmine-flower strung brass oil lamp.  The lighting of the five-foot lamp symbolizes the dispelling of ignorance (darkness), replacing it with knowledge – the greatest of all forms of wealth in Sri Lanka.  The lamp is topped by an image of a rooster further reinforcing the dawning of light as well as good fortune.

This simple ceremony seems especially fitting for WSO2, with our ceaseless mission to discover and invent technologies that will solve current and future enterprise problems and build the best foundation for enterprises to succeed in our rapidly-changing world.  And then make these innovations available to the world freely as open source.

>a href=””>

After the lamp-lighting Paul and Sanjiva shared a few words of gratitude for the incredible accomplishments of the team so far this year – as well as a stern warning not to rest on our laurels as we have much to accomplish!  We can’t rest but must continue to “do what it takes to get it done” for our customers and users.

I can’t help but include a candid snapshot of Sanjiva prior to the ceremony demonstrating the breadth of his duties as CEO.  “Do what it takes to get it done.”  That’s a bit of knowledge we all acquire as members of the WSO2 team.

Jonathan Marsh, VP Business Development and Product Design
Jonathan’s blog: