I work daily with it and work towards the solution implementer certificate. So take that info with a grain of salt and maybe as biased. About your points: Dev

I work daily with it and work towards the solution implementer certificate. So take that info with a grain of salt and maybe as biased. About your points: Devops is possible. You got like three interfaces you could utilize. Json, soap and something called afp, if you count shh, that's also possible to automate with. You can load balance it, fail over, active, active, passive active, self load balance etc. There is also a Citrix, vmware and docker version. You can load balance incoming and outgoing traffic. I don't know what else you want? You get near wire speed format, signing, authing etc stuff on the datapower. You can also add a hardware cryptography card for even more speed. Datapower won't protect you from passwords like admin, admin. This needs and should be done on application level. But if you feel frisky you can implement a rule check on your own. In JavaScript if you like. Where datapower shines is with three a and validation with a check against known attack vectors. Let's say you want to prevent overloading your api with nonsense. Including none valid string formats ie they shouldn't be longer than 69 signs. And the while json request shouldn't be bigger than 2kb. You can do side calling. Ie checking external databases for validity. Throttle and or stop requests. The datapower is extreme powerful. In terms of flexibility, speed and security. There is a reason why one of our customers has 60 of them.