security service to match api