A highly-performant, feature-rich, event-native API Gateway

You'd expect your API Gateway to proxy traditional synchronous request-response based APIs and protocols. And Gravitee certainly does that. Quite well.

However modern organizations also utilize asynchronous streaming platforms like Kafka or MQTT. Only Gravitee natively supports proxying synchronous and asynchronous traffic, meaning, you won't outgrow this gateway as your needs change.

Gravitee comes with dozens of policies that the Gateway can execute to keep API and event consumption secure, reliable, and efficient. These policies are easily implemented, either via our  Policy Studio UI, our Management API, or our Kubernetes Operator. 

Whether you're looking to do transformations, rate limiting, collect usage data or traffic shaping, there's sure to be a policy that meets your needs.

Your API Gateway shouldn't dictate your deployment policy or your cloud provider.

At Gravitee we let you deploy on the cloud, on-premises, and even in a hybrid model.

Use the cloud provider of your choice for maximum compatibility with your enterprise standards.

Gravitee APIM uses plans, applications, and subscriptions to govern API exposure. A published Gateway API is visible in the Developer Portal but cannot be consumed without a published plan.

A Keyless plan can be consumed immediately, but all other authentication types require the API consumer to register an application and subscribe to a published plan.

This system promotes granular control over API access.

Gravitee provides full support for the most common authentication types including:

JWT - The JWT authentication type ensures that a JWT issued by a third party is valid by verifying its signature and expiration date. Only applications with approved JWTs can access APIs associated with a JWT plan.

OAUTH2 - The OAuth2 authentication type checks access token validity during request processing using token introspection. If the access token is valid, the request is allowed to proceed. If not, the process stops and rejects the request

Multi-factor authentication (MFA) provides a way to add additional steps during the login flow to enforce access control. This ensures that only valid users can access their accounts even if their credentials have been compromised.

Gravitee Access Management (AM) supports various factors out of the box. These factors can be used as MFA for protecting user account access.

Secure and control enterprise data by configuring industry standard protocols, multi-factor authentication, biometrics, tokens, and other password-less auth mechanisms.

Gravitee Access Management is a fully-featured standalone Identity and Access Management solution with a much lower TCO than Okta.

The Gravitee Kubernetes Operator allows Gravitee to serve as a Kubernetes Ingress Controller.

Our Kubernetes-native implementation let's you deploy within your Kubernetes infrastructure, practices, and processes and manage resources in a declarative manner.

The end-to-end flow of an API request and response can be quite complex. From client side network issues to traffic shaping to back end responses, there are a myriad of ways an API call can "go wrong".

Gravitee uniquely provides the ability to trace the flow of the API call such that every phase can be introspected and debugged. Know with pinpoint accuracy what went wrong and where.

Isolate, understand, and remediate for API performance and security risks before they cause a problem for your customers.

Configure multi-channel notifications that alert users of SLA-breaches in real-time via email, messaging apps, or webhooks.

At Gravitee our heritage has always been open core. In fact, our open source solution offers more breadth and depth than any of the other open source APIM vendors. And for enterprise deployments, we have you covered with paid offerings for all use cases and support requirements.

One more thing...we'll let you into a little secret. Gravitee is embedded into some of the leading iPaaS vendors as their APIM solution. So when selecting Gravitee you can rest assured you've chosen a platform trusted not only by global enterprises, but also by other software vendors who stake their reputation on Gravitee's performance.