Event-Native
API management

Gravitee ships with our industry leading API Gateway. With support for traditional synchronous request-response APIs AND newer asynchronous and streaming protocols, Gravitee has you covered as your needs change.

Whether you're using synchronous, asynchronous or both, we offer dozens of pre-built policies for everything from rate limiting to traffic shaping.

And built on Java we're highly performant serving in the most demanding of high volume use cases for organizations globally.

Gateway Sprawl is real. And in the age of Bring Your Own Gateway, your API Management solution needs to play nicely with all gateways.

Gravitee APIM supports a fully federated deployment allowing you to have a single API management platform for the Gravitee Gateway, AWS Gateway, Solace, Apigee and more.

Enjoy true governance across all your gateways and APIs.

Get advanced Identity and Access Management (IaM) and API Security all as part of the Gravitee platform.

Secure and control enterprise data by configuring industry standard protocols, multi-factor authentication, biometrics, tokens, and other password-less auth mechanisms.

Your API Management solutions shouldn't dictate your deployment policy or your cloud provider.

At Gravitee we let you deploy on the cloud, on-premises, and even in a hybrid model. Split your control plane and data plane across multiple deployment types.

Use the cloud provider of your choice for maximum compatibility with your enterprise standards.

Gravitee offers dozens of pre-built policies and also makes it easy to create your own as needed.

Use policies to limit API consumption, shape traffic, or alter requests and response bodies.

Check out some of our most common policies, or head to the Gravitee policy marketplace to explore them all!

Deploy your APIs to the Gravitee API Developer Portal, and give your consumers one place to browse APIs, subscribe and request access, view API analytics, and more.

And with our Federation capabilities, enjoy the benefits of a unified developer portal spanning all your gateways for a consolidated and centralized view of all APIs in the organization.

Only Gravitee supports synchronous and asynchronous/streaming protocols with support for mediating protocols.

Need to expose a Kafka topic as a Websocket to consumers, with enforced policies and security? No problem.

Explore more of our protocol mediation capabilities on our API Gateway page.

With our rich open source roots, the Gravitee gateway offers the most depth and breadth of any OSS API Gateway, along with Enterprise options for the most demanding of organizations.

We're also Kubernetes native - Gravitee fits right alongside your existing Kubernetes infrastructure, practices, and processes using our Gravitee Kubernetes Operator.

You can rest assured your investment in Gravitee is well protected and well supported.

Gravitee APIM uses plans, applications, and subscriptions to govern API exposure. A published Gateway API is visible in the Developer Portal but cannot be consumed without a published plan.

A Keyless plan can be consumed immediately, but all other authentication types require the API consumer to register an application and subscribe to a published plan.

This system promotes granular control over API access.

Gravitee provides full support for the most common authentication types including:

JWT - The JWT authentication type ensures that a JWT issued by a third party is valid by verifying its signature and expiration date. Only applications with approved JWTs can access APIs associated with a JWT plan.

OAUTH2 - The OAuth2 authentication type checks access token validity during request processing using token introspection. If the access token is valid, the request is allowed to proceed. If not, the process stops and rejects the request

Multi-factor authentication (MFA) provides a way to add additional steps during the login flow to enforce access control. This ensures that only valid users can access their accounts even if their credentials have been compromised.

Gravitee Access Management (AM) supports various factors out of the box. These factors can be used as MFA for protecting user account access.

Secure and control enterprise data by configuring industry standard protocols, multi-factor authentication, biometrics, tokens, and other password-less auth mechanisms.

Gravitee Access Management is a fully-featured standalone Identity and Access Management solution with a much lower TCO than Okta.

Effortless API Design using a drag-and-drop WYSIWYG designer.

Start building faster with a design-first approach that reduces time spent translating business requirements into high-quality API definition

Secure and control enterprise data by configuring industry standard protocols, multi-factor authentication, biometrics, tokens, and other password-less auth mechanisms.

Use standalone as a full Okta/Auth0 alternative IaM solution or in conjunction with the Gravitee API Gateway for robust API security.

Monitor and secure your entire API landscape.

Isolate, understand, and remediate for API performance and security risks before they cause a problem for your customers.

Configure multi-channel notifications that alert users of SLA-breaches in real-time via email, messaging apps, or webhooks.

Pricing per API call isn't very scalable and gets prohibitively expensive, very quickly.

Gravitee prices on a "per gateway" basis ensuring you don't get nickle-and-dimed as your API usage grows. After all, growing your API business should be your objective.