Layer7 API Management

Layer7 API Management gives publishers a portal to publish, document and manage APIs through their lifecycle. Consumers can onboard, browse APIs, obtain an API key and shared secret, and view usage metrics. Teams can set governance policies, including approved authentication methods and required threat protection, and bundle APIs into products with usage tiers, shared documentation and interactive testing. Portal actions are also available programmatically through the Portal API. Security features include single sign-on, multifactor authentication including biometrics, and fine-grained API authorization. Lifecycle tooling covers health metrics, CI/CD integration, popular API tools and GraphQL management interfaces. Deployment options include on-premises, SaaS and hybrid setups across hardware, software, virtual and container forms. Supported standards and transports include REST, SOAP, GraphQL, OAuth 2.0, LDAP, SAML, MQTT, RabbitMQ, Kafka, JMS, WebSockets, HTTP(S) and FTP(S). SaaS availability commitments vary by threshold; customer data is backed up daily, replicated within the same geographic location and retained for seven days. Pricing is available on request.

Layer7 combines an API portal, governance controls, API products and lifecycle tooling with several deployment choices. Buyers should request pricing and account for extra SaaS portal instances or environments where needed.

Layer7 suits organizations that need API publishing, consumer onboarding, governance and lifecycle management across deployment models. It may also fit teams that need API products, portal automation or integrations with the listed protocols and transports.

Overview

Layer7 API Management is Broadcom software for publishing, governing and managing APIs across on-premises, SaaS and hybrid deployments. It is best suited to organizations that need managed consumer onboarding and governance while choosing how and where to run the platform. Its breadth is compelling, but extra SaaS portal instances and environments can add cost.

Key features

The API portal covers publishing, documentation and lifecycle management. Consumers can browse APIs, obtain an API key and shared secret, and see consumption metrics. API Products bundle APIs into usage-limitation tiers with shared documentation and interactive testing, a useful structure for teams offering APIs as defined products rather than standalone endpoints.

Governance policies can enforce organization-defined requirements such as approved authentication methods and threat protection. Portal actions are also available through the Portal API, supporting programmatic workflows alongside the interface. Single sign-on, multifactor authentication including biometrics, and fine-grained API authorization provide several layers of access control.

The product brief cites OWASP API Security Top 10 defense, Common Criteria Certification, FIPS 140-2 compliance and STIG hardening. Lifecycle capabilities include health-tracking metrics, support for popular API tools, CI/CD integration and GraphQL management interfaces. Protocol support spans REST, SOAP, GraphQL, OAuth 2.0, LDAP, SAML, MQTT, RabbitMQ, Kafka, JMS, WebSockets, HTTP(S) and FTP(S), giving teams a broad set of integration options.

Deployment choices include on-premises, SaaS and hybrid, delivered in hardware, software, virtual-environment or container form factors. That flexibility suits organizations with varied infrastructure requirements, though it also means buyers should match the deployment model to their operational needs. A single Docker Gateway instance can be configured with up to six cores and eight gigabytes of memory.

For SaaS, availability commitments are 99.8% for a minor-default threshold and 98.5% for a major-default threshold. Customer data is backed up daily, replicated within the same geographic location and retained for seven days. These terms offer a concrete baseline, but the retention period may be short for teams with longer recovery or audit needs.

Pricing

Layer7 API Management is paid software with custom pricing. The Layer7 API Management SaaS plan is billed through Broadcom and includes one production environment. Additional portal instances cost extra, and additional environments must be purchased, so organizations with multiple portals or deployment stages should account for those requirements when sizing a subscription.

Usage metering and subscription billing are supported, alongside freemium, purchase, subscription and consumption billing models. Those options suit teams that need to measure API use or support varied commercial models, but no published price or lower-cost plan makes it difficult to judge the budget fit before a sales discussion.

Platforms

Layer7 supports Android, iOS, web, API and self-hosted environments. The combination of mobile and self-hosted support broadens its potential fit, while the deployment options accommodate organizations that cannot rely on a single hosting model.

Who it's for

Layer7 is a strong fit for organizations that need API governance, consumer onboarding, product packaging and lifecycle tooling in one management platform, particularly when they require on-premises, SaaS or hybrid deployment choices. Teams with simpler API gateway needs or tight budgets may find the custom pricing and added SaaS environment costs harder to justify.

Pros and cons

• Pro: Consumer onboarding, API Products and governance policies work together to support controlled API access and distribution.
• Pro: On-premises, SaaS and hybrid deployment options, plus broad protocol support, fit varied infrastructure and integration needs.
• Pro: Portal API automation, CI/CD integration and health metrics support operational workflows beyond manual portal management.
• Con: SaaS includes only one production environment; additional environments and portal instances cost extra.
• Con: Custom pricing makes upfront cost comparison difficult.
• Con: SaaS backups are retained for seven days, which may not suit organizations needing a longer retention window.

Alternatives

For a free community gateway, Gravitee API Gateway offers a free Apache 2.0 Community Edition, though no numerical limits are given for that plan.

Kong Gateway is worth considering for a time-limited evaluation: its free trial runs for 30 days with no Gateway limits and 30 days of analytics retention.

Lago may suit teams seeking free, self-hosted open-source billing software under AGPLv3.

Stigg offers a free Build plan with 10,000 managed entities, 5 million usage events per month and 1,000 events per second, a fit for teams prioritizing credits and entitlements with defined free-tier allowances.

Moesif provides a free plan after its 14-day trial, an option for teams considering a freemium API platform.

Revenium has a free Observe plan capped at 100,000 transactions per month, seven days of data retention and one user.

Apigee API hub is available at no additional cost to eligible Apigee organizations in supported regions.

Zuplo is a freemium option with a free plan for up to 100,000 requests per month, including five environments and two account members.

For related categories, see API Monetization Software and Mobile Threat Defense Software.

Verdict

Choose Layer7 when API governance, consumer onboarding and deployment flexibility matter more than a simple, low-cost gateway. Its integrated portal and lifecycle capabilities are the main reason to select it; organizations needing predictable public pricing or many SaaS environments should compare alternatives before committing.