Layer7 API Management
Layer7 API Management gives publishers a portal to publish, document, and manage APIs through their lifecycle.
What Layer7 API Management is
Layer7 API Management gives publishers a portal to publish, document, and manage APIs through their lifecycle. Consumers can sign up, browse available APIs, obtain an API key and shared secret, and see API-consumption metrics. Teams can set organization-specific governance rules, including approved authentication methods and required threat protection. API Products group APIs with usage limits, shared documentation, and interactive testing; portal tasks can also be automated through the Portal API. Access controls include single sign-on, multifactor authentication such as biometrics, and fine-grained API authorization. Lifecycle tools cover health metrics, CI/CD integration, GraphQL management interfaces, and popular API tools. Deployment choices include on-premises, SaaS, or hybrid, in hardware, software, virtual, or container form. It supports standards and transports including REST, SOAP, GraphQL, OAuth 2.0, LDAP, SAML, MQTT, RabbitMQ, Kafka, JMS, WebSockets, HTTP(S), and FTP(S). Layer7 is listed for Android, iOS, web, API, and self-hosted use. Pricing is on request. SaaS availability commitments vary by threshold, and customer data is backed up daily and retained for seven days.
Good
- Portal supports API publishing and lifecycle management.
- Consumers can obtain credentials and view usage metrics.
- API Products include usage tiers and interactive testing.
- Supports on-premises, SaaS, and hybrid deployment.
- Access controls include MFA and fine-grained authorization.
Watch out
- Pricing is available on request.
- One Docker Gateway instance is limited to six cores and eight gigabytes of memory.
- SaaS backup retention is seven days.
Who it suits
Layer7 suits organizations that need to govern API publishing and consumer access across varied deployment models. It may also suit teams that need API lifecycle tooling and programmatic portal automation.
Verdict
Layer7 combines API publishing, governance, consumer onboarding, and lifecycle tools in one management offering. Organizations should weigh its deployment and security options against its request-based pricing and the stated container and SaaS limits.
Plans and prices
From Layer7 API Management's own pricing page, checked 30 Sep 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Layer7 API Management SaaS | Priced on request | one production environment included · additional portal instances cost extra · additional environments must be purchased · Contact Broadcom |
The facts
Each one read from Layer7 API Management's own pages, with the date it was checked.
What it does
- Access security
- Layer7 supports single sign-on, multifactor authentication including biometrics, and fine-grained API authorization.checked 30 Sep 2026
- API-first automation
- Actions available in the portal user interface can also be performed programmatically through the Portal API.checked 30 Sep 2026
- API governance
- The API Portal supports organization-defined policies such as approved authentication methods and required threat protection.checked 30 Sep 2026
- API portal
- The portal lets publishers publish, document, and manage the full lifecycle of APIs.checked 30 Sep 2026
- API products
- API Products package collections of APIs and usage-limitation tiers with centralized documentation and interactive testing.checked 30 Sep 2026
- Consumer onboarding
- API consumers can onboard, view available APIs, obtain an API key and shared secret, and access API-consumption metrics.checked 30 Sep 2026
- Container limit
- A single Docker Gateway instance may be configured with up to six cores and eight gigabytes of memory.checked 30 Sep 2026
- Deployment options
- Deployment models include on-premises, SaaS, and hybrid, with hardware, software, virtual-environment, and container form factors.checked 30 Sep 2026
- Lifecycle tooling
- Layer7 provides health-tracking metrics, support for popular API tools, CI/CD pipeline integration, and GraphQL management interfaces.checked 30 Sep 2026
- Protocol integrations
- Supported standards and transports include REST, SOAP, GraphQL, OAuth 2.0, LDAP, SAML, MQTT, RabbitMQ, Kafka, JMS, WebSockets, HTTP(S), and FTP(S).checked 30 Sep 2026
- SaaS availability
- The SaaS listing commits to 99.8% availability for a minor-default threshold and 98.5% for a major-default threshold.checked 30 Sep 2026
- SaaS backup
- SaaS customer data is backed up daily, replicated within the same geographic location, and retained for seven days.checked 30 Sep 2026
- Security certifications
- The product brief lists OWASP API Security Top 10 defense, Common Criteria Certification, FIPS 140-2 compliance, and STIG hardening.checked 30 Sep 2026
The company
- Headquarters
- Palo Alto, California, United Stateschecked 28 Sep 2026
Alternatives to Layer7 API Management
- 1
Flexprice
Free planOpen sourceWebAPILinuxSelf-hosted8.0Free plan - 2

Boomi
WebAPILinuxSelf-hosted7.6$99 usage-based - 3

Zuplo
Free planWebAPILinuxSelf-hosted7.6From $25 a month - 4

Lago
Free planOpen sourceWebAPISelf-hosted7.5Free plan - 5

Younium
AndroidiOSWebAPI7.4From 500 SEK a month - 6

DigitalAPI
WebAPISelf-hosted7.1From $2,500 a month
