Sold by: WSO2
Deployed on AWS
WSO2 API Manager is an industry-leading full lifecycle API management platform for building, integrating, securing, and exposing an enterprise's digital services as managed APIs in cloud, on-premises, and hybrid architectures. Fast-track your API strategy with all the capabilities needed by API designers, product managers, operations, and consumers.
4.4
Overview
WSO2 API Manager is an industry-leading full lifecycle API management platform for building, integrating, securing, and exposing digital services as managed APIs across cloud, on-premises, and hybrid environments. Whether you're integrating services, providing developer-friendly APIs, or ensuring enterprise-grade security and compliance, it offers the flexibility, scalability, and control required for modern API ecosystems. Key capabilities include:
API Design and Development: With a user-friendly API Publisher, developers can create and deploy APIs adhering to industry-standard specifications such as OpenAPI and GraphQL. This makes it a valuable tool for businesses of all sizes to accelerate their API-first initiatives.
API Security: Security is built into every layer of the platform, including authentication, authorization, traffic encryption, rate limiting, visibility control, threat protection, and token introspection, ensuring robust API protection.
API Gateway: Route, throttle, and secure traffic with an API gateway that adapts to different deployment needs—centralized for traditional enterprise models or decentralized for cloud native scale, performance, and autonomy.
API Developer Portal: Enable API discovery and adoption with a customizable developer portal. It offers categorization, tagging, and advanced AI-assisted search to help developers quickly find and consume the right APIs.
API Analytics: In-depth dashboards provide insights into API usage, performance, error trends, and user behavior, enabling teams to make data-driven decisions and optimize API strategies.
Kubernetes-Native API Management with the WSO2 Kubernetes Gateway: This lightweight, scalable, cloud native gateway uses Kubernetes' full potential for dynamic API management, supporting the entire API lifecycle (design to monetization). It integrates seamlessly with DevOps workflows and offers a unified experience across hybrid and Kubernetes-native environments.
Unified Control Plane: WSO2 API Manager features a unified control plane that can manage and monitor a network of federated API gateways. This includes integration with external systems such as AWS API Gateway and Solace Event Broker, providing a consistent governance and observability experience across distributed API environments.
AI Gateway: Extend API management principles to AI services using WSO2’s AI Gateway. This includes applying guardrails to ensure safe and controlled prompt usage, quality-of-service (QoS) enforcement, semantic caching, and policy-based routing, enabling secure, observable, and governed AI service consumption.
API Governance: Empower organizations to implement consistent governance across the API lifecycle. This includes API versioning policies, access control, documentation requirements, conformance checks, approval workflows, lifecycle states, and integration with source control systems for audit and traceability.
Flexible Deployment Options: WSO2 API Manager supports a wide range of deployment models to meet enterprise needs, whether in public clouds, private data centers, hybrid setups, or modern containerized platforms such as Kubernetes.
Highlights
- Interoperability with Open Standards - Achieve seamless interoperability between diverse systems without vendor lock-in, utilizing modern approaches with REST, GraphQL, and AsyncAPIs. Unlock collaborative innovation, long-term sustainability, enhanced security, and regulatory compliance. Strategically adopt modern service delivery and development paradigms while retaining vital legacy systems.
- Open Source, Extensible, and Customizable - As the leading open source API management platform, WSO2 API Manager is extensible and customizable, serving enterprises from startups to established businesses. It handles diverse scenarios, offering user-friendly extension opportunities for authenticators, policies, mediations, API lifecycles, workflows, portals, and login pages.
- Flexible Deployment Models and Seamless Service Discovery for Developers - WSO2 API Manager can be deployed in the cloud, on-premises, or in a hybrid environment. This gives you the flexibility to choose the deployment option that best meets your needs. You can also embed it within your own SaaS or on-premises solution for redistribution.
Details
Sold by
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 24.04
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/month |
|---|---|---|
Cores | The public offer includes a POC setup without a subscription. The private offer will include a subscription based on the number of cores specified in the contract. | $0.001 |
Usage | The public offer includes a POC setup without a subscription. The private offer will include a subscription based on the usage specified in the contract. | $0.001 |
Support | Public Offer does not include support. Private Offer will include support as specified in the contract. | $0.001 |
Vendor refund policy
All purchases are final. No refund is applicable.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
WSO2 API Manager 4.5.0
Additional details
Usage instructions
To access the deployed WSO2 API Manager, follow the steps below:
1. Configure Local Host Entry
-
Obtain the public IP address of the VM.
-
Add the following entry to your local machine’s /etc/hosts file:
<VM-PUBLIC-IP> am.wso2.com
2. Access the API Manager Portals
Once the host entry is configured, access the WSO2 API Manager portals via the following URLs:
- API Publisher Portal: <https://am.wso2.com:9443/publisher>
- API Developer Portal: <https://am.wso2.com:9443/devportal>
- API Admin Portal: <https://am.wso2.com:9443/admin>
- API Management Console: <https://am.wso2.com:9443/carbon>
3. View API Manager Server Logs
To monitor server logs:
-
SSH into the VM using its public IP address.
- Username: ubuntu
- Use the SSH key that was configured during instance launch.
-
Switch to the wso2carbon user:
sudo su wso2carbon -
Monitor the logs using the following command:
tail -f /home/wso2carbon/wso2am/wso2am-4.5.0/repository/logs/wso2carbon.log
4. Default Credentials (for POC setup)
The default super admin credentials are:
- Username: admin
- Password: admin
5. Additional Resources
-
Documentation: WSO2 API Manager — available at
<https://apim.docs.wso2.com/en/latest/> -
Contact for Subscription: WSO2 — visit
<https://wso2.com/contact/>
Support
Vendor support
WSO2 offers two types of support models - Basic Support and Enterprise Support. Basic Support offers 12x5 support while Enterprise Support is 24x7 support. For more details, please refer to https://wso2.com/licenses/support-policy/5.9/ .
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
WSO2 Identity Server is a powerful, modern identity and access management solution for your on-premises or cloud environment. It enables organizations to deliver exceptional, trusted digital experiences to all types of users: internal workforce, external consumers, business customers or API consumers. Preferred by customer reviewers over Okta, WSO2 Identity Server offers a more compelling technical direction, better feature updates, and superior support quality.
Understand and monetize your users with a powerful API analytics and billing platform
Complete solution (discovery, security and governance) for end-to-end API management programs at enterprises.
WSO2 Integrator: MI is a 100% open source low-code integration solution with an AI-powered development experience.
Develop your integrations using a unique low-code experience with pro-code parity.
WSO2 Private Identity Cloud is an individual, secure SaaS instance of our AI-powered open source IAM suite, enabling secure access for every type of identity: B2C customers, B2B SaaS applications, workforce, and APIs.
Customer reviews
Merna Muawad
Middleware integration has become smoother and manages API lifecycles and scopes effectively
Reviewed on Feb 01, 2026
Review provided by PeerSpot
What is our primary use case?
My major use cases for WSO2 API Manager are mainly for system integration between multiple layers because we are working on the middleware layer between the systems.
What is most valuable?
WSO2 API Manager has everything that any API Manager product could have. This is the best thing to say about WSO2 API Manager, as it has everything I needed.
The Lifecycle Management feature helps me manage my APIs when I'm using it. Additionally, it has a scoping feature that not every API Manager product has. This is a feature that can be considered an add-on or something extra that WSO2 API Manager has, and other products might not have because it is not a mandatory feature.
What needs improvement?
Regarding WSO2 API Manager, I have no drawbacks or areas for improvement. However, regarding the Micro Integrator , I had some issues while developing complex services because it was mainly designed to be used for simple services, not complex ones. While using complex services, I encountered some issues. I communicated this with WSO2, and they released other products that solved everything related to my concern. These products were released before my concern was raised. When I explored them, they were pretty good, and I did not see the same issues I had experienced. WSO2 is enhancing themselves, and their products are fine. The previous concern was about the previous product, so it is resolved now since there are new products available.
I would like WSO2 to improve quality or response time in support, or both.
For how long have I used the solution?
I have been using WSO2 API Manager and the Micro Integrator for three years.
What do I think about the stability of the solution?
I do not face any issues regarding API security from OAuth 2 based authentication. It is secured and well-secured, and I have not faced any security-related issues.
The issues I have faced with WSO2 were more related to the environment, not the product itself. If you do not have a stable environment with enough resources and everything else in place, whatever product you are using will go down. What I faced was more related to the environment, not the product.
What do I think about the scalability of the solution?
For the cases I have experienced, WSO2 API Manager is easy to scale. I did not face any issues, though I have not worked on everything. In the cases I worked with, it was easy and I did not face any issues.
How are customer service and support?
I believe the technical support from WSO2 is better than other support. They are good in their support.
The support is an important thing because not every company or every middleware product company or integration product company has advantages in this point. If a company has an advantage in support, it would be exceptional. I believe the support is a significant strength for WSO2.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
I have dealt with TIBCO Mashery before, but it is now sold out to Boomi , and its name is now Cam. I explored it but did not work deeply using it. It is good, and I do not have any concerns. I also worked with Software AG API Manager product. I believe it is sold out now to IBM, though I am not certain if this information is correct. They were good, and I did not have critical comments when I explored them, but I did not work deeply with them.
Regarding TIBCO Mashery, there were a lot of concerns, but since it is sold out now, there is no need to mention the pros and cons because the support will end in October 2026. It was missing a lot of features. Regarding Software AG's API Manager product and Boomi , I believe the only difference is about the design and how to deal with it, but they are not missing main features.
How was the initial setup?
WSO2 API Manager is really easy to install and deploy. This is the main thing that anyone can install and use WSO2 API Manager. In other products, it is much more complex and needs experts. WSO2 API Manager was open source from the beginning, so the documentation was everywhere, and it was easy to install, deploy, and do everything else. For other products, they require expertise.
What about the implementation team?
We worked in all environments for WSO2 API Manager installations. On-premises, hybrid, and cloud. The installations in WSO2 were on-premises. For TIBCO Mashery, it was on-premises and cloud.
What was our ROI?
I believe WSO2 API Manager is able to save time or money for the client in terms of ROI. I believe this point is applicable for all the middleware or integration products as they are all saving a lot of time. I cannot give a specific rate, but there is definitely saving in time and efforts since you have a middleware layer using integration products. Since you can scale it and maintain your work, it is effective.
What other advice do I have?
The thing that I hoped WSO2 had in their integration products, not WSO2 API Manager, was AI agents, and now they have this. I believe at this stage, they have the things that the market is going through. I did not use the analytics capabilities on WSO2 API Manager. I only used it to publish APIs and to develop and publish APIs, but I did not use any analytics features.
I did not use the fine-grained access control feature. From their marketplace, I did not explore it before, so I did not explore it. My overall rating for this review is 8.
Mahonrri Nazir S.
Unified Lifecycle Management That Simplifies API Security
Reviewed on Jan 04, 2026
Review provided by G2
What do you like best about the product?
Its unified lifecycle management and how it simplifies API security and discovery.
What do you dislike about the product?
The steep learning curve and the complexity of the configuration files can be quite frustrating.
What problems is the product solving and how is that benefiting you?
It solves API sprawl and security chaos. It lets me focus on core dev while the gateway handles auth and discovery, speeding up our workflow.
Gagan v.
Effortless API Management Across Multiple Platforms
Reviewed on Dec 16, 2025
Review provided by G2
What do you like best about the product?
Best part is that I can manage my APIs on various and vast tpe of platform like AWS gateway, Azure.
What do you dislike about the product?
Sometime I faced problem on the developer portal, when I test my APIs so some time it gives me error regarding some technical issue.
What problems is the product solving and how is that benefiting you?
It is a great product to manage APIs, if you have a complex system of various APIs then you should definitely use the product.
shehan n.
WSO2 API Manager as an Enabler of Open Banking Ecosystems
Reviewed on Aug 14, 2025
Review provided by G2
What do you like best about the product?
Supports strong authentication methods, consent management, and fine-grained access control to meet regulations like PSD2. At the same time, its developer portal and API lifecycle tools make it easy to onboard third-party providers, publish APIs, and manage them at scale
What do you dislike about the product?
Advanced configuration and deployment options can have a steep learning curve, especially in complex Open Banking implementations.
What problems is the product solving and how is that benefiting you?
It provides built-in support for strong authentication, consent management, and fine-grained access control, which are critical for PSD2 and similar standards. This allows us to onboard third-party providers quickly, monitor API usage in real time, and ensure data privacy without building everything from scratch.
Harsha M.
Seamless API Management with WSO2 API Manager: Empowering Modern Business Integration
Reviewed on Aug 01, 2025
Review provided by G2
What do you like best about the product?
WSO2 API Manager is an open source product that offers state of the art API management capabilities. What I like best is its ability to manage the entire API lifecycle in a seamless and efficient manner. It supports everything from API creation and deployment to monitoring and governance within a unified platform. With the integration of new AI features, WSO2 API Manager enhances productivity by intelligently assisting with design, security, and performance optimization. This makes it more effective than many other platforms when it comes to creating, deploying, and managing APIs at scale.
What do you dislike about the product?
There are no major dislikes, as WSO2 API Manager is a powerful and reliable platform. However, the documentation across different releases could be improved to enhance user friendliness. Clearer guidance and more consistent examples would help users, especially those new to the platform, to navigate features and configurations more easily.
What problems is the product solving and how is that benefiting you?
As a consultant helping organisations manage diverse APIs, WSO2 API Manager provides a unified platform that acts as a central layer for controlling API access, enforcing security policies, and ensuring proper governance. It simplifies the complexity of managing APIs across different systems by offering centralized monitoring, analytics, and lifecycle management. This not only improves operational efficiency but also enhances visibility and control, allowing organisations to deliver secure and scalable digital services more effectively.