Sold by
WSO2 API Management
WSO2 API Manager is an industry-leading full lifecycle API management platform for building, integrating, securing, and exposing an enterprise's digital services as managed APIs in cloud, on-premises, and hybrid architectures. Fast-track your API strategy with all the capabilities needed by API designers, product managers, operations, and consumers.
Reviews (159)
raju m.
AI-Driven API Management That Delivers
Reviewed on Oct 20, 2026
Review provided by G2
What do you like best about the product?
An API management platform with an AI-driven focus.
What do you dislike about the product?
Too many releases with no backward compatibility support
What problems is the product solving and how is that benefiting you?
Life cycle management of APIs and controlled access
Tebalo T.
Flexible, Secure API Management with Seamless Enterprise Integrations
Reviewed on Oct 16, 2026
Review provided by G2
What do you like best about the product?
What I like best about WSO2 API Platform is its flexibility, strong integration capabilities, and enterprise-grade security. The platform provides a user-friendly API Publisher and Developer Portal, making API lifecycle management straightforward. Performance has been reliable even under high transaction volumes, and the extensive support for standards such as OAuth2, OpenID Connect, SCIM, and REST enables seamless integration across our ecosystem. The platform is highly customizable, offers excellent value compared to competing solutions, and continues to evolve with modern API management and AI-driven capabilities.
What do you dislike about the product?
While WSO2 API Platform is highly flexible and feature-rich, the initial setup and configuration can be complex, especially for teams new to the product. Some administrative and troubleshooting tasks have a steep learning curve and may require a deeper understanding of the platform's architecture. Upgrades and migrations between major versions also require careful planning and testing. Although the user interface has improved over time, certain configuration areas could be more intuitive and streamlined for administrators.
What problems is the product solving and how is that benefiting you?
Prior to WSO2, many of our APIs were exposed individually, making it difficult to apply consistent security, monitoring, throttling, and governance standards across the estate. WSO2 API Platform enabled us to centralize API management through a single gateway, standardize security policies, gain visibility into API usage, and simplify onboarding for internal and external consumers. This has improved operational control, reduced risk, and made it easier to scale and manage our growing API ecosystem while maintaining a consistent developer experience.
Vipin G.
Comprehensive Open-Source API Lifecycle Management
Reviewed on Oct 15, 2026
Review provided by G2
What do you like best about the product?
What I value most about WSO2 API Manager is its comprehensive, full-lifecycle management capabilities combined with its open-source flexibility. The platform provides an excellent Developer Portal (API Store) out of the box, making it incredibly easy for internal and external developers to discover, test, and subscribe to APIs via self-service. Additionally, the traffic management, rate-limiting, and robust security policies are native and highly reliable. It handles complex, high-volume traffic efficiently without dropping performance.
What do you dislike about the product?
The learning curve is steep, particularly when it comes to deployment configuration and troubleshooting. The documentation has improved over the years, but it can still be difficult to find straightforward answers for edge-case deployment errors or custom mediator developments. Upgrading between major versions can also turn into a demanding, labor-intensive migration project.
What problems is the product solving and how is that benefiting you?
WSO2 API Manager acts as our single source of truth for API security and monetization. Beneficially, it has dramatically cut down our time-to-market for new digital products, reduced duplicate engineering efforts, and given our security teams peace of mind through unified OAuth2 enforcement across all endpoints.
Vidura N.
Extensible, Feature-Rich Platform with Excellent Support
Reviewed on May 22, 2026
Review provided by G2
What do you like best about the product?
* Extensibility - ability to plug in custom mediation logic
* Excellent product support
* Feature full
* Excellent product support
* Feature full
What do you dislike about the product?
* Configuration and troubleshooting can be complex compared to others. However excellent product support resolves this
What problems is the product solving and how is that benefiting you?
* API Management
* API lifecycle management
* Authorization of APIs and API resources
* Throttling
* API lifecycle management
* Authorization of APIs and API resources
* Throttling
Shehzad S.
Flexible, Extensible Platform Built for Large Enterprises
Reviewed on May 22, 2026
Review provided by G2
What do you like best about the product?
The flexibility and extensibility of this platform is a strong bonus, specially for large Enterprises who cannot use cookie cutter implementations
What do you dislike about the product?
Product innovations specially in the realm of AI. But most other products are also trying to grapple with that challenge.
What problems is the product solving and how is that benefiting you?
High transaction volumes and extensibility for our main requirements, which are satisfied by WSO2
Octavio d.
Centralized API Management with Impeccable Security
Reviewed on May 15, 2026
Review provided by G2
What do you like best about the product?
I like how intuitive the WSO2 API Platform is and the ease of making changes. I also appreciate all the options it offers for security, design, management, optimization, and versatility. I find the applications part especially useful, as it allows me to limit access to API consumers by project and by method. Additionally, I found the initial setup very easy, and I find it very useful and effective to centralize the most important configurations in one file. The documentation is clear, which makes it easy to resolve any doubts.
What do you dislike about the product?
The costs and the images, lately the costs have increased significantly, making it no longer as profitable. On the other hand, the limitation on image downloads that they are going to implement further limits its profitability.
What problems is the product solving and how is that benefiting you?
I use WSO2 API Platform to have my APIs centralized, with security, certificate management, version control, and ease of changing endpoints, which allows for better management of business flows.
Consulting
Powerful Integration with a Steep Learning Curve
Reviewed on May 13, 2026
Review provided by G2
What do you like best about the product?
I use WSO2 API Platform to design, publish, secure, manage, and monitor APIs across multiple applications and services. I appreciate how it helps with API governance, authentication, traffic management, and integration between internal systems and external customers. The platform has robust integration capabilities, making it suitable for complex enterprise environments and scalable API management needs. These capabilities make it easier to connect different applications, legacy systems, and third-party services through standardized APIs, streamlining data exchange, reducing development efforts, and improving interoperability across systems.
What do you dislike about the product?
There's a steep learning curve, especially for new users, and the setup and configuration process can be quite complex. The installation, configuration, and environment setup require careful planning and technical expertise, especially for enterprise-scale deployments. It would help to have simplified configuration management, more beginner-friendly documentation, improved troubleshooting guides, and clearer error messages.
What problems is the product solving and how is that benefiting you?
I use WSO2 API Platform to design, publish, secure, manage, and monitor APIs across applications, handling API governance, authentication, traffic management, and integration with customers. It solves secure API exposure, centralized API governance, and seamless integration between systems.
Computer Software
WSO2 APIM enables control without vendor lock-in, making it exceptional for digital businesses.
Reviewed on Mar 19, 2026
Review provided by G2
What do you like best about the product?
WSO2 APIM is ideal for enterprises needing control, scalability and deep customization
What do you dislike about the product?
Major version jumps may require manual migration steps.
What problems is the product solving and how is that benefiting you?
Centrally manage API lifecycles (design → deprecation) across microservices
Merna Muawad
Middleware integration has become smoother and manages API lifecycles and scopes effectively
Reviewed on Feb 01, 2026
Review provided by PeerSpot
What is our primary use case?
My major use cases for WSO2 API Manager are mainly for system integration between multiple layers because we are working on the middleware layer between the systems.
What is most valuable?
WSO2 API Manager has everything that any API Manager product could have. This is the best thing to say about WSO2 API Manager, as it has everything I needed.
The Lifecycle Management feature helps me manage my APIs when I'm using it. Additionally, it has a scoping feature that not every API Manager product has. This is a feature that can be considered an add-on or something extra that WSO2 API Manager has, and other products might not have because it is not a mandatory feature.
What needs improvement?
Regarding WSO2 API Manager, I have no drawbacks or areas for improvement. However, regarding the Micro Integrator, I had some issues while developing complex services because it was mainly designed to be used for simple services, not complex ones. While using complex services, I encountered some issues. I communicated this with WSO2, and they released other products that solved everything related to my concern. These products were released before my concern was raised. When I explored them, they were pretty good, and I did not see the same issues I had experienced. WSO2 is enhancing themselves, and their products are fine. The previous concern was about the previous product, so it is resolved now since there are new products available.
I would like WSO2 to improve quality or response time in support, or both.
For how long have I used the solution?
I have been using WSO2 API Manager and the Micro Integrator for three years.
What do I think about the stability of the solution?
I do not face any issues regarding API security from OAuth 2 based authentication. It is secured and well-secured, and I have not faced any security-related issues.
The issues I have faced with WSO2 were more related to the environment, not the product itself. If you do not have a stable environment with enough resources and everything else in place, whatever product you are using will go down. What I faced was more related to the environment, not the product.
What do I think about the scalability of the solution?
For the cases I have experienced, WSO2 API Manager is easy to scale. I did not face any issues, though I have not worked on everything. In the cases I worked with, it was easy and I did not face any issues.
How are customer service and support?
I believe the technical support from WSO2 is better than other support. They are good in their support.
The support is an important thing because not every company or every middleware product company or integration product company has advantages in this point. If a company has an advantage in support, it would be exceptional. I believe the support is a significant strength for WSO2.
Which solution did I use previously and why did I switch?
I have dealt with TIBCO Mashery before, but it is now sold out to Boomi, and its name is now Cam. I explored it but did not work deeply using it. It is good, and I do not have any concerns. I also worked with Software AG API Manager product. I believe it is sold out now to IBM, though I am not certain if this information is correct. They were good, and I did not have critical comments when I explored them, but I did not work deeply with them.
Regarding TIBCO Mashery, there were a lot of concerns, but since it is sold out now, there is no need to mention the pros and cons because the support will end in October 2026. It was missing a lot of features. Regarding Software AG's API Manager product and Boomi, I believe the only difference is about the design and how to deal with it, but they are not missing main features.
How was the initial setup?
WSO2 API Manager is really easy to install and deploy. This is the main thing that anyone can install and use WSO2 API Manager. In other products, it is much more complex and needs experts. WSO2 API Manager was open source from the beginning, so the documentation was everywhere, and it was easy to install, deploy, and do everything else. For other products, they require expertise.
What about the implementation team?
We worked in all environments for WSO2 API Manager installations. On-premises, hybrid, and cloud. The installations in WSO2 were on-premises. For TIBCO Mashery, it was on-premises and cloud.
What was our ROI?
I believe WSO2 API Manager is able to save time or money for the client in terms of ROI. I believe this point is applicable for all the middleware or integration products as they are all saving a lot of time. I cannot give a specific rate, but there is definitely saving in time and efforts since you have a middleware layer using integration products. Since you can scale it and maintain your work, it is effective.
What other advice do I have?
The thing that I hoped WSO2 had in their integration products, not WSO2 API Manager, was AI agents, and now they have this. I believe at this stage, they have the things that the market is going through. I did not use the analytics capabilities on WSO2 API Manager. I only used it to publish APIs and to develop and publish APIs, but I did not use any analytics features.
I did not use the fine-grained access control feature. From their marketplace, I did not explore it before, so I did not explore it. My overall rating for this review is 8.
Mahonrri Nazir S.
Unified Lifecycle Management That Simplifies API Security
Reviewed on Jan 04, 2026
Review provided by G2
What do you like best about the product?
Its unified lifecycle management and how it simplifies API security and discovery.
What do you dislike about the product?
The steep learning curve and the complexity of the configuration files can be quite frustrating.
What problems is the product solving and how is that benefiting you?
It solves API sprawl and security chaos. It lets me focus on core dev while the gateway handles auth and discovery, speeding up our workflow.