Gravitee API Gateway

Spec sheet

Intended users

The product page describes the gateway as serving teams that need consistent runtime policies across APIs and lists enterprises among its customers.Read 29 Sep 2026 · gravitee.io

Deployment

The gateway can run self-managed, on AWS, Azure, GCP, on-premises, or on Kubernetes via the Gateway API.Read 29 Sep 2026 · gravitee.io

Support

The pricing page lists Gold Support for Planet and Galaxy, and 24/7 support plus a Technical Account Manager for Universe.Read 29 Sep 2026 · gravitee.io

Headquarters

Denver, Colorado, United StatesRead 28 Sep 2026 · gravitee.io

Founded

2015Read 28 Sep 2026 · gravitee.io

Broker integrations

Gravitee documentation lists Kafka, Confluent, Solace, HiveMQ, and MQTT brokers among its integrations.Read 29 Sep 2026 · documentation.gravitee.io

Gateway purpose

Gravitee API Gateway is a high-performance runtime that applies security, transformation, and traffic policies to API traffic.Read 29 Sep 2026 · gravitee.io

Identity

Authentication options include OAuth 2.0, JWT, mTLS, API Key, OIDC, and SAML, with federated identity through Gravitee Access Management or an external identity provider.Read 29 Sep 2026 · gravitee.io

Mediation

The gateway can mediate between protocols, including gRPC to Kafka, JSON to Protobuf, and REST to Kafka.Read 29 Sep 2026 · gravitee.io

Observability integrations

Runtime telemetry can be exported through OpenTelemetry to Datadog, Grafana, Splunk, and other tools, and Alert Engine can send email, Slack, or webhook alerts.Read 29 Sep 2026 · gravitee.io

Policy configuration

Policy Studio provides drag-and-drop configuration for OAuth 2.0, JWT, mTLS, API Key, OIDC, OAS validation, rate limiting, caching, threat protection, and message transformation.Read 29 Sep 2026 · gravitee.io

Pricing limits

The API Management pricing page describes flat pricing with unlimited API calls and users; the product page says pricing is per gateway with no per-call fees.Read 29 Sep 2026 · gravitee.io

Protocols

The gateway supports REST, GraphQL, gRPC, SOAP, WebSocket, Server-sent Events, and Webhook traffic.Read 29 Sep 2026 · gravitee.io

Security and compliance

Gravitee's Trust Centre lists GDPR, HIPAA, ISO/IEC 27001, PCI DSS v4.0.0, and SOC 2 Type 2 compliance information and provides access-request links for reports and documents.Read 29 Sep 2026 · trust.gravitee.io

Shared policies

Shared policy groups let teams reuse enforcement across thousands of APIs and plans.Read 29 Sep 2026 · gravitee.io

Traffic controls

The gateway supports OAS validation, threat protection, IP filtering, CORS, caching, retries, circuit breakers, and per-consumer rate limiting.Read 29 Sep 2026 · gravitee.io

Plans and prices

Every Gravitee API Gateway plan and price →

Where Specifiction places it

• API Gateway Software#3 of 298.5