Skip to content
SPECIFICTION
Get listed

Layer7 API Management

broadcom.com

WebiOSAndroidAPISelf-hosted
Visit broadcom.com
Spec score 7.4 #21 of 41 in API Monetization Software

What it is

Layer7 API Management is a platform for publishing, documenting, governing, and operating APIs through an API portal. Publishers can manage an API's lifecycle, while consumers onboard, browse available APIs, receive an API key and shared secret, and view consumption metrics. Teams can define policies such as approved authentication methods and required threat protection. API Products group collections of APIs with usage-limitation tiers, centralized documentation, and interactive testing. Portal actions can also be automated through the Portal API. Security controls include single sign-on, multifactor authentication with biometrics, and fine-grained authorization. Layer7 lists OWASP API Security Top 10 defense, Common Criteria Certification, FIPS 140-2 compliance, and STIG hardening. Deployment can be on-premises, SaaS, or hybrid, using hardware, software, virtual, or container forms. Supported standards and transports include REST, SOAP, GraphQL, OAuth 2.0, LDAP, SAML, MQTT, RabbitMQ, Kafka, JMS, WebSockets, HTTP(S), and FTP(S). Pricing is on request; the SaaS plan includes one production environment, with extra instances or environments costing extra.

Spec sheet

Headquarters
Palo Alto, California, United StatesRead 28 Sep 2026 · broadcom.com
Access security
Layer7 supports single sign-on, multifactor authentication including biometrics, and fine-grained API authorization.Read 30 Sep 2026 · docs.broadcom.com
API governance
The API Portal supports organization-defined policies such as approved authentication methods and required threat protection.Read 30 Sep 2026 · broadcom.com
API portal
The portal lets publishers publish, document, and manage the full lifecycle of APIs.Read 30 Sep 2026 · docs.broadcom.com
API products
API Products package collections of APIs and usage-limitation tiers with centralized documentation and interactive testing.Read 30 Sep 2026 · broadcom.com
API-first automation
Actions available in the portal user interface can also be performed programmatically through the Portal API.Read 30 Sep 2026 · broadcom.com
Consumer onboarding
API consumers can onboard, view available APIs, obtain an API key and shared secret, and access API-consumption metrics.Read 30 Sep 2026 · docs.broadcom.com
Container limit
A single Docker Gateway instance may be configured with up to six cores and eight gigabytes of memory.Read 30 Sep 2026 · docs.broadcom.com
Deployment options
Deployment models include on-premises, SaaS, and hybrid, with hardware, software, virtual-environment, and container form factors.Read 30 Sep 2026 · docs.broadcom.com
Lifecycle tooling
Layer7 provides health-tracking metrics, support for popular API tools, CI/CD pipeline integration, and GraphQL management interfaces.Read 30 Sep 2026 · docs.broadcom.com
Protocol integrations
Supported standards and transports include REST, SOAP, GraphQL, OAuth 2.0, LDAP, SAML, MQTT, RabbitMQ, Kafka, JMS, WebSockets, HTTP(S), and FTP(S).Read 30 Sep 2026 · docs.broadcom.com
SaaS availability
The SaaS listing commits to 99.8% availability for a minor-default threshold and 98.5% for a major-default threshold.Read 30 Sep 2026 · docs.broadcom.com
SaaS backup
SaaS customer data is backed up daily, replicated within the same geographic location, and retained for seven days.Read 30 Sep 2026 · docs.broadcom.com
Security certifications
The product brief lists OWASP API Security Top 10 defense, Common Criteria Certification, FIPS 140-2 compliance, and STIG hardening.Read 30 Sep 2026 · docs.broadcom.com

Plans and prices

Layer7 API Management SaaS Priced on request Contact Broadcom one production environment included · additional portal instances cost extra · additional environments must be purchased Read 30 Sep 2026 · docs.broadcom.com

Every Layer7 API Management plan and price →

Strong points and limits

Strong points

  • API products include usage-limitation tiers
  • Portal actions have programmatic API access
  • Supports on-premises, SaaS, and hybrid deployment
  • Multifactor authentication and fine-grained authorization
  • Daily SaaS backups retain data seven days

Limits

  • Pricing is available only on request
  • Additional SaaS portal instances cost extra
  • Additional SaaS environments must be purchased
  • Docker Gateway is limited to six cores and eight gigabytes

Who it suits

Layer7 suits organizations managing APIs across governed portals and varied deployment models. It is relevant to teams needing consumer onboarding, security controls, lifecycle metrics, and protocol coverage.

Verdict

Layer7 covers API publishing, governance, security, lifecycle operations, and multiple deployment forms. SaaS availability, backups, and environment terms are specified, but pricing and expansion costs require contacting Broadcom.

Where Specifiction places it

Alternatives to Layer7 API ManagementAll alternatives →