Apiman vs Sensedia API Management

Apiman is open-source API management software for securing API access and handling discovery and governance across the API lifecycle. Its policy-based runtime governance supports multiple plans with different service levels for the same API. The management layer includes a REST API, Manager UI, and standalone Developer Portal, along with multi-tenancy, events, notifications, permissions, and approvals. Teams can create custom policies and components with Java plugins, which can be loaded at runtime without restarting. Gateways scale independently from the Manager and can keep running if the Manager goes down. Supported gateway platforms are Vert.x, WildFly, and Tomcat. Standard policies cover authorization, BASIC authentication, IP allowlisting and blocklisting, OAuth2/JWT through the Keycloak plugin, and HTTP security headers. Apiman is licensed under Apache License 2.0, with no features behind paywalls. It is primarily an HTTP gateway: WebSockets lack explicit testing or support, while raw TCP, raw UDP, and messaging protocols are unsupported. Version 3.x is community-supported; versions 2.x and 1.x are unsupported. Commercial support packages are also described as including 24/7 support and CVE patching and alerts.

Sensedia API Management centralizes control over APIs across multiple gateways and cloud environments. It provides governance, security, monitoring, analytics, lifecycle management, access policies, an API catalog, and API product management without requiring backend changes for payload, header, or logic adaptations. Smart API Governance applies design standards, identifies redundancy with AI, and enforces policies. Dashboards show developer engagement, real-time traffic, latency, traces, and errors. The Developer Portal combines API access, Swagger documentation, forums, onboarding workflows, usage plans, access management, and monetization. Listed protections include XML and JSON threat controls, JWT security, and defenses against XSS and SQL injection; Sensedia also states PCI-DSS compliance. Connections are listed for Sensedia, Apigee, AWS, Azure, and MuleSoft. Auto-scaling and resilience mechanisms are provided, with a maximum of 10,000 routes per gateway pool. Deployment is hybrid. A 30-day free trial costs nothing; ongoing pricing is on request.