Apiman vs Workato Developer API Portal

Apiman is open-source API management software for securing API access and handling discovery and governance across the API lifecycle. Its policy-based runtime governance supports multiple plans with different service levels for the same API. The management layer includes a REST API, Manager UI, and standalone Developer Portal, along with multi-tenancy, events, notifications, permissions, and approvals. Teams can create custom policies and components with Java plugins, which can be loaded at runtime without restarting. Gateways scale independently from the Manager and can keep running if the Manager goes down. Supported gateway platforms are Vert.x, WildFly, and Tomcat. Standard policies cover authorization, BASIC authentication, IP allowlisting and blocklisting, OAuth2/JWT through the Keycloak plugin, and HTTP security headers. Apiman is licensed under Apache License 2.0, with no features behind paywalls. It is primarily an HTTP gateway: WebSockets lack explicit testing or support, while raw TCP, raw UDP, and messaging protocols are unsupported. Version 3.x is community-supported; versions 2.x and 1.x are unsupported. Commercial support packages are also described as including 24/7 support and CVE patching and alerts.

Workato Developer API Portal is a hosted portal where administrators publish API documentation, manage client access, and control authentication. Clients can browse assigned API collections, discover others, request access, inspect endpoint methods and schemas, view example requests and responses, and test endpoints. They can create and manage API keys; administrators can optionally set allowed or blocked IP addresses for those keys. Authentication supports email magic links or Workato Identity, including an organization's identity provider. Administrators can configure branding and the portal URL, use a custom domain, assign collections, and apply optional rate limits or usage quotas. Once published, the portal stays live and cannot be taken offline. Workato's API management platform also supports API proxies and recipe-based endpoints, with access controls, request monitoring, and quotas. Pricing is described as on request. The listed Free plan costs nothing and includes 50K one-time credits, API management, and 10,000+ app and system integrations. Pro costs $100 a month; Enterprise pricing is custom and requires an inquiry.