Kong Gateway vs Layer7 API Management

Kong Gateway has no write-up on Specifiction yet; its figures are above.

Layer7 API Management is a platform for publishing, documenting, governing, and operating APIs through an API portal. Publishers can manage an API's lifecycle, while consumers onboard, browse available APIs, receive an API key and shared secret, and view consumption metrics. Teams can define policies such as approved authentication methods and required threat protection. API Products group collections of APIs with usage-limitation tiers, centralized documentation, and interactive testing. Portal actions can also be automated through the Portal API. Security controls include single sign-on, multifactor authentication with biometrics, and fine-grained authorization. Layer7 lists OWASP API Security Top 10 defense, Common Criteria Certification, FIPS 140-2 compliance, and STIG hardening. Deployment can be on-premises, SaaS, or hybrid, using hardware, software, virtual, or container forms. Supported standards and transports include REST, SOAP, GraphQL, OAuth 2.0, LDAP, SAML, MQTT, RabbitMQ, Kafka, JMS, WebSockets, HTTP(S), and FTP(S). Pricing is on request; the SaaS plan includes one production environment, with extra instances or environments costing extra.