# Apache APISIX vs Zuplo

**Leader by vioscaleAI score:** Zuplo

| Attribute | Apache APISIX | Zuplo |
|---|---|---|
| **vioscaleAI score** | 54.2 (53% (medium)) | 67.9 (70% (medium)) |
| activity.commits_last_30d | 67 | - |
| adoption.dependent_repos | 1 | - |
| adoption.github_stars | 17,220 | - |
| content.faq | `[{"answer":"A dynamic, high-performance gateway that routes and secures API traffic with built-in plugins for authentication, rate limiting, and observability. Runs anywhere from bare metal to Kubernetes with no vendor lock-in. It is indexed under API Gateways.","source":"https://apisix.apache.org","question":"What is Apache APISIX?","confidence":0.6},{"answer":"Apache APISIX is open source, so it can be self-hosted and used at no licence cost. It is released under the Apache-2.0 licence. Pricing changes often, so verify at source before relying on it.","source":"https://apisix.apache.org","question":"Is Apache APISIX free to use?","confidence":0.6},{"answer":"Apache APISIX supports Linux and a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://apisix.apache.org","question":"What platforms does Apache APISIX support?","confidence":0.6},{"answer":"Yes. Apache APISIX can be deployed cloud / SaaS and self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://apisix.apache.org","question":"Can Apache APISIX be self-hosted?","confidence":0.6},{"answer":"We have confirmed 20 integrations for Apache APISIX, including OpenAI, Anthropic, AWS Bedrock, DeepSeek, Ollama, gRPC, Open Policy Agent and Spring Boot, plus 12 more. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://apisix.apache.org","question":"What does Apache APISIX integrate with?","confidence":0.6},{"answer":"Yes. Apache APISIX is published under the Apache-2.0 licence, a permissive licence that generally allows commercial use and modification. Licence terms can change between releases, so verify against the repository for the version you intend to use.","source":"https://github.com/apache/apisix","question":"Is Apache APISIX open source?","confidence":0.95}]` | `[{"answer":"An API gateway and management platform providing developer authentication, API key management, and consumer access control capabilities through a developer-facing API and portal. It is indexed under API Gateways.","source":"https://zuplo.com","question":"What is Zuplo?","confidence":0.6},{"answer":"Zuplo offers a free tier, so you can start without paying. Paid plans start at $25 per month. Pricing changes often, so verify at source before relying on it.","source":"https://zuplo.com","question":"Is Zuplo free?","confidence":0.6},{"answer":"Zuplo supports the web and a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://zuplo.com","question":"What platforms does Zuplo support?","confidence":0.6},{"answer":"We have only confirmed a cloud / SaaS deployment for Zuplo, so it appears to be vendor-hosted. If a self-hosted option exists we have not found it documented publicly.","source":"https://zuplo.com","question":"Can Zuplo be self-hosted?","confidence":0.6},{"answer":"We have confirmed 7 integrations for Zuplo, including Claude Code, Cursor, GitHub Copilot, Codex, Windsurf, ChatGPT and Stripe. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://zuplo.com","question":"What does Zuplo integrate with?","confidence":0.6},{"answer":"We have independently confirmed SOC 2 for Zuplo. Certifications we do not list are ones we have not been able to verify from public sources, which is not the same as Zuplo not holding them. Always confirm compliance directly before you rely on it.","source":"https://zuplo.com/docs/articles/security","question":"What security certifications does Zuplo have?","confidence":0.7}]` |
| deployment.options | `{"on_prem":true,"self_hosted":true}` | `{"cloud":true}` |
| description.long | Open-source software that manages and routes traffic to APIs and AI services. Designed for flexible deployment on your own infrastructure with extensive customization through plugins. | An API gateway and management platform providing developer authentication, API key management, and consumer access control capabilities through a developer-facing API and portal. |
| features.capabilities | `{"mtls":true,"hosting":"both","k8s_native":true,"oauth_oidc":true,"open_source":true,"grpc_support":true,"monetization":true,"observability":true,"pricing_model":"open-source-self-host","rate_limiting":true,"graphql_gateway":false,"deployment_model":"self-hosted","developer_portal":true,"plugin_ecosystem":"extensive","routing_strategy":"custom","streaming_support":true,"automatic_failover":true,"budget_spend_controls":true,"guardrails_moderation":"built-in","openai_compatible_api":true,"request_transformation":true}` | `{"mtls":true,"hosting":"cloud","oauth_oidc":true,"monetization":true,"observability":true,"rate_limiting":true,"graphql_gateway":true,"developer_portal":true,"plugin_ecosystem":"limited","request_transformation":true}` |
| integrations.count | 11 | 7 |
| integrations.list | `[{"name":"OpenAI"},{"name":"Anthropic"},{"name":"AWS Bedrock"},{"name":"DeepSeek"},{"name":"Ollama"},{"name":"gRPC"},{"name":"gRPC-Web"},{"name":"Open Policy Agent"},{"name":"Spring Boot"},{"name":"OAuth2"},{"name":"OpenID Connect"},{"name":"Keycloak"},{"name":"Istio"},{"name":"Kuma"},{"name":"AWS Lambda"},{"name":"Azure Serverless Function"},{"name":"Apache OpenWhisk"},{"name":"Vault"},{"name":"Dubbo"},{"name":"MQTT"},{"name":"etcd"},{"name":"OpenTelemetry","category":"observability"},{"name":"ClickHouse","category":"analytics"},{"name":"Google Cloud","category":"cloud"},{"name":"Kubernetes","category":"infrastructure"},{"name":"Azure Functions","native":true,"category":"cloud","direction":"bidirectional"},{"name":"Prometheus","native":true,"category":"monitoring","direction":"outbound"},{"name":"HashiCorp Vault","native":true,"category":"security","direction":"outbound"}]` | `[{"name":"Claude Code"},{"name":"Cursor"},{"name":"GitHub Copilot"},{"name":"Codex"},{"name":"Windsurf"},{"name":"ChatGPT"},{"name":"Stripe"},{"name":"Amberflo","native":false,"category":"billing","direction":"outbound"},{"name":"Moesif","native":false,"category":"analytics","direction":"bidirectional"}]` |
| language.primary | Lua | - |
| license.spdx | Apache-2.0 | - |
| platform.support | `{"cli":true,"web":true,"linux":true}` | `{"cli":true,"web":true}` |
| pricing | `{"type":"open_source","sourceUrl":"https://apisix.apache.org","retrievedAt":"2026-10-14T22:32:08.030Z"}` | `{"type":"hybrid","plans":[{"free":true,"name":"Starter","summary":"Free forever for ≤100K requests/month, no credit card required","features":["100K requests/month","1 day of analytics, live logs & traces","Up to 2 developer seats","GitOps with GitHub","MCP Gateway","AI Gateway","Developer Portal"],"minSeats":1,"commitment":"monthly","components":[{"kind":"fixed","amount":0,"period":"month","currency":"USD"}],"description":"Individuals evaluating Zuplo or shipping a side project","contactSales":false,"includedLimits":{"requests":"100K/month","analytics_retention":"1 day"}},{"free":false,"name":"Builder","summary":"$25/month + $100 per 100K requests over included amount","features":["Custom domains","10 custom environments","1000 API consumers & keys","7 days analytics retention","1 day log & trace history","2 developer seats included","MCP Gateway","AI Gateway","Developer Portal","GitHub integration"],"minSeats":1,"commitment":"monthly","components":[{"kind":"fixed","amount":25,"period":"month","currency":"USD"},{"per":{"qty":100000,"unit":"requests"},"kind":"metered","amount":100,"currency":"USD"}],"description":"Solo entrepreneurs & hobbyists going live","contactSales":false,"includedLimits":{"environments":"10","custom_domains":"2","consumers_and_api_keys":"1000"}},{"free":false,"name":"Enterprise","summary":"From $1,000/month annual contract with SLA guarantee and full enterprise features","features":["Custom volume discounts available","SSO + RBAC","Audit logs","99.5% SLA baseline (up to 99.999%)","Unlimited custom domains","Unlimited developer seats","GitOps with GitHub, BitBucket, GitLab, Azure DevOps","30 day analytics retention (custom available)","Unlimited log & trace history","MCP Gateway (unlimited MCP users/servers)","AI Gateway (custom teams)","Developer Portal"],"commitment":"annual","components":[{"kind":"fixed","amount":1000,"period":"month","currency":"USD"}],"description":"Teams, scaling APIs & mission-critical workloads","contactSales":true,"includedLimits":{"environments":"None","custom_domains":"None"}}],"summary":"Free tier for ≤100K requests/month. Builder at $25/month with metered usage. Enterprise from $1,000/month with custom pricing available.","currency":"USD","freeTier":true,"sourceUrl":"https://zuplo.com","retrievedAt":"2026-08-03T12:06:13.330Z","startingPrice":{"amount":25,"period":"month","currency":"USD"},"billingPeriods":["month"]}` |
| pricing.free_tier | yes | yes |
| pricing.model | open_source | freemium |
| pricing.price_level | free | low |
| pricing.transparent | yes | no |
| release.cadence_days | 61 | - |
| release.history | `[{"url":"https://github.com/apache/apisix/releases/tag/3.19.0","date":"2026-09-28T05:13:59Z","type":"stable","version":"3.19.0"},{"url":"https://github.com/apache/apisix/releases/tag/3.18.0","date":"2026-08-20T07:57:26Z","type":"stable","version":"3.18.0"},{"url":"https://github.com/apache/apisix/releases/tag/3.17.0","date":"2026-06-16T07:22:13Z","type":"stable","version":"3.17.0"},{"url":"https://github.com/apache/apisix/releases/tag/3.16.0","date":"2026-04-08T01:36:55Z","type":"stable","version":"3.16.0"},{"url":"https://github.com/apache/apisix/releases/tag/3.15.0","date":"2026-02-05T13:55:04Z","type":"stable","version":"3.15.0"},{"url":"https://github.com/apache/apisix/releases/tag/3.14.1","date":"2025-10-16T07:54:57Z","type":"stable","version":"3.14.1"},{"url":"https://github.com/apache/apisix/releases/tag/3.14.0","date":"2025-10-10T05:53:01Z","type":"stable","version":"3.14.0"},{"url":"https://github.com/apache/apisix/releases/tag/3.13.0","date":"2025-06-27T07:28:29Z","type":"stable","version":"3.13.0"},{"url":"https://github.com/apache/apisix/releases/tag/3.12.0","date":"2025-04-01T07:27:27Z","type":"stable","version":"3.12.0"},{"url":"https://github.com/apache/apisix/releases/tag/3.11.0","date":"2024-10-17T03:20:22Z","type":"stable","version":"3.11.0"},{"url":"https://github.com/apache/apisix/releases/tag/3.10.0","date":"2024-08-14T06:16:05Z","type":"stable","version":"3.10.0"},{"url":"https://github.com/apache/apisix/releases/tag/3.9.1","date":"2024-04-24T07:56:23Z","type":"stable","version":"3.9.1"},{"url":"https://github.com/apache/apisix/releases/tag/3.8.1","date":"2024-04-29T03:06:26Z","type":"stable","version":"3.8.1"},{"url":"https://github.com/apache/apisix/releases/tag/3.9.0","date":"2024-03-25T10:09:53Z","type":"stable","version":"3.9.0"},{"url":"https://github.com/apache/apisix/releases/tag/3.8.0","date":"2024-01-15T03:35:34Z","type":"stable","version":"3.8.0"},{"url":"https://github.com/apache/apisix/releases/tag/3.7.0","date":"2023-11-21T00:57:26Z","type":"stable","version":"3.7.0"},{"url":"https://github.com/apache/apisix/releases/tag/3.6.0","date":"2023-10-04T06:40:49Z","type":"stable","version":"3.6.0"},{"url":"https://github.com/apache/apisix/releases/tag/3.5.0","date":"2023-09-01T15:55:01Z","type":"stable","version":"3.5.0"},{"url":"https://github.com/apache/apisix/releases/tag/3.2.2","date":"2023-07-22T16:32:15Z","type":"stable","version":"3.2.2"},{"url":"https://github.com/apache/apisix/releases/tag/3.4.1","date":"2023-07-20T09:42:19Z","type":"stable","version":"3.4.1"}]` | - |
| reliability.sla_pct | - | 99.99 |
| reliability.status_page | - | yes |
| security.certifications | - | `[{"name":"SOC 2 Type II","status":"active"}]` |
| security.disclosure_policy | yes | - |
| security.scorecard | 7.2 | - |
| security.soc2 | - | yes |
| security.trust_center | https://apisix.apache.org/blog/2023/03/02/security-policy-auditable/ | https://zuplo.com/docs/articles/security |
| security.vulnerabilities | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Fapache%2Fapisix&per_page=100","last_12m":0,"max_severity":null}` | - |

## Capabilities (API Gateways)

| Capability | Apache APISIX | Zuplo |
|---|:--:|:--:|
| **Deployment** |  |  |
| Hosting | Cloud + self-hosted | Cloud only |
| Kubernetes-native | ✓ | - |
| **Traffic** |  |  |
| Rate limiting | ✓ | ✓ |
| Request/response transformation | ✓ | ✓ |
| **Security** |  |  |
| OAuth2 / OIDC / JWT | ✓ | ✓ |
| Mutual TLS | ✓ | ✓ |
| **Protocols** |  |  |
| GraphQL gateway | ✗ | ✓ |
| gRPC support | ✓ | - |
| **Delivery** |  |  |
| Developer portal | ✓ | ✓ |
| Monetization | ✓ | ✓ |
| **Ecosystem** |  |  |
| Plugin ecosystem | Extensive | Limited |
| **Insight** |  |  |
| Observability | ✓ | ✓ |

*Source: vioscaleAI. Generated 2026-10-16T19:02:25.954Z. "-" = undocumented, not absent.*
