# Envoy Gateway vs Tyk

| Attribute | Envoy Gateway | Tyk |
|---|---|---|
| **vioscaleAI score** | 52.4 (53% (medium)) | 54.5 (75% (high)) |
| activity.commits_last_30d | 86 | 22 |
| adoption.dependent_repos | 0 | 35 |
| adoption.github_stars | 3,078 | 10,860 |
| content.faq | `[{"answer":"Open-source gateway providing traffic management, security controls, and observability for Kubernetes applications following the Gateway API specification. Can be deployed either standalone or as part of a Kubernetes cluster. It is indexed under API Gateways.","source":"https://gateway.envoyproxy.io","question":"What is Envoy Gateway?","confidence":0.6},{"answer":"Envoy Gateway is open source, so it can be self-hosted and used at no licence cost. It is released under the Apache-2.0 licence. Pricing changes often, so verify at source before relying on it.","source":"https://gateway.envoyproxy.io","question":"Is Envoy Gateway free to use?","confidence":0.6},{"answer":"Envoy Gateway supports a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://gateway.envoyproxy.io","question":"What platforms does Envoy Gateway support?","confidence":0.6},{"answer":"Yes. Envoy Gateway can be deployed self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://gateway.envoyproxy.io","question":"Can Envoy Gateway be self-hosted?","confidence":0.6},{"answer":"Yes. Envoy Gateway is published under the Apache-2.0 licence, a permissive licence that generally allows commercial use and modification. Licence terms can change between releases, so verify against the repository for the version you intend to use.","source":"https://github.com/envoyproxy/gateway","question":"Is Envoy Gateway open source?","confidence":0.95}]` | `[{"answer":"An open-source, self-hosted or cloud-managed API gateway and management platform that provides centralized governance, rate limiting, authentication, PII protection, and observability for APIs and AI agent traffic across multiple protocols and deployment modes. It is indexed under API Gateways.","source":"https://tyk.io","question":"What is Tyk?","confidence":0.6},{"answer":"Tyk offers a free tier, so you can start without paying. Pricing changes often, so verify at source before relying on it.","source":"https://tyk.io","question":"Is Tyk free?","confidence":0.6},{"answer":"Tyk supports the web and a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://tyk.io","question":"What platforms does Tyk support?","confidence":0.6},{"answer":"Yes. Tyk can be deployed cloud / SaaS, hybrid and self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://tyk.io","question":"Can Tyk be self-hosted?","confidence":0.6},{"answer":"We have confirmed 7 integrations for Tyk, including OpenAPI, OpenTelemetry, GraphQL, Kubernetes, Docker, Kafka and MQTT. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://tyk.io","question":"What does Tyk integrate with?","confidence":0.6},{"answer":"We have independently confirmed SOC 2, ISO 27001 and GDPR for Tyk. Certifications we do not list are ones we have not been able to verify from public sources, which is not the same as Tyk not holding them. Always confirm compliance directly before you rely on it.","source":"https://tyk.io","question":"What security certifications does Tyk have?","confidence":0.48}]` |
| deployment.options | `{"self_hosted":true}` | `{"cloud":true,"self_hosted":true}` |
| description.long | Provides a gateway for deploying Envoy Proxy in various environments—either standalone or on Kubernetes clusters—while extending Kubernetes Gateway API functionality. | An open-source, self-hosted or cloud-managed API gateway and management platform that provides centralized governance, rate limiting, authentication, PII protection, and observability for APIs and AI agent traffic across multiple protocols and deployment modes. |
| features.capabilities | `{"mtls":true,"hosting":"self","k8s_native":true,"oauth_oidc":true,"observability":true,"rate_limiting":true}` | `{"mtls":false,"hosting":"both","k8s_native":true,"oauth_oidc":true,"open_source":true,"grpc_support":true,"monetization":false,"observability":true,"pricing_model":"free_open_source","rate_limiting":true,"graphql_gateway":true,"developer_portal":true,"plugin_ecosystem":"limited","architecture_model":"open_source_proxy","oauth_flow_support":true,"self_service_api_keys":true,"request_transformation":true,"analytics_usage_insights":true,"bring_your_own_keys_byok_routing":true,"pii_redaction_and_data_masking_in_flight":true,"organization_wide_cost_tracking_and_chargebacks":true}` |
| integrations.count | 4 | 5 |
| integrations.list | `[{"name":"KEDA","native":true,"category":"autoscaling","direction":"bidirectional"},{"name":"k0rdent","native":true,"category":"infrastructure","direction":"bidirectional"},{"name":"OpenAI","native":true,"category":"ai","direction":"outbound"},{"name":"OIDC","native":true,"category":"authentication","direction":"outbound"}]` | `[{"name":"OpenAPI"},{"name":"OpenTelemetry"},{"name":"GraphQL"},{"name":"Kubernetes"},{"name":"Docker"},{"name":"OpenAPI/Swagger"},{"name":"Kafka"},{"name":"MQTT"}]` |
| language.primary | Go | Go |
| license.spdx | Apache-2.0 | - |
| market.availability | - | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"cli":true}` | `{"cli":true,"web":true,"linux":true}` |
| pricing | `{"type":"open_source","sourceUrl":"https://gateway.envoyproxy.io","retrievedAt":"2026-08-16T21:35:24.255Z"}` | `{"type":"hybrid","summary":"Open source (MPL v2.0) with commercial licensing available","freeTier":true,"sourceUrl":"https://tyk.io","retrievedAt":"2026-09-14T09:27:05.682Z"}` |
| pricing.free_tier | yes | yes |
| pricing.model | commercial | freemium |
| pricing.price_level | free | low |
| pricing.transparent | - | no |
| release.cadence_days | 8 | 11 |
| release.history | `[{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.9.2","date":"2026-09-28T17:14:42Z","type":"stable","version":"v1.9.2"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.8.5","date":"2026-09-28T17:28:21Z","type":"stable","version":"v1.8.5"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.9.1","date":"2026-08-28T11:34:36Z","type":"stable","version":"v1.9.1"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.8.4","date":"2026-08-28T11:03:57Z","type":"stable","version":"v1.8.4"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.9.0","date":"2026-08-15T12:31:24Z","type":"stable","version":"v1.9.0"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.9.0-rc.1","date":"2026-08-09T01:54:41Z","type":"prerelease","version":"v1.9.0-rc.1"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.8.3","date":"2026-07-22T18:59:16Z","type":"stable","version":"v1.8.3"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.7.5","date":"2026-07-08T15:36:49Z","type":"stable","version":"v1.7.5"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.8.2","date":"2026-07-01T07:14:42Z","type":"stable","version":"v1.8.2"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.8.1","date":"2026-06-05T07:32:33Z","type":"stable","version":"v1.8.1"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.7.4","date":"2026-06-05T07:55:38Z","type":"stable","version":"v1.7.4"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.8.0","date":"2026-05-13T15:45:46Z","type":"stable","version":"v1.8.0"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.7.3","date":"2026-05-09T23:13:52Z","type":"stable","version":"v1.7.3"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.8.0-rc.1","date":"2026-05-01T05:58:00Z","type":"prerelease","version":"v1.8.0-rc.1"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.6.7","date":"2026-04-27T20:16:54Z","type":"stable","version":"v1.6.7"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.7.2","date":"2026-04-17T01:33:18Z","type":"stable","version":"v1.7.2"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.6.6","date":"2026-04-16T14:08:03Z","type":"stable","version":"v1.6.6"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.6.5","date":"2026-03-13T02:12:48Z","type":"stable","version":"v1.6.5"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.7.1","date":"2026-03-12T17:15:44Z","type":"stable","version":"v1.7.1"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.6.4","date":"2026-02-11T18:48:14Z","type":"stable","version":"v1.6.4"}]` | `[{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.15.1","date":"2026-10-02T21:58:17Z","type":"stable","version":"v5.15.1"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.13.3","date":"2026-10-02T21:59:31Z","type":"stable","version":"v5.13.3"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.15.0","date":"2026-10-02T21:58:45Z","type":"stable","version":"v5.15.0"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.14.0","date":"2026-07-07T17:34:16Z","type":"stable","version":"v5.14.0"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.15.0-alpha1","date":"2026-06-25T17:50:33Z","type":"prerelease","version":"v5.15.0-alpha1"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.12.0-alphafips5","date":"2026-02-12T18:45:26Z","type":"stable","version":"v5.12.0-alphafips5"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.11.1-rc1","date":"2026-02-11T22:36:06Z","type":"stable","version":"v5.11.1-rc1"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.11.1-alpha2","date":"2026-01-29T13:16:48Z","type":"stable","version":"v5.11.1-alpha2"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.12.0-alphafips4","date":"2026-01-16T13:34:17Z","type":"prerelease","version":"v5.12.0-alphafips4"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.12.0-alphafips3","date":"2026-01-16T12:20:35Z","type":"prerelease","version":"v5.12.0-alphafips3"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.12.0-alphafips2","date":"2026-01-16T11:56:50Z","type":"prerelease","version":"v5.12.0-alphafips2"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.12.0-alphafips1","date":"2026-01-16T11:08:49Z","type":"prerelease","version":"v5.12.0-alphafips1"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.11.0","date":"2026-01-15T11:43:23Z","type":"stable","version":"v5.11.0"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.8.8-rc1","date":"2025-11-28T16:32:34Z","type":"prerelease","version":"v5.8.8-rc1"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.8.7-alpha-performance-1","date":"2025-10-24T18:32:20Z","type":"prerelease","version":"v5.8.7-alpha-performance-1"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.10.0","date":"2026-01-15T11:42:12Z","type":"stable","version":"v5.10.0"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.9.0","date":"2025-08-07T14:37:50Z","type":"stable","version":"v5.9.0"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.9.0-alpha2","date":"2025-05-20T16:46:22Z","type":"prerelease","version":"v5.9.0-alpha2"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.8.1-alpha9","date":"2025-05-09T21:42:12Z","type":"prerelease","version":"v5.8.1-alpha9"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.8.1-alpha4","date":"2025-03-26T15:47:26Z","type":"prerelease","version":"v5.8.1-alpha4"}]` |
| reliability.status_page | - | yes |
| security.certifications | - | `[{"name":"ISO 9001","status":"active"},{"name":"ISO 27001","status":"active"},{"name":"SOC 2","status":"active"}]` |
| security.gdpr | - | yes |
| security.iso27001 | - | yes |
| security.scorecard | 7.9 | 5 |
| security.soc2 | - | yes |
| security.trust_center | - | https://tyk.io/blog/why-compliance-matters-to-tyk/ |
| security.vulnerabilities | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Fenvoyproxy%2Fgateway%2Fexamples%2Fdynamic-module-test&per_page=100","last_12m":0,"max_severity":null}` | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2FTykTechnologies%2Ftyk&per_page=100","last_12m":0,"max_severity":null}` |

## Capabilities (API Gateways)

| Capability | Envoy Gateway | Tyk |
|---|:--:|:--:|
| **Deployment** |  |  |
| Hosting | Self-hosted only | Cloud + self-hosted |
| Kubernetes-native | ✓ | ✓ |
| **Traffic** |  |  |
| Rate limiting | ✓ | ✓ |
| Request/response transformation | - | ✓ |
| **Security** |  |  |
| OAuth2 / OIDC / JWT | ✓ | ✓ |
| Mutual TLS | ✓ | ✗ |
| **Protocols** |  |  |
| GraphQL gateway | - | ✓ |
| gRPC support | - | ✓ |
| **Delivery** |  |  |
| Developer portal | - | ✓ |
| Monetization | - | ✗ |
| **Ecosystem** |  |  |
| Plugin ecosystem | - | Limited |
| **Insight** |  |  |
| Observability | ✓ | ✓ |

*Source: vioscaleAI. Generated 2026-10-16T17:47:39.853Z. "-" = undocumented, not absent.*