# Gravitee vs Tyk

| Attribute | Gravitee | Tyk |
|---|---|---|
| **Vioscale score** | 52.6 (77% (high)) | 55.2 (75% (high)) |
| activity.commits_last_30d | - | 29 |
| adoption.dependent_repos | - | 35 |
| adoption.github_stars | - | 10,805 |
| deployment.options | `{"cloud":true,"hybrid":true,"self_hosted":true}` | `{"cloud":true,"hybrid":true,"self_hosted":true}` |
| description.long | Platform that centralizes governance, security, and cost management for APIs, event-driven systems, and AI agents across multiple infrastructure providers and deployment models. Provides multi-gateway federation, developer self-service, and integrated control for LLMs and autonomous agents. | An open-source, self-hosted or cloud-managed API gateway and management platform that provides centralized governance, rate limiting, authentication, PII protection, and observability for APIs and AI agent traffic across multiple protocols and deployment modes. |
| features.capabilities | `{"mtls":true,"hosting":"both","k8s_native":true,"oauth_oidc":true,"open_source":true,"grpc_support":true,"monetization":true,"soc2_type_ii":false,"observability":true,"pricing_model":"volume_tiered_saas","rate_limiting":true,"graphql_gateway":true,"deployment_model":"self-hosted","developer_portal":true,"plugin_ecosystem":"extensive","sso_portal_login":true,"streaming_support":true,"architecture_model":"managed_cloud_saas","automatic_failover":true,"multi_version_docs":true,"oauth_flow_support":true,"interactive_console":true,"budget_spend_controls":true,"guardrails_moderation":"built-in","self_service_api_keys":true,"request_transformation":true,"virtual_key_management":true,"analytics_usage_insights":true,"request_cost_observability":true,"bring_your_own_keys_byok_routing":false,"mit_or_apache_permissive_oss_license":true,"pii_redaction_and_data_masking_in_flight":true,"custom_rate_limiting_by_user_or_tenant_id":true,"streaming_token_support_server_sent_events":true,"universal_api_key_for_100_plus_llm_providers":false,"zero_data_retention_and_prompt_logging_opt_out":false,"auto_fallback_routing_on_rate_limit_or_downtime":false,"organization_wide_cost_tracking_and_chargebacks":true,"semantic_caching_for_repeat_queries_and_cost_savings":false}` | `{"mtls":false,"hosting":"both","k8s_native":true,"oauth_oidc":true,"open_source":true,"grpc_support":true,"monetization":false,"observability":true,"pricing_model":"free_open_source","rate_limiting":true,"graphql_gateway":true,"developer_portal":true,"plugin_ecosystem":"limited","architecture_model":"open_source_proxy","oauth_flow_support":true,"self_service_api_keys":true,"request_transformation":true,"analytics_usage_insights":true,"bring_your_own_keys_byok_routing":true,"pii_redaction_and_data_masking_in_flight":true,"organization_wide_cost_tracking_and_chargebacks":true}` |
| integrations.count | 21 | 5 |
| integrations.list | `[{"name":"Kafka"},{"name":"MQTT"},{"name":"Solace"},{"name":"RabbitMQ"},{"name":"Confluent"},{"name":"AWS API Gateway"},{"name":"Azure"},{"name":"IBM"},{"name":"Apigee"},{"name":"Auth0"},{"name":"Okta"},{"name":"AWS Cognito"},{"name":"OAuth2"},{"name":"SAML"},{"name":"mTLS"},{"name":"GraphQL"},{"name":"WebSocket"},{"name":"REST"},{"name":"SOAP"},{"name":"AWS"},{"name":"Webhook"},{"name":"gRPC"},{"name":"OAuth"},{"name":"OpenFGA"},{"name":"MCP"},{"name":"AuthZen"}]` | `[{"name":"OpenAPI"},{"name":"OpenTelemetry"},{"name":"GraphQL"},{"name":"Kubernetes"},{"name":"Docker"},{"name":"OpenAPI/Swagger"},{"name":"Kafka"},{"name":"MQTT"}]` |
| language.primary | - | Go |
| market.availability | `{"primaryMarkets":["GB","US","FR"],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"cli":true,"web":true}` | `{"cli":true,"web":true}` |
| pricing | `{"type":"subscription","plans":[{"free":false,"name":"Comet","summary":"$1,250/mo","features":["1 third-party federated broker","Developer portal","Failover and DR","Unlimited users","Unlimited APIs"],"commitment":"monthly","components":[{"kind":"fixed","amount":1250,"period":"month","currency":"USD"}],"description":"Event broker and Kafka-focused entry tier","contactSales":false,"includedLimits":{"apis":"unlimited","users":"unlimited","event_brokers":"1 third-party federated broker"}},{"free":false,"name":"Galaxy","summary":"$2,500/mo","features":["1 Production Gateway","Unlimited users","Unlimited APIs under management","Gold Support","Agent Catalog","Free onboarding"],"commitment":"monthly","components":[{"kind":"fixed","amount":2500,"period":"month","currency":"USD"}],"description":"Core API management for smaller enterprise use cases","contactSales":false,"includedLimits":{"apis":"unlimited","users":"unlimited","production_gateways":"1"}},{"free":false,"name":"Meteor","features":["2 third-party federated brokers","Gold support","Platinum support available"],"commitment":"monthly","description":"Mid-tier event broker support","contactSales":false,"includedLimits":{"event_brokers":"2 third-party federated brokers"}},{"free":false,"name":"Asteroid","features":["4 third-party federated brokers","Platinum support","Customer hosted control plane available"],"commitment":"monthly","description":"High-volume event broker tier","contactSales":false,"includedLimits":{"event_brokers":"4 third-party federated brokers"}},{"free":false,"name":"Universe","summary":"Custom pricing","features":["4+ Production Gateways","Unlimited Enterprise Functionality","All supported event brokers","Identity and Access Management","Technical Account Manager","24/7 support"],"commitment":"annual","description":"Enterprise tier with unlimited capabilities","contactSales":true,"includedLimits":{"apis":"unlimited","users":"unlimited","event_brokers":"all supported","production_gateways":"4+"}}],"addOns":[{"name":"Enterprise plugins"},{"name":"Enterprise Auth Package"},{"name":"MCP Resource Server"},{"name":"OpenFGA Permission Engine"},{"name":"AuthZen Policy Decision Point"},{"name":"Platinum support upgrade"}],"summary":"From $1,250/mo (event brokers) or $2,500/mo (API management). Flat pricing with unlimited users and APIs. Enterprise custom pricing.","currency":"USD","freeTier":false,"sourceUrl":"https://www.gravitee.io/pricing/","retrievedAt":"2026-08-21T10:58:42.518Z","startingPrice":{"amount":1250,"period":"month","currency":"USD"},"billingPeriods":["month"]}` | `{"type":"subscription","freeTier":true,"sourceUrl":"https://tyk.io","retrievedAt":"2026-08-25T21:40:16.907Z"}` |
| pricing.free_tier | no | yes |
| pricing.model | commercial | freemium |
| pricing.price_level | high | low |
| pricing.starting_price | `{"amount":1250,"currency":"USD"}` | - |
| pricing.transparent | yes | no |
| release.cadence_days | - | 10 |
| release.history | - | `[{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.14.0","date":"2026-07-07T17:34:16Z","type":"stable","version":"v5.14.0"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.15.0-alpha1","date":"2026-06-25T17:50:33Z","type":"prerelease","version":"v5.15.0-alpha1"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.12.0-alphafips5","date":"2026-02-12T18:45:26Z","type":"stable","version":"v5.12.0-alphafips5"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.11.1-rc1","date":"2026-02-11T22:36:06Z","type":"stable","version":"v5.11.1-rc1"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.11.1-alpha2","date":"2026-01-29T13:16:48Z","type":"stable","version":"v5.11.1-alpha2"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.12.0-alphafips4","date":"2026-01-16T13:34:17Z","type":"prerelease","version":"v5.12.0-alphafips4"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.12.0-alphafips3","date":"2026-01-16T12:20:35Z","type":"prerelease","version":"v5.12.0-alphafips3"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.12.0-alphafips2","date":"2026-01-16T11:56:50Z","type":"prerelease","version":"v5.12.0-alphafips2"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.12.0-alphafips1","date":"2026-01-16T11:08:49Z","type":"prerelease","version":"v5.12.0-alphafips1"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.11.0","date":"2026-01-15T11:43:23Z","type":"stable","version":"v5.11.0"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.8.8-rc1","date":"2025-11-28T16:32:34Z","type":"prerelease","version":"v5.8.8-rc1"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.8.7-alpha-performance-1","date":"2025-10-24T18:32:20Z","type":"prerelease","version":"v5.8.7-alpha-performance-1"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.10.0","date":"2026-01-15T11:42:12Z","type":"stable","version":"v5.10.0"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.9.0","date":"2025-08-07T14:37:50Z","type":"stable","version":"v5.9.0"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.9.0-alpha2","date":"2025-05-20T16:46:22Z","type":"prerelease","version":"v5.9.0-alpha2"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.8.1-alpha9","date":"2025-05-09T21:42:12Z","type":"prerelease","version":"v5.8.1-alpha9"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.8.1-alpha4","date":"2025-03-26T15:47:26Z","type":"prerelease","version":"v5.8.1-alpha4"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.8.1-rc2","date":"2025-03-19T13:37:59Z","type":"prerelease","version":"v5.8.1-rc2"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.8.1-alpha3","date":"2025-03-19T15:35:22Z","type":"prerelease","version":"v5.8.1-alpha3"},{"url":"https://github.com/TykTechnologies/tyk/releases/tag/v5.8.1-alpha2","date":"2025-03-19T13:53:14Z","type":"prerelease","version":"v5.8.1-alpha2"}]` |
| reliability.sla_pct | 99.9 | - |
| reliability.status_page | - | yes |
| security.gdpr | yes | yes |
| security.iso27001 | yes | yes |
| security.scorecard | - | 5.4 |
| security.soc2 | - | yes |
| security.vulnerabilities | - | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2FTykTechnologies%2Ftyk&per_page=100","last_12m":0,"max_severity":null}` |

## Capabilities (AI Gateway Security)

| Capability | Gravitee | Tyk |
|---|:--:|:--:|
| **Capabilities** |  |  |
| Architecture model | Managed cloud saas | Open source proxy |
| Universal API key for 100 plus LLM providers | ✗ | - |
| Auto fallback routing on rate limit or downtime | ✗ | - |
| Semantic caching for repeat queries and cost savings | ✗ | - |
| Organization wide cost tracking and chargebacks | ✓ | ✓ |
| Custom rate limiting by user or tenant id | ✓ | - |
| Pii redaction and data masking in flight | ✓ | ✓ |
| Streaming token support server sent events | ✓ | - |
| Bring your own keys byok routing | ✗ | ✓ |
| Zero data retention and prompt logging opt out | ✗ | - |
| SOC2 type ii | ✗ | - |
| Mit or apache permissive oss license | ✓ | - |
| Pricing model | Volume tiered saas | Free open source |

*Source: Vioscale. Generated 2026-09-01T16:57:12.740Z. "-" = undocumented, not absent.*