Layer7 API Security vs. OCI API Management

Well suited for publishing internal services with very high security, protecting against attacks, and managing on-demand load. Also good for transform messages and SQL to Rest services. Not appropriate for business logic implementation.

Incentivized

Oracle API Manager is well suited in a business or company that make use of Apis to facilitate access of backend services and data sources by the staff or customers or both. It is also imported in situations where all actions in a system need to be attributed to specific users.

Incentivized

• SOAP to Rest / Rest to SOAP web services transformation.
• Secure authorization and authetication (JWT, OpenIP Connect, OAuth, SAML and more). WASP Features as injection protection.
• Easy rule writing without coding.

Incentivized

• Mature and Reliable. Last year, Oracle API Manager was quite buggy, and couldn't be used at production-level. Fortunately, almost all of the problems that it had previously are now patched.
• Offloads Most of the Workload of Developing APIs. While defining APIs, Oracle API Manager does a great job in providing suggestions and error checks in our logic.
• Supports SOAP and REST. Not only can you create APIs that can query for data, but you can also create API endpoints that can manipulate the data in your back-end databases.

• It would be nice to have an integration with services like Github for managing projects and versions.

Incentivized

• I would say it would be nice if it could handle non-Oracle type API's...such as in-house developed interfaces, etc.
• It would be nice if it at least could list non-Oracle type APIs so that this system became a repository for ALL of the application interfaces
• Maybe it has this and I missed it, the monitoring appears to be one API at a time, would be nice to see a page that has all of the monitored APIs with some basic monitored info perhaps. It does have alerts, audit trails, and integrates with Enterprise Manager (I did not see this integration though)

Incentivized

The Layer7 API Management is a great solution, but, sometimes the documentation is not clear or has lack of examples.

Incentivized

The support team is good and the response time is reasonable, but (there is always a but), when support inquiries are made by someone experienced, and the question is not trivial, it is boring and takes a long time to get the case escalated to the next level of support.

Incentivized

We evaluated 3 tools and decided on Layer7 API Management because it had the shortest implementation times and fastest learning curve, without losing power of customization and scalability.

Incentivized

Oracle API Manager is much easier to learn and understand then IBM Data Power Gateway and IBM API Connect. We selected Oracle API Manager in our company because to have a good intuitive interface with drag and drop features and because beginners and easily get up to speed to use this tool.

Incentivized

• Very fast implementation and is easy to learn & use.

Incentivized

• Overall, the client is pleased with the API Manager. They are rather new to it so the ROI has not really been realized yet
• They like the ability to monitor the API's utilization (this monitoring could maybe be used for the prior question on usage billing...they do not currently do this for their supported applications)
• They like the ability that the APIs can be secured. Just because it exists, doesn't mean it can be used just anywhere...

Incentivized