17 open-source API Management vendors
Open-source software for API Management that you can self-host, with auditable source code — regardless of the developer's headquarters.
- vendors scored
- 17
- European
- 3
- foreign-owned
- 1
- last checked
- 11 October 2026
Vendors, scored
Score per vendor: 0 = high exposure, 100 = sovereign
Sort
- Sovereignty score 94 out of 100FusioGermany · Self-hosted / open sourceOpen-source API management platform for building and managing REST APIs
- Sovereignty score 94 out of 100KrakenDSpain · Self-hosted / open sourceSpanish high-performance API gateway built in Go with declarative configuration
- Sovereignty score 92 out of 100STOAFrance · Self-hosted / open sourceFrench open-source (Apache 2.0) API gateway by CAB Ingénierie connecting legacy/SOAP APIs and AI agents via MCP, deployable on-premise for full EU sovereignty (DORA/NIS2/GDPR).
- Sovereignty score 77 out of 100BrunoIndia · Self-hosted / open sourceOpen-source, local-first API client (MIT) with no cloud component; stores collections as plain text files in your own Git repository.
- Sovereignty score 71 out of 100Apache APISIXUnited States · Self-hosted / open sourceOpen-source API gateway and management platform under the Apache Foundation
- Sovereignty score 71 out of 100ApimanUnited States · Self-hosted / open sourceOpen-source API management platform with policy-driven governance and security
- Sovereignty score 71 out of 100HasuraUnited States · Self-hosted / open sourceGraphQL and REST API layer over existing data sources from Hasura, Inc. (San Francisco, US). The GraphQL Engine core is open source (Apache 2.0).
- Sovereignty score 71 out of 100Ory OathkeeperUnited States · Self-hosted / open sourceOpen-source Identity & Access Proxy (Ory, US) for API authentication, authorization and policy-driven request mutation; self-hosted or via Ory Network with EU data residency.
- Sovereignty score 71 out of 100WSO2 API ManagerUnited States · Non-EU vendor · owner in SwedenOpen-source API management platform with gateway, developer portal and analytics
- Sovereignty score 69 out of 100Emissary-ingressUnited States · Self-hosted / open sourceCNCF Incubation project (community-governed, no single controlling company): Kubernetes-native API gateway on Envoy Proxy, originally by Ambassador Labs.
- Sovereignty score 69 out of 100MicrocksUnited States · Self-hosted / open sourceCNCF Incubating open-source platform (no single controlling company) for mocking and contract-testing APIs based on OpenAPI/AsyncAPI specifications.
- Sovereignty score 69 out of 100TykUnited Kingdom · Non-EU vendorBritish open-source API gateway and management platform with high scalability
- Sovereignty score 61 out of 100Gravitee.ioUnited States · Non-EU vendorGravitee is a US-headquartered (Denver, CO) open-source API and event management platform, originally founded in Lille, France in 2015. It offers an API gateway, developer portal, and agentic API management capabilities. Raised $125M+ total, with a $60M Series C in May 2025 led by Sixth Street Growth.
- Sovereignty score 61 out of 100Kong GatewayUnited States · Non-EU vendorOpen-source API gateway with high performance, available as cloud or self-hosted
- Sovereignty score 57 out of 100HoppscotchIndia · Non-EU vendorOpen-source, self-hostable API development environment; commercial SaaS arm based in Thrissur, Kerala (India).
- Sovereignty score 49 out of 100Gloo EdgeUnited States · Non-EU vendorEnvoy-based API gateway by Solo.io (Cambridge, US) for microservice routing, traffic management and API lifecycle.
- Sovereignty score 49 out of 100InsomniaUnited States · Non-EU vendorAPI testing client for REST/GraphQL/gRPC; open-source core, owned by Kong Inc. (San Francisco) since 2019.
Assess your own stack in the assessment
Assess your stack →