WSO2 API Manager has been significantly enhanced the product capabilities with industry standards. The latest release of WSO2 API Manager v4.5 has come up with API powered capabilities like- Create an API with design assistant, API chat to test the API, AI powered multi-model routing for different AI APIs definitely helps in optimal resource utilization. BYOG i.e. bring your own gateway support with WSO2 API manager is like a magic bullet to integrate existing gateways like AWS API Gateway or any custom one. We have tested out the feature and it work seamlessly.

I have also found the improvements in existing capabilities like role-based access control, improved logging and observability, auditing and API documentation. So now your API creator and publisher can see the key parameters missing while creating and publishing an API and that's a big move towards standardization of APIs.

GraphQL APIs creation has been simplified with the latest release.

The latest tutorials on their LMS portal (lms.wso2.com) is updated, so developers can quickly engage with the training and start using the features. Review collected by and hosted on G2.com.

Migration process can be improved. For API mocking capabilities are still lagging which is available in other platforms. Version 4.x is completely revamped, and I observed the backward compatibility is challenging. Devportal customization can be simplified. Review collected by and hosted on G2.com.

AI Guardrails for AI gateways - MCP hub looks cool - MCP Gateway Review collected by and hosted on G2.com.

Need Improvements in UX - customization of dashboard can be improved - still setup needs more time to configure Review collected by and hosted on G2.com.

I have been using WSO2's API Manager product for over 9 years now, and I have followed its evolution since version 2.0.0. I have used version 2.0.0, then 3.2.0, 4.1.0, and currently version 4.5.0.

The product is a real asset and accelerator for managing our API catalog. We rely on its capabilities to provide both external public and internal private service catalogs. Beyond its numerous technical capabilities, the product supports us in managing and governing our API assets in the broadest sense.

Installation and getting started in standard mode is very easy and facilitated by extensive documentation available on the product website.

The implementation could be more tricky if you have special uses cases.

I recommend this product with a rating of 9/10, given that it is an open-source product, there is always room for improvement and evolution. WSO2 is a powerful and renowned publisher, and their teams are always available and do not hesitate to propose product updates if a client need makes sense to them.

I also recommend this product for its reliability in critical production environments, with an availability rate of approximately 99.97% to date. Review collected by and hosted on G2.com.

I don't necessarily have any drawbacks to address regarding the product.

The only drawback I can find is the weakness of the documentation around version migrations. Review collected by and hosted on G2.com.

The latest advancements with AI-powered agents for API creation help reduce workload and minimize human errors, making the development process smoother and more efficient. This adds another layer of value on top of the core strengths we already rely on, and it complements the platform’s ease of use. From real-world customer use cases, I’ve observed WSO2 API Manager handling high traffic loads seamlessly and reliably, which demonstrates its enterprise-grade scalability and stability. Review collected by and hosted on G2.com.

While WSO2 API Manager is a strong platform, there are areas where improvements could make the developer experience smoother. For example, policy management can be time-consuming since adjustments often require multiple edits or manual steps, and having a more streamlined policy editing console would be very beneficial. Additionally, when working with SOAP services, the platform does not expose the WSDL endpoint externally and instead attempts to handle all services as REST APIs. This makes it challenging to directly access or integrate with the underlying SOAP definition. Addressing these types of usability gaps with incremental enhancements and clearer tooling would greatly improve overall efficiency. Review collected by and hosted on G2.com.

Lot of enhancements going on and introducing new and latest features in API space. Review collected by and hosted on G2.com.

With any major release there is some product architecture changes and also new multiple offerings in API and integration space is creating confusion and long term solution is not clear for small to medium organizations that are not comfortable with rapid changes in products. Review collected by and hosted on G2.com.

Open-Source and Cost-Effective:

It's one of the few full-featured, open-source API management solutions, which makes it budget-friendly compared to commercial alternatives.

Customizability and Extensibility:

WSO2 allows deep customization — you can tailor the API gateway, throttling policies, workflows, and even the user portals.

Built-In API Lifecycle Management:

It covers the full API lifecycle — from creation, testing, publishing, and deprecation — with good governance tools.

Rich Set of Features:

Includes advanced features like multi-tenancy, analytics, throttling, monetization, and integrated Identity Server for OAuth2, JWT, etc.

Good Integration Capabilities:

Easily integrates with other WSO2 products and external systems through connectors, REST APIs, and custom extensions.

Developer Portal:

The self-service API Developer Portal is well-designed and allows consumers to browse, test, and subscribe to APIs easily. Review collected by and hosted on G2.com.

Community Support is Limited:

Being open-source is a plus, but the community is not as large or responsive as those of better-known tools like Kong or Apigee. Enterprise support is available, but at a cost. Review collected by and hosted on G2.com.

I've been using WSO2 API Manager for a while now, and I can confidently say it's one of the best open-source API management solutions out there — especially if you're looking for something enterprise-grade yet customizable.

One of the biggest positives for me is the flexibility and extensibility it offers. Whether you're building APIs from scratch, managing existing services, or applying complex authentication and throttling policies, WSO2 lets you tweak things exactly the way you want. It integrates well with other systems (including identity providers, analytics platforms, and CI/CD tools), and the way it separates components like Publisher, Developer Portal, and Gateway gives you a lot of control over your architecture. Review collected by and hosted on G2.com.

One of the biggest challenges is the initial complexity like in setting it up.

Although the documentation is extensive, it’s not always clear. Review collected by and hosted on G2.com.

WSO2 APIM is ideal for enterprises needing control, scalability and deep customization Review collected by and hosted on G2.com.

Major version jumps may require manual migration steps. Review collected by and hosted on G2.com.

Best part is that I can manage my APIs on various and vast tpe of platform like AWS gateway, Azure. Review collected by and hosted on G2.com.

Sometime I faced problem on the developer portal, when I test my APIs so some time it gives me error regarding some technical issue. Review collected by and hosted on G2.com.

Its unified lifecycle management and how it simplifies API security and discovery. Review collected by and hosted on G2.com.

The steep learning curve and the complexity of the configuration files can be quite frustrating. Review collected by and hosted on G2.com.