Azure API Management
Our winner at 4.5, beating Tyk on all five measures. A Microsoft-run service with a no-cost starter tier.
Tyk's open-source gateway costs nothing and adds little delay, but documentation gaps made it the slowest tool to get running.
Free software is tempting, especially for something as dull but important as an API gateway. Tyk gives its gateway away as open source: download it, run it on your own servers and pay nothing. We wanted to know what that free start is really like, so we put Tyk through the routine we use across our API management comparison.
Once running, it behaved reasonably: 18 of 30 gateway checks passed, 10 of 15 usage limits held, and the slowest requests gained only about 84 milliseconds. Getting there was the problem. It took 140 minutes before our first request worked, and the documentation passed just half of our quality checks.
Tyk scored 2.5 out of 5, sixth of seven. It suits technical teams who want a free gateway they control and don't mind reading code. If you want an admin dashboard or developer portal, those are paid extras with no published price.
Value is its best mark at 3.5, thanks to the free gateway. Developer experience is the worst at 0.5, because of the slow start and patchy docs.
Overall: 2.5 out of 5, our five scores averaged and rounded to the nearest half.
Five rivals set up faster than Tyk. Compare them before committing a weekend to configuration.
Whenever two programs talk to each other, for example a mobile app fetching your account balance from a bank's servers, they use an API. A gateway is software that stands in front of those APIs like a security desk: it checks who is asking, refuses anyone without permission, slows down anyone asking too often, and writes everything to a log.
Tyk is one such gateway. Its core, along with an analytics add-on called Pump, is open source under the MPL 2.0 licence, meaning anyone can download, run and inspect the code for free. What isn't free is the convenience layer: a dashboard for managing APIs and keys, a developer portal where outside developers sign up, a Kubernetes operator and syncing across data centres. Those need a paid plan.
You can run Tyk on your own servers, in any cloud, or use Tyk Cloud, where the company hosts the control panel while your gateways stay with you. That independence is the main difference from cloud-tied rivals such as Apigee. Tyk also has built-in GraphQL support through Universal Data Graph.
The typical path, for someone starting from scratch:
1. Install the gateway. Run the open-source gateway and its Redis database on your own server, or start a Tyk Cloud trial if you'd rather not manage machines.
2. Define an API. Tell Tyk where your real API lives and what rules to apply, either in configuration files or, with a licence, in the dashboard.
3. Add keys and limits. Create access keys and usage limits so each consumer gets the right allowance.
4. Publish and grow. With a paid plan, list APIs in the developer portal and add environments or data centres as traffic grows.
The most important thing to understand about Tyk is which side of the line each feature sits on.
The core traffic handling and analytics export, free under MPL 2.0 with community support.
A management screen for APIs, keys and analytics instead of editing files.
A website where API users discover and sign up for your APIs. Included in Core and Professional.
Manages Tyk from Kubernetes, now including the standard Kubernetes Gateway API.
Support for event and streaming APIs, in Core and Professional.
A GraphQL layer that combines several APIs into one, useful for GraphQL-first teams.
Tyk was on our bench for two weeks, October 4 to October 17, 2026. All seven gateways sat in front of the same three demo APIs, and for each we noted how long the official docs take to get us going, how many gateway tests pass, how well limits hold, how much delay creeps in and whether we could walk away cleanly. Our testing method page covers the details.
Set-up was the sticking point. Following only Tyk's documentation, our first successful request came after 140 minutes, joint slowest with Nylas. Half of our ten documentation checks failed and two of the five sample set-ups didn't run as printed, so we spent much of that time working around gaps.
Once running, the gateway was middle of the pack. It passed 18 of 30 checks, level with four rivals. Ten of our fifteen usage-limit rules worked straight away and five needed attention, so try each one before relying on it to guard your servers or split free from paying users.
Delay was a bright spot: about 84 milliseconds added to the slowest 5% of requests, which nobody using your app would notice. Switching away later would mean some effort: two of five export checks failed and two pieces would need rebuilding by hand.
| What we timed or counted | Tyk's figure | Why it matters |
|---|---|---|
| Minutes until the first request worked | 140 min | Expect a slow first day. |
| Gateway tests passed | 18/30 | Six in ten settings worked first time. |
| Documentation quality | Docs 5 of 10; samples 3 of 5 | Gaps you'll have to fill yourself. |
| Delay on the slowest 5% | ≈84 ms | Too small for users to notice. |
| Ease of moving away | Export 3 of 5; 2 rebuilds | Some rebuilding if you switch. |
Put simply, Tyk performs fine once tamed, but taming it takes more effort than almost any rival in the group.
Tested October 4, 2026 to October 17, 2026.
The gateway and Pump cost nothing to run on your own hardware, which is why value is its strongest score.
Around 84 ms on the slowest requests, among the lowest we measured.
Existing APIs keep serving traffic; only creating or changing APIs is blocked until you renew.
Over two hours to first light, and docs that failed half our checks. Hard going without gateway experience.
5 of our 15 rules didn't behave as written. Test every limit before trusting it.
Every paid plan is quoted by sales, so you can't budget for the dashboard or portal in advance.
The gateway and Pump are free. Everything else comes with one of three paid plans, all quoted by Tyk's sales team rather than listed publicly.
Core is usage-based, priced by the number of APIs you manage, with unlimited calls. Professional is "one price, unlimited access", priced by data planes, environments and control planes rather than traffic. Enterprise adds premium support and custom SLAs. Core and Professional both include the developer portal, the operator, Tyk Streams and Tyk's Enhanced success plan support.
You can try everything with a 14-day self-managed trial (the licence key arrives by email) or a 48-hour Tyk Cloud trial. Neither needs a card. We didn't find a refund policy.
Prices checked on November 13, 2026 on Tyk's pricing page; paid plans have no public prices.
Kong is the natural comparison, as it too starts from a free open-source gateway. It scored 3 out of 5 against Tyk's 2.5, set up faster and lists prices from $25 a month. Azure API Management topped the table on 4.5; it's a managed Microsoft service with a free starter tier and a Developer tier at $48.04 a month, but it ties you to Azure.
Our API gateway ranking lists all seven with their scores.
| Product | Cheapest start | Who it fits |
|---|---|---|
| Tyk | Free (open source); paid by quote | Technical teams who self-host |
| Kong | $25 a month | Kubernetes and hybrid set-ups |
| Azure API Management | Free tier; Developer $48.04 a month | Teams on Microsoft Azure |
| Apigee | About $365 a month | Large organisations on Google Cloud |
Tyk lists ISO 27001, SOC 2 and ISO 9001 certifications, GDPR readiness and FAPI 2.0 readiness. Because the gateway can run entirely on your own servers, your API traffic never has to pass through someone else's cloud, which matters to banks, health firms and other regulated businesses. We couldn't confirm its data-retention or AI-training policies.
The main risk is the licence, not security. If a paid licence lapses, existing APIs keep working but you can't create or change any until you renew. Tyk says API definitions can be exported to the free gateway as a fallback. The company is based in London, with offices in Atlanta and Singapore.
Export your API definitions regularly so you can fall back to the free gateway if a licence ever lapses.
Review sites are kind to Tyk. On Gartner Peer Insights it had 4.7 out of 5 from 92 reviews, and on G2 4.6 out of 5 from 40 reviews, both as we read them on November 3, 2026; we couldn't recheck them on November 13. Tyk's Trustpilot page has no reviews.
Reviewers praise reliability, uptime, fast support replies and a helpful community. We couldn't read the complaints on either site; commentary from rival vendors says many production features need the paid dashboard and that pricing is complex.
The praise for reliability fits our delay results, but not the idea that it's easy to set up. Reviewers who find it easy probably already know gateways well.
Four tools beat Tyk, one tied and one finished below.
Our winner at 4.5, beating Tyk on all five measures. A Microsoft-run service with a no-cost starter tier.
Second on 3 out of 5. Also open source at its core, with published prices.
3 out of 5 and much easier to start (110 minutes). Expensive, from $2,000 a month.
3 out of 5. A single API for email, calendars and contacts rather than a gateway.
Tied on 2.5, with an easier start but weaker value. Built for Google Cloud.
Only if you have technical staff who want a free, self-hosted gateway. Once running it passed 18 of 30 checks and added just 84 ms of delay, but a 140-minute start and docs that failed half our tests kept it at 2.5 out of 5, sixth of the seven.
Most small businesses will find it hard work, and the parts that make management easy are paid with no public price. Kong offers a similar open-source start with published prices, and Azure API Management scored far higher if you're on Microsoft's cloud.
Tyk suits technical teams wanting a free gateway they fully control; anyone wanting a quick, priced, easy product should look elsewhere.
Same three APIs for every gateway. The ranking sets their results and costs next to each other.
If you use Tyk, or work there, and think we got something wrong, email us. Tell us what you saw and attach screenshots if you have them. We'll take another look and update the review if it changes our findings.
Partly. The gateway and its Pump analytics add-on are open source under MPL 2.0, so you can run them on your own servers at no cost, with community support. The dashboard, developer portal, Kubernetes operator and multi-data-centre syncing need a paid plan.
Tyk doesn't publish prices. Core is priced by the number of APIs you manage, Professional by data planes, environments and control planes, and Enterprise is custom. You need a quote from Tyk's sales team; we checked this on November 13, 2026.
Yes. A 14-day self-managed trial includes every paid feature, and Tyk Cloud has a 48-hour trial. Neither needs a card.
Your existing APIs keep running, so users see no outage, but you can't create or change APIs until you renew. Tyk says you can export API definitions and run them on the free gateway.
In our test, yes. Following its documentation, our first working request took 140 minutes, joint slowest of the seven tools, and the docs passed 5 of our 10 checks. Teams with gateway experience will find it easier.
Our test covered two weeks, starting October 4, 2026 and ending October 17, 2026. Using only the official docs, we put three sample APIs behind Tyk, clocked how long set-up took, worked through our gateway and limit tests, recorded delay and attempted an export.