Comparisec
Submit reviewFor vendors
← API SecurityGoogle Apigee API Security
StrongAdequateStrongStrong
4.4

Vendors › API Security › Google Apigee API Security

Google Apigee API Security logo

Google Apigee API Security

Google

Founded 2004·US·Public
4.4

Combined score

G2
4.4187
Gartner
4.4134

▪ Editorial verdict

Google Apigee API Security delivers security enforcement as an integrated capability within the broader Apigee API management platform, applying policy at the same gateway where traffic management and monetisation already happen rather than requiring a separate security-only console. For organisations already running or planning to adopt Apigee for API management, security is not an additional tool to learn, it is a capability layered onto infrastructure already managed for other purposes.

The honest positioning is that Apigee is fundamentally an API management platform first, with security as an integrated capability rather than the product's core purpose.

The verdict: right for organisations already running or planning to adopt Apigee wanting security integrated into the same gateway. Organisations wanting a dedicated, lightweight API security tool should evaluate Salt Security or Traceable AI instead.

Last reviewed: September 2026

G2

4.4187 reviews

Gartner

4.4134 reviews

PeerSpot

8.060 reviews
Gartner MQ: Not in MQ

API Security assessment

PROTECTIONStrong
API discovery & inventory
4 / 5
Attack detection
4 / 5
OPERATIONSAdequate
DevOps integration
4 / 5
Remediation guidance
3 / 5
ANALYTICSStrong
Traffic analytics
4 / 5
TRUST & ECOSYSTEMStrong
Standards & spec coverage
4 / 5

Strongest: API discovery & inventory

Watch out for: Remediation guidance

Strengths & limitations

Strengths

●Security policy enforcement integrated directly into the same API gateway that already handles traffic management, rate limiting, and monetisation
●Strong review volume reflecting broad enterprise adoption of the underlying Apigee platform across API management use cases
●Good fit for organisations already running Apigee for API management wanting security added without a new vendor

Watch out for

●Apigee is a full API management platform rather than a dedicated security-only tool, requiring broader platform adoption to access the security capability
●Dedicated API security testing depth for business logic vulnerabilities is less specialised than purpose-built security testing vendors
●Standalone value without existing or planned Apigee adoption for API management specifically is reduced

Best for

Organisations already running or planning to adopt Google Apigee for API management wanting security integrated into the same gateway.

Not suitable for: Organisations wanting a lightweight, dedicated API security point solution without adopting a full management platform.

Compliance coverage

●Essential Eight
●AU Privacy Act
●SOC 2
●HIPAA
●NIST CSF
●PCI-DSS
●GDPR
●ISO 27001
●CIS Benchmarks
○CMMC
○NIS2
○DORA

Switching intelligence

Switching from

Common migration paths based on review data

  • Standalone API security without gateway integration

Also considering

Vendors typically shortlisted alongside

Also in our database

Google also appears in:

← Back to API SecurityCompare with other API Security vendors ➲

Quick facts

Pricing modelPer API call volume, annual
Pricing rangeQuote-based, enterprise
Free trialYes - 30 days
Min seatsNo minimum
Deployment time2-4 weeks
Complexity3 / 5
Pricing transparency2 / 5
AU presenceYes
IRAP assessedNo
Open sourceProprietary

Deployment

ModelsSaaS, Hybrid
OS support
CloudGCP, AWS, Azure
SupportPhone, Email, Dedicated CSM
Data residencyUS, EU, AU

Company

Google

Founded 2004 · 1000+ employees · Public

HQ: US

Part of Google Cloud revenue, not separately disclosed

Certifications

SOC 2 Type II, ISO 27001

Integrations

Google CloudKubernetesTerraform