I think Kong* does this rather well. They have a usable open source product that has a lot of the core functionality and it more than enough for small businesses and hobbyists. They also provide enterprise support and a enterprise products which includes functions that are typically used by enterprises (like fine grained auth).

* https://konghq.com/