Skip to content
SPECIFICTION
Get listed

Airlock Microgateway

airlock.com

Free plan APISelf-hosted
Visit airlock.com
Spec score 8.0 #8 of 28 in Kubernetes Ingress Controllers

What it is

Airlock Microgateway is a Kubernetes-native Web Application and API Protection solution that also serves as an identity-aware proxy. It runs as a container in Kubernetes clusters and is configured through GitOps. The gateway supports Kubernetes Gateway API and is positioned as an upgrade from Ingress NGINX. It validates identities through OIDC, JWT, token exchange or mutual TLS, then applies role- and path-based access control. Protection features include deny rules, CSRF protection, OpenAPI specification enforcement and GraphQL validation against OWASP Top 10 threats. Its Envoy-based reverse proxy supports routing, TLS termination, client certificate authentication and caller IP forwarding. Integrations include Cilium and Istio, and the product is certified for Red Hat OpenShift. Prometheus and Grafana provide monitoring, while logs use ECS format. Deployment can be multi-cloud or hybrid-cloud, but remains self-hosted. Community Edition is free for small environments or local development, with enforced throughput and six-month license validity. The free evaluation license specifies 5 requests per second, at most two replicas per gateway and six-month validity. Premium Edition has no listed price and is intended for enterprise setups.

Spec sheet

Deployment
It is deployed as a container directly into Kubernetes clusters and configured through GitOps processes.Read 1 Oct 2026 · airlock.com
Support
Community Edition users receive support through the public community forum, while paid Premium Edition customers follow the premium support process.Read 1 Oct 2026 · airlock.com
Headquarters
Zurich, SwitzerlandRead 28 Sep 2026 · airlock.com
Founded
1984Read 28 Sep 2026 · airlock.com
Cloud deployment
The product supports multi-cloud and hybrid-cloud deployment options.Read 1 Oct 2026 · airlock.com
Gateway API
The product is fully compatible with Kubernetes Gateway API and is positioned as an upgrade from Ingress NGINX.Read 1 Oct 2026 · airlock.com
Identity security
It validates identities through OIDC, JWT, token exchange or mutual TLS and applies role- and path-based access control.Read 1 Oct 2026 · airlock.com
Kubernetes integrations
It supports Cilium and Istio and is certified for Red Hat OpenShift.Read 1 Oct 2026 · airlock.com
License metric
Premium licensing is trust-based and applies to calendar-based monthly request rates.Read 1 Oct 2026 · docs.airlock.com
Observability
Monitoring is provided through Prometheus and Grafana, with logging in ECS format.Read 1 Oct 2026 · airlock.com
Product purpose
Airlock Microgateway is a Kubernetes-native Web Application and API Protection solution and identity-aware proxy.Read 1 Oct 2026 · docs.airlock.com
Proxy technology
The reverse proxy is based on Envoy and supports request routing, TLS termination, client certificate authentication and caller IP forwarding.Read 1 Oct 2026 · airlock.com
Target users
The product is intended for DevOps, SRE, security and IT operations teams working with cloud-native applications and APIs.Read 1 Oct 2026 · airlock.com
Threat protection
Its WAAP capabilities include deny rules, CSRF protection, OpenAPI specification enforcement and GraphQL validation against OWASP Top 10 threats.Read 1 Oct 2026 · airlock.com

Plans and prices

Community Edition Free Free; no licence required small environments or local development · throughput enforced · 6-month license validity Read 1 Oct 2026 · docs.airlock.com
Evaluation license Free Free of charge 5 requests/second · maximum 2 replicas per gateway · valid 6 months · community support Read 1 Oct 2026 · airlock.com
Premium Edition Priced on request According to license enterprise setups · throughput not enforced · 12-month license validity Read 1 Oct 2026 · docs.airlock.com

Every Airlock Microgateway plan and price →

Strong points and limits

Strong points

  • Kubernetes Gateway API compatible
  • Identity checks include OIDC and mutual TLS
  • OpenAPI and GraphQL protection features
  • Prometheus and Grafana monitoring
  • Supports multi-cloud and hybrid-cloud deployments

Limits

  • Community Edition throughput is enforced
  • Evaluation license capped at five requests per second
  • Evaluation license limited to two replicas per gateway

Who it suits

Microgateway suits DevOps, SRE, security and IT operations teams working with cloud-native applications and APIs. Its deployment model is for teams operating Kubernetes environments.

Verdict

Airlock Microgateway combines identity-aware access controls with web and API protection in a Kubernetes deployment. Review the throughput and replica limits on free licenses before choosing an edition.

Where Specifiction places it

Alternatives to Airlock MicrogatewayAll alternatives →