Security gateway · Engineered in Germany

The last line of defence.

Ardarik stands between attacks and your applications: a security gateway that is open at its core and runs only on your own ground.

Firewall · Intrusion detection · Intrusion prevention

Machines write the attacks now.

Language models produce them at volume, in endless variation, at any hour. A catalogue of known attacks stops the known ones. A variation written this morning is in no catalogue.

It knows the attack. It knows your application.

The rule engine

Every request is checked against the OWASP Core Rule Set, the open catalogue of known attacks: commands slipped into a database, scripts planted in a page, files reached that should stay out of reach.

The learned profile

It learns each application from its own traffic, on your hardware. A field that has only ever held forty characters and now holds four thousand stands out, whatever the attack is called. Enterprise edition.

How it decides

Four principles

Your ground.

Whatever inspects your traffic reads it in plain text. A rented gateway does that on someone else’s servers. Ardarik does it in your infrastructure and nowhere else: traffic, logs and what it learns stay in your network, and it needs no connection to us to protect you.

Open at its core.

At launch the core is published under AGPL-3.0: the proxy, the rule engine, the parsers, the log. From then on, do not trust us. Read it.

The source opens at launch

No black box.

When Ardarik stops a request, it tells you why. In a sentence, not a rule number.

Which check objected, and to which part of the request. In its code, a block without a reason cannot be built.

European by origin.

Designed and engineered by Cloo GmbH in Auerbach, Germany, for organisations that cannot hand their traffic to anyone else: hospitals, public bodies, operators of critical infrastructure.

Plain words first.

The console is written for network administrators, not for specialists in web attacks. It says what happened first and keeps the precise term one step away. Every application starts in observing mode: nothing is blocked, and you see which requests would be before you switch blocking on.

Console preview. Sample data.

Free at its core. One price for the rest.

The open core is a gateway in its own right, with no licence check. The Enterprise edition adds the learned profile and is licensed per instance; applications, requests and users are not counted.

See pricing
Albrecht Dürer’s Charlemagne, in monochrome: a bearded emperor in a jewelled crown faces the viewer, between a shield with an eagle and a shield with three lilies.
Albrecht Dürer, Emperor Charlemagne, c. 1512. Germanisches Nationalmuseum, Nuremberg.

Europe must hold its own line.

A continent that sends its traffic through other people’s defences does not decide what gets through. On why the last line has to stand on your own ground.

Read the essay

You reach the people who build Ardarik. Tell us what you protect, and we show you how it would decide.

Hold the line.