Built in Germany, for Europe.

Ardarik is made by Cloo GmbH, a software company in Germany.

Why we build it.

Most of what protects European web applications today is rented: run elsewhere, under another law, by a company that sees every request first.

We think the last thing in front of your applications should be yours.

What we will not do.

  • We do not run your traffic through our servers.

  • We do not collect telemetry.

    Ardarik sends us nothing.

  • We do not hide how it works.

    The core is published at launch.

Who we build it for.

Organisations that cannot or will not hand their traffic to someone else: hospitals, public bodies, operators of critical infrastructure, and companies whose data is their business.

How we work.

Decisions that are hard to reverse are written down before they are built. Code that matters for security starts with the attacks it must withstand, and its review is an attack on the built program. What we find, we publish: the bypasses our own tests uncovered are listed in the changelog.

Ardarik is named after Ardaric, a king of the fifth century who ended the rule of the Huns over Europe. Read the essay

Questions are welcome.