One price per instance.

Nothing else is counted: not applications, not requests, not users.

Core

Free

Open source under AGPL-3.0, published at launch.

The gateway on its own: the proxy, the request parsers, the rule engine with the OWASP Core Rule Set, the event log and the console for one administrator. No licence check, nothing to unlock.

Enterprise

€100

per instance, per month

Self-service checkout opens at launch.

Everything in the core, and the learned profile: Ardarik learns each of your applications from its own traffic, on your hardware, and measures every request against it.

Enterprise with service

On request

The Enterprise edition, with people: help with the rollout, on-call support and committed response times.

Protection never switches off.

When a licence ends, updates stop by design, and after a period of grace the Enterprise functions stop. The open core keeps protecting. Nothing is deleted.

One instance is one Ardarik installation with one configuration. It protects as many applications as you put behind it, and a pair that stands in for each other counts as one. Ardarik is in development and has no supported release yet; prices apply from the first release, and self-service checkout opens with it.

Questions are welcome.