Open core. Genuinely free.
Self-host the open core — free, forever. Add Pro for managed WAF, distributed cache, team controls, and tracing. Or let us host it.
The engine and the basics, self-hosted.
- The full engine — SSR, TLS, ISR cache, the compiler
- Base WAF, HTTP/3, single-node Redis
- Unlimited apps and traffic
- Build, sell, and distribute your apps
- Source-available · Apache-2.0 after 3y
The advanced capabilities, self-hosted.
- Managed WAF — rules, bot & threat intel
- Distributed / clustered Redis
- Team dashboard — RBAC, SSO, audit, analytics
- OpenTelemetry tracing
- Everything in Open source
Managed for you. Pro included.
- Push to deploy, managed TLS
- Auto-scaling and edge cache
- All Pro add-ons included
- Observability and backups
- Free tier, then pay as you grow
Support, compliance, embedding.
- SLA and dedicated support
- Security review, compliance
- Private / on-prem deployment
- Embed the engine (OEM)
- Everything included
Free in every install
Pro adds: managed WAF · distributed Redis · team dashboard · OTel tracing.
Frequently asked
Is the open core really free?
Yes. The engine and the base version of every feature run free, in production, at any scale — forever. Source-available, and Apache-2.0 after three years.
What's in Pro?
Managed WAF (auto rules, bot detection, threat intel), distributed / clustered Redis, the team dashboard (RBAC, SSO, audit, analytics, flow debugger), and OpenTelemetry tracing. One self-host license — included in Cloud and Enterprise.
Do I need a license for my apps?
No. Your apps are yours — build, sell, and distribute them freely.
What needs a commercial license?
Only the Pro add-on, managed hosting (Cloud), enterprise support (Enterprise), or embedding the engine in another product (OEM).