Portal Contact

Self-hosted infrastructure · Gate + Rules

Guard the edge.
Govern the decisions.

Two self-hosted products for the parts of your stack that need a policy: a gateway that controls what gets in, and a decision engine that controls what happens next. Run either. Run both. They don't need each other.

See the products → Pricing
  • Self-hosted. One Docker image per product.
  • Licensed by edition, not by request volume.
  • A grace period, not a kill switch.

Products

Two products. No shared dependency.

Separate images, separate licenses, separate consoles. Pick the one that fixes your problem.

Wardris Gate

Control your APIs.

A gateway that sits in front of your services and decides who gets through, on what terms, and with what shape of request.

  • Path and method routing to any downstream service
  • Hashed API keys with per-route access grants
  • Rate limits and IP allowlists — global or per key
  • Header, query and body mapping in both directions
  • Custom OpenAPI docs per route
  • An audit trail of every admin change
Gate editions → Getting started →

Wardris Rules

Turn conditions into decisions — and react to what happens.

A decision engine that doesn't just answer when asked. Call it for a decision, or point it at the events already flowing through your platform — orders, logins, payments, webhooks — and it evaluates them the moment they occur, keeps running windows per customer, and fires actions back into your systems.

  • Visual rule builder, or raw JSON conditions: nested and/or, comparisons, regex, dates, arithmetic
  • Triggers map inbound events (webhook or Kafka) to rule sets — no caller in the loop
  • Ongoing monitoring: COUNT / SUM / TRIGGER windows per customer, account or device
  • Actions fire webhooks, review queues and blocks straight into your platform
  • Dry-run any rule against real inputs before it goes live
  • Every evaluation recorded; snapshot and roll back the whole configuration
Rules editions → Getting started →

Independent by design

Neither product needs the other.

Gate is a gateway. Rules is a decision engine. Gate can call Rules the same way anything else can — over HTTP — and Rules doesn't care who's asking.

Wardris Gate

Client
Gate
Your services

Authenticates, rate-limits and reshapes traffic on its way to whatever you configure downstream.

Wardris Rules

Gate
Payment service
KYC service
Your application
Rules
Decision
+ action

Called by anything that needs a decision. Gate is one caller among many, never a required one.

rules — evaluate
# Ask Rules for a decision
POST /api/evaluate
{
  "ruleSetKey": "payment-routing",
  "input": { "amount": 1250, "currency": "EUR", "country": "MT" }
}

# 200 OK
{
  "matchedRuleKeys": ["eur-high-value"],
  "actions": [{ "type": "route", "parameters": { "processor": "adyen" } }],
  "elapsedMs": 3
}

# Call a service through Gate
$ curl https://gate.example.com/gw/payments/quotes \
    -H "X-Api-Key: wg_live_…"

For engineers

Plain HTTP. Plain JSON. Nothing to learn twice.

Rules is a POST. Gate is a header. Both ship with an admin console, and everything the console does is also an API call.

Configuration lives in the product, not in your codebase — so a routing change or a rule change is a deploy of that, not of your application.

Pricing

Two products. Independent tiers.

Gate and Rules are licensed separately — use one, both, or scale each on its own schedule. Every tier runs entirely on your own infrastructure; upgrade by setting a new license key.

Wardris Gate

Route. Authenticate. Transform.

Community
Build your gateway		Professional
Control your consumers		Business
Control your architecture		Enterprise
Control at scale
Downstream services325100Unlimited
Routes10200750Unlimited
API keys350150Unlimited
Rate limit100 req/min1,000 req/min5,000 req/minUnlimited
Reverse proxy & routing✓✓✓✓
API key management✓✓✓✓
Consumer-specific access grants per API key—✓✓✓
Request & response transformation—✓✓✓
Custom docs & OpenAPI mapping—✓✓✓
Global rate limit & IP whitelist—✓✓✓
Audit log: every admin change (who, what, when, redacted payload)—✓✓✓
Traffic log: every gateway call (key, route, status, latency, size, IP) with configurable retention—✓✓✓
Traffic log request/response body capture (per route, secrets redacted)——✓✓
Advanced transforms (conditional logic, expressions, lookup tables)——✓✓
Admin console RBAC——✓✓
Per-key rate limit & IP whitelist———✓
High availability / clustering———✓
SSO / OIDC admin login———✓
Get a Gate license →

Wardris Rules

Evaluate. Decide. Trigger.

Community
Decide		Professional
Decide + React		Business
Automate + Govern		Enterprise
Govern at scale
Rules10200750Unlimited
Rule sets22075Unlimited
Synchronous rule evaluation✓✓✓✓
Rule sets & conditions DSL✓✓✓✓
Visual rule builder in the console✓✓✓✓
Monitoring windows (COUNT / SUM / TRIGGER per subject)✓✓✓✓
Dry-run / simulation✓✓✓✓
Config snapshot & rollback✓✓✓✓
Action resultsText onlyWebhooksWebhooksWebhooks
Event triggers via inbound webhook—✓✓✓
Decision & execution audit trail—✓✓✓
Event triggers via Kafka——✓✓
Per-rule versioning & diff——✓✓
Admin console RBAC——✓✓
Tenant-scoped control plane——✓✓
High availability / clustering———✓
SSO / OIDC———✓
Get a Rules license →

Pricing is tailored to your scale — contact us for a quote. Manage your license and account from the Wardris Portal.

A warden keeps the gate and keeps the rules. That's the whole job. It's ours too.

Contact

Talk to us.

Questions about a tier, an evaluation, or whether this fits your architecture — send a note and a person replies.