GateKeeper API Security Gateway

Overview

GateKeeper is an API security gateway that sits between your clients and backend services, enforcing authentication, authorization, rate limiting, and request validation at the network edge. Unlike general-purpose API gateways, GateKeeper is purpose-built for security with features like automated schema validation, anomaly detection on API traffic, and real-time blocking of OWASP API Top 10 attacks.

Deploy GateKeeper as a reverse proxy, a sidecar in Kubernetes, or as a managed cloud service. Configuration is declarative via YAML or the management API, and changes propagate globally within seconds. GateKeeper handles TLS termination, mTLS between services, and certificate lifecycle management automatically.

Key Features

OpenAPI schema enforcement validates every request and response against your API specification. Requests with missing required fields, invalid types, or unexpected parameters are rejected before reaching your backend. This prevents entire categories of injection attacks and data leakage by ensuring that only well-formed requests are processed.

API discovery and shadow API detection automatically map your API surface by analyzing traffic patterns. GateKeeper identifies endpoints that are not documented in your OpenAPI specification (shadow APIs), endpoints that accept undocumented parameters, and endpoints that return data not described in the schema. These findings help you identify and secure API surface area you did not know existed.

Real-time threat detection analyzes API traffic for signs of credential stuffing, enumeration attacks, broken object level authorization (BOLA), and excessive data exposure. Detection models are trained on anonymized API traffic patterns from across the GateKeeper network, providing threat intelligence that individual organizations could not generate alone.

Pricing

GateKeeper pricing is based on API request volume. Startup: up to 10M requests/month at ];99/month. Business: up to 100M requests/month at $999/month. Enterprise: unlimited requests with custom pricing, dedicated infrastructure, and 99.99% SLA. All plans include schema enforcement, rate limiting, and threat detection.

Deploy in minutes with Docker: docker run -p 8443:8443 -v ./config:/etc/gatekeeper gatekeeper/gatekeeper:latest. Or use our Helm chart for Kubernetes: helm install gatekeeper gatekeeper/gatekeeper --values values.yaml.