Technical details Kubernetes-native WAAP
Airlock Microgateway protects your applications and APIs directly inside Kubernetes. As a lightweight Web Application and API Protection (WAAP) solution, it enables straightforward integration of Zero Trust and identity-based security into modern DevOps and platform processes. Automated, scalable and based on open standards, it makes development and operations both secure and efficient.
Comprehensive WAAP protection
Stop attacks before they reach your servicesExtensive WAAP capabilities, including deny rules, CSRF protection, OpenAPI specification enforcement and GraphQL validation, block OWASP Top 10 threats before they reach your applications. Your services are protected from the very first request, and only explicitly defined, valid requests are allowed.
By integrating security early into the development process, risks are reduced and compliance requirements are met faster – from days down to minutes.
Identity-aware security
upstream access control down to path levelAccess is validated and authorised at the entry point: as an identity-aware proxy, Microgateway validates identities via OIDC, JWT, token exchange or mTLS and controls access precisely based on roles and paths. Identities are securely propagated to backend services, enabling a seamless single sign-on experience for users.
Only authorised users and systems can access critical resources. Zero Trust starts here.
Secure together
Kubernetes Gateway API for clear roles and stable operationsWith Kubernetes Gateway API and a clear role model, responsibilities between platform, security and development teams are cleanly separated. As a Kubernetes-native solution, Microgateway integrates seamlessly into existing GitOps workflows: changes to routing and security are defined declaratively as code and rolled out in a reproducible and low-error manner.
Operational effort is reduced, while a stable, scalable security architecture is established that fits smoothly into existing processes.
Highlights
▶ Multi-layer API and application protection: filtering, upstream authentication, OWASP Top 10 defence, OpenAPI specification enforcement and GraphQL schema validation
▶ Kubernetes integration: fully compatible with Gateway API, Cilium, Istio, and certified for Red Hat OpenShift
▶ Identity-based security: validates tokens or client certificates and enforces access control based on identity and role
▶ Multi- and hybrid-cloud support: flexible deployment options
▶ Observability: monitoring via Prometheus and Grafana, logging in ECS format
How it works
Airlock Microgateway is deployed as a container directly into your Kubernetes clusters and configured via GitOps processes. Acting as a WAAP in front of your applications, it:
- controls access based on access policies.
- enables secure service-to-service communication using OAuth 2.0 Token Exchange across security zones.
- protects applications through intelligent filtering rules.
- delivers real-time reporting and monitoring via logs and Prometheus metrics in prebuilt Grafana dashboards.
With Airlock Microgateway, your Kubernetes environment becomes Zero Trust–ready within hours.
Built for modern cloud-native teams
In many organisations, DevOps, SREs, security and IT operations work together to bring applications into production quickly and securely – a process that often requires extensive coordination and consumes time and resources. By integrating security directly into CI/CD pipelines and thus into DevSecOps processes, this effort is significantly reduced.
|
Without Microgateway |
With Microgateway |
|
Security slows down deployments |
Security is deployed together with the CI/CD pipeline |
|
Rules must be maintained manually |
Rules are defined as code in the repository |
|
DevOps waits for security approvals |
DevSecOps teams control security themselves |
|
Inconsistent environments |
Consistent rules across all environments |
Ready for Zero Trust in Kubernetes? Try Airlock Microgateway
Start with our free Community Edition and the Microgateway Labs, or request a demo to see Airlock Microgateway in action.
Bye-bye Ingress-NGINX, hello Gateway API
Why Airlock Microgateway is your security upgrade for Kubernetes
The Kubernetes Ingress era is coming to an end. What served as the de facto standard for years is increasingly turning into a security and architectural liability. Outdated concepts, a frozen specification, and critical vulnerabilities such as the “Ingress Nightmare” CVEs make one thing clear: action is required now. This article explains why the Kubernetes Gateway API, combined with Airlock Microgateway, is a decisive upgrade in security, stability, and long-term viability.
Study: Security in Kubernetes
More and more dev teams are moving from monolithic architectures to microservices and containerized environments.
Find out how companies plan to meet the resulting security requirements using Kubernetes in this study in cooperation with TechConsult.
Convincing performance: Gold for the Airlock Microgateway
Not only our customers, but also the independent information security community is convinced. The Airlock Microgateway was awarded Gold at the Cyber Security Excellence Awards 2022 in the Zero Trust Security category. In total, Airlock solutions have won the gold award seven times.