Everything in Hardening Toolkit, plus proper identity management, policy as code, and the pipeline that carries your logs.

WHAT YOU GET

Everything in Rampart Hardening Toolkit, plus:

Keycloak (Apache-2.0) - full identity and access management: users, roles, groups, OIDC and SAML. The right answer once you have more than a handful of people.

Open Policy Agent (Apache-2.0) - express access rules as code and enforce them consistently, instead of scattering if-statements through every service.

Vector (MPL-2.0) - collects logs and metrics from everything else and routes them where you want. The plumbing under your monitoring.

30 DAYS PRIORITY SUPPORT

• Private support channel with direct replies
• Help adapting components to your infrastructure
• Priority triage on anything you report
• Guidance on policy design and identity migration

WHY IDENTITY AND POLICY HERE

Authelia is enough for a solo operator. Keycloak is what you need when other people have accounts, and OPA is how you keep the rules in one place instead of five.

ALL OPEN SOURCE, ALL PERMISSIVE

MIT, Apache-2.0, BSD-3-Clause and MPL-2.0. Full attribution with pinned commits included.

REQUIREMENTS

Docker Engine 24+ with Compose v2. 16 GB RAM recommended.

One-time purchase. Code and updates are yours permanently; support runs 30 days.