Start free. Scale when production depends on it.
Self-host at no license cost, or add enterprise connectors, support, and managed operations when your gateway becomes load-bearing infrastructure.
Open source
Self-host free
EnterprisePopular
Support + EE connectors
Managed
We operate the plane
Start self-hosted. Upgrade when production depends on it.
Free
Self-managed, source available
Run the full Wardengate control plane and community connectors on your own infrastructure. Source available, community-supported.
- Core API, web UI, and protocol connectors
- Session recording and audit ledger
- Identity-bound policy engine
- Helm charts and Docker Compose installer
- Community documentation and GitHub issues
Custom
Per environment · annual
Production deployments that need EE protocol proxies, vendor support, and a named SLA. Most teams evaluating bastion retirement land here.
- Everything in Open source
- EE connectors: RDP, VNC, and database proxies
- 24/7 support with severity-based SLAs
- Upgrade and migration assistance
- Security advisory notifications
- Quarterly architecture reviews
Custom
Dedicated or shared control plane
Wardengate operated for you — ideal when your team wants gateway outcomes without running the control plane day-to-day.
- Everything in Enterprise
- Hosted or partner-operated control plane
- Managed upgrades and backup/restore
- Dedicated customer success engineer
- Custom integration onboarding
- Compliance evidence package support
Pricing questions
Is Wardengate really open source?
Yes. The core platform can be self-hosted at no license cost. You can inspect and modify the source. Enterprise connectors and commercial support are licensed separately.
How is pricing calculated?
Enterprise and Managed pricing depends on environment size — operator count, target count, and connector mix. We scope in a working session rather than publishing a calculator that ignores your architecture.
Can we start open source and upgrade later?
Yes. Most customers stand up the open-source stack first, broker real sessions in shadow mode, then add enterprise connectors and support when they cut over production traffic.
Not sure which tier fits?
Walk through your architecture with us
A 30-minute scoping call beats guessing at license tiers. We will map your bastion estate, connector needs, and compliance requirements to a concrete plan.