Airlock Gateway
Web application and API firewall with reverse proxy, run on customer infrastructure.
- Swiss CompanyThe operating company is headquartered and legally incorporated in Switzerland.
- Swiss DevelopedThe product is primarily developed by a team operating from Switzerland.
- Self-hostableCan be installed on your own servers or on-premises.
airlock.com
Overview
Airlock Gateway is a web application and API protection (WAAP) product from Ergon Informatik AG in Zurich, sold under the Airlock brand as part of the Airlock Secure Access Hub together with Airlock IAM and Airlock Microgateway. It works as a reverse proxy in front of web applications and APIs and inspects every HTTP(S) request. Functions include filtering against the OWASP Top 10, virtual patching, bot defence, denial-of-service protection, AI-based anomaly detection (Anomaly Shield), threat intelligence from Webroot BrightCloud, API schema enforcement, API keys and throttling, load balancing, and reporting with SIEM integration. Together with Airlock IAM it enforces authentication and authorisation using OAuth 2.0, OpenID Connect and SAML 2.0.
The Gateway is installed and operated by the customer or a partner. It is delivered as an ISO image for on-premises installation or as a VMDK image for VMware and cloud deployments, and release 8.6 added support for Red Hat OpenShift Virtualization. A REST API allows configuration from DevOps pipelines. For Kubernetes environments, Airlock offers the separate Airlock Microgateway, which is also available as a free Community Edition.
The Gateway is part of the commercially licensed Premium Edition, and prices are not published. No vendor-hosted edition of the Gateway is listed. Ergon states that it is ISO 27001 certified. Ergon has been majority-owned by the German private equity investor Afinum since January 2026.
Why it may be a Swiss alternative
Airlock Gateway is operated by Ergon Informatik AG, which is headquartered in Zürich. Headquartered in Switzerland, but ultimately controlled by a company outside Switzerland.
We could not verify where customer data is hosted.
May replace
- F5 Web Application FirewallF5, Inc. · USCovers the web application and API firewall functions, not F5's wider application delivery and networking products.
- CloudflareCloudflare, Inc. · USComparable to Cloudflare's web application firewall and bot protection, but installed and run by the customer, without a global CDN or edge network.
Foreign products with overlapping functionality. An alternative is not necessarily a one-to-one replacement.
Swiss footprint
Five independent questions. A Swiss company is not automatically Swiss-hosted — and vice versa. How the footprint is assessed
Swiss company · foreign parent. Headquartered in Switzerland, but ultimately controlled by a company outside Switzerland.
- HeadquartersIs the operating company headquartered in Switzerland?
- Zürich, Zurich (ZH), SwitzerlandVerified[1]
- Legal jurisdiction
- OwnershipIs the company ultimately Swiss-owned?
- No — Afinum (fund Afinum X) · GermanyVendor claim[3]
In January 2026 the private equity investor Afinum became majority shareholder, replacing the founder and the long-standing anchor shareholders; management and many employees remain shareholders. The acquiring fund, Afinum X, is a German investment partnership managed by Afinum Management GmbH in Munich, which also has a Zurich office (Afinum Management AG). Airlock is a brand and product line of Ergon, not a separate company.
- DevelopmentIs the product developed in Switzerland?
- HostingIs customer data hosted in Switzerland?
- Unknown / not verified
Airlock Gateway is installed by the customer or a partner, on-premises, on VMware or other virtualisation platforms or as a cloud image in a public cloud, so the data location depends on the deployment. No vendor-hosted edition of the Gateway is listed; the managed service Airlock launched in April 2026 covers Airlock IAM.
- InfrastructureIs the hosting infrastructure operated by a Swiss-owned provider?
- Unknown / not verified
Features & platforms
- Platforms
- Deployment
- Made for
- Interface languages
- Unknown / not verified
Privacy & security
- Public API
- Yes
- Not verified
- End-to-end encryption, Encryption at rest, Encryption in transit, Multi-factor authentication, Single sign-on (SAML/OIDC), SCIM provisioning and Data export
- Certifications
Pricing
- Pricing model
- On request
- Free plan
- No
- Free trial
- Unknown / not verified
- Enterprise plan
- Yes
- Billing in CHF
- Unknown / not verified
Prices checked 15 Oct 2026. Always confirm on the vendor’s site. Pricing page ↗
Open source
- Open source
- NoVendor claim[4]
Airlock Gateway is part of the commercially licensed Premium Edition. Only Airlock Microgateway is offered as a free Community Edition.
Company
Zurich-based software company, founded in 1984, that builds custom software and develops the Airlock application-security and identity products.
More from Ergon
- Airlock IAM — Identity & Access Management
Similar Swiss products
Managed SASE service with SD-WAN, firewall, secure web gateway, CASB and ZTNA.
Swiss native
- Swiss Data Option
Network SecurityPaidNetwork detection and response based on flow and log metadata, run on customer systems.
Swiss company
- Self-hostable
Network SecurityPaidPlug-and-play microsegmentation appliance for legacy, medical and OT devices.
Swiss company
- Self-hostable
Network SecurityPaid
Sources & verification
Every claim on this page is marked as verified, vendor claim or inferred. Unknown means we could not confirm it — not that the answer is “no”.
- Verified Confirmed by an independent or official source such as the commercial register.
- Vendor claim Stated by the vendor in its own documentation, website or legal terms.
- Inferred Derived by the editors from indirect evidence — see the note.
- [1]
- [2]
- [3]
- [4]
- [5]
- [6]
Ergon Informatik AG
- [1]
- [2]
- [3]
- [4]
- [5]
- [6]
- [7]