Kipchak is free and MIT-licensed — and will always remain so. For teams that need more, Mamluk offers enterprise add-ons, priority support, and managed infrastructure to help you ship faster and operate with confidence.

Prices, and the 14-day trial, are on the Enterprise page. Each package is licensed individually, or every package is included in the complete tier.

Enterprise Drivers

OAuth 2 Token — OAuth 2.0 client-credentials token handling
Valkey — Valkey / Redis cache: standalone, sentinel, cluster and replica
OpenSearch — OpenSearch, multi-connection with every authentication mode
Kafka — Kafka producer and consumer with SASL/SSL
OPA — Policy decisions via Open Policy Agent
LDAP — LDAP and Active Directory logins, groups and search
Vault / OpenBao — Secrets from Vault or OpenBao in configuration, with KV and Transit
OpenTelemetry — Traces, metrics and logs over OTLP, with the drivers instrumented

Enterprise Middleware

Auth — JWT — Advanced JWT authentication
Subashi Pro — Enterprise WAF with geo and ASN edge intelligence
Usage Metering — Per-consumer usage events for billing, to Kafka or logs
Quotas — Per-plan limits on requests and credits, per customer
Idempotency — Safe retries with Idempotency-Key: responses are replayed, never run twice
PII Redaction — Mask, hash or remove personal data in responses and in every log line
Audit Log — Signed records of who did what, to Kafka, OpenSearch or NATS
RBAC / ABAC Policy — Route-level authorisation from roles, permissions, attributes or OPA
Circuit Breaker — Fleet-wide breakers for downstream calls, shared in Valkey
OpenTelemetry — A server span and request metrics for every request

Every other driver and middleware, including Feature Flags, JWKS, API key and request-signing authentication, and the Subashi WAF, is MIT-licensed and free.

Support and Operations

Support with a response time of one day — Included in the complete tier, through tickets in the Mamluk Console. Other service levels are agreed in each order.
Direct access to the maintainers — Support is answered by the engineers who build Kipchak
Custom Development — New drivers, middleware, or framework extensions built to your specification
Managed Hosting and Kubernetes Support — Let Mamluk run and scale your Kipchak deployment so your team focuses on product
Hardened Runtime Image — A static FrankenPHP binary on an empty filesystem, with no shell, no package manager and no root user, for regulated or security-sensitive environments

Get in touch and tell us what you are building.