What Traefik Labs does

Traefik Labs is a French-headquartered software company (registered as a société par actions simplifiée in Lyon, with a San Francisco presence) that develops cloud-native application networking software. Its foundation is the open-source Traefik Proxy, a Kubernetes-native reverse proxy and ingress controller with 3.4B+ cumulative downloads and 50K+ GitHub stars, embedded as the default ingress layer in major Kubernetes distributions including Nutanix NKP, SUSE Rancher RKE2, K3s, Canonical MicroK8s, and IBM Cloud Kubernetes Service. The commercial product line, Traefik Hub, comprises an API Gateway, a GitOps-driven API Management module, the Traefik AI Gateway (governing LLM traffic with NVIDIA Safety NIMs and Microsoft Presidio), and the Traefik MCP Gateway (governing AI-agent access to tools via task-based access control). Traefik Hub v3.20 unifies API, AI, and MCP gateways in a single binary branded the "Triple Gate Architecture."

Name

Traefik Labs

Legal name

Traefik Labs (société par actions simplifiée)

Website

https://traefik.io

Company type

Private

Founded year

2016

Operating status

Operating

Headcount range

11–50 employees

Short description

Traefik Labs is a bootstrapped French software company that develops cloud-native application networking software — anchored by the open-source Traefik Proxy (3.4B+ downloads) and the commercial Traefik Hub platform spanning API, AI, and MCP gateways for enterprise Kubernetes deployments.

Ownership category

akta.pro rank

Product category

Cloud-Native Application Networking

NAICS

Computer Systems Design and Related Services (5415), Computer Systems Design and Related Services (54151)

SIC

Services-Prepackaged Software (7372), Services-Computer Programming Services (7371)

akta.pro primary industry

API Management Platforms (API Gateways, Developer Portals) (HDAEAIAA)

akta.pro secondary industries

Developer Tools & DevOps Platform Services (CI/CD, Artifacts, IaC) (HDABAAAI), Integration & Messaging Platforms (API Gateway, Queues, Event Bus) (HDABAAAG), Cloud On-Ramps & Direct Connect Services (HDABALAA)

Keywords

• Cloud-native networking
• API gateway software
• Kubernetes ingress controller
• AI gateway infrastructure
• API management platform

Headquarters

HQ city

San Francisco

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Traefik Hub subscription (API Gateway / API Management): Recurring subscription revenue from Traefik Hub API Gateway, API Management, AI Gateway, MCP Gateway, and WAF products offered as commercial upgrades on top of the open-source Traefik Proxy; enterprise license-based pricing with annual contracts.
2. Open-source Traefik Proxy (freemium): Free open-source distribution of Traefik Proxy across Docker Hub, GitHub, and other channels; serves as the top-of-funnel product feeding paid Traefik Hub conversions. Per Latka 2025, total company ARR is $3.9M with $11.6M valuation and no outside funding (bootstrapped).
3. OSS Commercial Support (24/7/365): Annual subscription-based commercial support package providing direct access to Solution Architects and Core Maintainers, Long Term Support (LTS), CVE management with embargo access, and quarterly architecture reviews.
4. Enterprise AI deployment tools and integrations: Specialized tools, gateways, and AI-specific integrations for secure, scalable, and responsible enterprise AI deployment; positioned as part of the broader Traefik Hub platform upsell.

Pricing tiers

Go-to-market motion6 records

Distribution channels5 records

Marketing channels11 records

Core offering

Traefik Labs develops the Traefik Runtime Platform, a single-binary cloud-native application networking platform that combines an API Gateway, an AI Gateway, and an MCP Gateway (its Triple Gate architecture) on top of the open-source Traefik Proxy reverse proxy and Kubernetes ingress controller. The company sells commercial subscriptions for Traefik Hub API Gateway, Traefik Hub API Management, AI Gateway, MCP Gateway, Web Application Firewall, Air-Gapped API Management, and Traefik Enterprise (24/7/365 commercial support) to enterprise platform engineering and DevOps teams globally.

Product overview

Traefik Labs offers a single unified Traefik Runtime Platform composed of multiple integrated products and capabilities delivered through one binary with a shared declarative configuration model and unified control plane. At the foundation is Traefik Proxy, the open-source cloud-native application proxy with over 3.4 billion downloads. On top sit Traefik Hub API Gateway and Traefik Hub API Management, providing enterprise-grade API gateway and GitOps-driven API management, respectively. Specialized gateways include the Traefik AI Gateway (governing LLM traffic with NVIDIA Safety NIMs and Presidio), Traefik MCP Gateway (governing AI agent tool access via TBAC and session-smart routing), Web Application Firewall (OWASP Coraza), API Mocking, Air-Gapped API Management, Runtime API Governance, and Knative Serving support. Traefik Enterprise provides 24/7/365 commercial support and LTS. The platform is unified through a single binary with consistent policies, observability, and zero vendor lock-in across VMs, containers, and AI workloads.

Differentiator

Problem solved

Functional benefit

Brands

• Traefik Proxy: Open-source cloud-native application proxy and ingress controller.
• Traefik Hub API Gateway
• Traefik Hub API Management
• Traefik Enterprise
• Traefik AI Gateway
• Traefik MCP Gateway
• Traefik Runtime Platform

Products and services

• Traefik Proxy Open-source cloud-native application proxy and ingress controller with dynamic service discovery and a middleware ecosystem, used by platform engineering teams and individual developers for L4/L7 routing, reverse proxying, and Kubernetes ingress.
• Traefik Hub API Gateway Cloud-native API Gateway built on top of Traefik Proxy, adding enterprise-grade access control (OIDC, LDAP, JWT, HMAC, OAuth2), distributed security, distributed Let's Encrypt, HashiCorp Vault integration, dynamic configuration, traffic mirroring, blue/green and canary deployments, distributed rate limiting, and high availability with cluster-wide dashboard.
• Traefik Hub API Management Kubernetes-native, fully GitOps-compliant API Management as Code platform for publishing, securing, and managing APIs at scale, with real-time API inventory, API versioning, subscriptions, plans and bundles, OpenTelemetry integration, dedicated developer portals with interactive testing consoles, and Treblle observability integration.
• Traefik AI Gateway Kubernetes-native AI Gateway providing unified multi-LLM connectivity (OpenAI, Anthropic, Bedrock, Cohere, Gemini, Mistral, Ollama) via a single OpenAI-compatible interface, NVIDIA Safety NIMs for jailbreak/content/topic safety, Presidio for NLP-based PII protection, semantic caching (40-70% cost savings, 10-100x faster), intelligent model routing, and full air-gap support with data sovereignty.
• Traefik MCP Gateway Governs how AI agents access MCP servers (tools, prompts, resources) via TBAC (task, tool, and transaction-based access control), policy guardrails at the edge (rate/concurrency limits, time windows, query-pattern checks), session-smart load balancing with split read/write pools, and deep OpenTelemetry-based observability with audit trails mapped to agent identity and policy version.
• Web Application Firewall (WAF) Native OWASP Coraza-powered WAF integrated into Traefik Hub, protecting apps and APIs from SQL injection, cross-site scripting, and OWASP Top 10 vulnerabilities, with dynamic security configuration and ModSecurity support.
• Traefik Enterprise Commercial enterprise distribution of Traefik providing 24/7/365 mission-critical support, long-term support (LTS) for production-critical releases, CVE management with proactive patching, and quarterly architecture reviews with Solution Architects.
• Air-Gapped API Management Air-gapped AI and API Platform with policy-as-code and zero-egress operations, enabling AI and API management in fully disconnected environments with complete data sovereignty for regulated industries.
• API Mocking Allows teams to create, publish, and consume mock APIs with production-like UX and SLAs, enabling parallel development and testing.

Quantifiable outcome

• 40-70% cost savings on AI/LLM API spend via semantic caching
• +6 more outcomes

Named customers18 records

Segments5 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration52 records

AI capability11 records

Feature11 records

Partnerships

18 partnerships are on record, tiered flagship and core.

• SUSEflagshipStrategic or Co-development Partner · 22 April 2026SUSE integrating Traefik as the default ingress controller across its K3s and RKE2 Kubernetes distributions following the deprecation of Ingress NGINX. Discussed jointly at SUSECON 2026 in the context of sovereign architectures. The integration provides enterprises with a unified networking layer for digital sovereignty migrations (IDC projects 60% of digital-sovereignty-requiring orgs will migrate sensitive workloads by 2028).
• IBM CloudflagshipTechnology or Integration · 24 March 2026IBM Cloud adopted Traefik Proxy as its strategic ingress controller following the retirement of the Ingress NGINX project. As part of a major platform-vendor shift, IBM represents millions of Kubernetes clusters across various industries.
• OVHcloudcoreTechnology or Integration · 24 March 2026OVHcloud adopted Traefik Proxy as its strategic ingress controller following the retirement of the Ingress NGINX project.
• TIBCOcoreTechnology or Integration · 24 March 2026TIBCO adopted Traefik Proxy as its strategic ingress controller following the retirement of the Ingress NGINX project.
• NVIDIAflagshipTechnology or Integration · 16 March 2026NVIDIA NIMs (NVIDIA Inference Microservices) integrated as guardrail providers in Traefik Hub's Triple Gate architecture. Self-contained, security-validated containers providing jailbreak detection, content filtering, and topic control — run entirely within customer infrastructure for zero-external-dependency AI safety.
• IBM (Granite Guardian)coreTechnology or Integration · 16 March 2026IBM Granite Guardian integrated as a guardrail provider in Traefik Hub's composable multi-vendor safety pipeline alongside NVIDIA NIMs and Microsoft Presidio.
• Microsoft (Presidio)flagshipTechnology or Integration · 16 March 2026Microsoft Presidio integrated as a PII protection / NLP guardrail in Traefik Hub's Triple Gate architecture and Traefik AI Gateway. Provides 35+ predefined recognizers covering global and country-specific PII types (SSNs, passports, credit cards, medical IDs, etc.) with bidirectional input/output analysis.
• HPE (Hewlett Packard Enterprise)flagshipStrategic or Co-development Partner · 4 December 2025Traefik Labs joined the HPE Unleash AI Partner Program to deliver sovereign AI infrastructure. The partnership integrates Traefik's Triple Gate security architecture (AI Gateway, MCP Gateway, API Gateway) with HPE Private Cloud AI, leveraging NVIDIA NIM microservices for GPU acceleration. Targets regulated industries (intelligence, healthcare, financial services) requiring air-gapped, zero-external-dependency deployments.
• NutanixflagshipStrategic or Co-development Partner · 17 November 2025Traefik Labs announced a partnership with Nutanix Inc. to support hybrid, multicloud, and sovereign deployment environments. Integration with Nutanix's infrastructure unifies VMs, containers, and serverless functions under the Traefik Application Intelligence Platform. Traefik is the default ingress in Nutanix NKP; Nutanix Prism Central provider allows discovery and governance of VM-based services.
• OracleflagshipStrategic or Co-development Partner · 17 November 2025Partnership with Oracle Corp. announced to support hybrid, multicloud, and sovereign deployment environments via Traefik Labs' Application Intelligence Platform and Oracle OCI integration.
• TrebllecoreTechnology or Integration · 17 September 2024Treblle API Observability integrated with Traefik Hub as a third-party integration for real-time, out-of-the-box observability. Listed as a turnkey integration directly on the Traefik Hub Dashboard. Also partnered in December 2024 to enhance developer experience with an AI-powered assistant for faster API integration.
• Coraza (OWASP Coraza WAF)flagshipTechnology or Integration · 17 September 2024Coraza WAF integrated as Traefik Hub's native OWASP web application firewall. Protects apps and APIs from SQL injection, cross-site scripting, and other OWASP Top 10 threats. ModSecurity support preserved during Ingress NGINX migration for security parity.
• HashiCorpflagshipTechnology or IntegrationJoint "Traefik & HashiCorp" solution promoted as a comprehensive and powerful API Gateway for the HashiCorp stack. Includes HashiCorp Vault integration for credential management. Listed as a flagship integration partner on the main website and product pages.
• MicrosoftflagshipStrategic or Co-development PartnerJoint "Traefik & Microsoft" solution promoted for running APIs and AI across any infrastructure and any Kubernetes. Microsoft Azure ecosystem integration referenced in product and solution pages.
• Canonical (MicroK8s)flagshipTechnology or IntegrationTraefik is the default ingress in Canonical MicroK8s, as referenced across the website's Kubernetes distributions FAQ and product pages.
• CoreWeave, Nebius, Together AI (NeoClouds)coreTechnology or IntegrationTraefik validated with leading NeoClouds including CoreWeave, Nebius, and Together AI, as referenced in the website's Kubernetes distributions FAQ.
• HashiCorp (Vault / Consul / Nomad)flagshipTechnology or IntegrationTraefik integrates with HashiCorp Vault, Consul, and Nomad for distributed Let's Encrypt, key-value configuration, and service discovery respectively. Part of the broader Traefik ecosystem of providers and orchestrators.
• Red Hat (OpenShift)coreTechnology or IntegrationTraefik integrates with Red Hat OpenShift, Amazon ECS, and other major orchestrators per the Traefik ecosystem page.

Scale indicators11 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Kong Inc. Kong offers Kong Gateway (OSS) and Kong Konnect, a cloud-native API gateway platform with similar Kubernetes-native, plugin-extensible architecture and a freemium-to-enterprise model — the most direct open-source-to-commercial competitor to Traefik Proxy and Traefik Hub.
• Solo.io: Solo.io provides Gloo Gateway and Gloo Mesh built on Envoy, competing directly with Traefik in Kubernetes ingress and API gateway, with emphasis on service mesh and enterprise platform engineering teams — comparable target customer and architecture.
• HAProxy Technologies: HAProxy offers the open-source HAProxy load balancer and HAProxy Enterprise, an L4/L7 proxy and API gateway competing for the same reverse-proxy and ingress use cases as Traefik Proxy, particularly in performance-sensitive environments.
• Envoy Proxy (CNCF / Lyft): Envoy is a CNCF-graduated open-source edge and service proxy used as a data plane in many competing gateway products. Traefik and Envoy are direct functional competitors in the cloud-native proxy layer, often deployed in the same Kubernetes environments.
• Tyk Technologies: Tyk provides an open-source API gateway and API management platform with hybrid deployment options. Traefik maintains a direct public comparison page (vs Tyk), and the two compete head-to-head for Kubernetes-native and hybrid-cloud API management workloads.
• Gravitee: Gravitee offers an open-source API gateway and API management platform with event-native API support. Traefik publishes a direct comparison (vs Gravitee), and the two compete for GitOps-driven API management buyers, particularly in Europe.

Broad incumbents

• NGINX (F5 Networks): NGINX is the legacy incumbent in reverse proxy and API gateway, with F5's commercial NGINX Plus. Following the deprecation of Ingress NGINX, F5 has shifted strategic emphasis, but NGINX remains a broad competitor Traefik explicitly positions against in its migration messaging.
• Cloudflare: Cloudflare provides API Gateway, WAF, AI Gateway, and Workers AI as part of a broad edge and security platform. As a broad incumbent, Cloudflare competes with Traefik for cloud-native API gateway and AI routing workloads, particularly for internet-facing applications.
• AWS API Gateway: Amazon API Gateway is a hyperscaler-managed API gateway service tightly integrated with the AWS ecosystem. Traefik publishes a comparison (vs AWS API Gateway), positioning itself as a cloud-agnostic alternative for enterprises pursuing multi-cloud or hybrid architectures.
• Apigee (Google Cloud): Apigee is Google Cloud's enterprise API management platform with deep analytics and monetization features. Traefik explicitly compares against Apigee, competing for the same enterprise API management buyer — though Traefik's Kubernetes-native GitOps story differs from Apigee's broader enterprise positioning.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat7 records

Key risks5 records

Key highlights7 records

Customer concentration

• GitHubgithub.com/traefik/traefik
• LinkedInlinkedin.com/company/traefik
• Xx.com/traefik

Compliance6 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Funding overview

Funding rounds3 records

Investors4 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Traefik Labs