Keycloak
Keycloak in production mode behind a reverse proxy, with PostgreSQL storage and hostname configuration already correct.
Offline password manager storing credentials in an encrypted KDBX database, with key file support, plugins and auto-type for desktop sessions. Built and maintained by WIEWAVE for Azure Marketplace, on Windows Server, Ubuntu and Debian.
| Built & maintained by | WIEWAVE |
|---|---|
| Category | Security |
| Operating systems | Windows Server, Ubuntu, Debian |
| Marketplaces | Azure Marketplace |
| Offer types | Public listing, with private offers on request |
| Marketplace | Status |
|---|---|
| Azure Marketplace | Published |
| AWS Marketplace | Available on request |
| Google Cloud Marketplace | Available on request |
Need it on another marketplace, or as a private offer for your organisation? cloud@wiewave.com
Each image follows its distribution's own provisioning model, package manager and security tooling — not one build relabelled several times.
Windows Server 2019, 2022 and 2025 images for stacks that need a Microsoft base.
LTS and interim releases, Minimal and Pro variants, built to Canonical's cloud-image conventions.
Stable and oldstable, with backports where a workload needs a newer runtime than the release ships.
The same four steps behind every offer we've published, including the hardening and CIS Benchmark checks every build goes through.
The distribution, licensing model and target marketplaces are agreed before anything is built.
Packer templates, Ansible provisioning and a pinned package set — then hardened, scanned and checked against the CIS Benchmark for its distribution.
Taken through each cloud's own certification pipeline before it goes live on the marketplace.
Rebuilt on the upstream security cadence and re-published, with old versions retired without breaking deployments.
If yours isn't here, ask our marketplace team directly.
Secrets management, identity, VPN gateways and CIS-benchmarked hardened base images.
Keycloak in production mode behind a reverse proxy, with PostgreSQL storage and hostname configuration already correct.
Command-line utility that imports realm, client and role definitions into Keycloak from version-controlled JSON or YAML, enabling configuration as code.
Sidecar that authenticates incoming requests and authorises them against Kubernetes RBAC before forwarding to an otherwise unprotected upstream such as a metrics endpoint.
Scans clusters, manifests and images against NSA, MITRE and CIS controls, reporting misconfigurations and vulnerabilities from CI or the command line.
ModSecurity version 3 library with connectors for Nginx and Apache, delivering web application firewall rule processing and OWASP Core Rule Set support.
IPsec VPN implementation for Linux supporting IKEv1 and IKEv2, packaged with the pluto daemon and configuration templates for site-to-site tunnels.
Tell us the distribution, the marketplace and the commercial model — we'll build, certify and publish it as a public listing or a private offer.