The Cloudflare stack, self-hosted — CDN & DNS free, access from $2 / user / mo

One edge stack for every app.
Access · WAF · DNS · CDN. One line.

Empire Edge is a single Traefik-native edge in front of any web app: an identity gate, a WAF-lite, DNS management, and a caching CDN — adopted with one middleware label. The CDN and DNS layers are free; you only pay for the access gate. Self-hosted. No per-app SDK.

See pricing  Read the docs

🔒 Access gate (paid)

Traefik consults one /verify endpoint for every protected route. Apps ship with zero auth code, backed by EliteSSO JWT + owner-key / magic-link login.

⚡ WAF-lite (paid)

Per-client rate-limiting and hardened security headers (HSTS, frame-deny, no-sniff) chain in as reusable middlewares.

🌐 CDN + DNS free

Edge cache (Cache-Control + stale-while-revalidate) and gzip/br compression, plus DNS record management — the former EmpireCDN / EmpireDNS, now bundled free into Empire Edge.

Why teams switch off the Cloudflare stack

Same edge model — access, WAF, DNS and CDN — a third of the price, self-hostable.

 CloudflareEmpire Edge
Access / user / mo$3 – $7 (Access)$2 – $5
CDN + edge cachePaid tiers / meteredFree tier
DNS managementFree w/ CF accountFree, self-host option
Per-app auth codeNone (edge)None (edge)
Self-host optionNoYes
Add an appDashboard policyOne Traefik label
Start free (CDN + DNS)