Home/About

About Backport

Backport is an open-source API gateway built for developers who need enterprise-grade protection and performance — without the enterprise complexity.

Backport is production-ready. It is actively maintained, MIT licensed, and the core engine is fully open source and auditable. Check the changelogfor what's new.

Our Mission

Adding API gateway features shouldn't mean deploying heavy infrastructure like Kong or AWS API Gateway, or writing complex middleware. Backport was built to solve this — a lightweight reverse proxy that you can set up in under a minute, giving your backend production-grade protection instantly.

Every request passes through a comprehensive security pipeline — WAF inspection, rate limiting, cache checks, response transformation, and idempotency guards — before reaching your origin server. Your backend stays untouched while gaining enterprise-grade protection and acceleration.

Production Infrastructure

Backend

Python, FastAPI, SQLAlchemy, httpx

Frontend

Next.js, React, TypeScript, Tailwind CSS

Database

PostgreSQL

Payments

Razorpay

Resend

License

MIT — free and open source

Capabilities

17 regex-based WAF patterns covering SQL injection, XSS, path traversal, command injection, LDAP injection, and XXE
Custom WAF rules — write your own regex security patterns
Sliding-window rate limiting (100/500/5,000 requests per minute by plan)
In-memory LRU cache for GET requests (5-minute TTL, up to 1000 entries)
Idempotency key support for POST/PUT/PATCH deduplication (up to 5000 stored keys)
Response transformation — modify API responses on the fly
API mocking — define mock endpoints for frontend development and testing
Webhook notifications — real-time alerts to Slack, Discord, or any URL
Dashboard with analytics, request logs, traffic charts, and security alerts
JSON + CSV log export

Source Code

Backport is fully open source under the MIT license. You can view the source code, report issues, or contribute on GitHub.