Contract Firewall

Contract testing without writing contracts

Your OpenAPI spec says one thing, production does another.

Point your traffic at the proxy and it learns your API’s real contract from observed requests. When a deploy would break that contract, the CI gate blocks it, before your consumers find out.

How it works

  1. Point traffic at the proxy

    Send your API traffic through a Cloudflare Worker. It forwards every request untouched and watches the shapes go by. PII is masked at capture, before anything is stored.

  2. It learns the contract

    After enough real requests, each endpoint flips from learning to enforcing. The observed shape becomes the contract. No spec files to write or maintain.

  3. The gate blocks breaking deploys

    A field disappears or a type changes, and the detector raises a violation. Your pipeline asks the gate before shipping. A breaking change means blocked.

What you get

Join the waitlist

We are opening it up gradually. Leave your email and we will write when your turn comes.