Apache Kafka vs Redpanda

Apache Kafka is Apache-2.0 with no paid edition from the project. Redpanda is Kafka API-compatible without ZooKeeper or the JVM, but its core is under the BSL and features such as tiered storage and audit logging need an enterprise key. This page helps you decide.

On this page

Apache Kafka vs Redpanda: when each platform is the right choice for your team

Choose Apache Kafka when your team has already standardized on Kafka clients and needs a licensing position it can sign off without reading a feature matrix. Apache Kafka is licensed under Apache-2.0, and the project itself offers no paid edition, so the license question ends with the open-source code. Choose Redpanda when you want fewer moving parts and can accept a source-available core, provided your team is comfortable with the Business Source License terms and with paying for enterprise features it needs. Kafka 4.x runs only in KRaft mode, so the operational comparison starts from a cluster with no ZooKeeper dependency on either side.

The decision turns on four questions. First, license obligations: the Redpanda core is under the Business Source License, which prohibits offering Redpanda as a commercial streaming or queuing service, and the enterprise features sit under the Redpanda Community License with a paid key. Second, which enterprise features you need, such as tiered storage, audit logging, role- and group-based access control, Kerberos authentication or Schema Registry authorization, because each of these requires an enterprise license. Third, client compatibility: confirm that every producer, consumer, Kafka Connect deployment and Kafka Streams application in your estate behaves correctly against the Redpanda API before you commit. Fourth, in-house operating skills, since your team will carry the upgrade, monitoring and incident work either way.

Before you decide, ask Redpanda for written confirmation of which features your architecture depends on and what happens to them under a trial or expired license. The Redpanda licensing documentation states that a cluster keeps running without data loss when an enterprise license expires, but enterprise features are restricted, so plan for that scenario in your risk register. Run a compatibility test with your own clients on a non-production cluster, and review Redpanda's licensing overview alongside the Kafka upgrade notes to confirm the Java and KRaft prerequisites that apply to your Kafka estate.

Which platform fits which scenario

This table maps common situations to the platform that usually fits better and the condition that decides it. Read each row against your own estate, since the right answer often depends on existing Kafka tooling and on whether enterprise features are required.

ScenarioBetter fitCondition that makes it so
Existing Kafka estate with Kafka Connect pipelinesApache KafkaConnectors, Kafka Streams jobs and operational runbooks already depend on Apache Kafka, so changing the engine adds migration and retesting work without a clear new capability.
Greenfield event platform with no Kafka historyEither, after a proof of conceptChoose Redpanda if you want a single binary without ZooKeeper or JVM tuning and the Community Edition covers your needs. Choose Apache Kafka if you want a project with no paid edition and a Java-based operating model your team already knows.
Team that needs tiered storage or audit loggingApache Kafka with added tooling, or Redpanda EnterpriseTiered storage and audit logging require a Redpanda enterprise license. Confirm the equivalent controls, storage model and vendor support you would need from the Apache Kafka distribution you run before deciding.
Team offering streaming as a commercial serviceApache KafkaRedpanda's core BSL prohibits offering Redpanda as a commercial streaming or queuing service, so confirm the license terms with counsel before building a hosted offering on it.
Regulated team that must avoid license-key dependenciesApache KafkaApache-2.0 has no paid edition from the project, while Redpanda's enterprise features need a paid key and restrict those features when the license expires. Confirm which of your required controls depend on Redpanda enterprise features.
Team that must keep Kerberos or role-based access controlApache KafkaKafka documents GSSAPI (Kerberos) and ACL-based authorization in its open-source release. Redpanda lists Kerberos authentication and role- and group-based access control among its enterprise features, so these need a license.
Team with strict Kafka client compatibility needsApache KafkaClients built against Apache Kafka 4.x behave as the reference. Test your client libraries, transactions and admin tooling against Redpanda before relying on compatibility for production traffic.
Team running on small hosts with limited operations staffRedpanda, if the Community Edition meets requirementsA single binary with no ZooKeeper or JVM can reduce moving parts. Confirm that features you need are not enterprise-only, and check the upgrade and support model that applies to your deployment.

How the two engines are built and what that means for operations

Kafka and Redpanda both speak the Kafka protocol, but they get there with different internals and different release mechanics. The cards below cover the controller layout, the Java requirement, the upgrade path and the tooling each one leaves to your operations team.

KRaft controllers in Kafka

Apache Kafka 4.0 supports only KRaft mode, so ZooKeeper is gone and cluster metadata lives in a Raft-based controller quorum. Brokers can run in combined mode, where the same servers act as broker and controller, or with dedicated controllers on separate nodes. Check which layout your team will run and how many controller nodes it can staff and patch. Clusters still on ZooKeeper must migrate to KRaft before moving to 4.x, and the upgrade notes advise moving KRaft clusters older than 3.3.x to 3.9.x first.

Java runtime for Kafka

Since Kafka 4.0, brokers, Kafka Connect and tools require Java 17, and clients and Kafka Streams applications need at least Java 11. Your platform team owns JVM patching, heap tuning and garbage collection behavior on every broker and Connect worker. Keep the JVM version in your change calendar, and confirm it matches your base image, vulnerability scanning and approved runtime list before you commit to a Kafka version.

ZooKeeper-free, JVM-free Redpanda

Redpanda describes itself as a Kafka API-compatible platform that runs without ZooKeeper or JVMs. Operationally, this removes the JVM tuning and garbage collection work from the broker tier, which changes what your on-call engineers watch during incidents. Test your own workloads, failover behavior and monitoring dashboards on Redpanda rather than assuming they carry over from a JVM-based Kafka cluster.

Kafka rolling upgrade path

Kafka's time-based release plan supports rolling upgrades from each release in the past year, which covers the last three releases, to the latest version. Plan upgrades as a sequence of hops rather than a single jump from an old line. The supported releases listed on the downloads page are 4.3.1, 4.2.2 and 4.1.2, so confirm which line your clusters run before scheduling change windows.

Redpanda release cadence and packages

Redpanda publishes free prebuilt stable packages for Debian and Ubuntu, Fedora, Red Hat and Amazon Linux, and macOS, along with rpk command line binaries. Its releases are tracked on GitHub, with v26.2.2 published on August 22, 2026. Ask your vendor or your own testing team which Redpanda line your environment will standardize on, how often you will move between releases, and whether your package mirror can host the packages you need.

Sizing and on-call tooling

Kafka operators typically work with the kafka-* command line tools, broker metrics and the KRaft quorum state. Redpanda operators use rpk for cluster administration and diagnostics. Both change how alerts are written and how a runbook reads during a controller or leader failure. Before you size either platform, ask each vendor for its recommended broker and controller counts for your throughput and retention targets, and have your on-call team run a failover drill with the tools they will actually use.

Will existing Kafka clients, Connect pipelines and Streams apps keep working?

Redpanda describes itself as an Apache Kafka-compatible streaming data platform, but compatibility is a claim you verify, not assume. Before any migration decision, run your own producers, consumers, Kafka Connect connectors, Kafka Streams applications and Schema Registry use against a non-production Redpanda cluster. Test the exact client library versions you run in production, the serialization formats you use, and the consumer group and offset behaviors your applications depend on. Treat a passing smoke test as the start of the evaluation, not the end of it.

Check the runtime constraints on the Kafka side as well. Since Kafka 4.0, brokers, Kafka Connect and tools require Java 17, while clients and Kafka Streams applications need at least Java 11, according to the Kafka upgrade notes. If any of your Streams applications or clients run on an older JVM, that upgrade is a prerequisite you pay for regardless of which broker you choose. Record the JVM version of every application and connector worker in your inventory so the constraint is visible in the plan. Review the Apache Kafka downloads page to confirm which Kafka line your clients are built against.

Ask Redpanda in writing to confirm feature parity for the specific APIs you use, including any admin APIs, transactional semantics, Kafka Connect worker behavior and Schema Registry compatibility modes. Also confirm which enterprise features your tests depend on, because security and operational features such as audit logging and role-based access control require an enterprise license. Document each confirmed gap, its workaround and the owner who accepts it before the production cutover.

Capabilities, license terms and enterprise features side by side

This table sets Apache Kafka's Apache-2.0 terms against Redpanda's core and enterprise licensing, row by row. Read the Redpanda column as a list of what needs a paid license key, and confirm any feature you depend on against the current Redpanda licensing documentation before you decide.

CapabilityApache KafkaRedpanda
LicenseApache License 2.0 (Apache-2.0), with no paid edition from the project itselfCore under the Business Source License (BSL), which converts to Apache 2.0 four years after each release's change date; enterprise features under the Redpanda Community License (RCL)
Cost of core softwareFree to use under Apache-2.0; your cost is the infrastructure and the people who run itCommunity Edition is free and source-available; Enterprise features require a paid license key, and the price is set by Redpanda
ZooKeeper and JVM dependencyKafka 4.0 removed ZooKeeper mode; brokers still run on the JVM and require Java 17Described by Redpanda as running without ZooKeeper or JVMs
KRaft-only operationKafka 4.x supports only KRaft modeNot applicable as a KRaft choice; confirm the internal metadata design in Redpanda's documentation
Kafka 4.x upgrade pathZooKeeper-based clusters must migrate to KRaft before upgrading to 4.x; KRaft clusters older than 3.3.x should move to 3.9.x first; rolling upgrades are supported from the last three releasesMigration from an existing Kafka cluster depends on your topology and client mix; confirm the migration tooling and supported paths with Redpanda
Client language minimumsBrokers, Kafka Connect and tools need Java 17; clients and Kafka Streams need at least Java 11Kafka API compatibility is claimed; confirm client library versions and language support for your stack
Tiered storageNot a core feature of the Apache release; confirm the status in the Kafka documentation for your versionRequires a Redpanda enterprise license
Continuous data balancingNot covered by the supplied facts; confirm your rebalancing approach with the Kafka operations docsRequires a Redpanda enterprise license
Audit loggingNot covered by the supplied facts; confirm with your Kafka distribution or toolingRequires a Redpanda enterprise license
Role- and group-based access controlSASL and SSL authentication with ACLs in the KRaft metadata log through the StandardAuthorizerRequires a Redpanda enterprise license
Kerberos authenticationSupported through SASL GSSAPIRequires a Redpanda enterprise license
Remote read replicasNot covered by the supplied facts; confirm against Kafka geo-replication options for your designRequires a Redpanda enterprise license
Schema Registry authorizationNot covered by the supplied facts; confirm with the Schema Registry product you runRequires a Redpanda enterprise license
Behavior on license expiryNot applicable; Apache-2.0 has no license keyCluster keeps running without data loss, but enterprise features are restricted

What the Apache-2.0 license and the BSL with RCL enterprise features each allow

Apache Kafka is an Apache Software Foundation project released under the Apache License 2.0 (SPDX: Apache-2.0). The project itself offers no paid edition, so the license terms and the software are the same for every organization that downloads it. Commercial support, managed hosting and enterprise tooling come from other vendors, and their terms are separate from the Kafka license.

  • No paid project edition: Every feature in the Apache Kafka distribution is available under the same license, with no key or license check.
  • Permissive terms: Apache-2.0 permits use, modification and redistribution, including inside commercial products, subject to its notice and attribution conditions.
  • Supported release lines: The downloads page lists 4.3.1, 4.2.2 and 4.1.2 as supported, and earlier versions are archived.
  • Third-party support is a separate contract: Any paid support, hosting or managed service is governed by that vendor's agreement, not by the Kafka license.

Check the NOTICE and license files in the distribution you deploy, and confirm with your legal team how Apache-2.0 obligations apply if you ship Kafka inside your own product.

Moving from Kafka to Redpanda, or back, without losing data or consumers

This sequence takes a team from an inventory of what depends on the cluster to a cutover in which producers and consumers move with their data intact, and it ends with a documented rollback path in case the move needs reversing.

  1. Inventory every client, connector and dependency

    The platform team lists every producer and consumer, every Kafka Connect source and sink connector, every Kafka Streams application, and every ACL, Schema Registry subject and monitoring or operator integration that touches the cluster. Each item gets an owner, the client library and version it uses, and the topics it reads or writes. The step is done when the owners sign off on the list and every consumer group has a named team responsible for its cutover. Anything that uses Redpanda-specific features, such as tiered storage or role-based access control, is flagged because it needs an enterprise license key before it can run.

  2. Confirm client and connector compatibility

    Engineers run each client library, Connect connector and Streams application against a non-production Redpanda cluster and record the results for produce, consume, transactions, consumer group rebalancing and Schema Registry calls. Redpanda describes itself as Kafka API-compatible, but the exact set of supported APIs, connector plugins and Kafka Streams behaviors should be confirmed against Redpanda's current documentation and tested with your own workloads. The step closes when every item on the inventory has a pass, a documented workaround, or a decision to stay on Kafka for that workload.

  3. Rebuild ACLs and access control on the target

    Security engineers translate the existing Kafka authorization model into the target's access control model. On Kafka 4.x, KRaft clusters store ACLs in the metadata log and deny resources without ACLs unless allow.everyone.if.no.acl.found is set, so the team should record which principals hold which permissions before recreating them. Role- and group-based access control on Redpanda requires an enterprise license. Authentication settings, including SASL mechanisms and Kerberos, must be checked against the license tier. The step is done when a permission test matrix passes for every principal on the target.

  4. Replicate topics with a supported mirroring method

    Operators copy existing topic data to the target using a mirroring approach that the vendor documents for cross-cluster replication. For Kafka, the geo-replication guidance covers cross-cluster data mirroring, and the team should confirm which tool and configuration the target platform supports for replicating data in from Kafka. Consumer offsets can be carried over only if the mirroring method replicates consumer group state, so teams should test this on a sample topic and check the offset values on the target before relying on them. The step closes when message counts, partition counts and sample payload checksums match between source and target for every replicated topic.

  5. Cut over producers and consumers in stages

    Teams move low-risk consumers first, then producers, then the most critical consumers, one topic group at a time. For each group, producers pause or switch to the target, lag on the source drains to zero, and consumers resume on the target from a recorded offset. Each stage has a go or no-go check covering consumer lag, error rates, duplicate or missing message counts and downstream data validation. The step closes when every consumer group reports stable lag on the target and the source has no remaining writers.

  6. Rebuild monitoring, licensing and operator tooling

    Platform engineers reconnect dashboards, alerting, backup jobs and any Kubernetes operator or deployment tooling to the target. Metrics names and alert thresholds usually change between platforms, so teams should compare the new metrics against the old ones before retiring alerts. On the licensing side, finance and legal record which Redpanda features run in production, confirm that a valid enterprise license is in place for each, and set a calendar reminder for trial or license renewal dates. The step is done when on-call staff can see health for every cluster and the license status is recorded.

  7. Hold the source cluster for a rollback window

    The source cluster stays in place, read-only where possible, for a period the team agrees in advance. During this window, the team confirms that no traffic reaches the source and that data on the target remains consistent with what the consumers have processed. The rollback procedure is written and rehearsed, including how to re-point clients and reverse any replication. The length of the window is a decision for the team, and the step closes when the agreed period ends with no open incidents on the target.

  8. Decommission the source after sign-off

    Once the rollback window closes and the owners sign off, the team removes the source cluster, its replication links, its ACLs and its credentials, and archives configuration and final offsets for audit purposes. Data retention and deletion obligations under internal policy or a compliance framework should be confirmed before any data is deleted. The step is complete when the source is shut down, its secrets are revoked, and the decommissioning record is filed with the change owner.

What drives the running cost of Kafka and Redpanda

The running cost of either platform is mostly people and infrastructure, and the software line is the smallest part for Apache Kafka. Apache Kafka is released under the Apache License 2.0 and has no paid edition from the project itself, so the license adds no fee. You pay for the servers or Kubernetes capacity that run brokers, KRaft controllers and Kafka Connect workers, for storage, for network traffic, and for the engineers who operate the cluster. Those costs recur every month. Many of them also grow with partition counts, retention and replication settings, so ask any vendor or integrator to model them against your expected throughput rather than against a single node.

Redpanda adds a license decision to the same list. Its core is under the Business Source License, but tiered storage, continuous data balancing, audit logging, role- and group-based access control, Kerberos authentication, remote read replicas and Schema Registry authorization all require an enterprise license. If your security or operations requirements call for any of these, budget an annual enterprise license fee as a recurring line, and ask Redpanda for its current price in writing. Confirm whether the quote covers support, which tier applies to your cluster size, and what happens to renewal timing if the license expires, since the enterprise features are restricted at that point even though the cluster keeps running without data loss.

Kafka's release cadence is a recurring effort item that is easy to underestimate. The project aims for three releases a year, one every four months, and supports rolling upgrades from each release in the past year to the latest version. Plan staff time for at least one upgrade cycle per year, including testing client applications against Java 17 for brokers and Connect, and the Java 11 minimum for clients. Also confirm who handles upgrades if you engage DeployOpen or another integrator on a retainer, and whether that retainer covers testing, rollback planning and documentation, so the quote reflects the work you will actually need.

Questions buyers ask about Kafka versus Redpanda cost, effort and migration

Is Redpanda free to run in production?

The Redpanda Community Edition is free and source-available on GitHub, and its core is licensed under the Business Source License, which allows any use except offering Redpanda as a commercial streaming or queuing service. Whether a free deployment is enough depends on which features you need. Tiered storage, continuous data balancing, audit logging, role- and group-based access control, Kerberos authentication, remote read replicas and Schema Registry authorization all require an enterprise license. Your cost is the infrastructure, the staff who run it, and any license fees if you need those features. Confirm the license terms against your intended use with Redpanda before committing.

When do we actually need a Redpanda enterprise license?

You need an enterprise license when a feature you depend on is in the enterprise set. Redpanda's licensing documentation lists tiered storage, continuous data balancing, audit logging, role- and group-based access control, Kerberos authentication, remote read replicas and Schema Registry authorization. Enterprise features sit under the Redpanda Community License and need a paid license key. New clusters receive a 30-day trial license, and only one trial is allowed per email address and business domain. Map your security, audit and storage requirements against that list early, because a compliance control that depends on audit logging or access control changes the cost of the platform.

What happens to our Redpanda cluster when the enterprise license expires?

The cluster keeps running and does not lose data, but enterprise features become restricted. Redpanda's licensing documentation states this directly, so an expired license is an operational and governance problem, not an outage by itself. Plan for the restricted state: if audit logging, access control or Kerberos authentication stop working as expected, your controls and evidence may be affected. Ask Redpanda to confirm exactly which functions are restricted at expiry and how renewal is handled, and document that answer in your change and continuity plans.

How long does a migration from Apache Kafka to Redpanda take, and what drives it?

No duration is fixed by the sources, so the answer depends on your environment. The main drivers are the number of topics and consumer groups, the client libraries and versions in use, how many Kafka Connect connectors and Kafka Streams applications depend on the cluster, the security configuration (SSL, SASL mechanisms and ACLs), and the retention and volume of data you need to move or replay. Each of these changes the testing and cutover work. Ask any implementation partner for a fixed-scope plan that lists these items, and confirm compatibility for each feature you rely on with Redpanda before you set a date.

Can our own team migrate to Redpanda without outside help?

A team with strong Kafka operations experience can run a migration in-house if it has the time and test capacity. The work includes validating client compatibility, reproducing your ACL and authentication model, rehearsing cutover and rollback, and running both platforms in parallel. Redpanda publishes free prebuilt packages and the rpk command line tools, which lowers the entry effort. Be honest about the gap: if no one has run a cluster through a security review or a failover test, outside help can shorten the path. DeployOpen plans, implements and documents this kind of work in your own infrastructure under a written scope.

What does the migration work require from our team?

The work requires named owners in four areas. Platform engineers handle installation, sizing and upgrades on their own infrastructure. Application teams confirm client libraries and behavior under Redpanda. Security staff recheck TLS, SASL and authorization, since Kafka's KRaft authorizer stores ACLs in the metadata log and blocks resources without ACLs unless configured otherwise. Operations staff own monitoring, backup and the rollback plan. Ask your vendor or partner to list which of these roles they expect you to fill, and to confirm which Kafka features your applications use before estimating your internal time.

Is Apache Kafka still the safer default for most teams?

Apache Kafka is the safer default when you need a permissive license with no paid edition from the project, and when you want security and operational features to be part of the open-source distribution. Apache Kafka is licensed under Apache-2.0, and its supported releases are 4.3.1, 4.2.2 and 4.1.2, with rolling upgrades supported from each release in the past year. Redpanda is a reasonable choice when a single-binary, no-JVM design matters more to you than the enterprise feature set and its license terms, and when the enterprise features you need are affordable under its license. Decide on license, features and operating model together, then test your workload against both.

Where Kafka and Redpanda implementation projects usually run long

Security setup is the most common source of delay. Apache Kafka authenticates clients, brokers and tools with SSL or SASL, and the documented SASL mechanisms include GSSAPI (Kerberos), PLAIN, SCRAM-SHA-256, SCRAM-SHA-512 and OAUTHBEARER. Teams often underestimate how many listeners, certificates and client configurations must agree before the first secured connection works. Security is optional in Kafka, so mixed secured and unsecured listeners are easy to leave in place by accident. Confirm early which mechanism your identity provider and existing clients support, and check whether Redpanda's Kerberos authentication, which needs an enterprise license, is the path you need.

ACL design in KRaft is the second risk. In KRaft clusters the StandardAuthorizer stores ACLs in the cluster metadata log, and resources without ACLs are restricted to super users unless allow.everyone.if.no.acl.found is set to true. Teams that migrate from a permissive environment frequently discover that producers and consumers are blocked after cutover because no ACLs were written for them. Agree the principal naming scheme, topic and consumer group ownership and the super user list before migration testing begins. Redpanda's role- and group-based access control is an enterprise feature, so confirm which access model your compliance team expects before design work starts.

Client compatibility gaps and licensing review add time that is easy to leave out of the first plan. Kafka clients and Kafka Streams applications must run on at least Java 11, and brokers and Kafka Connect require Java 17, so older client stacks may need upgrades first. Redpanda is Kafka API-compatible, but every feature your applications, connectors and monitoring tools depend on should be tested rather than assumed. Legal and procurement reviews of the Business Source License core and the Redpanda Community License enterprise features also run in parallel with engineering, and cutover coordination across application, platform and security teams sets the final pace. DeployOpen plans these workstreams, tests them and writes the cutover runbook inside a fixed written scope agreed before work begins, so the quote reflects the specific clusters, clients and approvals involved.

Four risks to check before choosing either platform

Apache Kafka and Redpanda speak the same client protocol, so the differences that matter show up in licensing, client behavior and the skills your team needs to run each one. The four cards below are the checks most likely to change the decision after the platform is already in production.

License key dependency

Redpanda's core runs under the Business Source License, but several features need a paid enterprise license key under the Redpanda Community License. Tiered storage, continuous data balancing, audit logging, role- and group-based access control, Kerberos authentication, remote read replicas and Schema Registry authorization all sit behind that key. This matters if your security or retention requirements depend on any of them. Confirm which features your design needs, whether they are covered by your license tier, and who holds the key. Apache Kafka has no paid edition from the project itself, so these controls are part of the standard distribution.

Expired license behavior

When an enterprise license expires, a Redpanda cluster keeps running without data loss, but enterprise features are restricted. For an audited environment, that restriction can break a control you assumed was always on, such as audit logging or access control. Ask Redpanda how each restricted feature behaves after expiry, and rehearse the renewal process in a test environment before you rely on it. Plan the renewal as an operational task with a named owner, not as an annual procurement event that someone remembers late.

Client compatibility gaps

Redpanda describes itself as Kafka API-compatible, which is not the same as identical behavior for every client, connector and tool. Kafka Connect, Kafka Streams, schema tooling and custom admin scripts may depend on broker features, configuration keys or authorization behavior that differ. Kafka's own KRaft authorizer denies resources without ACLs unless the allow.everyone.if.no.acl.found setting is true, so verify that your access model behaves the same on both. Run your actual producers, consumers and connectors against a Redpanda test cluster before committing.

Operating skills for either platform

Both platforms need people who can run a Kafka-protocol cluster, but the skills differ. Apache Kafka 4.x requires KRaft, Java 17 for brokers and Kafka Connect, and a documented upgrade path from older releases. Redpanda removes the JVM and ZooKeeper, which simplifies some tasks while adding its own tooling, such as the rpk command line, and license administration. Map your team's current Kafka experience against each operating model, and budget training and on-call coverage for whichever platform you choose.

How DeployOpen helps you choose, implement or migrate

DeployOpen is a Chainscore Labs company that plans, implements, integrates, hardens, backs up, documents and supports self-hosted open-source platforms inside your own infrastructure. For Apache Kafka vs Redpanda, we start from your licensing position, client compatibility needs and the enterprise features you expect to use, then build the path that fits your environment.

How we scope

  • We confirm which Kafka clients, connectors and security controls your applications depend on before choosing a platform.
  • We map which features you need and whether each requires a Redpanda enterprise license or is available in Apache Kafka.
  • Engagements are fixed-scope, with deliverables and timelines agreed in writing before any work starts.

How we build

  • We deploy the chosen engine in your cloud accounts, data centers or air-gapped network, with the topology you approve.
  • We test client compatibility, authentication, TLS and authorization settings against your existing producers and consumers.
  • We run a proof of concept on representative topics so you can measure behavior before committing to production.

How we hand over

  • We document architecture, configuration, access controls, license handling and the operating runbooks your team will use.
  • We walk your platform and operations staff through upgrades, backups, restores and failover procedures.
  • We deliver evidence and configuration records your auditors or internal reviewers can examine directly.

How we support

  • Ongoing support, upgrades and continuous testing are available as retainers agreed separately from the initial scope.
  • We can plan upgrades across Kafka or Redpanda release lines and confirm supported versions before each change.
  • Retainer scope covers your environment, so ask us to confirm response coverage and exclusions in writing.

Sources and further reading

Talk to our team.

Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.

  • 30-minute call: free, with no obligation.
  • NDA on request: we can sign before you share details.
  • Clear next steps: a scope and plan after the call.