Managed cloud gateway and reverse proxy for internal applications
WZ-IT operates an upstream gateway layer that makes selected web applications available through a defined domain. Application servers, administration interfaces and internal networks do not have to be exposed directly to the public internet.
Companies worldwide trust WZ-IT
Make internal web applications accessible through a controlled external endpoint
The gateway separates the public entry point from the actual target system. Domain, TLS, routing and the agreed access path are brought together in one managed layer.
Defined endpoint
Users access a documented hostname that is assigned to one clearly scoped web application.
Separated origin
The target system remains behind the gateway and is reached only through the agreed network path.
Managed gateway layer
WZ-IT monitors the gateway service, maintains the system and proxy and manages the agreed TLS configuration.
Have a reverse proxy managed without exposing the application server directly
The starting point is intended for one clearly scoped HTTP(S) web application. Target system, reachability, user group and protection requirements are confirmed before provisioning.
Managed gateway instance
WZ-IT provides the upstream gateway layer and assumes responsibility for its technical operation.
Hostname and routing
A defined domain or subdomain is mapped to the agreed HTTP(S) target.
TLS certificate
Certificate provisioning, renewal and the agreed TLS configuration are managed on the gateway layer.
Network path to the target
A direct, restricted or private connection path is designed around the existing environment.
Monitoring and updates
Availability is monitored proactively 24/7. Security advisories, the operating system and proxy component are assessed and updated within the agreed scope.
Configuration backup
The gateway configuration required for recovery is backed up within the agreed scope. Application data remains separate.
Personal contact
Configuration, changes and technical findings are coordinated with a dedicated contact.
Service boundary
Operating the gateway does not automatically include operating the application
- Hosting, maintenance, backup or troubleshooting of the published application without an additional operating scope
- Full private network access for employees or administration without a VPN or secure-access solution
- Web application firewall, penetration testing or dedicated DDoS and bot protection without a separate scope
- Unlimited hostnames, target systems or protocols other than HTTP(S)
- SSO, complex authorisation, long log retention or increased availability without technical assessment
From an internal target system to a managed external endpoint
The application is only exposed after the target, network path, TLS, access rule and technical validation fit together.
- 01
Assess the application
Capture the target system, protocol, user group, domain and required reachability.
- 02
Define the connection
Choose the appropriate path between gateway and application and identify required firewall rules.
- 03
Configure the gateway
Set up and test the hostname, TLS, proxy rules and agreed access restrictions.
- 04
Enable and operate
Activate the endpoint in a controlled process, monitor and update it and document changes.
Starting price
Managed Cloud Gateway from €129.90 excluding VAT per month
The starting point applies to a manageable standard configuration. Before proposing the service, we review the target system, connection, access, traffic and operating requirements.
Managed Cloud Gateway
from €129.90 / month
excluding VAT, monthly
For one clearly scoped external access path to an internal, local or otherwise non-public web application.
- Managed gateway and reverse-proxy layer
- Defined hostname and HTTP(S) target
- TLS provisioning and certificate maintenance
- Proactive 24/7 monitoring of gateway availability
- Security advisory, system and proxy maintenance
- Backup of the relevant gateway configuration
- Essential service level for the gateway layer
- Documented configuration and a personal contact
The price is a starting point, not a flat rate for arbitrary applications or access models. Additional hostnames and targets, private tunnels, SSO, dedicated protection controls, traffic, log retention, setup and higher service levels are assessed transparently in the proposal.
All prices are net and exclude statutory VAT. The offers are addressed to businesses.
Suitable for clearly scoped web access
- An internal or on-premises web application should be accessible to customers, partners or employees
- The origin server or administration interface should not be exposed directly to the public internet
- Domain, TLS and routing should be managed on an ongoing basis
- An App Node, private server or cloud workload needs an upstream external endpoint
- Browser access is required but full private network access is not
What we need for initial assessment
- Requested domain or subdomain
- Target system, protocol and current reachability
- User group and requested access restrictions
- Expected traffic and required log retention
- Availability requirements and desired service level
Keep the gateway, private access and application operations clearly separated
Depending on the user path, the gateway can be combined with local infrastructure, private secure access or a dedicated operating framework.
WZ-IT App Node
Run open-source and business applications on a managed local application server at your organisation.
View App NodeVPN & Secure Access
Connect private networks, administration access, sites and users through identity-based controls.
View Secure Accessfrom €499.90 excl. VAT / monthSection 203 Managed Cloud
Assess the separate WZ-IT infrastructure and contractual framework for professional secrets.
View the Section 203 serviceRequest a gateway
Which web application should become accessible?
Describe the target system, user group, domain and current reachability. The enquiry is non-binding.
Frequently asked questions about the Managed Cloud Gateway
Reverse proxy, TLS, private connectivity, access and service boundaries
A managed cloud gateway is an upstream access layer operated by WZ-IT for selected web applications. It receives requests under a defined domain, terminates TLS and forwards them to the target through the agreed path. WZ-IT manages the gateway layer; the application and origin server are included only when they are covered by an additional agreement.
Yes. Its technical core is a reverse proxy operated by WZ-IT. The term cloud gateway describes the complete managed service covering provisioning, domain and TLS configuration, routing, monitoring, updates and documented integration with the existing environment.
The standard starting point is designed for browser-based applications and HTTP(S) targets. WebSockets and application-specific requirements can be considered after technical review. RDP, SSH, database access and full network access require a more appropriate secure-access, VPN or remote-desktop solution.
Not necessarily. Depending on the environment, the gateway can reach the target through a private tunnel, site-to-site connection or a tightly restricted public origin. The suitable approach depends on the location, firewall, existing connectivity and availability requirements.
The cloud gateway exposes one selected web service through a defined endpoint. A VPN or NetBird connects users, devices, sites and private networks. Secure access is generally more suitable for administration or several internal services, and both approaches can be combined.
Integration of an agreed hostname and provisioning and renewal of its TLS certificate on the gateway are part of the planned service scope. Registration, provider charges and administration of a new domain are itemised separately where required.
No. A reverse proxy is not automatically a web application firewall and does not replace penetration testing or dedicated DDoS protection. Access restrictions and technical protection components are assessed separately according to the actual risk.
The starting point is intended for a manageable standard configuration with a managed gateway layer, one defined hostname and HTTP(S) target, TLS, proactive 24/7 monitoring, updates, configuration backup and documentation. The final scope and price depend on factors including the connection, access model, traffic, logs, availability and additional infrastructure.
Yes. Managed Open Source, Managed Servers, App Node or software maintenance can be added as appropriate. The cloud gateway remains a separate component so that responsibilities for access, infrastructure and application remain transparent.
Yes, after assessment under the separate Section 203 Managed Cloud. Booking the standard gateway alone does not establish that operating and contractual framework. The application, data paths, participating infrastructure and required addenda are assessed together.
Let's talk about your project - honest and no strings attached
- Straight with Timo and Robin - no sales team, no pitch
- An honest take, including when we are not the right fit
- Concrete next steps for infrastructure, software or AI
No risk: worst case, you leave with a clearer understanding of your project than before.
“WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.”
Operations that visibly relieve customers
Customer feedback on monitoring, updates, maintenance, support and stable production systems.
“WZ-IT moved our studio infrastructure from decentralised individual devices to a central platform: every site is securely connected via VPN, new devices are onboarded automatically and an entire site is provisioned from a template, without manual steps on location. What impressed me most is the breadth and depth of their knowledge: Timo and Robin are not a typical IT provider who sets up a server and leaves. The two of them think their way into highly complex infrastructure and software topics, work through every requirement we put in front of them, and build networking, provisioning and operations so that everything fits together in the end. WZ-IT is an excellent partner for complex software, network and architecture projects.”
Steve Kirchner
Managing Director, nextGYM GmbH
“Professional, honest and technically thoroughly sound: WZ-IT set up our Proxmox and backup infrastructure securely and future-proof. The consulting from Timo and Robin was objective and needs-driven, the implementation smooth and the final documentation exemplary. You can tell immediately that business-critical infrastructure is thought through holistically from the outset here and implemented with clear ownership.”
Pascal Block
Project Manager, Stadtwerke Brühl GmbH
Stadtwerke Brühl - municipal energy and infrastructure utility.
“WZ-IT provided very competent support in implementing our server and virtualization infrastructure. As part of the project, a Proxmox-based virtualization environment was set up along with a virtual machine for our application systems. Additionally, a structured backup concept was implemented. A particular focus was on security: the setup of a VPN tunnel and the clean implementation of encryption and access concepts were professionally executed. The structured consulting as well as the reliable and swift implementation deserve special mention. We are very satisfied with the services provided and are happy to recommend WZ-IT.”
John Hellmerichs
Managing Director, AInergy GmbH
AInergy - consultancy for energy and facility management.
“WZ-IT manages our Proxmox cluster reliably and professionally. The team handles continuous monitoring and regular updates for us and responds very quickly to any issues or inquiries. They also configure new nodes, systems, and applications that we need to add to our cluster. With WZ-IT's proactive support, our cluster and the business-critical applications running on it remain stable, and high availability is consistently ensured. We value the professional collaboration and the noticeable relief it brings to our daily operations.”
Pascal Hakkers
Aphy AG
Aphy AG - AI platform for hotel back-office.
“Communication with WZ-IT was open, friendly and professional from the very beginning. Mr. Wevelsiep and Mr. Zins responded to every one of our questions patiently, promptly and respectfully, and contributed their own suggestions and good ideas on how to modernize our server infrastructure and adapt it even better to our needs. Throughout, WZ-IT consistently kept our need for data sovereignty and GDPR compliance in mind. Even short-notice adjustments and change requests from our side were implemented quickly and patiently and integrated consistently into the overall concept. From planning to the final handover, every step was documented transparently and comprehensively - so if a provider change should ever become necessary, the documentation would let us onboard a successor into our infrastructure very quickly. We are extremely satisfied with WZ-IT and hope to continue working together for a long time.”
Christoph Mußmann
Project Officer, DGHO e.V.
DGHO - German Society for Hematology and Medical Oncology.
“I got to know Timo and Robin as dedicated and professional partners who make a lot of things possible for their clients that initially seem impossible. I felt very well advised. The services offered have thoroughly convinced me. (translated)”
Andrea Pawlowski
Communications Manager, Golem.de
Golem.de - leading German IT news outlet.
“While looking for a partner to integrate a local AI solution, we came across Timo and Robin - and could not have made a better decision. They quickly understood our requirements and solved technical challenges competently and pragmatically. We were particularly impressed by the straightforward collaboration, their high level of expertise and the speed of implementation. We are delighted to have Timo and Robin at our side as reliable business partners and look forward to our next projects together. (translated)”
Henrik Jeche
Head of IT Administration
ml&s - full-service provider for the electronics industry.
“With Timo and Robin, you're not only on the safe side technically - you also get the best human support! Whether it's quick help in everyday life or complex IT solutions: the guys from WZ-IT think along with you, act quickly and speak a language you understand. The collaboration is uncomplicated, reliable and always on an equal footing. That makes IT fun - and above all: it works! Big thank you to the team! (translated)”
Sonja Aßer
Data Manager, ARGE
ARGE Neue Medien - master data & digital standards for plumbing and building technology.
“I recently worked with Timo and the WZ-IT team, and honestly, it turned out to be one of the best tech decisions I have made for my business. Right from the start, Timo took the time to walk me through every step in a simple and calm way. No matter how many questions I had, he never rushed me. The results speak for themselves. With WZ-IT, we reduced our monthly expenses from $1,300 down to $250. This was a huge win for us.”
Aleksandr Shuliko
CTO, EVA Real Estate
EVA Real Estate - leading real-estate agency in Dubai.
“We have had very good experiences with Mr. Wevelsiep and WZ-IT. The consultation was professional, clearly understandable, and at fair prices. The team not only implemented our requirements but also thought along and proactively. Instead of just processing individual tasks, they provided us with well-founded explanations that strengthened our own understanding. WZ-IT took a lot of pressure off us with their structured approach - that was exactly what we needed and is the reason why we keep coming back. (translated)”
Matthias Zimmermann
Managing Director, Annota GmbH
Annota - healthtech startup with an AI documentation assistant.
“Timo and Robin from WZ-IT set up a RocketChat server for us - and I couldn't be more satisfied! From the initial consultation to the final implementation, everything was absolutely professional, efficient, and to my complete satisfaction. I particularly appreciate the clear communication, transparent pricing, and the comprehensive expertise that both bring to the table. Even after the setup, they take care of the maintenance, which frees up my time enormously and allows me to focus on other important areas of my business - with the good feeling that our IT is in the best hands. I can recommend WZ-IT without reservation and look forward to continuing our collaboration! (translated)”
Sebastian Maier
Managing Director, Yonju GmbH
Yonju - business coaching and AI products.
“Counting on WZ-IT team was crucial, their expertise and solutions gave us the pace to deploy in production our services, even suggesting and performing improvements over our configuration and setup. We expect to keep counting on them for continuous maintenance of our services and implementation of new solutions.”
Gabriel Sanz Señor
Managing Director, Odiseo Solutions
Odiseo Solutions - software engineering for the space industry.
Let's Talk About Your Idea
Whether a specific IT challenge or just an idea - we look forward to the exchange. In a brief conversation, we'll evaluate together if and how your project fits with WZ-IT.
Arrange a callback
Companies worldwide trust WZ-IT