Skip to main content

Klaw: Apache Kafka® governance toolkit

Streamline your Apache Kafka ecosystem, secure your data & simplify governance

Go to docs

Quickstart: Get up and running with Klaw in no time!

docker run -d -t -i \
-e KLAW_CLUSTERAPI_ACCESS_BASE64_SECRET="dGhpcyBpcyBhIHNlY3JldCB0byBhY2Nlc3MgY2x1c3RlcmFwaQ==" \
-p 9343:9343 \
--name klaw-cluster-api aivenoy/klaw-cluster-api:latest --add-host host.docker.internal:host-gateway \
&& docker run -d -t -i \
-e KLAW_UIAPI_SERVERS=http://host.docker.internal:9097 -e KLAW_CLUSTERAPI_ACCESS_BASE64_SECRET="dGhpcyBpcyBhIHNlY3JldCB0byBhY2Nlc3MgY2x1c3RlcmFwaQ==" \
-p 9097:9097 --name klaw-core aivenoy/klaw-core:latest \
&& docker run -d -t -i -p 2181:2181 --add-host host.docker.internal:host-gateway \
-e ALLOW_ANONYMOUS_LOGIN=yes --name klaw-zookeeper bitnami/zookeeper:3.8 \
&& docker run -d -t -i -p 9092:9092 --add-host host.docker.internal:host-gateway \
-e KAFKA_ADVERTISED_LISTENERS=PLAINTEXT://host.docker.internal:9092 \
--name klaw-kafka bitnami/kafka:3.3 \
&& docker run -d -t -i -p 8081:8081 --add-host host.docker.internal:host-gateway \
-e SCHEMA_REGISTRY_KAFKA_BROKERS=PLAINTEXT://host.docker.internal:9092 \
--name klaw-schema-registry bitnami/schema-registry:latest

Klaw will be running at http://localhost:9097 on your machine. Learn about other options and next steps in the quickstart guide.

Key Features

Data governance

Create, modify, subscribe and promote Apache Kafka® topics, schemas as well as manage users/acls via the web based UI.


Fine grained permissions to access resources, combined with the "Four Eyes" approval principal ensure that your kafka cluster is protected from incorrect or malicious changes.

User management

Easily authenticate and authorize users with assigned roles and teams. Ability to Integrate directly with AD/SSO/third party providers like Google/Microsoft.

Use cases

Make better decisions

With the right governance in place, you can make consistent, confident business decisions based on the trustworthy metadata for all your Apache Kafka® environments.

Enhanced regulatory compliance and audit

Apache Kafka® moves critical data throughout your organizations. Using proper user management and policy with Klaw, you can avoid risks associated with noncompliance while proactively anticipating new requirements.

Developer self-service

Klaw provides an intuitive and easy to use web UI to manage Apache Kafka topics and connectors, allowing developers to maintain velocity without needing to know kafka specific knowledge while conforming to an organizations governance standards.


Kafka Flavors

  • Apache Kafka
  • Aiven for Apache Kafka
  • Confluent
  • Confluent Cloud


  • Windows Active directory
  • Azure Active directory (AAD)
  • Google
  • Third party providers (ex: Github)
  • Database


  • SSL