Eliminate misconfigurations and enforce Kubernetes best practices using policy-as-code. Get policy insights, alerts, reports, and team collaboration through integration with DevSecOps processes, tools, and workflows.
Misconfigurations are the leading cause of security issues in Kubernetes. Eliminate misconfigurations and automate operations with Kubernetes-native policies. Built by the creators of Kyverno, Nirmata Control Hub simplifies Kubernetes operations with automated policy-based governance to reduce risk, automate security, and optimize costs.
Key Benefits
Policy-based Intelligent Guardrails: Rapidly deploy Intelligent Guardrails by implementing curated best practices, and community crowdsourced or custom-developed policies.
Policy-as-Code: Easily manage policies through their entire lifecycle, ensuring consistent deployment and governance.
Policy Reporting and Alerts: Gain insights on the effectiveness of policy through reporting and contextual correlation and insight engine.
Continuous Compliance: Protect the software supply chain with continuous compliance through policies as a standard part of the DevOps pipeline.
Collaboration: Leverage existing processes and workflows by integrating with tools like Git, Slack, Jira, and others.
Highlights
Ensure Security, Compliance and Operational Readiness of Kubernetes Workloads and Clusters
Facilitate Effective and Efficient DevSecOps Collaboration
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
You choose one of three tiers, all priced by the number of hosts you govern. The Essentials Tier covers centralized policy management, reporting, and observability for teams. The Advanced Tier steps up for mission-critical production workloads. The Enterprise Tier adds bespoke integrations and air-gapped deployments for global infrastructure. As your host count grows, your cost scales with it. Each tier builds on the one below, so you move up as your governance and deployment needs expand.
Top-of-mind questions for buyers
What counts as one host for billing across the tiers?
You are billed per host you govern, meaning each node under management. All business plans include a base of 20 clusters or 250 nodes. If you go beyond that, additional clusters or nodes are priced based on consumption tiers.
What does my cost do as my host count grows past the included base?
Your base plan covers 20 clusters or 250 nodes. When you exceed that, you pay for the extra clusters or nodes on consumption tiers. Cost rises with the added capacity, not the whole existing base. The tier you chose stays the same.
Which tier do I need for air-gapped or on-premises deployments?
Only the Enterprise Tier supports full air-gapped and on-premises deployments. It also adds bespoke integrations and sovereign controls such as bring-your-own-key. The Essentials and Advanced Tiers do not include air-gapped options.
nirmata.com
Helpful?
Vendor refund policy
15 days free trial
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Pricing includes business day support- 24x7 support is available at an additional 20 percent cost- Enablement services are available at an additional cost- We are here to help, if you have any questions please reach out to us at support@nirmata.com
24x7 support is available at an additional 20% cost
Enablement services are available at an additional cost
We are here to help, if you have any questions please reach out to us at support@nirmata.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Kyverno is a policy engine natively designed for Kubernetes to secure and automate Kubernetes configurations. Nirmata Enterprise for Kyverno helps you accelerate time to value and achieve peace of mind. Get enterprise support, adapters, services, and training!
Kyverno is a policy engine natively designed for Kubernetes to secure and automate Kubernetes configurations. Nirmata Enterprise for Kyverno helps you accelerate time to value and achieve peace of mind. Get enterprise support, adapters, services, and training!
Enterprise support for open source Kyverno adopters is provided by Nirmata, the creators and maintainers of Kyverno. Kyverno can be used with Amazon EKS for security and governance. We work with Kyverno adopters to enforce EKS Best Practices and accelerate their adoption of Amazon EKS.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.