Prevent attacks
before they happen

Prevention-centric, plug-and-play security for containers & Kubernetes

Tigera CNAPP Explainer Video

The State of Calico Open Source: Usage & Adoption Report 2023

Get insights into Calico’s adoption across container and Kubernetes environments, in terms of platforms, data planes, and policies.

Read the Report >

O’Reilly ebook: Kubernetes security and observability

Adopt a holistic security and observability strategy to secure cloud-native applications

Download eBook

Container Network Security with Calico Container Firewall

Learn why cloud-native applications demand a new approach to network security

Read Blog

Container and Kubernetes Security Self-paced Courses

Learn how to address common security and observability challenges–all at your own pace

Learn More

Trusted by global enterprises & startups

Active security for
containers and Kubernetes

Plug-and-play security platform that actively prevents, detects, and mitigates breaches

Why Tigera?

Containers and Kubernetes demand a prevention-centric security approach

Reduce attack surface

We scan each image to ensure that workloads have the fewest possible vulnerabilities. We layer on configuration security with KSPM, egress controls, and microsegmentation. Finally, we protect workloads at runtime with workload-based IDS/IPS, WAF, and malware detection using process hash.

Detect container and network-based attacks

We provide out-of-the-box eBPF-based detectors to detect any container or network-based attack. Our plug-and-play detectors do the heavy lifting so security teams can spend more time on preventing and detecting attacks.

Mitigate the risk of exposure

Our defense-in-depth approach assumes breach and provides mitigating controls to prevent breaches from turning into disasters. Through contextual alerts, policy recommendations, and rapid policy deployment, you can neutralize threats upon discovery.

Key solutions

Container Security

Complete security for containers and Kubernetes. Protect your CI/CD pipeline, Kubernetes platform, and containerized workloads.

Learn more

Kubernetes Security

Manage Kubernetes workload security posture and secure traffic within and outside the cluster to reduce risk, achieve compliance, and actively protect against security threats.

Learn more

Multi-Cloud Security

Centralized cloud-native application protection across on-premises, hybrid, and multi-cloud environments, and on any Kubernetes distributions or data plane.

Learn more

Compliance

Cloud-native application encryption and compliance for major standards, including PCI DSS, HIPAA, GDPR, SOC 2, NIST, CCPA, and any custom frameworks. Continuously monitor compliance with daily, weekly, and monthly evidence and audit reports.

Learn more

Calico product editions

Calico Open Source

eBPF-based networking and securityLearn More

Calico Cloud

Pay-as-you-go SaaS platform for container securityLearn More

Calico Enterprise

Self-managed platform for Kubernetes securityLearn More
Compare Editions

Tigera - The inventors of Calico Open Source

The most widely adopted open-source security and networking solution for containers and Kubernetes

Calico Open Source by the numbers

1000000+
Nodes
10000+
Clusters
100000000+
Docker Pulls
10000+
Enterprises
>2
of Fortune 100
2
Countries
Join the Community

Get started with container security

Scale up your expertise

Resource Center

Become an expert in security, observability, and networking for containers and KubernetesExplore

Certifications

Gain the confidence you need to run mission-critical, cloud-native workloads in productionGet Certified

Documentation

Browse documentationLearn More