Antrea is an open-source networking and security project for Kubernetes workloads.
Alternatives to Hopr
Akamai Guardicore Segmentation is a self-hosted segmentation product with advanced outbound control and rules that work in both directions.
ColorTokens Xshield is an enterprise microsegmentation platform that creates micro-perimeters around network assets to limit the spread of malware and ransomware.
- 4
Cisco Catalyst Center
Cisco Catalyst Center is a centralized controller and management dashboard for enterprise network operations.
WebAPILinuxmacOS6.2 - 5

Istio
Istio is a free, open-source service mesh for securing, connecting, and monitoring distributed applications with few or no service-code changes.
Free planLinuxmacOSSelf-hosted6.2Free plan - 6

Calico Open Source
Calico Open Source provides networking, network security, and observability for Kubernetes environments across cloud, hybrid-cloud, and on-premises deployments.
Free planLinuxSelf-hostedWindows6.1Free plan - 7

Illumio Segmentation
WebAPILinuxSelf-hosted6.1 - 8

Cilium
Cilium is open-source software for providing, securing, and observing network connectivity between workloads, using eBPF.
Free planLinuxSelf-hosted6.0Free plan - 9
Juniper Security Director
Juniper Security Director centralizes network security policy management for Juniper SRX deployments through a web interface.
WebSelf-hosted5.9 - 10
OVN-Kubernetes
OVN-Kubernetes is a free, open-source Kubernetes networking solution and CNI-conformant plugin built on OVN and Open vSwitch.
APILinuxSelf-hostedWindows5.9 - 11

Aviatrix Zero Trust for Workloads
Aviatrix Zero Trust for Workloads enforces runtime zero trust policies for virtual machines, containers, and serverless workloads.
Web5.8 - 12
Kube-router
Kube-router is a free, open-source networking solution for Kubernetes clusters, designed to simplify operations while providing network performance.
Free planLinuxSelf-hosted5.8Free plan - 13

Calico Enterprise
Calico Enterprise is Tigera’s paid, self-managed platform for network security and observability in Kubernetes clusters.
WebLinuxSelf-hostedWindows5.7 - 14

Elisity Microsegmentation
Elisity Microsegmentation applies identity-based policies to users, workloads, and devices to limit lateral movement across IT, IoT, OT, and IoMT networks.
WebAPISelf-hosted5.7 - 15
Zentera CoIP Access Platform
Zentera CoIP Access Platform is enterprise security software for onboarding users and endpoints and controlling access to applications.
APILinuxmacOSSelf-hosted5.6 - 16

Tetrate Service Bridge
Tetrate Service Bridge is an Istio-based service mesh and control plane for connecting, monitoring, and securing microservices.
WebAPISelf-hosted5.5 - 17

Zero Networks Segment
Zero Networks Segment automatically microsegments network assets to help block lateral movement and limit the spread of attacks.
WebAPI5.4 - 18
HashiCorp Consul
WebLinuxmacOSWindows5.3 - 19
Xage Critical Asset Protection
Xage Critical Asset Protection secures operational technology, data centers, cloud, IoT, and infrastructure assets with virtual patching,…
WebSelf-hosted5.3 - 20

Cyninges TITAN
Cyninges TITAN combines agentless microsegmentation with privileged-access brokering for organizations protecting critical systems.
5.2 - 21

Isovalent Enterprise for Cilium
Isovalent Enterprise for Cilium is a paid, self-hosted Linux distribution combining Cilium, Hubble, and Tetragon, developed and supported by Cilium’s creators.
LinuxSelf-hosted5.2 - 225.0
- 23
SUSE NeuVector
SUSE NeuVector is a free, open-source Kubernetes security product designed for self-hosted deployment.
Web5.0 - 244.8
- 25
VMware NSX
Web4.8 - 264.7
- 274.7
- 28
4.6 - 294.4
- 304.4

