Nirmata Control Hub
Nirmata Control Hub centralizes Kubernetes policy governance, compliance, image risk, exceptions, and remediation.
What Nirmata Control Hub is
Nirmata Control Hub centralizes Kubernetes policy governance, compliance, image risk, exceptions, and remediation. It syncs policy sets from Git to selected clusters and can scan repositories and CI pipelines. Teams can scope policy exceptions to namespaces, clusters, repositories, or resources, set expiration, and route them through reviewers and MFA. The product displays CVEs by severity, policy violations, and the workloads and clusters where images run. Its compliance view maps policies to CIS, Pod Security, PCI DSS, NIST, and custom standards, with scheduled email reports. Agent Hub provides security, compliance, cost, and troubleshooting agents that can run on demand or on a schedule and offer fixes as pull requests. Integrations include GitHub, GitLab CI, Terraform Cloud, Slack, Jira, ServiceNow, Okta, Azure AD, and AWS SSO. Plans include Nirmata Essentials at $1,800 per month and Advanced at $4,500 per month, each including 20 clusters or 250 nodes across business plans; additional clusters or nodes are priced by consumption tiers. Enterprise pricing is custom, and only Enterprise supports full air-gapped and on-prem deployments. The service offers a 15-day trial and no free plan.
Good
- Syncs policy sets from Git to selected clusters.
- Scopes exceptions and supports expiration and reviewers.
- Maps policies to named compliance standards.
- Includes image CVE and workload visibility.
- Offers security, compliance, cost, and troubleshooting agents.
Watch out
- No free plan is listed.
- Full air-gapped and on-prem deployment requires Enterprise.
- Enterprise pricing is custom.
- Essentials costs $1,800 per month.
Who it suits
The product is aimed at teams managing Kubernetes policy, image risks, and compliance across clusters. Its plan descriptions distinguish teams seeking centralized visibility and control, mission-critical production workloads, and large enterprises.
Verdict
Nirmata Control Hub combines policy management, exception handling, compliance views, and image-risk visibility for Kubernetes environments. Check the deployment tier and included cluster or node allowance against your needs before choosing a plan.
Plans and prices
From Nirmata Control Hub's own pricing page, checked 29 Sep 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Nirmata Enterprise Kyverno | $1,250 a month | 0-CVE images · 18 month patch support · long term version compatibility · $1,250 per month |
| Nirmata Essentials | $1,800 a month | 20 clusters or 250 nodes included across business plans; additional clusters or nodes priced by consumption tiers · $1,800 per month |
| Nirmata Advanced | $4,500 a month | 20 clusters or 250 nodes included across business plans; additional clusters or nodes priced by consumption tiers · $4,500 per month |
| Nirmata Enterprise | Priced on request | 20 clusters or 250 nodes included across business plans; additional clusters or nodes priced by consumption tiers · Custom Pricing |
The facts
Each one read from Nirmata Control Hub's own pages, with the date it was checked.
What it does
- AI agents
- Agent Hub offers security, compliance, cost, and troubleshooting agents that can run on demand or on a schedule and provide fixes as pull requests.checked 29 Sep 2026
- Compliance
- Its compliance view maps policies to CIS, Pod Security, PCI DSS, NIST, and custom standards and supports scheduled email reports.checked 29 Sep 2026
- Data access
- Nirmata says it is designed to have no access or visibility to application data and stores policy-related information and Kubernetes resource metadata.checked 29 Sep 2026
- Deployment options
- The pricing page says only the Enterprise tier supports full air-gapped and on-prem deployments.checked 29 Sep 2026
- Exception management
- Policy exceptions can be scoped to a namespace, cluster, repository, or resource, given an expiration, and handled with reviewers and MFA.checked 29 Sep 2026
- Identity controls
- Nirmata documents SAML v2 single sign-on, role-based access controls, and optional multi-factor authentication for the web console.checked 29 Sep 2026
- Integrations
- The product page lists GitHub, GitLab CI, Terraform Cloud, Slack, Jira, ServiceNow, Okta, Azure AD, and AWS SSO integrations.checked 29 Sep 2026
- Intended users
- The pricing page describes Essentials for teams seeking centralized visibility and control, Advanced for mission-critical production workloads, and Enterprise for large enterprises.checked 29 Sep 2026
- Policy management
- It syncs policy sets from Git, deploys them to selected clusters, and can scan repositories and CI pipelines.checked 29 Sep 2026
- Purpose
- Nirmata Control Hub centralizes Kubernetes policy governance, compliance, image risk, exceptions, and remediation.checked 29 Sep 2026
- Security
- Nirmata states that it has SOC 2 Type 2 compliance and encrypts sensitive customer data such as access tokens and passwords.checked 29 Sep 2026
- Support
- The pricing page says flexible support packages are available for any plan.checked 29 Sep 2026
- Vulnerability visibility
- The product shows CVEs by severity, policy violations, and the workloads and clusters where images run.checked 29 Sep 2026
The company
- Headquarters
- Santa Clara, California, United Stateschecked 28 Sep 2026
Alternatives to Nirmata Control Hub
- 1
Kubescape
Free planOpen sourceAPILinuxmacOSSelf-hosted8.2From $30 a month - 2
Kyverno
Free planOpen sourceWebAPILinuxmacOS7.7Free plan - 3
Open Policy Agent Gatekeeper
Free planOpen sourceAPILinuxSelf-hosted7.2Free plan - 4
Sysdig Secure
WebAPILinuxmacOS7.2From $20 a month - 5
Fairwinds Polaris
Free planWebLinuxmacOSSelf-hosted7.1Free plan - 6
Trivy Operator
Free planOpen sourceAPILinuxSelf-hosted6.9Free plan