Nirmata Enterprise for Kyverno
Nirmata Enterprise for Kyverno is a supported, OSS-compatible distribution of the Kyverno Kubernetes policy engine.
What Nirmata Enterprise for Kyverno is
Nirmata Enterprise for Kyverno is a supported, OSS-compatible distribution of the Kyverno Kubernetes policy engine. Existing Kyverno policies, CRDs, APIs, and tooling work unchanged, while policies use Kubernetes-native YAML and CEL. The product provides policy testing, admission control, CI/CD integration, and policy reporting across Kubernetes manifests, Terraform and OpenTofu plans, Dockerfiles, AWS CDK, CloudFormation templates, and Ansible playbooks. Nirmata’s nctl tool can scan Terraform configurations, Dockerfiles, and Kubernetes manifests in CI pipelines. Each supported release receives 18 months of patch support, including backported engine fixes and dependency CVEs, with 24/7 enterprise support and CVE SLAs. Deployment is documented for Amazon EKS and Amazon EKS Anywhere, and listed compatibility spans Kubernetes versions 1.28 through 1.37+ across branches. The plan costs $14,800 a year, billed Per year; pricing scales with cluster footprint and requires a quote. It is also available through AWS Marketplace with pay-as-you-go.
Good
- Existing Kyverno tooling works unchanged
- 18 months of patch support per release
- 24/7 enterprise support with CVE SLAs
- Policy testing and admission control
- Scans infrastructure files in CI
Watch out
- No free plan
- $14,800 a year
- Pricing scales with cluster footprint
- Older Kubernetes support ends with provider support
Who it suits
It suits businesses needing a supported Kyverno distribution, policy controls, and tested builds for Kubernetes environments. Teams using EKS, CI pipelines, or multiple infrastructure-as-code formats may find its listed integrations relevant.
Verdict
Nirmata Enterprise for Kyverno adds support, patching, compatibility testing, and enterprise services around Kyverno without changing existing policies and tools. Its annual paid plan and cluster-footprint pricing make commercial terms important to confirm before adoption.
Plans and prices
From Nirmata Enterprise for Kyverno's own pricing page, checked 7 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Nirmata Enterprise for Kyverno | $14,800 a year | Backported CVE fixes for supported releases · 18 months of patch support per release · 24/7 enterprise support with CVE SLAs · Kubernetes compatibility testing · upgrade planning · Per year; pricing scales with cluster footprint and requires a quote. |
The facts
Each one read from Nirmata Enterprise for Kyverno's own pages, with the date it was checked.
What it does
- CI integration
- Nirmata says its nctl tool can scan Terraform configurations, Dockerfiles, and Kubernetes manifests in CI pipelines.checked 7 Oct 2026
- Compatibility
- The compatibility table lists supported Kubernetes versions by Kyverno release, including versions 1.28 through 1.37+ across the listed branches.checked 7 Oct 2026
- Deployment
- Nirmata documents deploying Enterprise Kyverno on Amazon EKS and Amazon EKS Anywhere clusters.checked 7 Oct 2026
- Marketplace
- Nirmata Enterprise for Kyverno is available through AWS Marketplace, including a pay-as-you-go option.checked 7 Oct 2026
- Notable limit
- Nirmata says support for older Kubernetes versions is dropped along with the end of support for the relevant cloud provider.checked 7 Oct 2026
- Patch support
- Each supported release receives 18 months of patch support, with Kyverno engine fixes and dependency CVEs backported to supported branches.checked 7 Oct 2026
- Policy compatibility
- Existing Kyverno policies, CRDs, APIs, and tooling work unchanged with the distribution.checked 7 Oct 2026
- Purpose
- Nirmata Enterprise for Kyverno is an OSS-compatible, no-fork distribution of Kyverno for organizations that need a hardened and supported Kubernetes policy engine.checked 7 Oct 2026
- Support
- The product includes 24/7 enterprise support with SLAs for CVEs and critical fixes.checked 7 Oct 2026
- Target users
- Nirmata describes the product as intended for businesses that need a trusted distribution and tested, secure build of Kyverno.checked 7 Oct 2026
The company
- Company headquarters
- Nirmata lists its address as 5201 Great America Pkwy, Suite 320, Santa Clara, California 95054.checked 7 Oct 2026
- Company security
- Nirmata’s security policy says its SaaS infrastructure has SOC 2 Type 2 compliance and AWS data centers with ISO 27001 and PCI DSS Level 1 compliance.checked 7 Oct 2026
- Headquarters
- Santa Clara, California, United Stateschecked 28 Sep 2026
Alternatives to Nirmata Enterprise for Kyverno
- 1
Terraform
Free planWebAPILinuxmacOS8.0Free plan - 2
AWS CloudFormation
Free planiOSWebAPILinux7.7Free plan - 3
Kyverno
Free planOpen sourceWebAPILinuxmacOS7.7Free plan - 4
Open Policy Agent Gatekeeper
Free planOpen sourceAPILinuxSelf-hosted7.2Free plan - 5
Fairwinds Polaris
Free planWebLinuxmacOSSelf-hosted7.1Free plan - 6
Google Cloud Organization Policy
Free planWebAPILinuxmacOS7.1Free plan