Antrea is an open-source networking and security project for Kubernetes workloads.
Alternatives to Nutanix Flow Network Security
Akamai Guardicore Segmentation is a self-hosted segmentation product with advanced outbound control and rules that work in both directions.
Hopr provides Zero Trust access control for workloads and APIs using Cloud Native Automated Moving Target Defense.
- 4

ColorTokens Xshield
ColorTokens Xshield is an enterprise microsegmentation platform that creates micro-perimeters around network assets to limit the spread of malware and ransomware.
WebAPILinuxmacOS6.3 - 5
Cisco Catalyst Center
Cisco Catalyst Center is a centralized controller and management dashboard for enterprise network operations.
WebAPILinuxmacOS6.2 - 6

Istio
Istio is a free, open-source service mesh for securing, connecting, and monitoring distributed applications with few or no service-code changes.
Free planLinuxmacOSSelf-hosted6.2Free plan - 7

Calico Open Source
Calico Open Source provides networking, network security, and observability for Kubernetes environments across cloud, hybrid-cloud, and on-premises deployments.
Free planLinuxSelf-hostedWindows6.1Free plan - 8

Illumio Segmentation
WebAPILinuxSelf-hosted6.1 - 9

Cilium
Cilium is open-source software for providing, securing, and observing network connectivity between workloads, using eBPF.
Free planLinuxSelf-hosted6.0Free plan - 10
Juniper Security Director
Juniper Security Director centralizes network security policy management for Juniper SRX deployments through a web interface.
WebSelf-hosted5.9 - 11
OVN-Kubernetes
OVN-Kubernetes is a free, open-source Kubernetes networking solution and CNI-conformant plugin built on OVN and Open vSwitch.
APILinuxSelf-hostedWindows5.9 - 12

Aviatrix Zero Trust for Workloads
Aviatrix Zero Trust for Workloads enforces runtime zero trust policies for virtual machines, containers, and serverless workloads.
Web5.8 - 13
Kube-router
Kube-router is a free, open-source networking solution for Kubernetes clusters, designed to simplify operations while providing network performance.
Free planLinuxSelf-hosted5.8Free plan - 14

Calico Enterprise
Calico Enterprise is Tigera’s paid, self-managed platform for network security and observability in Kubernetes clusters.
WebLinuxSelf-hostedWindows5.7 - 15

Elisity Microsegmentation
Elisity Microsegmentation applies identity-based policies to users, workloads, and devices to limit lateral movement across IT, IoT, OT, and IoMT networks.
WebAPISelf-hosted5.7 - 16
Zentera CoIP Access Platform
Zentera CoIP Access Platform is enterprise security software for onboarding users and endpoints and controlling access to applications.
APILinuxmacOSSelf-hosted5.6 - 17

Tetrate Service Bridge
Tetrate Service Bridge is an Istio-based service mesh and control plane for connecting, monitoring, and securing microservices.
WebAPISelf-hosted5.5 - 18

Zero Networks Segment
Zero Networks Segment automatically microsegments network assets to help block lateral movement and limit the spread of attacks.
WebAPI5.4 - 19
HashiCorp Consul
WebLinuxmacOSWindows5.3 - 20
Xage Critical Asset Protection
Xage Critical Asset Protection secures operational technology, data centers, cloud, IoT, and infrastructure assets with virtual patching,…
WebSelf-hosted5.3 - 21

Cyninges TITAN
Cyninges TITAN combines agentless microsegmentation with privileged-access brokering for organizations protecting critical systems.
5.2 - 22

Isovalent Enterprise for Cilium
Isovalent Enterprise for Cilium is a paid, self-hosted Linux distribution combining Cilium, Hubble, and Tetragon, developed and supported by Cilium’s creators.
LinuxSelf-hosted5.2 - 235.0
- 24
SUSE NeuVector
SUSE NeuVector is a free, open-source Kubernetes security product designed for self-hosted deployment.
Web5.0 - 254.8
- 26
VMware NSX
Web4.8 - 274.7
- 28
4.6 - 294.4
- 304.4
