Empowering container security, from secure networking to comprehensive protection
Open-source networking and security for containers and Kubernetes.
SaaS platform for securing containers and Kubernetes.
Self-managed platform for container networking and security.
Calico Open Source is a networking and security solution for containers, virtual machines, and native host-based workloads that was born out of Project Calico.
Calico Open Source combines flexible networking capabilities with run-anywhere security enforcement to provide a solution with native Linux kernel performance and true cloud-native scalability.
Calico security platform provides secure networking and comprehensive protection for containers and Kubernetes to prevent, detect, and mitigate security breaches. Calico Cloud is built on Calico Open Source, the most widely adopted container networking and security solution.
Calico Enterprise provides high-availability networking and simplified network security for cloud-native applications. It enables simplified network security through more extensive network policies than are offered by native Kubernetes, rich policy tools to manage these policies, and policy deployment automation using GitOps practices.
| Calico Open Source | Calico Cloud | Calico Enterprise | |
|---|---|---|---|
| Networking | |||
| High-performance scalable pod networking | |||
| Advanced IP address management | |||
| Direct infrastructure peering without the overlay | |||
| eBPF Dataplane | |||
| Windows Dataplane | |||
| Dual ToR Peering | |||
| Security | |||
| Security policy enforcement | |||
| Data-in-transit encryption | |||
| Hierarchical tiers | |||
| Security policy preview, staging, and recommendation | |||
| FQDN / DNS based policy | |||
| Universal Firewall Integration | |||
| Egress Gateway | |||
| Identity-aware microsegementation for workloads | |||
| Workload-based IDS/IPS, DPI, DDoS protection | |||
| Workload-centric WAF | |||
| Application Level Policy (Tech Preview) | |||
| Container-based Threat Protection | |||
| Malware Detection | |||
| Compliance reporting & alerts | |||
| Kubernetes Security Posture Management (KSPM) | |||
| SIEM Integrations | |||
| Image Assurance | |||
| Admission Controller | |||
| Observability | |||
| Dynamic Service and Threat Graph | |||
| Application Level Observability | |||
| Dynamic Packet Capture | |||
| DNS Dashboards | |||
| Flow visualizer | |||
| Management | |||
| Multi cluster, multi-cloud & hybrid Cloud networking | |||
| Cluster Mesh | |||
| Support and Maintenance | |||
| Support and Maintenance | Community-driven | Standard/Business | Standard/Business |
