Skip to content
SPECIFICTION
Get listed

Calico Enterprise

tigera.io

WebWindowsLinuxSelf-hosted
Visit tigera.io
Spec score 7.6 #6 of 26 in Software-Defined Networking Software

What it is

Calico Enterprise is a self-managed platform for network security and observability in Kubernetes clusters. It provides pod-to-pod networking within single clusters and across multiple clusters, with data-plane options including eBPF, nftables, iptables, Windows, and VPP. Cluster mesh connects clusters for pod communication and service discovery, while supporting policy enforcement and traffic visibility. Security controls include network- and application-layer policies, DNS policies, egress controls, and workload microsegmentation. It also provides workload-level IDS/IPS, a workload-focused WAF, and DDoS detection and prevention. For observability, Calico combines flow logs with Kubernetes context and offers network topology views, dashboards, alerts, and workload packet capture. Tigera lists support for PCI DSS, HIPAA, GDPR, SOC 2, NIST, CCPA, and custom compliance frameworks, along with continuous monitoring and audit-ready reports. Policy deployment can integrate with CI/CD tools such as ArgoCD and Jenkins. The product supports hybrid deployment and centralized control, with BGP, IP-in-IP, VXLAN, WireGuard, TCP, UDP, SCTP, ICMP, ICMPv6, and HTTP listed as supported protocols.

Spec sheet

Purpose
Calico Enterprise is a self-managed platform for unified network security and observability in Kubernetes clusters.Read 30 Sep 2026 · tigera.io
Compliance
Tigera says Calico supports PCI DSS, HIPAA, GDPR, SOC 2, NIST, CCPA, and custom compliance frameworks, with continuous monitoring and audit-ready reports.Read 30 Sep 2026 · tigera.io
Support
The pricing page lists enterprise support for Calico Enterprise, and the comparison page identifies its support and maintenance as Standard/Business.Read 30 Sep 2026 · tigera.io
Maker
Tigera says its story began in 2016 with Project Calico and that it was founded by the original Project Calico engineering team.Read 30 Sep 2026 · tigera.io
Best fit
Tigera describes Calico Enterprise as best suited to organizations that want a self-managed platform for network security and observability.Read 30 Sep 2026 · tigera.io
CI/CD integrations
Calico integrates policy deployment with CI/CD tools including ArgoCD and Jenkins.Read 30 Sep 2026 · tigera.io
Cloud marketplaces
Tigera lists Calico availability through Microsoft Azure, AWS, and Google Cloud marketplaces.Read 30 Sep 2026 · tigera.io
Multi-cluster
Cluster mesh provides pod connectivity and service discovery across clusters, with network policy enforcement and traffic visibility.Read 30 Sep 2026 · tigera.io
Network security
Features include network and application-layer policies, DNS policies, egress controls, and workload microsegmentation.Read 30 Sep 2026 · tigera.io
Networking
It provides pod-to-pod networking for single and multiple Kubernetes clusters and offers eBPF, nftables, iptables, Windows, and VPP data plane choices.Read 30 Sep 2026 · tigera.io
Observability
Calico aggregates flow logs with Kubernetes context and provides network topology views, dashboards, alerts, and workload packet capture.Read 30 Sep 2026 · tigera.io
Retention and scale
The comparison page lists unlimited data retention and an unlimited number of clusters for Calico Enterprise.Read 30 Sep 2026 · tigera.io
Threat detection
The product provides workload-level IDS/IPS, a workload-centric WAF, and DDoS attack detection and prevention.Read 30 Sep 2026 · tigera.io

Plans and prices

Calico Enterprise Priced on request Custom Pricing Self-managed platform · custom log retention · unlimited users · unlimited clusters Read 30 Sep 2026 · tigera.io

Every Calico Enterprise plan and price →

Strong points and limits

Strong points

  • Connects clusters for pod networking and service discovery.
  • Includes network, application, DNS, and egress policies.
  • Provides workload IDS/IPS and DDoS detection and prevention.
  • Lists unlimited retention and an unlimited number of clusters.
  • Integrates policy deployment with ArgoCD and Jenkins.

Limits

  • No free plan is listed.
  • Pricing is custom and available on request.
  • Enterprise support is listed as Standard/Business.

Who it suits

It suits organizations seeking self-managed Kubernetes network security and observability, including multi-cluster connectivity and policy controls. Its compliance and CI/CD capabilities may also suit teams with those requirements.

Verdict

Calico Enterprise combines Kubernetes networking, security controls, and observability in a self-managed platform. Pricing is custom, and its listed cluster capacity and data retention are unlimited.

Where Specifiction places it

Alternatives to Calico EnterpriseAll alternatives →