Skip to content
SPECIFICTION
Get listed

Isovalent Enterprise for Cilium

isovalent.com

LinuxSelf-hosted
Visit isovalent.com
Spec score 7.0 #18 of 31 in Microsegmentation Software

What it is

Isovalent Enterprise for Cilium is a paid, hardened distribution of Cilium, Hubble, and Tetragon, built and supported by Cilium’s creators. Cilium supplies network-layer connectivity and security across multi-cloud and on-premises environments. Enterprise policies include DNS-aware, Layer 7, and deny rules for fine-grained traffic control and micro-segmentation. Hubble provides real-time network-flow visibility, policy visualization, and an interface for troubleshooting and network management. Tetragon adds runtime enforcement and security observability, including protocol enforcement, IP and port whitelisting, and automatic application-aware policy generation. Cluster Mesh connects clusters across AWS, Azure, Google Cloud Platform, and on-premises environments. The product also offers sidecar-free service communication and advanced load balancing. It runs on Linux in self-hosted environments, with hybrid deployment and a distributed control plane. Deployment guidance covers Azure Marketplace, an Azure Resource Manager template, and Azure CLI. Pricing is on request. Hubble UI, DNS Proxy HA, and Tetragon are not enabled by default for AKS creation or upgrades.

Spec sheet

Product
It is an enterprise-grade, hardened distribution of Cilium, Hubble, and Tetragon, built and supported by the Cilium creators.Read 8 Oct 2026 · isovalent.com
Deployment
The cited deployment guidance covers installation through Azure Marketplace, an Azure Resource Manager template, or Azure CLI.Read 8 Oct 2026 · isovalent.com
Support
The vendor describes enterprise-grade support from its experts and professional services to help deploy and manage Cilium in production.Read 8 Oct 2026 · isovalent.com
Company
Isovalent says it was founded by the creators and maintainers of Cilium and eBPF.Read 8 Oct 2026 · isovalent.com
Cluster connectivity
Cluster Mesh connects clusters across public clouds including AWS, Azure, and Google Cloud Platform, as well as on-premises environments.Read 8 Oct 2026 · isovalent.com
Feature enablement
The page says Hubble UI, DNS Proxy HA, and Tetragon are not enabled by default when creating or upgrading an AKS cluster with the product.Read 8 Oct 2026 · isovalent.com
Network policy
Enterprise network policy includes DNS-aware, Layer 7, and deny policies for fine-grained traffic control and micro-segmentation.Read 8 Oct 2026 · isovalent.com
Networking
Cilium provides networking and security at the network layer, while supporting multi-cloud and on-premises environments.Read 8 Oct 2026 · isovalent.com
Observability
Hubble provides real-time network flow visibility, policy visualization, and a user interface for troubleshooting and network management.Read 8 Oct 2026 · isovalent.com
Ownership
Cisco announced completion of its acquisition of Isovalent on December 21, 2023.Read 8 Oct 2026 · isovalent.com
Runtime security
Tetragon adds runtime enforcement and security observability.Read 8 Oct 2026 · isovalent.com
Security capabilities
Tetragon supports protocol enforcement, IP and port whitelisting, and automatic application-aware policy generation.Read 8 Oct 2026 · isovalent.com
Service mesh
The product provides sidecar-free service-to-service communication and advanced load balancing.Read 8 Oct 2026 · isovalent.com

Plans and prices

Isovalent Enterprise for Cilium Priced on request Contact sales Enterprise networking, security, and observability features and support Read 8 Oct 2026 · isovalent.com

Every Isovalent Enterprise for Cilium plan and price →

Strong points and limits

Strong points

  • Combines Cilium, Hubble, and Tetragon
  • Supports multi-cloud and on-premises networking
  • Provides DNS-aware and Layer 7 policies
  • Connects clusters through Cluster Mesh
  • Adds runtime security observability

Limits

  • Pricing is available only on request
  • Several AKS features are not enabled by default
  • Requires Linux and self-hosted deployment
  • Enterprise support and services require vendor engagement

Who it suits

It suits organizations operating Linux-based, self-hosted clusters across cloud and on-premises environments. Teams needing network policy, observability, runtime enforcement, and cross-cluster connectivity may consider it.

Verdict

Isovalent Enterprise for Cilium brings networking, policy control, observability, and runtime enforcement into one distribution. Buyers should account for its self-hosted Linux deployment and the AKS features that need explicit enablement.

Where Specifiction places it

Alternatives to Isovalent Enterprise for CiliumAll alternatives →