Hillstone Security Management vs Tetrate Service Bridge
Hillstone Security Management
hillstonenet.com
Tetrate Service Bridge
tetrate.ioSide by side
| Figure | Hillstone Security Management | Tetrate Service Bridge |
|---|---|---|
| Price from | — | — |
| Free plan | — | — |
| Free trial | — | — |
| Open source | — | — |
| Web | — | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 0 | 1 |
| Spec score · Network Security Policy Management Software | 7.4 (#11) | 6.9 (#15) |
| Deployment | The datasheet lists VMware Workstation, ESXi, and KVM as virtual environment options and says vHSM supports AWS. | The management plane can be hosted by Tetrate or deployed by the customer in its own Kubernetes infrastructure. |
| Headquarters | Sunnyvale, California, United States | Silicon Valley |
| Purpose | Hillstone Security Management (HSM) provides security operations, secure SD-WAN management, and ZTNA control from a single pane of glass. | Tetrate Service Bridge provides a uniform way to connect, monitor and secure microservices. |
Plans
In their own words
Hillstone Security Management
Hillstone Security Management (HSM) is a centralized platform for security operations, secure SD-WAN management, and ZTNA control. It manages Hillstone NGFW, NIPS, ADC, and WAF devices and can monitor third-party equipment through SNMP. Administrators can view device status, resource use, and licenses, while handling configurations, firmware, and signature upgrades. HSM manages ZTNA gateways and distributes policy packages and device-specific policies. Its SD-WAN functions include zero-touch provisioning, VPN overlays for hub-and-spoke or mesh topologies, and traffic steering based on applications, policies, and network conditions. A firewall policy analyzer identifies redundant, hidden, empty, overly broad, or high-risk rules. Reporting includes more than 30 templates in HTML and PDF, and logs can be forwarded to third-party syslog servers. Deployment options include VMware Workstation, ESXi, KVM, and AWS support for vHSM. One master device can register up to 16 slaves. Pricing is on request through an authorized reseller. Hillstone was founded in 2006 and is headquartered in Sunnyvale, California.
Tetrate Service Bridge
Tetrate Service Bridge is a paid, hybrid service mesh and control plane for connecting, monitoring, and securing microservices. Built on Istio, it centralizes Istio and Envoy configuration and visibility across Kubernetes and traditional compute clusters, including application edges, cluster ingress, and links between workloads. A global management plane spans multi-cluster hybrid environments. Security controls include end-to-end mTLS, certificate management, identity-aware authorization, role-based access control, tenant isolation, and zero-trust policies with auditability. Traffic features cover global routing, circuit breaking, locality-aware failover, canary releases, traffic shifting, and blue-green deployments. Unified metrics, distributed tracing, topology views, service inventory, dashboards, and alerts provide observability. Tetrate lists support for Kubernetes, AWS EKS, Azure AKS, and Google GCP, plus integrations and partners across major cloud and infrastructure providers. The management plane may be hosted by Tetrate or deployed in customer Kubernetes infrastructure. Self-managed installation requires Kubernetes and several supporting services. Pricing is on request; no free plan is listed.