Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Kubescape by ARMO View product | Cilium by Isovalent View product |
|---|---|---|
| Overview | ||
| What it is | Kubescape by ARMO: GitOps integration. Ideal for Kubernetes compliance validation. Deployment: self-hosted. See how it compares with top Kubernetes Security alternatives. | Looking for Kubernetes Security software? Cilium by Isovalent provides BGP routing and multi-cluster mesh for layer 7 API filtering. Compare features and alternatives. |
| Product type | Open-Source Kubernetes Security & Hardening Tool | eBPF-Powered Kubernetes Networking, Observability & Security Engine |
| Best for | DevOps, Site Reliability Engineers, Security Teams | Technology, Financial Services, Telecommunications, Healthcare, E-commerce, Media, Retail |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | On-Premise | CloudOn-Premise |
| Deployment details | CLI; Kubernetes Operator; Self-Hosted; CLI Utility; Helm Chart Operator; VS Code Plugin | Cloud; On-premises; Self-hosted; Self-hosted software; Kubernetes CNI; Isovalent Enterprise |
| Data residency | Local / Open Source | Customer-managed infrastructure (on-premises or cloud) |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: no | SSO: no |
| Role-based access (RBAC) | RBAC: no | RBAC: yes |
| Multi-tenant | Multi-tenant: no | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | KubernetesHelmKustomizeDockerMicroservices | KubernetesOpenShiftAWS EKSAzure AKSGoogle GKEBare-metal Linux |
| Compliance | Open Source (Apache 2.0)MITRE ATT&CK Containers | CNCF Graduated ProjectSOC 2 Type II readyFIPS compliant options |
| Integrations & coverage | ||
| Integrations | KubernetesArgoCDFluxGitLabGitHub Actions | KubernetesOpenShiftPrometheusGrafanaEnvoyHubbleHashiCorp Nomad |
| Industries | DevOpsSite Reliability EngineersSecurity Teams | TechnologyFinancial ServicesTelecommunicationsHealthcareE-commerceMedia+1 more |
| Regions | Global | Global |
| Vendor | ||
| Company | ARMO | Isovalent |
| Headquarters | Tel Aviv, Israel | Mountain View, California, USA |
| Company size | 51-200 | 201-500 |
| Founded | 2019 | 2017 |
Overview
What it is
Kubescape
Kubescape by ARMO: GitOps integration. Ideal for Kubernetes compliance validation. Deployment: self-hosted. See how it compares with top Kubernetes Security alternatives.Cilium
Looking for Kubernetes Security software? Cilium by Isovalent provides BGP routing and multi-cluster mesh for layer 7 API filtering. Compare features and alternatives.Product type
Kubescape
Open-Source Kubernetes Security & Hardening ToolCilium
eBPF-Powered Kubernetes Networking, Observability & Security EngineBest for
Kubescape
DevOps, Site Reliability Engineers, Security TeamsCilium
Technology, Financial Services, Telecommunications, Healthcare, E-commerce, Media, RetailPricing
Pricing model
Kubescape
Contact VendorCilium
Contact VendorFree trial
Kubescape
Free trial: yesCilium
Free trial: yesDeployment
Deployment options
Kubescape
On-Premise
Cilium
CloudOn-Premise
Deployment details
Kubescape
CLI; Kubernetes Operator; Self-Hosted; CLI Utility; Helm Chart Operator; VS Code PluginCilium
Cloud; On-premises; Self-hosted; Self-hosted software; Kubernetes CNI; Isovalent EnterpriseData residency
Kubescape
Local / Open SourceCilium
Customer-managed infrastructure (on-premises or cloud)Key features
What it offers
Kubescape
- Kubernetes security posture scanning
- NSA-CISA compliance audits
- RBAC risk evaluation
- Image vulnerability checks
- GitOps integration
- Kubernetes compliance validation
- RBAC risk discovery
- CI/CD container configuration scanning
Cilium
- eBPF kernel networking
- Layer 3 to Layer 7 security policies
- API-aware network filtering
- Transparent WireGuard/IPsec encryption
- Multi-cluster mesh
- BGP routing
- Kubernetes CNI networking
- Container microsegmentation
Platform & access
API access
Kubescape
API access: yesCilium
API access: yesSingle sign-on (SSO)
Kubescape
SSO: noCilium
SSO: noRole-based access (RBAC)
Kubescape
RBAC: noCilium
RBAC: yesMulti-tenant
Kubescape
Multi-tenant: noCilium
Multi-tenant: yesMobile app
Kubescape
Mobile app: noCilium
Mobile app: noSupported platforms
Kubescape
KubernetesHelmKustomizeDockerMicroservices
Cilium
KubernetesOpenShiftAWS EKSAzure AKSGoogle GKEBare-metal Linux
Compliance
Kubescape
Open Source (Apache 2.0)MITRE ATT&CK Containers
Cilium
CNCF Graduated ProjectSOC 2 Type II readyFIPS compliant options
Integrations & coverage
Integrations
Kubescape
KubernetesArgoCDFluxGitLabGitHub Actions
Cilium
KubernetesOpenShiftPrometheusGrafanaEnvoyHubbleHashiCorp Nomad
Industries
Kubescape
DevOpsSite Reliability EngineersSecurity Teams
Cilium
TechnologyFinancial ServicesTelecommunicationsHealthcareE-commerceMedia+1 more
Regions
Kubescape
Global
Cilium
Global
Vendor
Company
Kubescape
ARMOCilium
IsovalentHeadquarters
Kubescape
Tel Aviv, IsraelCilium
Mountain View, California, USACompany size
Kubescape
51-200Cilium
201-500Founded
Kubescape
2019Cilium
2017