- Home
- Network Security Policy Management Software
- Calico Enterprise
Calico Enterprise
What it is
Calico Enterprise is a paid, self-managed platform for network security and observability in Kubernetes clusters. It provides pod-to-pod networking across single or multiple clusters, with eBPF, nftables, iptables, Windows, and VPP data-plane choices. Cluster mesh adds cross-cluster pod connectivity and service discovery, alongside network-policy enforcement and traffic visibility. Security controls include network and application-layer policies, DNS policies, egress controls, and workload microsegmentation. The platform also provides workload-level IDS/IPS, a workload-centric WAF, and DDoS detection and prevention. For observability, it combines flow logs with Kubernetes context and offers topology views, dashboards, alerts, and workload packet capture. Tigera lists support for PCI DSS, HIPAA, GDPR, SOC 2, NIST, CCPA, and custom frameworks. Policy deployment can connect to ArgoCD and Jenkins. Pricing is on request, with unlimited retention and clusters listed.
For and against
For
- Networking spans single and multiple clusters
- Cluster mesh provides service discovery and visibility
- Includes IDS/IPS, WAF, and DDoS controls
- Offers flow logs, dashboards, and packet capture
- Unlimited data retention and clusters listed
Against
- Paid platform with custom pricing
- Self-managed deployment required
- Designed specifically for Kubernetes clusters
The verdict
Calico Enterprise combines Kubernetes networking, policy controls, threat detection, and operational visibility. Its multi-cluster features and compliance reporting suit organizations managing their own infrastructure.
Who it suits
It is intended for organizations that want a self-managed Kubernetes platform for network security and observability. It supports hybrid deployments and centralized control.
Plans and prices
Calico Enterprise
Self-managed platform · custom log retention · unlimited users · unlimited clusters
Read 30 Sep 2026 · tigera.io
On the record
- Best fit
- Tigera describes Calico Enterprise as best suited to organizations that want a self-managed platform for network security and observability.tigera.io · read 30 Sep 2026
- CI/CD integrations
- Calico integrates policy deployment with CI/CD tools including ArgoCD and Jenkins.tigera.io · read 30 Sep 2026
- Cloud marketplaces
- Tigera lists Calico availability through Microsoft Azure, AWS, and Google Cloud marketplaces.tigera.io · read 30 Sep 2026
- Compliance
- Tigera says Calico supports PCI DSS, HIPAA, GDPR, SOC 2, NIST, CCPA, and custom compliance frameworks, with continuous monitoring and audit-ready reports.tigera.io · read 30 Sep 2026
- Maker
- Tigera says its story began in 2016 with Project Calico and that it was founded by the original Project Calico engineering team.tigera.io · read 30 Sep 2026
- Multi-cluster
- Cluster mesh provides pod connectivity and service discovery across clusters, with network policy enforcement and traffic visibility.tigera.io · read 30 Sep 2026
- Networking
- It provides pod-to-pod networking for single and multiple Kubernetes clusters and offers eBPF, nftables, iptables, Windows, and VPP data plane choices.tigera.io · read 30 Sep 2026
- Network security
- Features include network and application-layer policies, DNS policies, egress controls, and workload microsegmentation.tigera.io · read 30 Sep 2026
- Observability
- Calico aggregates flow logs with Kubernetes context and provides network topology views, dashboards, alerts, and workload packet capture.tigera.io · read 30 Sep 2026
- Purpose
- Calico Enterprise is a self-managed platform for unified network security and observability in Kubernetes clusters.tigera.io · read 30 Sep 2026
- Retention and scale
- The comparison page lists unlimited data retention and an unlimited number of clusters for Calico Enterprise.tigera.io · read 30 Sep 2026
- Support
- The pricing page lists enterprise support for Calico Enterprise, and the comparison page identifies its support and maintenance as Standard/Business.tigera.io · read 30 Sep 2026
- Threat detection
- The product provides workload-level IDS/IPS, a workload-centric WAF, and DDoS attack detection and prevention.tigera.io · read 30 Sep 2026
