- Home
- Cloud Automation Software
- Hexa Policy Orchestration
Hexa Policy Orchestration
What it is
Hexa Policy Orchestration is free, open-source software for managing access policies across clouds, applications, data, and networks. It translates IDQL policies into target systems’ native policies and can translate native policies back into IDQL during discovery. Discovery inventories applications, data, policies, users, and roles across an identity fabric. Hexa names AWS, Azure, and Google Cloud Platform for multi-cloud policy unification, with integrations including Okta, Azure AD, Snowflake, Databricks, OPA, Kubernetes, containers, and CI/CD tools. Its agentless, proxyless architecture uses cloud and identity APIs, while orchestration runs through administrative processes rather than at runtime. Policy-as-code workflows support versioning, rollback, automation, scripting, and configuration-management scaling. Hexa offers API and self-hosted platforms, access and user reports for compliance, and an extensible model for building integrations.
For and against
For
- Free and open-source
- Unifies AWS, Azure, and Google Cloud policies
- Agentless and proxyless architecture
- Supports policy versioning and rollback
- Self-hosted option available
Against
- Native integration with other CNCF tools is coming soon
- OPA and Kubernetes orchestration are listed in that upcoming section
- Orchestration does not run at runtime
The verdict
Hexa provides an open-source layer for translating, discovering, and governing policies across clouds and systems. Its self-hosted and API options support teams that want administrative, policy-as-code workflows.
Who it suits
Hexa suits teams governing access across multiple clouds and connected identity, data, and infrastructure systems. It also fits DevOps users who need policy versioning and automation.
Plans and prices
Hexa Policy Orchestration
Open-source software; extensible model to build your own integrations
Read 4 Oct 2026 · hexaorchestration.org
On the record
- API integration
- Hexa uses native cloud and identity APIs and says this insulates users from changing cloud APIs.hexaorchestration.org · read 4 Oct 2026
- Architecture
- The site describes Hexa as agentless and proxyless, with cloud-based policy orchestration that does not require proxy or local code.hexaorchestration.org · read 4 Oct 2026
- Cloud support
- The site names AWS, Azure, and Google Cloud Platform as clouds whose policies Hexa can unify.hexaorchestration.org · read 4 Oct 2026
- Compliance
- The site describes easy-to-read access and user reports generated across clouds as a compliance feature.hexaorchestration.org · read 4 Oct 2026
- Discovery
- Policy discovery inventories apps, data, policies, users, and roles in an identity fabric.hexaorchestration.org · read 4 Oct 2026
- Integrations
- The site names Okta and Azure AD for web app identity, Snowflake and Databricks for cloud data, and OPA, Kubernetes, containers, and CI/CD tools in its feature descriptions.hexaorchestration.org · read 4 Oct 2026
- Notable limit
- The site marks native integration with other CNCF tools as “coming soon” and describes OPA policy orchestration and Kubernetes policy orchestration in that section.hexaorchestration.org · read 4 Oct 2026
- Policy as code
- Hexa works with CI/CD and DevOps tools to support policy versioning, rollback, automation, scripting, and scaling through configuration management.hexaorchestration.org · read 4 Oct 2026
- Policy translation
- Hexa translates IDQL policies into target systems’ native access policies and can translate native policies back into IDQL during discovery.hexaorchestration.org · read 4 Oct 2026
- Project status
- The site says the Hexa Policy Orchestration Gateway was submitted as a CNCF sandbox project.hexaorchestration.org · read 4 Oct 2026
- Purpose
- Hexa manages and orchestrates access policies across clouds, applications, data, and networks.hexaorchestration.org · read 4 Oct 2026
- Runtime overhead
- The site says policy orchestration happens through administrative processes rather than at runtime.hexaorchestration.org · read 4 Oct 2026
- Zero Trust
- The site says universal access policy across disparate systems can help enable a Zero Trust architecture.hexaorchestration.org · read 4 Oct 2026
