Tigera

Tigera commercializes Project Calico as a unified networking, security, and observability plane for containers and VMs on Kubernetes. Calico Cloud and Enterprise enforce workload identity, egress, and microsegmentation with eBPF, which is the CWPP layer most CNAPPs still bolt on.

Lynx sits in the path of agent tool calls so platform teams can authorize what an in-cluster AI agent is allowed to do before it does it.