Threat defense

Use real-time monitoring to detect and block threats to your cluster.

Security event management

Manage security events from your cluster in a single place.

Container threat detection

Threat detection for containerized workloads.

Trace and alert on suspicious domains

Add threat intelligence feeds to trace DNS queries that involve suspicious domains.

Trace and block suspicious IPs

Add threat intelligence feeds to trace network flows of suspicious IP addresses, and optionally block traffic to them.

Workload-based Web Application Firewall (WAF)

Configure Calico to use with Layer 7 Web Application Firewall.

Webhooks for security events

Use webhooks to send security event alerts to third-party systems.

Deploying WAF with an ingress gateway

Deploy WAF with ingress gateways

Deep packet inspection

Monitor live traffic for malicious activities.

Anonymization attacks

Detect and analyze malicious anonymization activity using Tor-VPN feeds.