Hexa Policy Orchestration

What Hexa Policy Orchestration is

Hexa Policy Orchestration manages access policies across clouds, applications, data, and networks. It translates IDQL policies into the native access policies used by target systems, and can convert native policies back into IDQL as it discovers existing environments. Discovery can inventory applications, data, policies, users, and roles across an identity fabric. For multi-cloud policy management, Hexa names AWS, Azure, and Google Cloud Platform. It also names Okta and Azure AD for web app identity, Snowflake and Databricks for cloud data, and OPA, Kubernetes, containers, and CI/CD tools in its feature descriptions.

Hexa describes its design as agentless and proxyless. It uses native cloud and identity APIs, and policy orchestration takes place through administrative processes rather than at runtime. Its policy-as-code support works with CI/CD and DevOps tools for versioning, rollback, automation, scripting, and scaling through configuration management. The service can generate access and user reports across clouds for compliance, and describes universal access policies as a way to help enable Zero Trust architecture. Hexa is open source and free, with a self-hosted option and an extensible model for building integrations. The Hexa Policy Orchestration Gateway has been submitted as a CNCF sandbox project; native integration with other CNCF tools is marked as coming soon.

Who it suits

Hexa suits teams that need to manage access policies across multiple clouds, applications, data sources, or networks. It may also fit organizations that want policy discovery, policy-as-code workflows, or access reports for compliance, and can be self-hosted.

Limits

The listed free plan is open-source software with an extensible model for building integrations. Native integration with other CNCF tools is marked as coming soon.

Getting started

1. Visit https://hexaorchestration.org/.
2. Choose the free Hexa Policy Orchestration plan.
3. Use the API or self-hosted platform option.
4. Connect through native cloud and identity APIs.
5. Build integrations with the extensible model as needed.

Verdict

Choose Hexa if you need free, open-source orchestration for access policies across cloud and identity systems, with discovery and policy-as-code support. Teams seeking native integration with other CNCF tools should account for that capability being marked as coming soon.