Freedom251 › Kubernetes Security Software
Nirmata Control Hub
What Nirmata Control Hub is
Nirmata Control Hub is a hybrid service for governing Kubernetes policies, compliance, image risks, exceptions, and remediation. It synchronizes policy sets from Git, deploys them to chosen clusters, and scans repositories and CI pipelines. Teams can define exceptions for namespaces, clusters, repositories, or resources, add expiration dates, and require reviewers and multi-factor authentication. The service shows CVEs by severity, policy violations, and the workloads and clusters running affected images. Its compliance view maps policies to CIS, Pod Security, PCI DSS, NIST, and custom standards, with scheduled email reports. Agent Hub offers security, compliance, cost, and troubleshooting agents that run on demand or on schedules and can return fixes as pull requests. Integrations listed include GitHub, GitLab CI, Terraform Cloud, Slack, Jira, ServiceNow, Okta, Azure AD, and AWS SSO. It supports API, Linux, self-hosted, and web access, with paid plans and a 15-day trial.
Who it suits
It suits teams that need centralized Kubernetes visibility, policy enforcement, compliance mapping, and image-risk monitoring. Essentials, Advanced, and Enterprise tiers are described for progressively larger or more critical workloads.
What it does well
- Syncs policies from Git to selected clusters
- Scopes exceptions with expiry, reviewers, and MFA
- Maps policies to major compliance standards
- Provides CVE and workload visibility
- Offers scheduled AI remediation pull requests
What to know first
- No free plan
- Paid plans start at $1,250 monthly
- Full air-gapped and on-prem deployment requires Enterprise
- Enterprise pricing is custom
Limits
Essentials and Advanced include 20 clusters or 250 nodes, with additional capacity priced by consumption tiers. Full air-gapped and on-premises deployment is limited to Enterprise.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Nirmata Enterprise Kyverno | $1,250 per month · 0-CVE images · 18 month patch support · long term version compatibility | $1,250 a month |
| Nirmata Essentials | $1,800 per month · 20 clusters or 250 nodes included across business plans; additional clusters or nodes priced by consumption tiers | $1,800 a month |
| Nirmata Advanced | $4,500 per month · 20 clusters or 250 nodes included across business plans; additional clusters or nodes priced by consumption tiers | $4,500 a month |
| Nirmata Enterprise | Custom Pricing · 20 clusters or 250 nodes included across business plans; additional clusters or nodes priced by consumption tiers | On request |
As nirmata.com lists them, read 29 Sept 2026. The maker's own page has the final word.
Getting started
- Open the Nirmata Control Hub website
- Start the 15-day trial or choose a paid plan
- Connect policy sources such as GitHub or GitLab CI
- Select clusters for policy deployment
- Configure identity controls such as SAML SSO or role-based access
- Use the web console on a supported deployment
Verdict
Nirmata Control Hub combines Kubernetes governance, compliance reporting, exception workflows, and image-risk visibility in one service. Its tiered plans and 15-day trial provide defined entry points, while advanced deployment options require Enterprise.
Questions
Is there a free plan or trial?
There is no free plan, but a 15-day trial is available.
How much do the listed plans cost?
Enterprise Kyverno is $1,250 a month, Essentials is $1,800 a month, and Advanced is $4,500 a month. Enterprise uses custom pricing.
Which integrations are listed?
Integrations include GitHub, GitLab CI, Terraform Cloud, Slack, Jira, ServiceNow, Okta, Azure AD, and AWS SSO.
Does it support air-gapped and on-premises deployment?
Yes, but the pricing page says full air-gapped and on-premises deployments require Enterprise.
What identity and security controls are documented?
Nirmata documents SAML v2 single sign-on, role-based access controls, optional multi-factor authentication, SOC 2 Type 2 compliance, and encryption for sensitive customer data.
What does the Enterprise Kyverno plan include?
It is billed at $1,250 a month and includes 0-CVE images, 18 month patch support, and long term version compatibility.
Facts from Nirmata Control Hub's own pages
- AI agents
- Agent Hub offers security, compliance, cost, and troubleshooting agents that can run on demand or on a schedule and provide fixes as pull requests. · nirmata.com, 29 Sept 2026
- Compliance
- Its compliance view maps policies to CIS, Pod Security, PCI DSS, NIST, and custom standards and supports scheduled email reports. · nirmata.com, 29 Sept 2026
- Data access
- Nirmata says it is designed to have no access or visibility to application data and stores policy-related information and Kubernetes resource metadata. · nirmata.com, 29 Sept 2026
- Deployment options
- The pricing page says only the Enterprise tier supports full air-gapped and on-prem deployments. · nirmata.com, 29 Sept 2026
- Exception management
- Policy exceptions can be scoped to a namespace, cluster, repository, or resource, given an expiration, and handled with reviewers and MFA. · nirmata.com, 29 Sept 2026
- Headquarters
- Santa Clara, California, United States · nirmata.com, 28 Sept 2026
- Identity controls
- Nirmata documents SAML v2 single sign-on, role-based access controls, and optional multi-factor authentication for the web console. · nirmata.com, 29 Sept 2026
- Integrations
- The product page lists GitHub, GitLab CI, Terraform Cloud, Slack, Jira, ServiceNow, Okta, Azure AD, and AWS SSO integrations. · nirmata.com, 29 Sept 2026
- Intended users
- The pricing page describes Essentials for teams seeking centralized visibility and control, Advanced for mission-critical production workloads, and Enterprise for large enterprises. · nirmata.com, 29 Sept 2026
- Policy management
- It syncs policy sets from Git, deploys them to selected clusters, and can scan repositories and CI pipelines. · nirmata.com, 29 Sept 2026
- Purpose
- Nirmata Control Hub centralizes Kubernetes policy governance, compliance, image risk, exceptions, and remediation. · nirmata.com, 29 Sept 2026
- Security
- Nirmata states that it has SOC 2 Type 2 compliance and encrypts sensitive customer data such as access tokens and passwords. · nirmata.com, 29 Sept 2026
- Support
- The pricing page says flexible support packages are available for any plan. · nirmata.com, 29 Sept 2026
- Vulnerability visibility
- The product shows CVEs by severity, policy violations, and the workloads and clusters where images run. · nirmata.com, 29 Sept 2026
Where Nirmata Control Hub stands on Freedom251
- Kubernetes Security Software#17 of 27