Who is Isovalent?
Isovalent is an enterprise software company that develops cloud-native networking, security, and observability technology based on eBPF and Kubernetes.
- Cloud-native networking platform for Kubernetes and containerized workloads (networking / cloud infrastructure).
- Security controls for workload, container, and microservices communication using eBPF-based enforcement (cloud security).
- Network and application observability for cloud-native environments, including traffic visibility and policy monitoring (observability).
- Support for multi-cloud and hybrid Kubernetes deployments with consistent networking and security policy models (cloud management).
- Commercial support, training, and services around its eBPF-based networking and security stack for enterprises (professional services).
Show more
More About Isovalent
Isovalent focuses on cloud-native networking, security, and observability for enterprises that run Kubernetes and containerized workloads across public cloud and hybrid environments. Its technology is built on the extended Berkeley Packet Filter (eBPF) (kernel-level networking / observability) and integrates with Kubernetes (container orchestration) to provide a programmable dataplane for service connectivity, policy enforcement, and traffic visibility.
The company’s offerings System Integration Testing (SIT) in the intersection of Software Defined Networking (SDN), microsegmentation, and cloud security. By using eBPF inside the Linux kernel, Isovalent’s platforms can attach logic directly to network and system events without requiring kernel changes or sidecar proxies. This architecture enables per-flow policy enforcement, identity-aware access control between services, and collection of detailed telemetry for troubleshooting and performance analysis. In enterprise environments, these capabilities are used to standardize network policy for microservices, enforce zero-trust-style communication rules between workloads, and gain observability into east-west traffic inside Kubernetes clusters.
Isovalent’s commercial platform (networking / security / observability) is positioned as an enterprise-grade distribution and support offering around its eBPF-based cloud-native dataplane. It typically integrates with Kubernetes network policies, service discovery, and ingress/egress controls, providing features such as layer 3–7 policy, DNS-aware rules, and integration with identity and access management systems. From an observability perspective, the platform exports metrics, flow logs, and traces into common monitoring stacks, enabling network-centric visibility for Site Reliability Engineering (SRE), DevOps, and Security Operations (SecOps) teams.
The technology is commonly evaluated alongside service mesh, Container Network Interface (CNI) plugins, and firewall or microsegmentation products, but it is differentiated by its eBPF-centric architecture and focus on kernel-level dataplane control. For marketplace categorization, Isovalent fits into cloud-native networking (CNI / Kubernetes networking), container and workload security (cloud security / microsegmentation), and observability for cloud-native infrastructure (network observability). Enterprises adopt Isovalent’s offerings to operate Kubernetes networking at scale, apply consistent security policies across clusters and clouds, and obtain detailed network telemetry without injecting proxies into application pods.
Beyond the core software platform, Isovalent provides professional services, training, and commercial support to enterprises that deploy its technology in production environments. These services cover architecture design, integrations with existing security and monitoring tools, performance tuning, and operational readiness for large Kubernetes estates. As a result, Isovalent functions both as a software vendor and as a specialist partner for organizations standardizing on eBPF-based networking, security, and observability in cloud-native infrastructure.
Our description of Isovalent. Updated December 2025.
