Resources
eBooks, whitepapers, videos, product data sheets and documentation for governing Kubernetes, cloud and AI agents with policy as code.
Featured
CNAPP & Policy-as-Code: Complementary, Yet Distinctly Unique
CNAPPs like Wiz detect cloud and runtime risk. Nirmata and Kyverno prevent misconfigurations at the source.
Read
AI ROI for Engineering
A measurement model for the AI coding spend already on your books: AI cost per accepted outcome, attribution from token to pull request, and 8 questions to ask.
Free, form required
Zero Trust for Kubernetes with Kyverno
Micro-segment, enforce least privilege, verify images and govern exceptions in Kubernetes. Mapped to NIST and CISA.
Read
Read
Governing AI Agents in Kubernetes
AI agents hold real credentials. Get the threat model: 9 documented attack paths, 4 control points and 8 questions to ask of your Kubernetes cluster.
Free, form required
The Kyverno Operator’s Playbook
Harden your admission controller, test policies, respond to CVEs and plan upgrades.
Read
Nirmata Kubernetes Governance on vSphere Kubernetes Service on VMware Cloud Foundation: Reference Architecture (opens in a new tab)
This whitepaper describes how Nirmata Enterprise for Kyverno and Nirmata Control Hub deploy on VKS to deliver unified Kubernetes governance.
PDF
How to Secure Production Kubernetes Environments with Kyverno
Actionable insights into building a robust, policy-driven, cloud-native infrastructure with Kyverno and Kubernetes.
Read
Shift Down Security: A New Paradigm for Platform Engineering Success
Learn how platform teams are embedding security into internal developer platforms.
Free, form required
The Combined Power of GitOps and Policy as Code
How to drive speed, security, and efficiency in cloud native environments.
Free, form required
Watch and listen
Cloud Native Live: Compliance at Scale with Kyverno - Razorpay and Nirmata (opens in a new tab)
Razorpay processes over $180 billion in payments annually and powers 80 of India’s top 100 unicorns.
Watch on YouTube
AI Workflows for Kubernetes: Let AI Make the Tough Calls – Introducing OttoFlow (opens in a new tab)
In this demo, Shreyas showcases OttoFlow, an open-source framework for building AI workflows for Kubernetes.
Watch on YouTube
Nirmata Shift Left: Catch Kubernetes Policy Violations Early & Fix Automatically (opens in a new tab)
Nirmata’s Shift Left Compliance solution moves policy enforcement earlier in the development lifecycle.
Watch on YouTube
AI-Powered Remediator Agent: Auto-Fix Kubernetes Policy Violations with Nirmata (opens in a new tab)
Nirmata’s AI-Powered Remediator Agent detects misconfigurations across your clusters and automatically generates verified, policy-compliant fixes.
Watch on YouTube
Your AI Agents Are Running Wild. Who’s Actually Controlling Them? - Jim Bugwadia on Techie Talks with Kuldeep (opens in a new tab)
Explore AI governance, policy as code, and how Kyverno is evolving from Kubernetes policy enforcement to full-stack AI controls.
Watch on YouTube
Product
Nirmata AIControls – Unified Governance for AI Agents in Kubernetes (opens in a new tab)
Decide what your agents can do. Prove what they actually did.
PDF
Nirmata Enterprise for Kyverno – Production-Ready Kyverno, Backed by the People Who Built It (opens in a new tab)
An enterprise distribution of the CNCF Kyverno project with hardened releases, 24×7 SLAs, and curated policy packs.
PDF
AI Agents That Power Platform Engineering (opens in a new tab)
The Nirmata AI Platform Engineering Assistant is a collection of AI agents that unify natural-language policy creation, real-time remediation, and CLI-based automation.
PDF
The AI Platform Engineering Assistant (opens in a new tab)
Nirmata is the AI Platform Engineer’s assistant that operates on top of Kyverno, turning policy-as-code into automated governance.
PDF
Nirmata Control Hub – Automate Security & Operations with Policy as Code (opens in a new tab)
Nirmata Control Hub offers a unified solution for policy-based security, compliance, and automation.
PDF
AIControls Docs (opens in a new tab)
Governance for every AI call your team makes — identity, budgets, policy enforcement, and audit for Claude Code, Cursor, Codex, and Copilot.
Docs
Customers
How Chase UK Made Kubernetes Audit-Ready with Kyverno Policy as Code
Chase UK replaced manual Kubernetes audits with Kyverno: 46 policies on 50 clusters, one Grafana compliance dashboard, under 20 ms admission latency.
Read
How Razorpay Automates RBI Compliance on Kubernetes with Kyverno
Razorpay meets RBI Payment Aggregator rules on 7,000+ Kubernetes nodes with Kyverno policy as code: checks in CI, at admission and in scans, with live evidence.
Read
A Fortune 500 financial services company releases $329K a year in idle Kubernetes capacity
A Fortune 500 financial services company used Kyverno scale-down policies with Nirmata to release $329K a year in idle Kubernetes capacity on two clusters.
Read
Optimizing Kubernetes Security with Kyverno: A Deep Dive into Robinhood’s Implementation
How Robinhood’s engineering team replaced Pod Security Policies and an in-house admission server with Kyverno, from evaluation in audit mode to decommissioning.
Read
Enhancing Security and Compliance for Games24x7 with Nirmata
Discover how India’s leading online gaming company achieves continuous compliance and robust security for its Kubernetes environments with Nirmata Policy Manager.
Read
Fortune 500 Energy Leader transforms legacy systems to Kubernetes-based microservices – delivering innovation with agility
The rising demand for energy solutions, cost of energy production, combined with shifting customer expectations, prompted the company to embark on digital transformation.
Read
From the archive
Resources published before 2024.
Show 9 archived itemsHide archived items
Nirmata Control Hub Overview (opens in a new tab)
Watch on YouTube
Kyverno – A Technical Overview (opens in a new tab)
Watch on YouTube
Resources
CNAPP & Policy-as-Code: Complementary, Yet Distinctly Unique
CNAPPs like Wiz detect cloud and runtime risk. Nirmata and Kyverno prevent misconfigurations at the source.
Read
AI ROI for Engineering
A measurement model for the AI coding spend already on your books: AI cost per accepted outcome, attribution from token to pull request, and 8 questions to ask.
Free, form required
How Chase UK Made Kubernetes Audit-Ready with Kyverno Policy as Code
Chase UK replaced manual Kubernetes audits with Kyverno: 46 policies on 50 clusters, one Grafana compliance dashboard, under 20 ms admission latency.
Read
How Razorpay Automates RBI Compliance on Kubernetes with Kyverno
Razorpay meets RBI Payment Aggregator rules on 7,000+ Kubernetes nodes with Kyverno policy as code: checks in CI, at admission and in scans, with live evidence.
Read
Zero Trust for Kubernetes with Kyverno
Micro-segment, enforce least privilege, verify images and govern exceptions in Kubernetes. Mapped to NIST and CISA.
Read
Governing AI Agents in Kubernetes
AI agents hold real credentials. Get the threat model: 9 documented attack paths, 4 control points and 8 questions to ask of your Kubernetes cluster.
Free, form required
Cloud Native Live: Compliance at Scale with Kyverno - Razorpay and Nirmata (opens in a new tab)
Razorpay processes over $180 billion in payments annually and powers 80 of India’s top 100 unicorns.
Watch on YouTube
A Fortune 500 financial services company releases $329K a year in idle Kubernetes capacity
A Fortune 500 financial services company used Kyverno scale-down policies with Nirmata to release $329K a year in idle Kubernetes capacity on two clusters.
Read
The Kyverno Operator’s Playbook
Harden your admission controller, test policies, respond to CVEs and plan upgrades.
Read
Nirmata AIControls – Unified Governance for AI Agents in Kubernetes (opens in a new tab)
Decide what your agents can do. Prove what they actually did.
PDF
AI Workflows for Kubernetes: Let AI Make the Tough Calls – Introducing OttoFlow (opens in a new tab)
In this demo, Shreyas showcases OttoFlow, an open-source framework for building AI workflows for Kubernetes.
Watch on YouTube
Nirmata Shift Left: Catch Kubernetes Policy Violations Early & Fix Automatically (opens in a new tab)
Nirmata’s Shift Left Compliance solution moves policy enforcement earlier in the development lifecycle.
Watch on YouTube
AI-Powered Remediator Agent: Auto-Fix Kubernetes Policy Violations with Nirmata (opens in a new tab)
Nirmata’s AI-Powered Remediator Agent detects misconfigurations across your clusters and automatically generates verified, policy-compliant fixes.
Watch on YouTube
Your AI Agents Are Running Wild. Who’s Actually Controlling Them? - Jim Bugwadia on Techie Talks with Kuldeep (opens in a new tab)
Explore AI governance, policy as code, and how Kyverno is evolving from Kubernetes policy enforcement to full-stack AI controls.
Watch on YouTube
Keynote: Automating RBI Compliance With Unified Policy-as-Code - Jim Bugwadia & Ashwath Kumar (opens in a new tab)
In highly regulated fintech environments like Razorpay, compliance with RBI and PCI DSS mandates is a license to operate.
Watch on YouTube
How to Overcome the AI Visibility and Identity Gap in Your Organization (opens in a new tab)
The team behind Kyverno walks through practical strategies for attributing spend by developer and project, surfacing waste and model misuse.
Watch on YouTube
Nirmata Kubernetes Governance on vSphere Kubernetes Service on VMware Cloud Foundation: Reference Architecture (opens in a new tab)
This whitepaper describes how Nirmata Enterprise for Kyverno and Nirmata Control Hub deploy on VKS to deliver unified Kubernetes governance.
PDF
AI Governance From Nirmata: Complete Visibility & Control for AI Users and Agents (opens in a new tab)
AIControls gives you real-time visibility and policy enforcement on every call — before the token is spent.
Watch on YouTube
2026 AWS + Nirmata Workshop: Securing and Governing AI/ML Workloads on Amazon EKS with Agentic AI (opens in a new tab)
Implement guardrails for GPU resource allocation and utilization, and enforce security policies tailored to AI/ML containers and frameworks.
Watch on YouTube
Nirmata Enterprise for Kyverno – Production-Ready Kyverno, Backed by the People Who Built It (opens in a new tab)
An enterprise distribution of the CNCF Kyverno project with hardened releases, 24×7 SLAs, and curated policy packs.
PDF
OPA to Kyverno with Nirmata AI Platform Assistant (opens in a new tab)
Nirmata’s AI platform assistant migrates a complex OPA Gatekeeper policy to a production-ready Kyverno ValidatingPolicy using a single natural language prompt.
Watch on YouTube
Audit-Ready Kubernetes: How Chase UK Leveraged Policy as Code for Continuous Compliance - Jim Bugwadia & Nischay Goyal (opens in a new tab)
This session dives into how Chase UK’s Cloud Platform team leveraged CNCF and open source tools like Kyverno, OpenReports, and Grafana.
Watch on YouTube
Discussing Policy as Code and Kyverno with Pedro Ignacio (opens in a new tab)
Pedro discusses his platform engineering journey, including his cybersecurity background.
Watch on YouTube
Nirmata AI Platform Assistant Demo (opens in a new tab)
Nirmata’s AI platform assistant generates a production-ready Kyverno policy and 14 test cases from a single natural language command.
Watch on YouTube
Policy, Governance, and Open Source Insights with Eric Godding Boye (opens in a new tab)
Hosts Courtney Nickerson and Jim Bugwadia sit down with Eric Gattingby, a veteran software engineer and maintainer for cert-manager.
Watch on YouTube
Policy as Code + AI: A Platform Engineer’s Best Friend
In this forward-looking session, we explore how AI is transforming the entire policy lifecycle.
Free, form required
Remediator AI Agent Overview (opens in a new tab)
The Remediator Agent is an AI-powered remediation engine for Kubernetes that integrates directly with Kyverno and Nirmata Control Hub (NCH).
Watch on YouTube
AI Agents That Power Platform Engineering (opens in a new tab)
The Nirmata AI Platform Engineering Assistant is a collection of AI agents that unify natural-language policy creation, real-time remediation, and CLI-based automation.
PDF
The AI Platform Engineering Assistant (opens in a new tab)
Nirmata is the AI Platform Engineer’s assistant that operates on top of Kyverno, turning policy-as-code into automated governance.
PDF
Nirmata NCTL AI: Command-Line Platform Engineering AI Assistant (opens in a new tab)
In this video, we explore our Command Line (CLI) AI assistant, to help platform engineers automate governance, compliance and infrastructure operations.
Watch on YouTube
Faces Behind Policy as Code (opens in a new tab)
Watch on YouTube
AI Copilot Assistant Overview (opens in a new tab)
In this video, we explore your Control Hub natural language AI assistant, to describe desired outcomes for automatically generating policies and enforcement actions.
Watch on YouTube
Supercharge Kyverno with AI
See how Nirmata’s new AI-Driven Governance supercharges Kyverno. Learn to automate policy creation, reduce misconfigurations, and scale with ease.
Free, form required
How to Secure Production Kubernetes Environments with Kyverno
Actionable insights into building a robust, policy-driven, cloud-native infrastructure with Kyverno and Kubernetes.
Read
Nirmata Cloud Control Point: EKS and ECS end-to-end Policy-as-Code with AWS (opens in a new tab)
Managing containerized applications securely and efficiently in cloud-native environments requires strong governance and automation.
Watch on YouTube
Optimizing Kubernetes Security with Kyverno: A Deep Dive into Robinhood’s Implementation
How Robinhood’s engineering team replaced Pod Security Policies and an in-house admission server with Kyverno, from evaluation in audit mode to decommissioning.
Read
Governance and Compliance on Amazon EKS with Nirmata (opens in a new tab)
Eliminate misconfigurations and automate operations with Kubernetes-native policies.
Watch on YouTube
SecOps Automation in Openshift Clusters using Kyverno (opens in a new tab)
OpenShift is renowned for its robust out-of-the-box security features, including RBAC, built-in network policies, and default admission controllers.
Watch on YouTube
Beyond Kubernetes Security 101: Multi-Platform Governance and Policy Enforcement in AWS (opens in a new tab)
Join industry leaders from Solo.io and Nirmata as they explore the evolving landscape of container orchestration and application management.
Watch on YouTube
Shift Down Security: A New Paradigm for Platform Engineering Success
Learn how platform teams are embedding security into internal developer platforms.
Free, form required
Nirmata Control Hub – Automate Security & Operations with Policy as Code (opens in a new tab)
Nirmata Control Hub offers a unified solution for policy-based security, compliance, and automation.
PDF
Implementing Shift Down Security with Nirmata (opens in a new tab)
Preventing costly misconfigurations and enhancing cloud native innovation.
Watch on YouTube
Enhancing Security and Compliance for Games24x7 with Nirmata
Discover how India’s leading online gaming company achieves continuous compliance and robust security for its Kubernetes environments with Nirmata Policy Manager.
Read
Empowering Developers: Unlocking Efficiency and Security with Shift Down Security Practices (opens in a new tab)
Learn how to improve efficiency and security by incorporating security into the platform.
Watch on YouTube
The Combined Power of GitOps and Policy as Code
How to drive speed, security, and efficiency in cloud native environments.
Free, form required
Get Secure, Streamlined, and Developer-Friendly GitOps
GitOps offers a powerful approach to Kubernetes management, but it can introduce security risks, compliance gaps, and operational complexity.
Free, form required
Preventing Cost Overruns in Your Cloud-Native Environments (opens in a new tab)
Learn how to implement proactive cost controls on AWS using Kyverno and Kubecost.
Watch on YouTube
Securing GitOps with Policy as Code (opens in a new tab)
Speakers from Akuity, Nirmata, and AWS demonstrate how to secure GitOps workflows using policy as code with Argo CD, Kyverno, and Amazon EKS.
Watch on YouTube
Kubernetes Security Guide: Securing Kubernetes using Policy-as-code powered by Kyverno
Learn how to protect Kubernetes using policy-as-code with Kyverno.
Free, form required
Fortune 500 Energy Leader transforms legacy systems to Kubernetes-based microservices – delivering innovation with agility
The rising demand for energy solutions, cost of energy production, combined with shifting customer expectations, prompted the company to embark on digital transformation.
Read
Largest Healthcare Data Science Company – IQVIA – Chooses Nirmata for Kubernetes Security and Governance
The Digital Media Solutions business unit of IQVIA had a goal to move applications to an agile development process using AWS EKS Kubernetes.
Read
Nirmata accelerates ProSoft Technology’s journey to IoT microservices
ProSoft Technology specializes in communication solutions for industrial automation and control applications.
Read
Continuous Compliance using Nirmata Control Hub (opens in a new tab)
Overview of compliance standards reporting in Nirmata Policy Manager.
Watch on YouTube
Nirmata Control Hub Overview (opens in a new tab)
This video provides an overview of the Nirmata Policy Manager.
Watch on YouTube
Secure self-service EKS clusters using Amazon Controllers for Kubernetes (ACK), Argo CD and Kyverno (opens in a new tab)
Demo video for secure self-service provisioning on Amazon EKS clusters using Amazon Controllers for Kubernetes (ACK), Argo CD, and Kyverno.
Watch on YouTube
Kyverno – A Technical Overview (opens in a new tab)
Kyverno by Nirmata: a technical overview by Chip Zoller.
Watch on YouTube
Getting Started with Nirmata Enterprise for Kyverno (opens in a new tab)
Learn how to install and get up and running with Nirmata’s enterprise subscription to Kyverno.
Watch on YouTube
Ensure Kubernetes Security, Compliance, and Operational readiness for Amazon Web Services (opens in a new tab)
Nirmata provides centralized management and governance for Amazon EKS, enabling enterprises to accelerate their cloud-native journey.
PDF
Enabling Automation and Governance for Red Hat OpenShift using Kyverno (opens in a new tab)
While OpenShift is secure by default, operations and security teams often have different requirements for automation, governance and security.
PDF
451 Research – Market Insight Report (opens in a new tab)
The company is focusing its Kubernetes cluster management software on governance and compliance with its open source Kyverno policy engine to drive growth.
PDF
Duke Energy accelerates cloud-native adoption (opens in a new tab)
Learn how one Citrix customer is managing their cloud-native app environment with Citrix Application Delivery Management and Citrix ADC.
Watch on YouTube
Enhancing Kubernetes Governance and Compliance on AWS
How a leading quick-service restaurant chain streamlined Kubernetes governance and compliance across multiple Amazon EKS clusters with Nirmata Control Hub.
Read
The State of Cloud Native Policy Management (opens in a new tab)
Our survey results indicate increase adoption of policy enforcement deployed in production (50%).
Free, form required
AIControls Docs (opens in a new tab)
Governance for every AI call your team makes — identity, budgets, policy enforcement, and audit for Claude Code, Cursor, Codex, and Copilot.
Docs
AIControls: Getting Started (opens in a new tab)
Connect to AIControls — cloud-hosted SaaS workspace or self-hosted in your own Kubernetes cluster.
Docs
AIControls: Concepts (opens in a new tab)
What AIControls is and how it works — the model behind providers, model routes, identity, cost governance, security, policies, and MCP.
Docs
Integrations (opens in a new tab)
Enterprise Kyverno can be installed on cloud provider-managed Kubernetes clusters.
Docs
Getting Started (opens in a new tab)
Enterprise Kyverno is available as a Helm chart that can be installed using the Helm package manager.
Docs
