Kernel-native security, for every node.

Tracenyx builds Nyx — a kernel-native network security and observability platform for Kubernetes. Nyx enforces zero-trust network policy and captures flow-level visibility at the kernel on both Linux nodes (eBPF) and Windows Server nodes (a Microsoft HLK-certified WFP callout driver), with one policy model and matched enforcement behaviour across both operating systems.

If Kubernetes networking isn't your day job, our plain-language guide to why Nyx exists covers the whole argument — the default nobody chose, how attackers use it, and what microsegmentation changes — with no Kubernetes expertise assumed.

We think evaluating security tooling should come before installing it. That's why Nyx has a public live demo — a real cluster you can explore with no signup at orbit.tracenyx.ai — and a free tier you can install with one Helm command.