Security that scales from your
first cluster to your entire estate.

A namespace is a monitored Kubernetes namespace. The Nyx agent deploys to every node in your cluster, but data collection is scoped only to the namespaces you choose to monitor — so your plan limit is about what you watch, not how big your cluster is.

Yes. Nyx runs as a single DaemonSet across the whole cluster so enforcement and visibility are consistent, but it only collects flow data for the namespaces you've enabled. Adding nodes never changes your plan — adding monitored namespaces does.

Both, with real behavioural parity. Linux enforcement is built on eBPF; Windows Server uses a WFP callout driver. The same policy model and the same three enforcement modes (dry-run, audit, enforce) apply on each. Mixed Linux/Windows clusters get one security model, not two.

Only anonymised traffic patterns — never raw flow records, pod names, or IP addresses. This is true on every tier. Aegis customers can additionally enable Private AI, where all AI processing stays inside Tracenyx infrastructure with zero third-party exposure — for environments where nothing may leave the boundary.

Most zero-trust projects stall in audit mode — teams are nervous about breaking production, so policies never reach full enforcement. On Aegis, our team works with you to take policies from first dry-run through to full coverage across every namespace and node in your estate.

Your account moves to the free Scout tier — you choose which 3 namespaces to keep monitoring, SSO is disabled, and our team follows up to help you decide on the right plan. Nothing is deleted abruptly.

By default, data is stored in the Australia East region. Aegis customers can specify a preferred data region.

Aegis is custom-priced to your scale and requirements. Get in touch and we'll scope it with you.

Yes. Scout is free, requires no credit card, and is meant for individuals and first clusters. You can sign up with a personal email and get access immediately.