Tigera

Name: Tigera
Brand: Tigera
Rating: 4.5 (50 reviews)

Tigera is the commercial company behind Project Calico that provides Kubernetes-native networking, network policy enforcement, and network-level observability via Calico Open Source, Calico Cloud (SaaS), and Calico Enterprise (self-managed).

Est 2016|Valuation $191M|Raised $65M|39 Ref Customers

LinkedIn 18K|Web traffic 4K|FTEs 127|HQ San Jose, California, US

MarketsCloud-Native Application Protection Platform (CNAPP)Firewalls

Published Oct 15, 2026

01Common complaints

- If the primary requirement is broad CNAPP functionality (CSPM, CIEM, IaC scanning, and centralized vulnerability management) and the organization does not plan to run a network-policy program; broader CNAPP vendors may be a better fit. - If the organization lacks Kubernetes networking expertise and cannot staff or train personnel for policy engineering and dataplane management. - If the organization cannot accommodate upgrade and compatibility testing cycles required when Kubernetes APIs change. - If the environment is constrained by a managed CNI that restricts deep dataplane modifications; compatibility with the managed platform should be verified.

Deal disqualifiers (poor fit)

Organizations with minimal Kubernetes expertise seeking a fully managed, set-and-forget security tool.
Organizations expecting a single vendor to deliver a complete CNAPP (posture, IAM, vuln mgmt, IaC scanning, and runtime) without additional integrations.

Known limitations (from user feedback / community)

Learning curve for advanced policy design and multi-cluster or hybrid configurations.
Upgrade and compatibility management: compatibility testing may be required when upgrading Kubernetes or platform components.

Vendor-acknowledged constraints

Feature availability varies by tier: free tiers often include short data retention and limited user/cluster allowances; enterprise capabilities require paid tiers.

02Why they buy

Unique selling points with evidence

Widespread use of Calico as a CNI and network policy solution across Kubernetes ecosystems; the vendor positions it as widely adopted.
A consumption-based SaaS pricing model (published unit rate) that can provide cost transparency for cloud-based usage.
Performance focus and availability of an eBPF dataplane option, which reviewers frequently cite as a performance-related advantage.

Where competitors may be stronger

Full CNAPP suites provide broader posture and vulnerability workflows beyond network-focused controls.

03Field reports

Review platforms snapshot

G2: multiple reviews with generally positive ratings; reviewer counts and averages vary over time.
Gartner Peer Insights: several reviews with high average scores across Calico Enterprise and Calico Cloud listings.

Representative customer feedback (summarized)

Independent reviewer feedback highlights: - Positive themes: reviewers commonly report that the solution is lightweight and performs well at scale, that network policies can be effective for microsegmentation, and that troubleshooting is improved by the visibility features. - Negative themes: reviewers report a learning curve for advanced features and policy design, occasional upgrade or compatibility issues between versions, and requests for improved UI intuitiveness and documentation for advanced scenarios. Vendor-published testimonials express strong support experiences and describe operational benefits; these should be treated as vendor-provided statements and validated where possible.

Community/social sentiment

Community discussions focus on operational risk management, particularly compatibility and upgrade safety. Reports indicate that the product generally works across Kubernetes versions but that API removals or platform changes can require updates and compatibility testing.

Why customers choose Calico/Tigera (themes)

Performance and scale: commonly cited as lightweight and performant at scale.
Network policy and microsegmentation: granular workload-level controls are valued.
Visibility: observability into service-to-service traffic helps troubleshooting and auditing.

Why some customers might not purchase or may leave (themes)

Steep learning curve for teams without Kubernetes networking expertise.
Upgrade risk and the need for careful compatibility testing.
UI and visual tooling that some reviewers find less intuitive compared to purely GUI-driven products.

Vendor-available case studies

Vendor-published case studies are available as downloadable assets. These materials provide examples of customer outcomes; however, any ROI or time-savings metrics in vendor case studies should be validated for methodology and independently verified when used in procurement decisions.

Example vendor claims with limited independent verification

Public materials claim large-scale adoption and recognizable customer relationships. These claims are plausible but should be validated through direct customer references or independent third-party reports if the purchaser requires defensible metrics.

Recommendation: request methodology, customer references for interviews, and permission to review third-party validation (for example, audited reports or performance test methodology) for defensible ROI or benchmark metrics.

04Best fit

Company sizes

Mid-market to enterprise organizations running production Kubernetes, often in multi-cluster deployments.
Practical organizational sizes vary; typical implementations are seen across organizations from small platform teams to large enterprises depending on platform maturity.

Industries

Common use in regulated and scale-sensitive industries, based on vendor materials and public references:

Financial services, healthcare, SaaS, and telecom/media.
Vendor materials reference various enterprise customers; procurement teams should confirm references.

Roles/personas

Platform engineering / Kubernetes platform owners
SRE / infrastructure teams
DevSecOps / cloud security engineering

Pain points addressed

Limited visibility into east-west traffic inside clusters
Need for least-privilege network communication and microsegmentation
Multi-cluster policy consistency and compliance reporting

Qualification criteria (good fit)

Organizations operating Kubernetes at scale that can invest in policy engineering.
Teams that require strong network segmentation and audit/compliance reporting.

05The pitch

What the product does (core value proposition)

Tigera is the commercial company that develops Project Calico (Calico Open Source) and offers paid editions—Calico Cloud (SaaS) and Calico Enterprise (self-managed). The product provides Kubernetes-native capabilities to (1) connect workloads via a CNI, (2) enforce network policies, and (3) provide visibility and troubleshooting. Paid tiers add features such as threat detection and additional enterprise functionality. The vendor describes the offering as a combined network security and observability solution for Kubernetes. Key product editions as described by Tigera: - Calico Open Source: networking, network policy, and IPAM for Kubernetes/containers/VMs (free, self-managed). - Calico Cloud: SaaS, pay-as-you-go; adds console-driven observability and policy management and, in paid tiers, threat detection, multi-cluster features, and enterprise support. - Calico Enterprise: self-managed paid platform; includes enterprise support, multi-cluster features, and custom retention options.

Target market and market positioning

Primary buyers/users include platform engineering, SRE, DevSecOps, and security teams running Kubernetes clusters across single or multiple clusters in hybrid/multi-cloud environments.

Positioning: Tigera emphasizes Kubernetes runtime network controls (policy) and network visibility, and differentiates from broader CNAPP vendors by integrating into the network dataplane/CNI layer.

Get a comprehensive analysis of Tigera including market position, competitive landscape, adoption trends, and peer benchmarks.

Download full report →