--- title: "AI Meets Kubernetes Security: Tigera CEO Reveals What Comes Next for Platform Teams" source: "https://www.tigera.io/blog/ai-meets-kubernetes-security-tigera-ceo-reveals-what-comes-next-for-platform-teams/" description: "Tigera CEO Ratan Tipirneni explains how Calico AI, Istio Ambient Mode, and new investments in VM-to-Kubernetes networking are shaping the future of Kubernetes security, observability, and AI-driven operations." --- [Company Blog](https://www.tigera.io/category/company-blog/) # AI Meets Kubernetes Security: Tigera CEO Reveals What Comes Next for Platform Teams By [Tigera Team](https://www.tigera.io/blog/author/marketingtigera-io/) on Dec 02, 2025 • 4 min read #### Kubernetes adoption is growing rapidly, but so are complexity and security risks. [![Tigera CEO Ratan Tipirneni and an interviewer speak at The New Stack event.](https://www.tigera.io/app/uploads/2025/12/Tigera-New-Stack-Interview-scaled.png)](https://www.youtube.com/watch?v=6TMEbec7MHw)Tigera CEO, Ratan Tipirneni, on Calico AI and the Push for Simpler, Unified Kubernetes Security Platform teams are tasked with keeping clusters secure and observable while navigating a skills gap. At KubeCon + CloudNativeCon North America, The New Stack spoke with Ratan Tipirneni, President and CEO of Tigera, about the future of Kubernetes security, AI-driven operations, and emerging trends in enterprise networking. The highlights from that discussion are summarized below. *Portions of this article are adapted from a recorded interview between The New Stack’s Heather Joslin and Tigera CEO Ratan Tipirneni. You can watch the full conversation on The New Stack’s YouTube channel. [Watch the full interview here](https://www.youtube.com/watch?v=6TMEbec7MHw)* ## How Can Teams Better Manage the Kubernetes Blast Radius and Skills Gap? Tipirneni emphasizes the importance of controlling risk in Kubernetes clusters. “You want to be able to microsegment your workloads so that if you do come under an attack, you can actually limit the blast radius,” he says. Egress traffic is another area of concern. According to Tipirneni, identifying what leaves the cluster is critical for security and compliance. Platform engineers are often navigating complex configurations without decades of networking experience. “Calico AI is a great mechanism to help them understand some of the nuances and intricacies of how to troubleshoot these things without having to get a PhD in networking,” Tipirneni explains. ## How Does Calico AI Simplify Kubernetes Operations Through Conversation? Tigera’s new [Calico AI](https://www.tigera.io/blog/tigera-news-kubecon-2025/#calico-ai-operational-simplicity) aims to make cluster operations more approachable. Users can ask questions like “What ports are open?” or “Are network policies preventing service connectivity?” and receive actionable guidance. Tipirneni frames it as a response to growing operational complexity. “Our solution is rich, but it can also be very comprehensive and a little intimidating to use. We figured out a mechanism using AI to simplify the user experience, allowing users to chat with the solution and unlock more value,” he says. ## Why Does Support for Istio Ambient Mode Matter for Unified Kubernetes Security? Tigera is also incorporating [Istio Ambient Mode](https://www.tigera.io/blog/tigera-news-kubecon-2025/#istio-ambient-mode-calico) to provide a single point of control from network layer three to application layer seven. This approach allows teams to combine L3 flow logs with L7 service logs, improving visibility and troubleshooting. Tipirneni highlights that customer demand drove this integration. “Many of our customers really want a single vendor to manage all the solutions so they are not dealing with multiple vendors,” he says. Istio Ambient Mode used with Calico also offers flexible encryption options, including WireGuard and mTLS, depending on customer requirements. ## What Challenges Do AI Agents Introduce for Kubernetes Security? The conversation turned toward the future of AI in enterprise operations. Tipirneni notes that autonomous AI agents are becoming more common, offering new capabilities but also new challenges.”Agents are autonomous and non-deterministic. You cannot predict which agents are going to talk to other agents or what actions they will take. This presents a complex problem for security, monitoring, and observability,” he says. Despite the risks, Tipirneni sees enormous opportunity. “We should lean in and do this. We are experimenting internally by building agents to automate functions from marketing to engineering. We are seeing an explosion of ideas.” ## Why Are Enterprises Accelerating VM to Kubernetes Migrations? Tipirneni notes that many enterprises migrating from VMs to Kubernetes are discovering a gap: VM environments often included sophisticated, assumption-laden networking capabilities, and organizations now expect comparable functionality for those workloads once they move into Kubernetes. “KubeVirt is a powerful mechanism to migrate most of these VMs,” he explains, “but there is still a big gap in networking for those workloads. We are making big investments to solve these problems.” ## What Comes Next for Kubernetes Security and AI-driven Operations? The Kubernetes ecosystem is evolving quickly. Calico AI promises to simplify security operations, Istio Ambient Mode provides application (L7) traffic control and encryption, and emerging trends like AI agents and VM migrations are reshaping enterprise operations. Together, these innovations signal a shift toward more unified, intelligent platforms that reduce complexity and help teams operate Kubernetes environments with far greater agility and confidence. ### Ready to Go Deeper on Istio Ambient Mode, Calico AI and Kubernetes Security? Take the next step and explore the full set of announcements from this year’s KubeCon + CloudNativeCon NA 2025. - [Learn more about Tigera’s latest updates and product innovations](https://www.tigera.io/blog/tigera-news-kubecon-2025/) - [Read the full press release on Calico AI and the new Istio Ambient Mode](https://www.tigera.io/news/tigera-expands-calico-kubernetes-network-security-platform-with-ai-powered-capabilities-and-an-integrated-istio-service-mesh-for-complete-l3-l7-control/) [Service Mesh](https://www.tigera.io/tags/service-mesh/)[Announcements](https://www.tigera.io/tags/announcements/) ## Related posts [![Meet Mylo: An AI-native way to work with Calico](https://www.tigera.io/app/uploads/2026/09/Meet-Mylo-An-AI-native-way-to-work-with-Calico.png)](https://www.tigera.io/blog/meet-mylo-an-ai-native-way-to-work-with-calico/) [Technical Blog](https://www.tigera.io/category/technical-blog/) #### [Meet Mylo: An AI-native way to work with Calico](https://www.tigera.io/blog/meet-mylo-an-ai-native-way-to-work-with-calico/) By [Phil DiCorpo](https://www.tigera.io/blog/author/phil-dicorpo/) on Sep 3, 2026 A library of Calico tools and skills — delivered through the Calico MCP Server What if your hardest network question took ten minutes instead of ten days? Anyone who has operated Kubernetes networking at scale... [Read more](https://www.tigera.io/blog/meet-mylo-an-ai-native-way-to-work-with-calico/) [![Why We Built Lynx: Bringing Control to the Age of AI Agents](https://www.tigera.io/app/uploads/2026/06/Introducing-Lynx-NEW-TEMPLATE-2026-Tigera-brand.png)](https://www.tigera.io/blog/why-we-built-lynx-bringing-control-to-the-age-of-ai-agents/) [Featured Blog](https://www.tigera.io/category/featured-blog/) #### [Why We Built Lynx: Bringing Control to the Age of AI Agents](https://www.tigera.io/blog/why-we-built-lynx-bringing-control-to-the-age-of-ai-agents/) By [Ratan Tipirneni](https://www.tigera.io/blog/author/ratan/) on Jun 17, 2026 For a decade, one idea has guided everything we’ve built at Tigera: How do you secure a dynamic system with a lot of moving parts that is changing rapidly, with a programmatic approach? Calico has... [Read more](https://www.tigera.io/blog/why-we-built-lynx-bringing-control-to-the-age-of-ai-agents/) [![Calico at KubeCon Europe 2026: AI Agents, Silent Discos, and Dutch Delights!](https://www.tigera.io/app/uploads/2026/02/Blog-Kubecon-Euro-2026-.png)](https://www.tigera.io/blog/calico-at-kubecon-cloudnativecon-europe2026/) #### [Calico at KubeCon Europe 2026: AI Agents, Silent Discos, and Dutch Delights!](https://www.tigera.io/blog/calico-at-kubecon-cloudnativecon-europe2026/) By [Tigera Team](https://www.tigera.io/blog/author/marketingtigera-io/) on Mar 23, 2026 The cloud-native community gathered among the historic canals and vibrant tech scene of Amsterdam for KubeCon + CloudNativeCon Europe 2026! From March 23–26, Amsterdam was buzzing with the latest in Kubernetes, platform engineering, and, of... [Read more](https://www.tigera.io/blog/calico-at-kubecon-cloudnativecon-europe2026/)