--- title: "Identity-Aware Microsegmentation" source: "https://www.tigera.io/features/microsegmentation/" --- Solution # Identity-Aware Microsegmentation Implement workload isolation and prevent lateral movement of threats with workload-based microsegmentation. [Start Free](https://www.calicocloud.io/) [Get a Demo](https://www.tigera.io/demo/) ## Benefits Segment workloads based on application tiers, compliance, and access. Prevent lateral movement of threats in the cluster ![Four distinct outlined shapes: three rounded squares and one circle.](https://www.tigera.io/app/uploads/2023/04/icon-Workload-Isolation.svg) ### Workload Isolation Restrict access to workloads to prevent unauthorized lateral movement ![Magnifying glass icon with an exclamation mark.](https://www.tigera.io/app/uploads/2023/04/icon-Intrusion-detection-prevention.svg) ### Eliminate Lateral Movement in the Cluster Stop attackers from searching for high-value assets ![Radar screen icon.](https://www.tigera.io/app/uploads/2023/04/icon-Runtime-Threat-Defense.svg) ### Instant Threat Response and Mitigation Enforce security policy changes in milliseconds for instant threat responses ## Trusted by Customers Worldwide [![Orange logo](https://www.tigera.io/app/uploads/2022/03/logo-Orange.png)](http://www.orange.com/en) [![Essentra logo](https://www.tigera.io/app/uploads/2022/04/logo-Essentra.png)](https://www.essentra.com/en) [![Siemens Healthineers logo](https://www.tigera.io/app/uploads/2022/09/logo-siemens-healthineers.png)](https://www.siemens-healthineers.com/) [![RBC logo](https://www.tigera.io/app/uploads/2024/05/logo-RBC.png)](https://www.rbcroyalbank.com/) [![Marsh McLennan logo](https://www.tigera.io/app/uploads/2022/03/logo-Marsh-and-McLennan.png)](http://www.mmc.com/) [![Presidio logo](https://www.tigera.io/app/uploads/2024/05/logo-Presidio.png)](https://www.presidio.com/) [![Box logo](https://www.tigera.io/app/uploads/2022/03/logo-box.png)](http://www.box.com/home) [![Nvidia logo](https://www.tigera.io/app/uploads/2024/05/logo-Nvidia.png)](https://www.nvidia.com/) [![FM Global logo](https://www.tigera.io/app/uploads/2023/03/logo-FM-Global.png)](https://www.fmglobal.com/) [![Upwork logo](https://www.tigera.io/app/uploads/2022/12/logo-upwork.png)](https://www.upwork.com/) [![GoDaddy logo](https://www.tigera.io/app/uploads/2023/03/logo-GoDaddy.png)](https://www.godaddy.com/) [![Arvato Systems logo](https://www.tigera.io/app/uploads/2025/01/logo-Arvato-systems.png)](https://www.arvato-systems.com/) [![Aldagi logo](https://www.tigera.io/app/uploads/2022/10/logo-aldagi.png)](https://aldagi.ge/en/) [![NBC Universal logo](https://www.tigera.io/app/uploads/2022/09/logo-NBC-Universal.png)](https://www.nbcuniversal.com/) [![Chipotle logo](https://www.tigera.io/app/uploads/2024/05/logo-Chipotle.png)](https://www.chipotle.com/) [![Meridianlink logo](https://www.tigera.io/app/uploads/2022/03/logo-Meridianlink.png)](http://www.meridianlink.com/) [![Mulligan Funding logo](https://www.tigera.io/app/uploads/2022/03/logo-MulliganFunding.png)](https://www.mulliganfunding.com/) [![HanseMerkur logo](https://www.tigera.io/app/uploads/2022/03/logo-HanseMerkur.png)](http://www.hmrv.de/en) [![Fiserv logo](https://www.tigera.io/app/uploads/2022/12/logo-fiserv.png)](https://www.fiserv.com/) [![Berenberg logo](https://www.tigera.io/app/uploads/2022/03/logo-BERENBERG.png)](http://www.berenberg.de/en/) [![eHealth logo](https://www.tigera.io/app/uploads/2023/10/logo-eHealth.png)](https://www.tigera.io/ehealth-case-study/) [![Coinmetrics logo](https://www.tigera.io/app/uploads/2022/03/logo-coinmetrics.png)](http://coinmetrics.io/) ![Endpoint Details for Dynamic Segmentation Screenshot](https://www.tigera.io/app/uploads/2023/05/Endpoint-Details-for-Dynamic-Segmentation.png) ### Dynamic Segmentation Segmentation based on workload metadata such as pod name, namespace, node, labels, and annotations. The use of labels ensures that new workloads are segmented automatically upon deployment. ![Edit Policy Segmentation Granularity Screenshot](https://www.tigera.io/app/uploads/2022/09/Edit-Policy-Segmentation-Granularity.png) ### Segmentation Granularity Enforce workload-level, environment-based, or application-tier segmentation for containers, Kubernetes, VMs, and more in test and in production. Implement segmentation to comply with industry or custom regulatory frameworks. ![Policies Board Screenshot](https://www.tigera.io/app/uploads/2022/09/Policies-Board-03.png) ### Policy Creation and Enforcement Create, stage, preview, deploy, and manage granular, zero-trust security policies at the workload level. Enforce hierarchical policy tiers and get real-time policy evaluations. ![Recommend Policy Screenshot](https://www.tigera.io/app/uploads/2022/09/Recommend-Policy-3.png) ### Policy Recommendations Single-click solution to generate policies and isolate workloads at the namespace level. Fast-track microsegmentation without the need to inspect and analyze workload interactions. Jumpstart security policy creation and microsegmentation for first-time application deployments. ![Performance](https://www.tigera.io/app/uploads/2021/06/performance-at-scale.png) ### Scalability and High Performance Eliminate centralized congestion points associated with legacy workload microsegmentation approaches that can impact performance with Calico’s cloud-native distributed architecture. Securely deploy new workloads to environments with tens of thousands of servers, and be online in milliseconds instead of taking days. ## Available on Microsoft Azure, AWS, and Google Marketplace Get started right away on Azure, AWS, or Google Cloud—every Calico component you need to get up and running is ready to go. [On Azure](https://azuremarketplace.microsoft.com/en-ca/marketplace/apps/tigerainc1620235671643.calicocloudsaas?tab=overview) [On AWS](https://aws.amazon.com/marketplace/pp/prodview-pq3tgvtlj3wce) [On Google Cloud](https://console.cloud.google.com/marketplace/product/tigera-public/calico-cloud?inv=1&invt=Ab27_g&project=tigera-public) ![Microsoft Azure, AWS, and Google Cloud logos.](https://www.tigera.io/app/uploads/2025/07/Solution-cloud-marketplace-AWS-Azure-03.svg) ## Customer Testimonial Here’s what our customers are saying about us ![Quotation marks](https://www.tigera.io/app/themes/tigera2021/dist/img/quotes-sign.svg) Calico helped us enforce microsegmentation and gave us the security and observability capabilities we needed in order to go bare metal and consolidate 16 clusters into 4—all while remaining compliant with regulatory requirements. Thorben Theil DevOps & IT – Security, HanseMerkur ![HanseMerkur Logo](https://www.tigera.io/app/uploads/2023/10/logo-HanseMerkur-170x60-1.png) [Learn More](https://www.tigera.io/hansemerkur-case-study/) [Read Customer Stories](https://www.tigera.io/customer-stories/) ## Featured Resources Developer-created resources to help you secure your Kubernetes deployment ![Implement Microsegmentation for Cloud-Native Workloads](https://www.tigera.io/app/uploads/2023/05/Featured-resources-Microsegmentation-WP.png) White Paper ### Implement Microsegmentation for Cloud-Native Workloads Find out why traditional network-based segmentation doesn't work for cloud-native applications. [Read More](https://www.tigera.io/lp/microsegmentation-white-paper/) ![Microsegmentation Datasheet](https://www.tigera.io/app/uploads/2023/04/Featured-resources-Microsegmentation.png) Datasheet ### Microsegmentation Datasheet Scalable, unified microsegmentation for cloud-native workloads across all of your environments. [Read More](https://info.tigera.io/rs/805-GFH-732/images/datasheet-microsegmentation.pdf) ![Tigera Tutorials](https://www.tigera.io/app/uploads/2022/12/Self-paced-workshops-380x200.png) Tutorial ### Tigera Tutorials From security issues to observability challenges, learn how to address pain points in our hands-on tutorials. [Read More](https://www.tigera.io/tutorials/) [All Resources](https://www.tigera.io/resources/) ![Calico Logo](https://www.tigera.io/app/uploads/2026/01/Calico-logo-2026-black-text.svg) ## Ready to Get Started? Get started for free or request a demo to see Calico in action