--- title: "Compare Calico Editions" source: "https://www.tigera.io/tigera-products/compare-products/" description: "Compare Calico editions side by side, from Calico Open Source to Enterprise and Cloud, to find the right Kubernetes networking and security features for your team." --- # Compare Calico Editions Unified network security and observability to prevent, detect and mitigate security breaches in Kubernetes clusters Compare Products [Get a Demo](https://www.tigera.io/demo/) ![Calico Logo](https://www.tigera.io/app/uploads/2026/01/Hero-Calico-badge-753x471-1.png) ## Product Editions ![Calico Logo](https://www.tigera.io/app/uploads/2026/01/Calico-logo-2026-black-text.svg) ### Calico Open Source Open-source networking and security for containers and Kubernetes. [Learn More](https://www.tigera.io/tigera-products/calico/) ### Calico Cloud SaaS platform for Kubernetes network security and observability. [Learn More](/tigera-products/calico-commercial-editions/) ### Calico Enterprise Self-managed platform for Kubernetes network security and observability. ## Choosing the Right Edition ### Calico Open Source Calico Open Source is a networking and security solution for containers, virtual machines, and native host-based workloads that was born out of Project Calico. **Best fit:** Users who want open source, best-in-class networking, network security, and observability capabilities for Kubernetes. ![Calico Open Source deployment diagram](https://www.tigera.io/app/uploads/2025/05/Calico-Open-Source-deployment-diagram-1.png) ### Calico Cloud Calico Cloud is a fully-managed SaaS platform that provides unified network security and observability to prevent, detect and mitigate security breaches in Kubernetes clusters. It is built on Calico Open Source, the most widely adopted container networking and security solution. **Best fit:** Organizations that want a **fully managed SaaS platform** for network security and observability. ![Calico Cloud's Service Graph UI shows Kubernetes network security and observability, visualizing connections between](https://www.tigera.io/app/uploads/2022/09/service-graph-08.png) ### Calico Enterprise Calico Enterprise is a self-managed platform for unified network security and observability to prevent, detect and mitigate security breaches in Kubernetes clusters. It is built on Calico Open Source, the most widely adopted container networking and security solution. **Best fit:** Organizations that want a **self-managed platform** for network security and observability. ## Compare Products [Calico Open Source](https://www.tigera.io/tigera-products/calico/) [Calico Cloud](https://www.tigera.io/tigera-products/calico-commercial-editions/) [Calico Enterprise](https://www.tigera.io/tigera-products/calico-commercial-editions/) Management and Support Mutli-cluster security controls management Data retention In-memory 7 days Unlimited Number of clusters Unlimited Unlimited Unlimited Support and maintenance Community-driven Standard/Business Standard/Business Networking High performance, scalable pod networking Advanced IP address management Direct infrastructure peering without the overlay eBPF data plane Windows data plane nftables data plane iptables data plane VPP data plane Multiple Calico networks on a pod Dual ToR peering Ingress Gateway Egress Gateway Cluster Mesh Istio Ambient Mode Network Security Seamless support for Kubernetes network policy Label-based policies for K8s and non-K8s workloads Namespace and cluster-wide scope Global default deny policy design Application layer policy Policy for services Policy board DNS/FQDN-based policy Hierarchical tiered network policy Policy recommendations Staged network policy Preview staged policies Network sets to limit IP ranges for egress and ingress traffic to workloads Data-in-transit encryption Universal firewall integration Workload-based IDS/IPS Deep Packet Inspection (DPI) DDoS protection Workload-centric WAF Ingress WAF Compliance reporting and alerts SIEM integrations Network Security for VMs and Bare Metal Restrict traffic to/from hosts and VMs using network policy Automatic host endpoints Apply policy to host-forwarded traffic Centralized log forwarding for VMs and Bare Metal Hosts Observability Goldmane API to retrieve flow logs Calico Whisker UI Dynamic Service and Threat Graph Application level observability Dynamic packet capture Flow visualizer Logs (flow) Logs (http traffic, audit, bgp, dns, events) Calico Dashboards Alerts Note: This table applies to the current versions of Calico product editions ## Get Started [Start Free](https://www.calicocloud.io/) [Get a Demo](https://www.tigera.io/demo/)