Aviatrix Clearance sets what every cloud workload may reach before any attack, so a compromised workload stays where it is. Free to every enterprise through May 1, so you have time to patch.
Each workload gets clearance for the destinations and the other workloads it needs, and everything else is denied by default, with nothing to install and nothing to detect first.
Policy follows the pod rather than the node address, and pod egress through node NAT is governed like any other path.
Every agent is discovered from flow and DNS, including the ones no one authorized, and cleared for its own job rather than its neighbor’s.
VMs, serverless functions, databases and platform services get the same clearance, by identity, across every cloud.
Phase 1, the Self-Score, runs in your browser with nothing to deploy and reports a provisional Blast Radius for your estate.
The autonomous defense layer. Its agents build a model of the estate from the estate itself, with no tagging project and no inventory to import, and draft the policy each application needs. They prove each policy in monitor mode on live traffic, so the team sees exactly what would have been denied before anything is, and keep it current as the estate changes. Every policy they write is standard policy the team can read, change or back out in one action. Available today in free early access for design partners on Aviatrix Enterprise, planned for Aviatrix Cloud.
Explore Aviatrix ClearanceA workload reaches only the outside destinations it is cleared for, named by domain rather than IP, with default deny at every workload and no central firewall in the path.
A workload reaches only the other workloads it is cleared for, by identity, across VPCs and clouds, down to the pod, the function, the database and the AI agent.
A supply-chain compromise inside a customer’s AI stack tried to reach the internet. Default-deny outbound at the workload held, the connection never left the estate, and the Blast Radius stayed at the paths that workload was cleared for. That is Outbound Containment, and it ships in Aviatrix Clearance.
Read the accountphp2shell, a pair of critical flaws in the software that runs a large share of the world's websites, was under attack four days before its fix shipped, and teams are taking systems offline to assess and patch. eMudhra put weak certificate keys into wide use, and the software outside the browser is still catching up. LiteLLM was compromised for the second time this year, and the payload harvested every AI provider key the gateway held. None of this is patched in a day, and the work runs into the holiday change freeze. Aviatrix is making Aviatrix Clearance free to every enterprise across its whole estate, outbound, lateral and intrusion prevention, from November 1 through May 1, so teams have time to patch with a containment backstop in place.
Including 10% of the Fortune 500
New mandates are rewriting the rules — HIPAA's 2026 encryption requirements, PCI DSS 4.0 segmentation controls, and SEC incident disclosure timelines all demand network-level enforcement. The Aviatrix Containment Platform delivers it across every regulated workload.
Protect sensitive data, ensure compliance, and optimize digital banking experiences with robust, cloud network security solutions designed to meet the demands of modern financial institutions.
Start with the free Containment Assessment. Aviatrix Clearance is free to every enterprise through May 1, so you have time to patch, and standard terms return after.
