# Nirmata vs Rafay

**Leader by Vioscale score:** Nirmata

| Attribute | Nirmata | Rafay |
|---|---|---|
| **Vioscale score** | 66.3 (56% (medium)) | 53 (42% (low)) |
| deployment.options | `{"cloud":true,"hybrid":true,"on_prem":true,"self_hosted":true}` | `{"cloud":true,"hybrid":true,"on_prem":true,"air_gapped":true,"self_hosted":true}` |
| description.long | Platform that provides centralized visibility, policy enforcement, and automated remediation across Kubernetes clusters, CI/CD pipelines, and cloud resources. Built on top of the open-source Kyverno policy engine, it uses AI agents to detect misconfigurations and automatically generate fixes for compliance and security standards. | A comprehensive platform that enables organizations to expose GPU infrastructure and Kubernetes workloads as managed, self-service cloud services with built-in multi-tenant governance, automation, and visibility across hybrid and air-gapped environments. |
| features.capabilities | `{"iso_27001":true,"soc2_type_ii":true,"cli_shell_access":true,"deployment_model":"saas","bundled_service_mesh":false,"centralized_sso_rbac":true,"eks_gke_aks_lifecycle":true,"cost_management_module":false,"edge_iot_scale_capable":false,"multi_cluster_config_sync":true,"bundled_observability_stack":false,"bare_metal_vsphere_provisioning":false}` | `{"iso_27001":false,"soc2_type_ii":false,"license_model":"proprietary","pricing_model":"per_node_core","cli_shell_access":true,"deployment_model":"saas","device_discovery":false,"edge_ml_inference":true,"hardware_provided":false,"kubernetes_native":true,"ota_fleet_updates":true,"air_gapped_support":true,"control_plane_model":"k8s-extension","multi_cloud_neutral":true,"bundled_service_mesh":true,"centralized_sso_rbac":true,"eks_gke_aks_lifecycle":true,"cost_management_module":true,"edge_iot_scale_capable":false,"central_fleet_dashboard":true,"gpu_accelerator_support":true,"telco_mec_purpose_built":false,"multi_cluster_config_sync":true,"bundled_observability_stack":true,"offline_disconnected_operation":true,"bare_metal_vsphere_provisioning":true}` |
| integrations.count | 14 | 14 |
| integrations.list | `[{"name":"GitHub"},{"name":"GitLab"},{"name":"Bitbucket"},{"name":"Argo"},{"name":"Flux"},{"name":"Amazon EKS"},{"name":"Azure AKS"},{"name":"Google GKE"},{"name":"Rancher"},{"name":"OpenShift"},{"name":"AWS"},{"name":"Okta"},{"name":"Terraform"},{"name":"Dockerfile"}]` | `[{"name":"Slack"},{"name":"Microsoft Teams"},{"name":"PagerDuty"},{"name":"Jira"},{"name":"ServiceNow"},{"name":"Datadog"},{"name":"Elasticsearch"},{"name":"Loki"},{"name":"Terraform"},{"name":"Crossplane"},{"name":"GitHub Actions"},{"name":"AWS EKS"},{"name":"Microsoft Azure AKS"},{"name":"Google Cloud GKE"},{"name":"Oracle Cloud OKE"},{"name":"Argo CD"},{"name":"AWS"},{"name":"Azure"},{"name":"Google Cloud"},{"name":"Oracle Cloud"}]` |
| market.availability | `{"primaryMarkets":["US"],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | `{"hqCountry":"US","primaryMarkets":["US"],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"web":true}` | `{"cli":true,"web":true}` |
| pricing | `{"type":"subscription","plans":[{"free":false,"name":"Essentials","summary":"$1,800/month, includes 20 clusters or 250 nodes","features":["Centralized Reporting","Kyverno Engine Health","Shift-Left Enforcement","AI Platform Assistant"],"commitment":"monthly","components":[{"kind":"fixed","amount":1800,"period":"month","currency":"USD"}],"description":"Centralized visibility and control for Kubernetes policy enforcement","contactSales":false,"includedLimits":{"clusters":"20 or 250 nodes"}},{"free":false,"name":"Advanced","summary":"$4,500/month, includes 20 clusters or 250 nodes","features":["Everything in Essentials","Centralized Policy Sets","Automated Violation Assignment","Self-Service Exceptions","Compliance Automation","Managed Agents"],"commitment":"monthly","components":[{"kind":"fixed","amount":4500,"period":"month","currency":"USD"}],"description":"Enterprise-grade governance with automated policy management","contactSales":false,"includedLimits":{"clusters":"20 or 250 nodes"}},{"free":false,"name":"Enterprise","summary":"Custom pricing for enterprise deployments","features":["Everything in Advanced","Remediation Service Agent","GitHub / GitLab integration","Auto identity management (SCIM)","Bring Your Own Key (BYOK) AI","Air-gapped options"],"description":"Custom governance solution for large-scale deployments","contactSales":true,"includedLimits":{"clusters":"20 or 250 nodes base, additional consumption-based"}},{"free":false,"name":"Enterprise Kyverno","summary":"$1,250/month for managed Kyverno distribution","features":["0-CVE images","18 month patch support","Long term version compatibility"],"commitment":"monthly","components":[{"kind":"fixed","amount":1250,"period":"month","currency":"USD"}],"description":"Trusted distribution of Kyverno with enterprise support","contactSales":false}],"summary":"From $1,800/month. 15-day free trial. All plans include 20 clusters or 250 nodes; additional resources billed on consumption.","currency":"USD","freeTier":true,"sourceUrl":"https://nirmata.com/pricing/","retrievedAt":"2026-08-25T12:14:30.209Z","freeTrialDays":15,"startingPrice":{"amount":1250,"period":"month","currency":"USD"},"billingPeriods":["month"]}` | `{"type":"subscription","summary":"Platform fee plus per-node/per-GPU usage fee with volume discounts. Enterprise Support (24x7x365) available at 20% of subscription cost.","currency":"USD","freeTier":false,"sourceUrl":"https://rafay.co/platform/pricing","retrievedAt":"2026-08-25T21:38:16.059Z"}` |
| pricing.free_tier | yes | no |
| pricing.model | freemium | commercial |
| pricing.price_level | high | unknown |
| pricing.starting_price | `{"amount":1250,"currency":"USD"}` | - |
| pricing.transparent | yes | yes |
| security.gdpr | - | yes |
| security.hipaa | - | yes |
| security.iso27001 | yes | - |
| security.pci | - | yes |
| security.soc2 | yes | - |

## Capabilities (Kubernetes Management)

| Capability | Nirmata | Rafay |
|---|:--:|:--:|
| **Capabilities** |  |  |
| Deployment model | Saas | Saas |
| Eks gke aks lifecycle | ✓ | ✓ |
| Bare metal vsphere provisioning | ✗ | ✓ |
| Centralized SSO RBAC | ✓ | ✓ |
| Multi cluster config sync | ✓ | ✓ |
| Bundled observability stack | ✗ | ✓ |
| Bundled service mesh | ✗ | ✓ |
| Edge iot scale capable | ✗ | ✗ |
| Cost management module | ✗ | ✓ |
| CLI shell access | ✓ | ✓ |
| SOC2 type ii | ✓ | ✗ |
| ISO 27001 | ✓ | ✗ |
| Pricing model | - | Per node core |

*Source: Vioscale. Generated 2026-09-01T16:27:42.835Z. "-" = undocumented, not absent.*