Nirmata Information

Nirmata is the creator of Kyverno, the CNCF-graduated policy engine used across the Kubernetes ecosystem with more than 3.2 billion downloads. For over a decade we've helped platform and security teams enforce policy-as-code across cloud-native infrastructure — and that same enforcement engine is now becoming the control plane for AI. AI agents are no longer chatbots. They call APIs, invoke tools, modify infrastructure, and take consequential actions inside production systems. The security question has shifted from "what can the AI say" to "what is the AI allowed to do." Visibility tools can tell you what happened. Nirmata stops what shouldn't. Our Control family — ClusterControl, PipelineControl, RuntimeControl, and Gateway — delivers deterministic, policy-as-code enforcement across every layer of AI infrastructure. AIControls (aicontrols.dev) is our AI enforcement gateway. It governs MCP tool calls, LLM request/response traffic, and agent identity at runtime — with mission-scoped session authorization, human-in-the-loop approval, agent-to-agent delegation chains, and compounding audit history as compliance evidence. nctl-runtime adds eBPF-based behavioral detection for kernel-level visibility into what workloads and agents actually do. Learn more at nirmata.com