Otterize

Otterize is a declarative, zero-trust platform for automating workload IAM and access control in Kubernetes. It deploys via Helm with open-source components—the network mapper, intents operator, and credentials operator—that map traffic, provision just-in-time policies, and issue credentials. Workloads declare ClientIntents for the access they need; the intents operator then configures native controls such as network policies, Istio authorization policies, AWS IAM policies, PostgreSQL GRANTs, and Kafka ACLs without implementing its own data-path policies.