One operator installs the whole platform.
A Red Hat certified operator installs and upgrades Axera on OpenShift from a single custom resource. Helm covers vanilla Kubernetes. Air-gapped installs are supported on both.
Two install paths. One platform.
OpenShift — certified operator
Install Axera from OperatorHub, then create one Axera custom resource. The operator reconciles the API, telemetry store, policy watcher, monitor, console and optional in-cluster PostgreSQL, Kafka and AI.
apiVersion: platform.axerasecurity.com/v1alpha1
kind: Axera
metadata:
name: axera
spec:
postgres: { external: true }
kafka: { external: true }Kubernetes — Helm
For vanilla Kubernetes, install with Helm. Bring your own Kafka and PostgreSQL for production, or deploy them in-cluster for evaluation. Disconnected installs use digest-pinned images and standard mirroring.
helm install axera axera/axera \ --namespace axera --create-namespace \ --set postgres.external=true \ --set kafka.external=true
Three agents. Pick your footprint.
Each monitored cluster runs the agents you need: flow, process, or both in one DaemonSet.
AxeraFlow
The eBPF flow agent. Records east-west and outbound connections per cluster, on any CNI.
AxeraProcess
The eBPF process agent. Attributes every connection to the container and binary that opened it, and raises runtime signals.
AxeraForce (OneBox)
Flow and process combined in a single DaemonSet. The simplest per-cluster footprint.
On-prem, air-gapped, under your control.
Red Hat certified
Installed from OperatorHub as a certified operator. One Axera custom resource reconciles the API, telemetry store, policy watcher, monitor, console and optional in-cluster PostgreSQL, Kafka and AI.
External or in-cluster
Bring your own Kafka and PostgreSQL, or let the operator deploy them. External is the default for production.
Air-gapped ready
Digest-pinned images and disconnected mirroring for regulated and air-gapped environments.
On-prem AI
Run an on-prem Ollama assistant for triage, or point Axera at Anthropic, OpenAI or Azure. Your choice, your data boundary.
Fits the stack you already run.
Axera sends signals and policy where your teams already work. No rip-and-replace.
SIEM
Multi-destination routing. Send audit, policy-monitoring and incident streams to Splunk indexes or syslog, each with its own destination and custom CA.
Kafka
Flow and process telemetry stream over Kafka. Bring your own broker or run it in-cluster.
Prometheus
Platform-health metrics for dashboards and alerting.
GitOps
Deliver generated policy through Git for auditable, multi-cluster enforcement.
ITSM
Approval-gated change flow so enforcement fits your existing change process.
AI providers
On-prem Ollama, or external Anthropic, OpenAI or Azure, for triage and recommendations.
Everything else you will run into.
Architecture
Operator, agents (AxeraFlow, AxeraProcess, AxeraForce OneBox), telemetry store, policy watcher and console.
Editions & licensing
Observe, Segment and NDR are license keys on one install. Upgrade in place, no redeploy.
Agents
eBPF flow and process agents, or the combined OneBox DaemonSet.
SIEM & metrics
Multi-destination routing to Splunk or syslog with custom CA, plus Prometheus platform metrics.
AI triage
On-prem Ollama or external providers (Anthropic, OpenAI, Azure) for incident triage.
Backup & restore
Scheduled backup and one-click restore of platform state, including storage-constrained installs.