VMware Tanzu Security

Secure Your Tanzu Clusters

Enterprise Kubernetes security for VMware Tanzu with 83+ CIS Benchmark checks. TKG, TKGS, TAP, and TMC support.

Tanzu Overview
TKG Clusters
8
TKGS Clusters
12
TAP Instances
3
Checks
83+
Critical3
TMC policy violations
High6
Cluster misconfigurations

Built for VMware Tanzu

Enterprise-grade security for the Tanzu portfolio

TKG
Kubernetes Grid

Standalone clusters

TKGS
vSphere Tanzu

Supervisor managed

TAP
App Platform

Developer security

TMC
Mission Control

Policy governance

Complete Tanzu Security Posture Management

From TKG management clusters to TAP supply chains, secure your Tanzu portfolio

Tanzu Security Dashboard
Tanzu Security Score85
Enterprise checks
Management ClusterSecure
Workload Clusters3 issues
Supervisor Cluster
Namespaces12 secure
TKG/TKGS

Tanzu Kubernetes Grid Security

Comprehensive security for TKG (standalone) and TKGS (vSphere with Tanzu) clusters. Validate management and workload cluster configurations.

  • Management Clusters
    Audit TKG management cluster security configurations
  • Workload Clusters
    Scan all provisioned workload clusters for compliance
  • vSphere Integration
    Validate vSphere with Tanzu supervisor cluster security
TAP Security
Supply Chains4
Configured securely
Build Service1
Needs attention
Dev Namespaces28
Developer spaces
TAP Version:1.7.x
TAP Security

Tanzu Application Platform Security

Security validation for Tanzu Application Platform. Audit supply chain security, build services, and developer namespace configurations.

  • Supply Chain
    Validate TAP supply chain security policies
  • Build Service
    Audit Tanzu Build Service image configurations
  • Developer Namespaces
    Check developer namespace isolation and RBAC
TMC Policies
Policies
156
Compliant
94%
TMC Managed
All clusters under TMC governance
⚠ Policy Violations
8 clusters need remediation
Policies

Policy Controller & TMC Integration

Validate Tanzu Mission Control policies and Policy Controller configurations. Ensure enterprise governance across all clusters.

  • TMC Policies
    Audit access, image, network, and quota policies
  • Policy Controller
    Validate OPA Gatekeeper constraint templates
  • Cluster Groups
    Check cluster group policy inheritance

Frequently Asked Questions

Everything you need to know about Tanzu security with TigerGate

TigerGate connects to Tanzu clusters using kubeconfig with appropriate credentials. For TKG, use the tanzu CLI to export kubeconfig. For TKGS, use kubectl-vsphere. For TMC-managed clusters, we can integrate directly with TMC APIs.
Yes! TigerGate supports TKG (Tanzu Kubernetes Grid), TKGS (vSphere with Tanzu), Tanzu Application Platform (TAP), and Tanzu Mission Control (TMC). We have specific security checks for each product.
TigerGate runs Tanzu-specific checks including: management cluster security, supervisor cluster configuration, TKG add-on security, TAP supply chain validation, TMC policy compliance, and vSphere Pod security contexts.
Yes! TigerGate validates TMC access policies, image policies, network policies, security policies, and quota policies. We check policy compliance across all TMC-managed clusters and cluster groups.
TigerGate focuses on Kubernetes-layer security for vSphere with Tanzu. We validate TKGS supervisor cluster configurations, vSphere Pod security, and namespace isolation. For vSphere infrastructure security, we recommend complementary vSphere security tools.

Ready to Secure Your Tanzu Clusters?

Start with a free Tanzu security scan. Enterprise-grade security for your VMware Kubernetes.