What Nirmata is
Nirmata is a platform built for enforcing policies in your cloud environnment (but mostly Kubernetes). It functions as an admission controller and policy engine, allowing you to enforce checks for all your Kubernetes changes. The vendor site is nirmata.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Nirmata covers
Nirmata is in the catalog for these capabilities. Categories: IaC and Kubernetes Security. Catalog tags: Nerdy and Best for Enterprise.
How to evaluate Nirmata in a security program
Use Nirmata as a stack candidate, not as diligence evidence. The oneNorma score for Nirmata is 4.8/10 (percentile 34). If the real gap is in IaC and Kubernetes Security, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what nirmata.com publishes. Contrast it with pentesting and Security Cloud & Compliance.
