Otterize picks up $11.5M to automate authorization in Kubernetes clusters

Otterize Inc., a startup making it easier to move data between applications running on Kubernetes, has secured $11.5 million in seed funding.

Otterize disclosed the funding round this morning. According to TechCrunch, Index Ventures was the lead investor. Dig Ventures, Vine Ventures, Jibe Ventures, Crew Capital and Operator Partners participated as well.

Many enterprise applications are implemented as software containers running on Kubernetes. Those Kubernetes-powered workloads require the ability to exchange data with one another. An e-commerce application, for example, may require the ability to retrieve product listings from an inventory database. 

Companies limit data transfer between applications for cybersecurity reasons. By default, Kubernetes clusters are frequently configured to block the transfer of information from one workload to another. Data movement between two applications is only permitted if a developer specifically authorizes it.

Usually, implementing authorization rules in Kubernetes involves a significant amount of manual work. Otterize offers a platform that promises to ease the task. According to the startup, developers can simply specify which applications should  be permitted to exchange data and its platform will make the necessary configuration changes automatically.

One of the tasks that Otterize automates is the process of configuring mTLS workflows. 

Before two workloads can exchange data, they need to be linked together via a network connection. That connection, in turn, must be secured. Companies often secure connections between their Kubernetes-powered workloads using mTLS, a technology that allows each workload to verify that the other is not malicious before sending data.

The mTLS verification process is carried out using files called certificates. A certificate is a piece of data that a workload uses to confirm it’s not  malicious. According to Otterize, its platform automates the manual work involved in creating and managing such files.

Establishing a connection between two Kubernetes workloads also involves other tasks. Kubernetes itself has to be reconfigured to allow network connections between the workloads, a chore that Otterize automates as well. Depending on what applications are being linked to one another, there can be other steps as well.

Many enterprises use an open-source tool called Kafka to manage the flow of data between their applications. In some cases, the tool blocks data access unless developers change its configuration settings. If a company relies on Kafka to power its applications, Otterize can make the necessary configuration changes to facilitate access.

The startup provides its platform under an open-source license. It plans to generate revenue by selling a commercial version, called Otterize Cloud, that offers additional monitoring and management features.

The startup told TechCrunch that it intends to take a “measured approach to growth” following its newly announced funding round. In parallel, Otterize will develop new capabilities for its platform. The startup plans to roll out automation features, as well as integrations with popular developer tools such as Atlassian Corp.’s Jira task tracking application. 

Photo: Unsplash