Announcing Built On Envoy: Making Envoy Extensions Accessible to Everyone

Learn more

Free CVE Vulnerability Scanner for Istio and Envoy

Staying ahead of common vulnerabilities and exposures (CVEs) in your infrastructure is a critical part of application security—but finding them isn’t

Free%20CVE%20Vulnerability%20Scanner%20for%20Istio%20and%20Envoy

Staying ahead of common vulnerabilities and exposures (CVEs) in your infrastructure is a critical part of application security—but finding them isn’t always easy. That’s why we built the free new Tetrate Vulnerability Scanner (TVS) for Istio. This free download finds and reports the CVE status of all your Istio deployments in minutes and alerts you as new vulnerabilities are discovered to make sure you’re always up to date on the latest threats.

Why TVS?

In an increasingly complex digital landscape, traditional CVE scanning tools often fall short in addressing the specific needs of network-facing services like Istio and Envoy. TVS fills this critical gap by offering targeted detection of CVEs, ensuring that your cloud environments are not just secure, but also resilient against the ever-evolving cyber threats.

Get Started with TVS Now

  1. Download the TVS CLI ›
  2. Run tvs register to get access token
  3. Run  tvs scan to start scanning your Kubernetes clusters.
  4. When it’s done scanning, TVS will provide you a detailed report on the CVE status of every Istio container in your deployment (see example below): 

Image could not be loaded

## What Sets TVS Apart?

Specialized Focus on Istio and Envoy: TVS goes beyond generic container-level vulnerability scanning. By focusing specifically on Istio and Envoy, it provides a more relevant and precise security assessment for these critical components of your network infrastructure.

Automation and Efficiency: Keeping up with the latest security notices and updates can be a daunting task. TVS automates this process, effectively reducing the manual effort required to stay informed about the latest vulnerabilities.

Privacy and Security: At Tetrate, we understand the importance of privacy. TVS  is designed with this in mind, ensuring that while it logs SHA digests for image identification and CVE detection, it does not associate these with any personal data, including IP addresses.

Future-Proofing Your Security

While TVS currently supports Istio, we are committed to evolving alongside the needs of our users. We’re already working to extend TVS  to protect additional products and services, ensuring that it remains an indispensable tool in your security arsenal.

Stay Updated

As we continue to innovate and expand TVS’s capabilities, stay tuned for more updates and enhancements.

Download and start using Tetrate Vulnerability Scanner for Istio now ›

Learn more ›

Product background Product background for tablets
Building AI agents

Agent Router Enterprise provides managed LLM & MCP Gateways plus AI Guardrails in your dedicated instance. Graduate agents from prototype to production with consistent model access, governed tool use, and runtime supervision — built on Envoy AI Gateway by its creators.

  • LLM Gateway – Unified model catalog with automatic fallback across providers
  • MCP Gateway – Curated tool access with per-profile authentication and filtering
  • AI Guardrails – Enforce policies, prevent data loss, and supervise agent behavior
  • Learn more
    Replacing NGINX Ingress

    Tetrate Enterprise Gateway for Envoy (TEG) is the enterprise-ready replacement for NGINX Ingress Controller. Built on Envoy Gateway and the Kubernetes Gateway API, TEG delivers advanced traffic management, security, and observability without vendor lock-in.

  • 100% upstream Envoy Gateway – CVE-protected builds
  • Kubernetes Gateway API native – Modern, portable, and extensible ingress
  • Enterprise-grade support – 24/7 production support from Envoy experts
  • Learn more
    Decorative CTA background pattern background background
    Tetrate logo in the CTA section Tetrate logo in the CTA section for mobile

    Ready to enhance your
    network

    with more
    intelligence?