Datree vs Other Policy Management Solutions

(100% fair comparison)

OSS Popularity

Categories

Stars

Commits

Releases

Datree

Rules language
6000+
GitHub stars
1000+
Manifest scanning
600+

OPA Gatekeeper

Rules language
3000+
GitHub stars
5000+
Manifest scanning
100+

Kyverno

Rules language
2000+
GitHub stars
1000+
Manifest scanning
70+

OSS Popularity

Stars

GitHub stars

Datree

6000+

OPA Gatekeeper

3000+

Kyverno

2000+

Commits

GitHub commits

Datree

1000+

OPA Gatekeeper

5000+

Kyverno

1000+

Releases

GitHub releases

Datree

600+

OPA Gatekeeper

100+

Kyverno

70+

Cluster Enforcement

Categories

Policy enforcement

EKS native deployment

Optimized for developer experience

Mutation/Remediation
(Not compatible with GitOps)

Datree

Rules language
GitHub stars
Manifest scanning
Manifest scanning

OPA Gatekeeper

Rules language
GitHub stars
The output is not formatted
Manifest scanning

Kyverno

Rules language
GitHub stars
Manifest scanning
The output is not formatted
Manifest scanning

Cluster Enforcement

Policy enforcement

The solution blocks the deployment of resources that do not meet your policy

Datree

OPA Gatekeeper

Kyverno

EKS native deployment

Install natively through the EKS Console

Datree

OPA Gatekeeper

Kyverno

Optimized for developer experience

When a deployment fails the solution gives a clean and readable output

Datree

OPA Gatekeeper

The output is not formatted

Kyverno

The output is not formatted

Mutation/Remediation
(Not compatible with GitOps)

For changing resources on the cluster itself.

Datree

OPA Gatekeeper

Kyverno

Monitoring

Categories

Dashboard monitoring

Email alerts

Cluster posture score

Misconfigurations prioritization

Datree

Rules language
GitHub stars
Manifest scanning
Manifest scanning

OPA Gatekeeper

Manifest scanning
Not supported out of the box
Manifest scanning
Not supported out of the box
GitHub stars
Manifest scanning

Kyverno

Rules language
GitHub stars
Manifest scanning
Manifest scanning

Monitoring

Dashboard monitoring

Check the status of your cluster in a dashboard

Datree

OPA Gatekeeper

Not supported out of the box

Kyverno

Email alerts

Digest alerts on new misconfiguration that have been deployed to your cluster

Datree

OPA Gatekeeper

Not supported out of the box

Kyverno

Cluster score

Get a health score of your cluster

Datree

OPA Gatekeeper

Kyverno

Misconfigurations prioritization

Prioritize the detected misconfigurations according to how easy it is to fix them.

Datree

OPA Gatekeeper

Kyverno

CI Integration

Categories

CI integration

YAML validation

Schema validation

Templating native support

Datree

Rules language
GitHub stars
Manifest scanning
Manifest scanning

OPA Gatekeeper

Manifest scanning
Manifest scanning
GitHub stars
Manifest scanning

Kyverno

Rules language
Not available out of the box
GitHub stars
Manifest scanning
Manifest scanning

CI Integration

CI integration

Integrate the solution to your CI pipeline to scan configs against the same policy you have in the cluster

Datree

OPA Gatekeeper

Kyverno

Not available out of the box

YAML validation

The CI integration also checks if the YAML is valid

Datree

OPA Gatekeeper

Kyverno

Schema validation

The CI integration also checks if the schema is valid, including CRDs

Datree

OPA Gatekeeper

Kyverno

Templating native support

The CI integration also validates Helm and Kustomize

Datree

OPA Gatekeeper

Kyverno

Policies

Categories

Built-in policies

Centralized policy management

Custom policies

Policies language

Policy as code

Datree

Rules language
GitHub stars
Manifest scanning
Manifest scanning
JSON Schema and Rego
Manifest scanning

OPA Gatekeeper

Rules language
GitHub stars
Manifest scanning
Manifest scanning
Rego
Manifest scanning

Kyverno

Rules language
GitHub stars
Manifest scanning
Manifest scanning
JMESPath
Manifest scanning

Policies

Built-in policies

The solution comes with built-in policies, ready for enforcement

Datree

OPA Gatekeeper

Kyverno

Centralized policy management

You can manage the policies installed on your cluster and CI from a single source

Datree

OPA Gatekeeper

Kyverno

Custom policies

You can create new policies

Datree

OPA Gatekeeper

Kyverno

Policies language

What language are the policies written in

Datree

JSON Schema and Rego

OPA Gatekeeper

Rego

Kyverno

JMESPath

Policy as code

You can manage the policy via code

Datree

OPA Gatekeeper

Kyverno