Illumio

Illumio is a Zero Trust platform implementing microsegmentation to confine breaches and limit lateral attacker movement across the network. The philosophical positioning is: 'Breaches are Inevitable. Disasters are Optional.' It addresses organizations accepting that prevention alone is insufficient and transitioning to a resilience strategy: isolate critical segments so that intrusion does not propagate. Pricing on request, based on number of workloads, servers and advanced feature level (evolved policies, analytics). Market: mature enterprises with complex infrastructure.

Illumio does not offer a localized interface; the site and documentation remain English-only, requiring language proficiency from the security team. A REST API and public Python client (illumio-py on GitHub) enable integration into existing ecosystems and automated segmentation policy management via code. Deployment via eBPF sensors (kernel-level, very low-level) delivers high performance and minimal overhead, but requires significant network and security expertise for initial configuration. The main drawback for SMEs is lack of pricing transparency and operational complexity: understanding and maintaining micro-segments demands continuous work, fine-grained application flow modeling, and a dedicated security team. The approach also requires cultural shift: moving from an 'Allow by default' to 'Deny by default' model.