SHSelfHostIndex
KU

Kuma

Universal service mesh for Kubernetes and VMs

Reverse Proxy & Gateways ★ 4k stars Hard setup Apache-2.0

Kuma is an open-source, CNCF service mesh built on the Envoy proxy that works across Kubernetes and virtual machines. It provides traffic policies, security, and observability for self-hosted environments.

Official siteSource code

Key features

  • Multi-zone mesh
  • Kubernetes and VM support
  • Built-in Envoy
  • mTLS and traffic policies

Strengths

  • Released under the Apache-2.0 license
  • Kubernetes-ready with Helm charts available
  • Active community (4k GitHub stars)
  • Written in Go

Is Kuma secure?

No known vulnerabilities affect Kuma's latest release (v2.14.6). OSV.dev lists 10 past advisories for the project; none of them applies to this release. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

  • Most recent fixed advisory CVE-2026-52724, published 2026-09-15 (29 days ago), fixed in 2.7.26, 2.9.16, 2.11.14, 2.12.11, 2.13.7

Source: OSV.dev, checked 2026-10-14. How this is measured.

Kuma replaces

Self-hosted Istio alternativesSelf-hosted Linkerd alternatives

Health badge

Maintain Kuma? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 91 · excellent

Markdown
[![SelfHostIndex health score for Kuma](https://selfhostindex.com/badge/kuma-mesh.svg)](https://selfhostindex.com/app/kuma-mesh/)
HTML
<a href="https://selfhostindex.com/app/kuma-mesh/"><img src="https://selfhostindex.com/badge/kuma-mesh.svg" alt="SelfHostIndex health score for Kuma"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/kuma-mesh.svg
   :alt: SelfHostIndex health score for Kuma
   :target: https://selfhostindex.com/app/kuma-mesh/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Compare Kuma

2 head-to-head comparisons.

Similar reverse proxy & gateways apps