We just received 2.9M in seed funding 🎉 Read about it here.

Watch our kMetal webinar on Replay here.

kMETAL ENTERPRISE PLATFORM

Run More Infrastructure. With Less Infrastructure.

kMetal is a Kubernetes management platform that turns infrastructure you already own into hyperscaler-grade compute capacity – cutting cost, eliminating hypervisor licensing, and letting teams operate their own layer at scale. For cloud, on-prem, bare metal, and sovereign infrastructure.

WHAT ORGANISATIONS ACHIEVE WITH kMETAL

98%

Reduction in control plane machines

>65%

Reduction in SRE operations

>90%

Reduction in depreciation cost

2 minutes

To provision a production-ready tenant cluster

THE BUSINESS CASE

Why Infrastructure Costs Grow Often Faster Than Your Business.

Most Kubernetes environments become more expensive as clusters, teams, and workloads grow. kMetal removes three major sources of operational and infrastructure waste.

The Control Plane Tax

Every tenant cluster normally requires 3 dedicated machines for its control plane, doing almost nothing but overhead. For 30 clusters, that is 90 machines sitting largely idle.

kMetal consolidates Kubernetes control plane management onto shared infrastructure.

>50%

reduction in energy & facility costs

The Hypervisor Tax

Traditional cluster architectures can require significantly more dedicated infrastructure as tenant environments scale, increasing hardware and lifecycle costs.

kMetal reduces the amount of infrastructure required to run tenant clusters at scale.

>90%

reduction in depreciation costs

The Build Tax

As the fleet grows, provisioning, upgrades and management become harder to coordinate across a multi-cluster Kubernetes fleet, increasing DIY operational effort and costs.

kMetal provides one operational model for managing tenant clusters across the fleet.

>65%

reduction in SRE operations

kMetal tackles all three at once — on physical servers you already own.

BUSINESS IMPACT

What Improves After kMetal?

kMetal doesn't just simplify Kubernetes operations. It changes how infrastructure scales across your organisation.

Run more environments on fewer machines while eliminating unnecessary control plane and hypervisor overhead.

Reduce infrastructure waste

Provision production-ready environments in seconds instead of waiting days or weeks for manual infrastructure requests.

Accelerate time to value

Free platform engineers from repetitive operational tasks so they can focus on strategic initiatives.

Do more without adding headcount

Add customers, workloads, and teams without operational complexity increasing at the same rate.

Scale without operational drag

THE PLATFORM

One platform. Every team. Any infrastructure.

Run more on less

98% fewer control plane machines. No hypervisor licence. Multiple teams share infrastructure with complete isolation. The hardware bill and the licensing bill both shrink – without limiting what any team can do.

Deliver faster

Teams provision their own Kubernetes environments in 2 min – without raising a ticket or waiting on a platform engineer. Self-service within administrator-defined guardrails. The bottleneck disappears.

Govern everything

Centralised access logging, audit trails, quota management, and monitoring across every tenant cluster – from one control point. One answer to every compliance, security, and spend question.

Stay independent

Bare metal Kubernetes on your own hardware, on-premises, fully under your control. No cloud provider account required. No vendor lock-in. No architectural decisions made on someone else's terms.

Illustration: three tenants' Kubernetes clusters on separate layers over shared bare-metal servers, managed from the CLASTIX platform

IN PRODUCTION

Used by organisations where infrastructure failure is not an option.

kMetal runs in production at organisations where scale, security, and reliability are non-negotiable. The demands of these environments shaped how the platform was built.

Telco & Connectivity

Built for networks that cannot fail. kMetal enables telecom and connectivity providers to deliver carrier-grade infrastructure with the resilience, automation, and scale modern services demand.

AI & HPC Infrastructure

Purpose-built for the AI era. Kubernetes for AI infrastructure: share physical GPUs securely across isolated tenants to maximise utilisation, performance, efficiency, and reliability.

Public Sector & Defense

Trusted in environments where security, sovereignty, and resilience are non-negotiable.

Cloud & Managed Service Providers

Deliver managed Kubernetes and Kubernetes as a Service (KaaS) with speed, efficiency, and confidence. kMetal helps providers scale ops with enterprise-grade reliability.

INFRASTRUCTURE RESILIENCE · MADE IN ITALY WITH EUROPEAN SOVEREIGNTY

Sovereignty is the goal. Resilience is how you get there.

Independence shouldn't cost a premium – operating your own layer is cheaper than renting it. kMetal runs on infrastructure you own and control, with no hyperscaler dependency, no vendor lock-in, and no external governance over your data or workloads. The goal is practical: reduce uncontrollable dependencies, improve your ability to withstand disruption, and operate on your own terms.

EU Cloud Sovereignty Framework

EU Open Source Strategy

EU Cloud and AI Development Act

No Hyperscaler Dependency

Your data. Your hardware. Your governance. No AWS ToS. Deploy on your infrastructure to reduce cloud dependency and retain control.

No Vendor Lock-In

Run on any infrastructure. Switch providers. Federate environments. No architectural lock-in.

European Procurement Ready

Open-source foundation, infrastructure independence, European company.

THE CLEAR CHOICE

Why Organisations Choose kMetal

kMetal combines infrastructure efficiency, operational consistency, and platform automation into a single Kubernetes operating model designed for long-term growth.

Reduce infrastructure costs

Provision environments in seconds

Scale without operational complexity

Eliminate hypervisor licensing overhead

Increase platform team productivity

Maintain control of infrastructure and governance

WHAT YOU GET

A platform and a partnership

Every kMetal deployment includes Clastix Care from day one, SLA-backed support, direct engineer access, and monthly office hours. Not an add-on. Included.

kMetal: The Product Platform

The production-ready Kubernetes platform.

Optional
  • Hosted control planes, pods, not dedicated machines
  • KVM + OVN embedded isolation, no hypervisor licence
  • Multi-tenant cluster management with quota enforcement
  • Self-service provisioning, Basic, Standard, Expert tiers
  • Unified fleet management and upgrades
  • Centralised access logging and monitoring
  • Control plane backup and restore
  • Runs on provider-controlled bare-metal infrastructure
Clastix Care: Ongoing Support

Clastix Care SLA-backed support.

Included
  • SLA with defined response times by severity
  • Private channel direct access to Clastix engineers
  • Monthly office hours with the product team
  • Upgrade support and stable release guidance
  • Feature prioritisation input
  • Architecture review for your specific deployment
Clastix Ready: One-Off Service

Clastix Ready, Tailored to Your Needs

Optional
  • Installation and configuration in your environment
  • Architecture design for your specific multi-tenancy use case
  • Team training and knowledge transfer
  • Custom datastore configuration and migration
  • Production readiness review

FROM TECHNICAL CAPABILITIES TO BUSINESS IMPACT

What kMetal enables — for the engineers who run it and the leaders who approve it.

Each capability is described twice: technically for the engineers who will operate it, and in plain language for the leaders who need to understand what changes for the organisation.

Self-Service Provisioning

For the technical team

Three provisioning tiers — Basic (defaults, minimal input), Standard (key config options), Expert (full parameter control). TenantControlPlane CRD. Administrator-defined quotas and guardrails enforced automatically. Teams operate independently within their allocated resources.

For the business

Teams get environments in ~20 seconds without raising a ticket. Platform engineers stop being a bottleneck. Delivery speed is never limited by infrastructure access.

~20 seconds · No ticket · Guardrails enforced automatically

Multi-Tenant Cluster Management

For the technical team

Multiple tenant control planes run as pods on a shared management cluster via Kamaji. KVM compute isolation and OVN network isolation per tenant. Quota management prevents resource overconsumption. Full cluster-admin access per tenant. No dedicated hardware per control plane.

For the business

30 clusters. A handful of machines instead of 90. No separate hypervisor licence. Multiple teams or customers share infrastructure with complete isolation. The hardware bill and the licensing bill both shrink.

97% fewer control plane machines · Zero hypervisor licence · Full KVM + OVN isolation

Cloud-Like, on Bare Metal You Control

For the technical team

One platform provisions and manages full tenant clusters on your own hardware, control plane, workers, and isolated network in a single step. Cloud-style provisioning, load balancing, and reserved IPs, without a cloud underneath.

For the business

No architectural lock-in. Run Kubernetes on bare metal you own and control, with the on-demand experience teams expect from the cloud. Own your stack, keep your data, one operational model across every site.

Your own hardware · No lock-in · Cloud experience, on-premises

Fleet Management and Upgrades

For the technical team

Unified provisioning, autoscaling, upgrades, and policy enforcement across the entire cluster fleet. Blue/Green upgrade strategy per tenant control plane — no mixed-version serving during rollout. Reconciliation loop detects and corrects drift in real-time.

For the business

Every cluster in the fleet is managed consistently. Upgrades no longer require coordinating N separate operations. Snowflake clusters stop accumulating. The ops burden stays flat as the fleet grows.

Unified fleet · Blue/Green upgrades · Drift detection

Centralised Access Logging and Monitoring

For the technical team

Every access event, configuration change, application deployment, and resource consumption metric logged centrally across all tenant clusters. Role-based access control enforced at the platform level. Single observability point for the entire fleet.

For the business

One place to answer: who accessed what, when, and at what cost — across every team and every environment. Compliance audits become answerable. Security incidents become traceable. The CIO gets the infrastructure visibility report in seconds.

Full audit trail · Compliance-ready · One control point

Backup, Restore and Clastix Care

For the technical team

Create encrypted archives of tenant-cluster API objects and restore them into a new cluster identity. Protect persistent data separately with retained volumes, snapshots, or your existing backup system. Clastix Care included — SLA-backed support with defined response times, private engineer access channel, monthly office hours.

For the business

Support reliable recovery while keeping backup and data-protection policies aligned with your existing infrastructure and operating model. The production risk of running kMetal has garanteed support by the Clastix team.

Automated backups · Point-in-time restore · SLA-backed support included

FOR THE TECHNICAL TEAM

Need the full technical picture? It's here.

If you are the engineer who will actually build on kMetal, or the technical leader validating the architecture, go deeper for everything you need know.

kMetal Architecture Deep-Dive

How kMetal's three layers work together, the management plane, hosted control planes via Kamaji, and KVM + OVN embedded isolation. Includes the full component diagram and how provisioning flows end-to-end.

Read the architecture overview

How kMetal Builds on Kamaji

Kamaji is the CNCF compliant project that powers kMetal's hosted control plane layer. Understand the relationship between the open-source building blocks and the production platform, including what kMetal adds on top.

Explore Kamaji

Isolation Model, KVM and OVN

How kernel-native KVM provides compute-level tenant isolation and OVN provides fully isolated tenant networking, without a separate hypervisor product. Performance characteristics and security model explained.

Read the isolation model

Integrations

Cluster API, Terraform, Upbound APIs, GitOps workflows, and multi-provider configuration. How kMetal fits into the infrastructure and automation tooling your team already uses.

View integrations

DEPLOY AND GO

Deploys with the tools you already use.

COMMON QUESTIONS

Questions we hear most from infrastructure and business leaders.

Can’t find the answer you’re looking for? Check our full list of kMetal FAQs here.

Do I need to license a hypervisor?

No. Tenant worker nodes run as KubeVirt virtual machines on KVM, the hypervisor built into the Linux kernel, directly on bare metal. There is no nested virtualization and no separate hypervisor product to license.

Does kMetal run general-purpose or legacy VMs?

No, and this is deliberate. The KVM layer in kMetal exists to provide kernel-level isolation for Kubernetes tenant clusters, not to run arbitrary Windows or Linux servers. A general-purpose hypervisor carries different requirements and expecting Virtual Machines to treat as pet, rather than cattle. kMetal is not positioned as a like-for-like VMware replacement for non-Kubernetes workloads.

Do tenants get real clusters or virtual clusters?

Real ones. Each tenant cluster is upstream, CNCF-compliant Kubernetes with a dedicated control plane, a dedicated datastore, a dedicated kernel, a dedicated network domain, and full cluster-admin access for the tenant. Tenants can run different Kubernetes versions, different add-ons, and different policies. This is a different model from namespace-scoped virtual cluster products.

What does kMetal deliberately not install?

Three things you bring yourself. The primary CNI, because Kube-OVN runs as a secondary CNI and never takes over pod networking, so pod networking must already work before the operator starts. Storage, because kMetal ships no CSI driver, provisioner, StorageClass, or VolumeSnapshotClass. Credentials, because registry credentials and backup destinations are Secrets you create yourself.

How does kMetal handle GPUs?

Tenant worker nodes are KubeVirt virtual machines, so they can be given a real PCI device through passthrough or a mediated device such as a vGPU. Permitted devices are whitelisted in the kMetal resource and threaded through the ClusterClass. Node prerequisites are IOMMU enabled in firmware, the appropriate kernel parameter set, and the device bound to vfio-pci. Consumption is capped per tenant with a resource quota targeting the device resource name. GPUs are pinned per tenant cluster rather than per namespace.

Is kMetal generally available?

Yes. kMetal v1.0.0 reached general availability on 31 August 2026, following a beta period. The product documentation and home page carry the v1.0 GA designation.

The conversation costs nothing. The clarity is immediate.

Talk to a Clastix commercial team member about your environment. We will map the current cost of your infrastructure setup, show you what consolidation looks like in practice, and give you the business case in plain language.

No commitment. 30-minute conversation.