# Nirmata Documentation

> Documentation for Nirmata Control Hub, Enterprise Kyverno, nctl CLI, and Nirmata AI Agents. Covers cluster onboarding, policy management, compliance enforcement, identity access, AI-powered remediation, and API reference for Kubernetes platform engineering and DevSecOps teams.

## Getting Started
- [Nirmata Control Hub](https://docs.nirmata.io/docs/control-hub/): Overview of the centralized management platform for Kubernetes policy, clusters, and compliance
- [Get Started with Control Hub](https://docs.nirmata.io/docs/control-hub/getting-started/): Account activation and initial setup for Nirmata Control Hub
- [Cluster Onboarding](https://docs.nirmata.io/docs/control-hub/Cluster/): Onboard and manage Kubernetes clusters with Nirmata Control Hub
- [Get Started with Enterprise Kyverno](https://docs.nirmata.io/docs/controllers/n4k/): Install and configure hardened, enterprise-supported Kyverno on Kubernetes

## Tutorials
- [Nirmata AI Agents Overview](https://docs.nirmata.io/docs/ai/): Introduction to AI-powered agents for policy development, security enforcement, and automated remediation
- [Nirmata Assistant (nctl AI)](https://docs.nirmata.io/docs/ai/nctl-ai/): AI-powered personal agent for platform engineers — policy development and Kubernetes operations from the terminal
- [Service Agents](https://docs.nirmata.io/docs/control-hub/agent-hub/service-agents/): Autonomous AI agents deployed inside Kubernetes clusters for continuous policy violation detection and GitOps remediation
- [Cloud Agents](https://docs.nirmata.io/docs/control-hub/agent-hub/cloud-agents/): On-demand and scheduled AI agents for Kubernetes analysis, cost optimization, and security auditing
- [Nirmata Terraform Controller](https://docs.nirmata.io/docs/controllers/ntc/): Policy enforcement layer for Terraform plans using Kyverno — enforce compliance before resources are provisioned
- [Cloud Control Point](https://docs.nirmata.io/docs/controllers/nch-cloud/): Continuous posture management and admission control for AWS, GCP, and Azure

## How-To Guides
- [Workflows and How-To Guides](https://docs.nirmata.io/docs/control-hub/how-to/): Step-by-step workflows for nctl and Nirmata Control Hub operations
- [Identity and Access Management](https://docs.nirmata.io/docs/control-hub/identity-access/): Configure users, SAML, OIDC, MFA, and role-based access control
- [Integrations](https://docs.nirmata.io/docs/control-hub/Settings/): Set up Git, Jira, Vault, GitHub App, Terraform, and MFA integrations
- [Policy Hub](https://docs.nirmata.io/docs/control-hub/policy-hub/): Manage policies, exceptions, compliance reporting in Nirmata Control Hub
- [GitHub Authentication for Agents](https://docs.nirmata.io/docs/control-hub/agent-hub/service-agents/github-authentication/): Configure GitHub authentication methods for Nirmata AI Agents

## Reference
- [nctl CLI Reference](https://docs.nirmata.io/docs/nctl/): Complete CLI reference for scanning Kubernetes manifests, Terraform, and cloud resources
- [nctl Commands](https://docs.nirmata.io/docs/nctl/commands/): All nctl subcommands with flags and usage examples
- [REST API Reference](https://docs.nirmata.io/docs/reference/rest-api/): Full REST API documentation for Nirmata Control Hub
- [Monitoring](https://docs.nirmata.io/docs/control-hub/Monitoring/): View activity logs, events, policy health, and policy engine metrics
- [Compatibility Matrix](https://docs.nirmata.io/docs/reference/compatibility/): Nirmata Enterprise Kyverno and Kubernetes version compatibility table
- [Policy Library Overview](https://docs.nirmata.io/docs/policy-sets/): All available curated Kyverno policy sets for Kubernetes, cloud, and compliance

## Explanation
- [AI Control Point](https://docs.nirmata.io/docs/controllers/mcp-ai-gateways/): Identity-aware governance for LLM access — enforce who can call which model, at what cost, with full audit trails
- [Authz Control Point](https://docs.nirmata.io/docs/controllers/authorization-service/): Runtime authorization for Kubernetes and cloud services using Kyverno AuthZ
- [AI Copilot](https://docs.nirmata.io/docs/ai/copilot/): AI-powered assistant for Kubernetes policies and governance with access to live cluster data

## Policy Library
- [Compliance Policies](https://docs.nirmata.io/docs/policy-sets/compliance/): Pre-built policy packs for CIS Benchmarks, NIST 800-53, ISO 27001, NSA/CISA, SOC 2, and PCI-DSS
- [Pod Security Standards](https://docs.nirmata.io/docs/policy-sets/PodSecurity/): Baseline and Restricted Pod Security Standards policy packs
- [Best Practices](https://docs.nirmata.io/docs/policy-sets/best-practices/): General Kubernetes operational best practices — labels, probes, image tags, anti-affinity
- [Workload Security](https://docs.nirmata.io/docs/policy-sets/workload-security/): Runtime security policies — security contexts, capability restrictions, volume security
- [Image Verification](https://docs.nirmata.io/docs/policy-sets/image-verification/): Container image signing and provenance enforcement with Cosign and Notary
- [RBAC Best Practices](https://docs.nirmata.io/docs/policy-sets/RBAC_best_practices/): Kubernetes RBAC best practice policies to prevent privilege escalation
- [AI Policies](https://docs.nirmata.io/docs/policy-sets/ai-policies/): Kyverno policies for governing AI agents, MCP servers, and LLM workloads
- [Terraform Policies](https://docs.nirmata.io/docs/policy-sets/terraform/): Kyverno JSON policies for Terraform plans, configurations, and state files
- [Cost Management Policies](https://docs.nirmata.io/docs/policy-sets/cost-management/): Policies for controlling Kubernetes resource costs — requests/limits, instance types, scaling
- [GitHub Actions Policies](https://docs.nirmata.io/docs/policy-sets/github-actions/): Kyverno JSON policies for securing GitHub Actions workflows
- [Cloud / EKS Policies](https://docs.nirmata.io/docs/policy-sets/cloud/): AWS EKS best practices and cloud-specific Kubernetes security policies
- [Multitenancy Policies](https://docs.nirmata.io/docs/policy-sets/multitenancy/): Namespace isolation and multi-tenant cluster standards
- [Dockerfile Best Practices](https://docs.nirmata.io/docs/policy-sets/Dockerfile_best_practices/): Dockerfile security best practice policies

## Optional
- [Release Notes](https://docs.nirmata.io/docs/release-notes/): Version history and changelogs for all Nirmata products
- [Licensing](https://docs.nirmata.io/docs/reference/licensing/): License terms for Nirmata products and the Policy Library