Illumio

Illumio provides breach containment through microsegmentation, sold as Illumio Segmentation for cloud and network containment and Illumio Insights for hybrid cloud detection and response. It is positioned around Zero Trust, aimed at CISOs and at the security architects and network engineers who implement policy.

Containment rather than prevention is the premise and it is a more defensible position than it first sounds. Every organisation is eventually breached, and what determines the cost is how far an attacker moves once inside. A flat internal network allows lateral movement from one compromised laptop to the systems that matter, and segmentation is what makes that expensive instead of trivial.

Microsegmentation has historically failed on operational difficulty rather than on principle. Writing policy for every workload requires knowing what actually talks to what, and organisations that attempt it from an architecture diagram discover the diagram is wrong. Observing traffic first, then generating policy from it, is the approach that works.

Insights as a separate product reflects that ordering. Seeing the traffic is the prerequisite and the harder half, and it is useful on its own before any policy is enforced.