Istio Service Mesh

Overview

QCecuring integrates with Istio to discover and manage mTLS certificates across service mesh deployments. The platform inventories all mesh certificates, their algorithms, and rotation schedules, providing visibility into the cryptographic posture of your microservices architecture.

Key capabilities

• Discover all mTLS certificates issued by Istio’s built-in CA (istiod).
• Inventory certificate algorithms, key sizes, and rotation intervals across the mesh.
• Monitor certificate health and detect configuration drift in Istio security policies.
• Feed mesh cryptographic data into your organization’s CBOM.

Typical use cases

• Platform teams managing Istio across multiple clusters who need certificate visibility.
• Security teams assessing the cryptographic posture of microservices communication.
• Organizations preparing for PQC migration in service mesh environments.

High-level integration flow

1. QCecuring connects to Kubernetes clusters running Istio.
2. The platform discovers mTLS certificates, PeerAuthentication policies, and DestinationRules.
3. Certificate details (algorithms, key sizes, issuers) are inventoried and tracked.
4. Cryptographic data feeds into the centralized CBOM for compliance and PQC readiness.