Built by a German Kubernetes company. Held to an honest standard.

Sovereign infrastructure for the organizations that cannot outsource control.

Who we are

Defense Pods is the sovereign-defense brand of Kubermatic, a German-headquartered company (Hamburg) that has built Kubernetes management software since 2016. Kubermatic is a CNCF-recognised Kubernetes specialist and the only Germany-headquartered vendor named in the 2025 Gartner® Magic Quadrant™ for Container Management (as a Niche Player).

We created a dedicated brand because defense and public-sector sovereignty is a distinct conversation — one that deserves language, proof, and a standard of honesty built specifically for it.

Why a German HQ matters here

For European sovereignty, the vendor’s own jurisdiction is not a detail — it is part of the question. A platform sold as sovereign but controlled from another jurisdiction inherits that jurisdiction’s reach. Being a German company, operating under German and EU law, is a structural part of the offer, not a marketing line.

The honesty principle

This brand’s credibility depends on not doing what it accuses others of — “sovereignty washing.” So we operate under one rule, internally and externally:

If you can’t cite it, mark it internal and hold it.

Every capability, certification, clearance, and customer reference on this site is either substantiated or absent. Performance figures from production deployments are labelled as vendor claims. Certifications appear only where they are held. Named defense references are withheld until the customer and Legal clear them.

It is a slower way to build a website. It is the only credible way to build a sovereignty brand.

The platform

Underneath the brand is Kubermatic’s open-source platform: a Kubernetes-in-Kubernetes architecture for air-gapped fleets, Kubernetes-native virtualization for a VMware exit, and self-hosted secrets — all open source you can audit and run yourself.

What we stand for

Three commitments

Sovereignty, defined honestly

Open code, self-hosted, no foreign root access. We hold ourselves to the same definition we ask buyers to apply to everyone else.

Open source by default

Auditable by construction. Control you can inspect, not a black box you must trust — and capability that cannot be withdrawn.

No overclaiming

We do not publish a certification, clearance, or reference we cannot substantiate. If we can’t cite it, we hold it.

Talk to the team

Talk to an expert