Envoy logo

Envoy

Emerging

CNCF-graduated cloud-native proxy powering Istio and AWS App Mesh service meshes; 2025 AI Gateway v0.1 enabling AI API traffic management competing with NGINX in Kubernetes.

Best for: Cloud ServicesEmerging, rapid growth
44
AI Score
Grade C
AI Visibility Score (Beta)
Cloud & InfrastructureCloud ServicesWebsiteUpdated October 2026

Brand Intelligence Graph

Capabilities
Cloud Services

Company Overview

About Envoy

Envoy is the most widely deployed cloud-native proxy, originally developed at Lyft and now a Cloud Native Computing Foundation (CNCF) graduated project since November 2018 — serving as the default sidecar proxy in Istio, Open Service Mesh, AWS App Mesh, and other service meshes, as well as the foundational technology behind many commercial API gateways and edge proxy products. Envoy processes traffic for millions of microservices globally, handling load balancing, service discovery, observability, and traffic management at the infrastructure layer.

Business Model & Competitive Advantage

Envoy's architecture as a high-performance, extensible proxy has made it the de facto standard for cloud-native network infrastructure — its xDS API for dynamic configuration allows platforms like Istio to manage Envoy configurations at scale without restarting proxies, while its rich observability (distributed tracing, detailed metrics) makes it essential for understanding microservices traffic patterns. Envoy Gateway 1.1 (released August 2024) added support for the Kubernetes Gateway API v1.1, standardizing how Kubernetes workloads expose services externally.

Competitive Landscape 2025–2026

In February 2025, Envoy reached another milestone: the first stable open-source AI Gateway (v0.1), developed by Bloomberg and Tetrate and backed by CNCF, was built on Envoy to provide unified access management, rate limiting, and observability for AI model APIs — positioning Envoy as infrastructure for AI application traffic alongside traditional microservices traffic. Envoy competes with NGINX and HAProxy for traditional proxy workloads but has largely displaced them in Kubernetes and cloud-native environments. The 2025 strategy focuses on the AI gateway use case, continued Kubernetes Gateway API adoption, and the commercial ecosystem of Envoy-based products (Tetrate, Solo.io, and others) that fund ongoing development.

Curated content • Fact-checked and verified

Recent Activity

View all →
release
envoy v1.39.2

**Summary of changes**: * Security fixes: - [CVE-2026-35189](https://github.com/google/boringssl/blob/main/docs/advisories/2026-09-29.md): tls: updated BoringSSL to fix excessive memory allocation when parsing certificates with `nameRelativeToCRLIssuer` CRL Distribution Points, which could be exploited for remote denial of service during TLS handshakes. * Build/packaging: - Removed Debian bullseye (11) packaging, as bullseye is end-of-life and its repositories are no longer available on the main Debian mirrors. - Moved Debian `.changes` and release checksum signing into the Bazel release assembly, with an audit of signing actions. - Refreshed the Ubuntu build and distroless Docker base images. **Docker images**: https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.39.2 **Docs**: https://www.envoyproxy.io/docs/envoy/v1.39.2/ **Release notes**: https://www.envoyproxy.io/docs/envoy/v1.39.2/version_history/v1.39/v1.39.2 **Full changelog**: https://github.com/envoyproxy/envoy/compa

release
envoy v1.38.5

**Summary of changes**: * Security fixes: - [CVE-2026-35189](https://github.com/google/boringssl/blob/main/docs/advisories/2026-09-29.md): tls: patched BoringSSL to fix excessive memory allocation when parsing certificates with `nameRelativeToCRLIssuer` CRL Distribution Points, which could be exploited for remote denial of service during TLS handshakes. The BoringSSL FIPS build (`--config=boringssl-fips`) does not receive this patch. * Build/packaging: - Removed Debian bullseye (11) packaging, as bullseye is end-of-life and its repositories are no longer available on the main Debian mirrors. - Moved Debian `.changes` and release checksum signing into the Bazel release assembly, with an audit of signing actions. - Refreshed the Ubuntu build image. **Docker images**: https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.38.5 **Docs**: https://www.envoyproxy.io/docs/envoy/v1.38.5/ **Release notes**: https://www.envoyproxy.io/docs/envoy/v1.38.5/version_history/v1.38/v1.38.5 **Full

release
envoy v1.37.7

**Summary of changes**: * Security fixes: - [CVE-2026-35189](https://github.com/google/boringssl/blob/main/docs/advisories/2026-09-29.md): tls: patched BoringSSL to fix excessive memory allocation when parsing certificates with `nameRelativeToCRLIssuer` CRL Distribution Points, which could be exploited for remote denial of service during TLS handshakes. The BoringSSL FIPS build (`--define boringssl=fips`) does not receive this patch. * Build/packaging: - Removed Debian bullseye (11) packaging, as bullseye is end-of-life and its repositories are no longer available on the main Debian mirrors. - Moved Debian `.changes` and release checksum signing into the Bazel release assembly, with an audit of signing actions. - Refreshed the Ubuntu build image. **Docker images**: https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.37.7 **Docs**: https://www.envoyproxy.io/docs/envoy/v1.37.7/ **Release notes**: https://www.envoyproxy.io/docs/envoy/v1.37.7/version_history/v1.37/v1.37.7 **Full

release
envoy v1.36.11

**Summary of changes**: * Security fixes: - [CVE-2026-35189](https://github.com/google/boringssl/blob/main/docs/advisories/2026-09-29.md): tls: patched BoringSSL to fix excessive memory allocation when parsing certificates with `nameRelativeToCRLIssuer` CRL Distribution Points, which could be exploited for remote denial of service during TLS handshakes. Note that the FIPS build is not patched. * Build/packaging: - Removed Debian bullseye (11) packaging, as bullseye is end-of-life and its repositories are no longer available on the main Debian mirrors. **Docker images**: https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.36.11 **Docs**: https://www.envoyproxy.io/docs/envoy/v1.36.11/ **Release notes**: https://www.envoyproxy.io/docs/envoy/v1.36.11/version_history/v1.36/v1.36.11 **Full changelog**: https://github.com/envoyproxy/envoy/compare/v1.36.10...v1.36.11 Signed-off-by: Greg Greenway <[email protected]> Signed-off-by: Kateryna Nezdolii <[email protected]> Sign

release
gateway v1.8.5

# Release Announcement Check out the [v1.8.5 release announcement](https://gateway.envoyproxy.io/news/releases/notes/v1.8.5) to learn more about the release.

release
gateway v1.9.2

# Release Announcement Check out the [v1.9.2 release announcement](https://gateway.envoyproxy.io/news/releases/notes/v1.9.2) to learn more about the release.

6-K
6-K — FORM 6-K

Foreign Filing filed 2026-09-28

release
examples v0.2.7
6-K
6-K — FORM 6-K

Foreign Filing filed 2026-09-21

6-K
6-K — FORM 6-K

Foreign Filing filed 2026-09-17

6-K
6-K — FORM 6-K

Foreign Filing filed 2026-09-15

6-K
6-K — FORM 6-K

Foreign Filing filed 2026-09-09

Key Differentiators

Emerging Innovator

Envoy is an emerging player bringing innovative solutions to the Infrastructure market.

Frequently Asked Questions

Estimated Visibility Trend (Beta)

Simulated 8-week rolling score

44
→ Stable

Based on estimated brand signals. Historical tracking coming soon.

Similar Brands

Cloudflare logo

Cloudflare

Infrastructure
B2bPlatformCloud NativeInfrastructureGlobalSecurityDeveloper ToolsPublicSaas

Cloudflare is a global cloud platform providing web performance, security, and network services to millions of websites and applications worldwide. Founded in 2009 by Matthew Prince and Michelle Zatly

Heroku logo

Heroku

Infrastructure
B2bPlatformCloud NativeInfrastructureDeveloper ToolsSaas

Heroku is a cloud application platform (PaaS) that enables developers to deploy, manage, and scale web applications without managing server infrastructure — supporting multiple programming languages (

Netlify logo

Netlify

Infrastructure
B2bPlatformCloud NativeInfrastructureDeveloper ToolsSaas

Netlify is a web hosting and serverless platform enabling developers to deploy websites and web applications with continuous deployment from Git repositories, serverless functions, edge computing, and

Neon logo

Neon

Infrastructure
B2bPlatformCloud NativeInfrastructureDeveloper ToolsSaas

Neon is a serverless PostgreSQL platform offering instant database provisioning, automatic scaling to zero, and database branching — capabilities that make it uniquely suited for modern application de

Infracost logo

Infracost

Infrastructure
B2bCloud NativeDeveloper ToolsInfrastructurePlatformSaas

Infracost is a San Francisco-based cloud cost management platform — backed by Y Combinator (W21) with $17.2 million raised including a $15 million Series A led by Pruven Capital with Insight Partners

Reducto logo

Reducto

Infrastructure
Ai PoweredB2bDeveloper ToolsInfrastructurePlatformCloud NativeSaas

Reducto is a San Francisco-based AI document intelligence company — backed by $108 million in total funding including a $75 million Series B led by Andreessen Horowitz in October 2025, plus a $24.5 mi

Compare Envoy with Competitors

Side-by-side AI visibility scores, platform breakdown, and market position.

For Envoy

Claim This Profile

Are you from Envoy? Claim your profile to see full AI mention excerpts, get weekly visibility change alerts, and optimize how AI systems describe your brand.

Claim Envoy Profile →
For competitors & analysts

Track AI Visibility in Real Time

Monitor how ChatGPT, Gemini, Perplexity, and Claude mention Envoy vs competitors. Get alerts when AI recommendations shift.

Start Free Tracking →