---
name: vmwaresolutions-vrw-caveonix
title: Caveonix integration
description: As of 17 July 2025, new automated installations of Red Hat® OpenShift® for VMware® are no longer available for new or existing deployments of VMware Cloud Foundation for Classic - Automated instances. You can still use or delete your existing Red Hat OpenShift for VMware automated installations until 16 July 2026. The service will no longer be available from 17 July 2026.
last-updated: 2025-12-09
---

> ## Documentation Index
> The table of contents for this documentation set is at https://cloud.ibm.com/docs/vmwaresolutions?format=markdown
> The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt
> Use these files to discover more information as needed.

# Caveonix integration
{: #vrw-caveonix}

As of 17 July 2025, new automated installations of Red Hat® OpenShift® for VMware® are no longer available for new or existing deployments of VMware Cloud Foundation for Classic - Automated instances. You can still use or delete your existing Red Hat OpenShift for VMware automated installations until 16 July 2026. The service will no longer be available from 17 July 2026.
{: deprecated}

**End of Marketing**: As of 31 October 2025, new deployments of VMware Solutions offerings are no longer available for new customers. Existing customers can still use and expand their active VMware® workloads on IBM Cloud®. For more information, see [End of Marketing for VMware on IBM Cloud](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-eos-vms&format=markdown).
{: note}

IBM Cloud® for VMware® Regulated Workloads requires Caveonix RiskForesight™ for continuous compliance monitoring. The Regulated Workloads architecture is designed to allow compliance with NIST and other compliance certifications as required of the SaaS provider or the SaaS consumer that uses the Regulated Workloads offering.

![Caveonix data flows](../../images/vrw-v2-caveonix-2.svg "Caveonix data flows"){: caption="Caveonix data flows" caption-side="bottom"}

## Management cluster
{: #vrw-caveonix-management}

[Caveonix RiskForesight](https://cavhq.ai/){: external} provides a comprehensive cloud workload protection platform for Regulated Workloads. This platform delivers a common Risk Management Control Plane (RMCP) for continuous and proactive protection of management and edge workloads.

The RMCP enables the SaaS provider to maintain continuous and real-time visibility into workload deployments at scale, incorporating the most recent cyberthreats and regulatory compliance needs. RiskForesight also evaluates workload-specific cyberrisks and compliance risks and provides proactive defense by using agentless enforcement at network, security, and compute control planes of deployment.

RiskForesight’s unique Risk Management Control Plane (RMCP) interface slashes or eliminates needless security blind spots and compliance gaps, restoring risk visibility and confidence in compliant deployments.

![Regulated Workloads - Caveonix components](../../images/caveonix-app-components.svg "Caveonix components"){: caption="Caveonix components" caption-side="bottom"}

## Gateway cluster
{: #vrw-caveonix-edge}

Caveonix RiskForesight is used to continuously monitor compliance of the gateway cluster.

## Workload cluster
{: #vrw-caveonix-workload}

Caveonix RiskForesight is used to continuously monitor compliance of all workload cluster hosts.

Caveonix RiskForesight can optionally monitor compliance of SaaS consumer workloads. Enabling the use of RiskForesight for workload compliance monitoring requires appropriate rules and policies on the perimeter security appliance that isolates the workload regions.

## Related links
{: #vrw-caveonix-related}

* [IBM Cloud compliance programs](https://www.ibm.com/products/cloud/compliance){: external}
* [Caveonix RiskForesight](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-caveonix_considerations&format=markdown)