Platform “Botsman” and SafeTech Lab Introduce Tool for Building Secure Kubernetes Infrastructure
The solution enables flexible management of containerized applications and the deployment of up-to-date security certificates.

A few years ago, when import substitution in cybersecurity was gaining momentum, the task was straightforward: quickly develop alternatives to key products previously purchased from Western vendors. Today, a different process is emerging as Russian developers deepen collaboration to build entire technology ecosystems.
Each Side Has a Clearly Defined Role
Platforma Botsman (Botsman Platform), part of Astra Group, and SafeTech Lab have launched a joint solution that allows customers to build a trusted Kubernetes infrastructure.
Kubernetes is an open-source system that automates the deployment, scaling, and management of containerized applications. It eliminates the need for constant manual intervention and automatically distributes workloads across servers. This is particularly important for large enterprises that often run huge numbers of services simultaneously.
A key feature of the new project is a clear division of responsibilities, with each company handling a strictly defined set of tasks. Platforma Botsman covers the infrastructure layer, including Kubernetes cluster management, deployment, scaling, updates, and operation of containerized workloads. SafeTech CA handles the functions of an enterprise certificate authority, including issuing certificates, managing them, and overseeing their lifecycle. These certificates are used to secure connections, authenticate services, and build a trusted IT environment.

Reducing Reliance on Foreign Vendors
The new solution allows enterprises to deploy corporate services within a Kubernetes infrastructure. It supports flexible application management as well as multiple authentication scenarios. This significantly strengthens security for service-to-service interactions while reducing reliance on foreign products such as Microsoft CA.
“Containerization gives businesses flexibility and speed, but that is not enough in protected environments. Applications need to do more than simply work – they need to trust each other. Compatibility with SafeTech CA makes it possible to establish that layer of trust: certificates are issued, renewed, and monitored through a single corporate process, while Botsman keeps the underlying infrastructure running reliably,” says Ruslan Shagaliev, commercial director of the Botsman platform.
The launch is highly significant for Russia’s IT market. The solution expands the options for building enterprise infrastructure around cloud technologies while relying on Russian software. That is particularly valuable for companies facing heightened requirements to use domestically independent cybersecurity tools.

A New Market Takes Shape
Over the past several years, an entire segment of Kubernetes platforms has emerged in the Russian market. In 2024, Russia’s Deckhouse Kubernetes Platform became the first such platform to receive certification from the Federal Service for Technical and Export Control (FSTEC), earning the status of a Class 4 protected containerization tool. Botsman and SafeTech CA were also certified in 2025 and 2026, respectively.
Large enterprises are also showing that they trust SafeTech CA. One of the first to migrate to the platform was T-Bank, which had previously used Microsoft CA. According to the developer, the foreign certificate authority was fully removed from the bank’s infrastructure as of Jan. 1, 2025. In July this year, SafeTech CA was integrated with another Russian Kubernetes platform, Shturval (Helm). The integration also enables the automatic issuance and renewal of TLS certificates for Kubernetes applications and services.

The new solution will now have to prove its effectiveness in real-world deployments. If it demonstrates reliable performance in practice, there is little doubt it could attract a broad range of customers, including government agencies, financial institutions, manufacturers, and other organizations that require stronger security.









































