ent the deployment of K8S objects that would allow insecure traffic in the cluster (typically around NLBs and services). Splunk also relies on <code>NetworkPolicies</code> for securing and restricting Pod to Pod connectivity.</p><h2 id=securing-layer-7-istio>Securing Layer 7: Istio</h2><p>Splunk uses Istio to enforce policy on the application layer based on the details of each request. Istio also emits Telemetry data (metrics, logs, traces) that is useful for validating request-level security.</p><p>One of 