{"slug":"kagent","url":"https://www.altairalabs.ai/vs/kagent/","markdown":"https://www.altairalabs.ai/vs/kagent.md","name":"Kagent","vendor":"The kagent project","category":"Agents on Kubernetes","checked":"2026-10-22","summary":"Kagent and Omnia both run agents as Kubernetes resources with pinned revisions. Omnia also tests each version on simulated callers before release, rolls it out in steps and carries the end user’s identity to every tool, free.","headline":"We already run agents on Kubernetes with kagent.","scene":{"setup":"Someone points the support agent at a newer model.","omnia":"Before it serves anyone, the new revision meets simulated customers on the real tools, a caller pushing for a policy exception and one who talks over it on the phone. It grants the exception more readily than the old model did, so it stays at the gate.","omniaCaps":["selfplay","adversarial","voice-testing","deploy-gate"],"them":"Kagent compiles the change into a new digest-pinned revision. Its docs describe no testing before the revision serves; Solo.io’s separate agentevals tool grades traces from runs that already happened.","source":"https://www.solo.io/blog/agentic-quality-benchmarking-with-agent-evals","omniaEvidence":"https://promptarena.altairalabs.ai/arena/explanation/scenario-design/"},"differences":[{"title":"A test suite on every revision","body":"The suite has three kinds of run: simulated users on the real tools, adversarial callers looking for a policy bypass, and duplex voice calls that catch barge-in and dead air. The gate reads its results.","caps":["selfplay","adversarial","voice-testing","deploy-gate"],"them":"Evaluation isn’t in the kagent docs. Voice isn’t documented.","source":"https://kagent.dev/docs/kagent/1.x/about/what-is-kagent.md","omniaEnterprise":false,"omniaEvidence":"https://promptarena.altairalabs.ai/arena/explanation/scenario-design/"},{"title":"Traffic in steps","body":"Both pin a session to the revision it started on. Omnia also moves new conversations across in steps, checks the metrics before each one, and rolls the revision back if they drop.","caps":["progressive-rollout","sticky-sessions","metric-gated-promotion"],"them":"Sessions pin to their revision. Canary, eval-gated promotion and rollback aren’t documented.","source":"https://kagent.dev/docs/kagent/1.x/about/core-concepts.md","omniaEnterprise":true,"omniaEvidence":"https://omnia.altairalabs.ai/tutorials/progressive-rollouts/"},{"title":"The user’s identity reaches the tool","body":"OIDC or your gateway authenticates the caller, and the agent passes that identity to every tool and remote agent it calls. It’s in the free core. A CEL rule can also check a tool call’s arguments before it runs.","caps":["oidc","edge-trust","end-user-identity","per-call-policy"],"them":"Open source has Kubernetes RBAC, an oauth2-proxy and a per-binding tool allowlist. OIDC and on-behalf-of token exchange are in Solo Enterprise for kagent.","source":"https://www.solo.io/products/kagent-enterprise","omniaEnterprise":true,"omniaEvidence":"https://omnia.altairalabs.ai/how-to/security/configure-authentication/"}],"rows":[{"topic":"Agents as Kubernetes resources","omnia":"Custom resources and controllers, installed with Helm.","caps":["autoscaling","graceful-drain"],"them":"Harness, AgentTemplate and Agent resources.","coverage":"yes","source":"https://kagent.dev/docs/kagent/1.x/about/core-concepts.md","omniaEnterprise":false,"omniaEvidence":"https://omnia.altairalabs.ai/explanation/agents/autoscaling/"},{"topic":"Immutable versions","omnia":"A versioned pack: prompts, tools, policy and tests together.","caps":["gitops-sync"],"them":"Digest-identified revisions.","coverage":"yes","source":"https://kagent.dev/docs/kagent/1.x/about/core-concepts.md","omniaEnterprise":false,"omniaEvidence":"https://omnia.altairalabs.ai/reference/core/promptpacksource/"},{"topic":"Simulated users before release","omnia":"Multi-turn, against real tools, adversarial included.","caps":["selfplay","adversarial"],"them":"Not in the kagent docs.","coverage":"undocumented","source":"https://kagent.dev/docs/kagent/1.x/about/what-is-kagent.md","omniaEnterprise":false,"omniaEvidence":"https://promptarena.altairalabs.ai/arena/explanation/scenario-design/"},{"topic":"Voice","omnia":"Duplex voice, and tests for it.","caps":["duplex-voice","voice-testing"],"them":"Not documented.","coverage":"undocumented","source":"https://kagent.dev/docs/kagent/1.x/about/what-is-kagent.md","omniaEnterprise":false,"omniaEvidence":"https://promptarena.altairalabs.ai/arena/explanation/duplex-architecture/"},{"topic":"Stepped rollout, auto rollback","omnia":"Traffic shifts in steps and rolls back on its own.","caps":["progressive-rollout"],"them":"Not documented.","coverage":"undocumented","source":"https://kagent.dev/docs/kagent/1.x/about/core-concepts.md","omniaEnterprise":false,"omniaEvidence":"https://omnia.altairalabs.ai/tutorials/progressive-rollouts/"},{"topic":"Argument-level tool policy","omnia":"A CEL rule on every call, before the tool runs.","caps":["per-call-policy"],"them":"Allowlist by tool name, optional approval.","coverage":"partly","source":"https://kagent.dev/docs/kagent/1.x/skills-and-mcp/about-tools.md","omniaEnterprise":true,"omniaEvidence":"https://omnia.altairalabs.ai/how-to/security/configure-tool-policies/"},{"topic":"End-user identity to tools","omnia":"In the free core.","caps":["end-user-identity"],"them":"In the enterprise edition.","coverage":"partly","source":"https://www.solo.io/products/kagent-enterprise","omniaEnterprise":false,"omniaEvidence":"https://omnia.altairalabs.ai/explanation/platform/delegation-tokens/"},{"topic":"Deploy to AgentCore, Vertex or Foundry","omnia":"The same pack, one command.","caps":["deploy-hyperscaler"],"them":"Not documented.","coverage":"undocumented","source":"https://kagent.dev/docs/kagent/1.x/llms.txt","omniaEnterprise":false,"omniaEvidence":"https://promptarena.altairalabs.ai/arena/explanation/deploy/overview/"}],"faq":[{"q":"Which kagent version is this?","a":"The 1.x documentation, which kagent describes as an alpha and a clean break from the 0.x line."},{"q":"Does either need a service mesh?","a":"Kagent’s open-source install doesn’t mention one; Istio ambient appears in Solo’s enterprise edition. Omnia doesn’t need one."},{"q":"Can Omnia run agents built with other frameworks?","a":"Yes. They run under the same policy, audit and testing as Omnia’s own, and any agent is reachable over A2A or as an MCP tool."}]}