---
title: "Compliance and security"
description: "Generate compliance reports and encrypt in-cluster traffic in your Calico Enterprise cluster, with archived flow logs, audit logs, CIS benchmarks, and WireGuard."
product: "Calico Enterprise"
version: "3.23 (latest)"
section: "Compliance and security"
canonical_url: "https://docs.tigera.io/calico-enterprise/latest/compliance/"
---

# Compliance and security

Get reports on Kubernetes workloads and environments for regulatory compliance. Encrypt traffic in your cluster with WireGuard.

##### [Enable compliance reports](https://docs.tigera.io/calico-enterprise/latest/compliance/enable-compliance.md)

[Turn on the in-cluster compliance reporter, controller, snapshotter, and server components that produce Calico Enterprise compliance reports and CIS benchmarks.](https://docs.tigera.io/calico-enterprise/latest/compliance/enable-compliance.md)

##### [Schedule and run compliance reports](https://docs.tigera.io/calico-enterprise/latest/compliance/overview.md)

[Schedule and run Calico Enterprise compliance reports against Kubernetes workloads using archived flow logs and audit logs stored in Elasticsearch.](https://docs.tigera.io/calico-enterprise/latest/compliance/overview.md)

##### [Configure CIS benchmark reports](https://docs.tigera.io/calico-enterprise/latest/compliance/compliance-reports-cis.md)

[Configure CIS Kubernetes benchmark reports in Calico Enterprise to assess node and cluster compliance and download results from the in-cluster reporter as CSV.](https://docs.tigera.io/calico-enterprise/latest/compliance/compliance-reports-cis.md)

##### [Encrypt data in transit](https://docs.tigera.io/calico-enterprise/latest/compliance/encrypt-cluster-pod-traffic.md)

[Turn on WireGuard in your Calico Enterprise cluster to encrypt inter-node pod and host-network traffic, with IPv4 and IPv6 support via FelixConfiguration.](https://docs.tigera.io/calico-enterprise/latest/compliance/encrypt-cluster-pod-traffic.md)

##### [Configure an outbound HTTP proxy](https://docs.tigera.io/calico-enterprise/latest/compliance/configure-http-proxy.md)

[Route outbound Calico Enterprise container traffic through an HTTP proxy by configuring the Installation custom resource managed by the Tigera Operator.](https://docs.tigera.io/calico-enterprise/latest/compliance/configure-http-proxy.md)