One orchestrator.Every workflow.
Build, run, and govern across your entire organization.
Agentic AI under the same controls.
- Declarative
- Language-Agnostic
- 2,300+ Plugins
- Cloud
- Self-Hosted
- API-First
Kestra 2.0Available now!
Cross-Cloud ETL That Starts Itself
Every VM Configured, Every Run Traceable
Triage every issue from GitHub with AI, start each day with a plan
Self-service Business automation, fully recorded
Kestra scales because it is designed for cross-team orchestration from day one.
Adopt Once.
Standardize Everywhere.
Infrastructure Engineering
Automate Infrastructure With Governance, Not Scripts
Standardize Terraform, Ansible, CI/CD and operational workflows across hybrid and air-gapped environments.
6x
faster infrastructure delivery
90%
lower legacy tooling cost
trigger
Nightly AuditCheck Hosts System
Upload Output to S3
Send Slack Success
Data Orchestration
Ship Data Pipelines Faster and Keep them Reliable
Run ingestion, transformations, dbt, Airbyte, Spark and quality checks in one workflow engine.
10x
Faster Pipeline Delivery
90%
Fewer Manual backfills
dbt
dbt
Clone Repository
dbt Build
Python
Send Slack Notification
Send Email Notification
AI Automation
Operationalize AI Workflows Without Production Chaos
Agents, RAG pipelines, evaluation, publishing, retraining all orchestrated with governance and observability.
50x
less pipeline maintenance
3x
faster AI delivery cycles
trigger
Schedule monitorKubernetes deploy
AI inference
Python script
Slack notify
One Platform. All Your Workflows.
Declarative Orchestration
Write workflows in YAML. Version them. Review them. Ship them.
Connect Everything
Cloud, data, infra, CI/CD, ITSM, messaging. Plug into your entire stack.
2,300+ plugins
Batch and Event-Driven
Cron, events, webhooks, messages. One engine to run them all.
Governance and Reliability
Retries, timeouts, SLAs, RBAC, audit logs. SOC 2, Built to run in production.
Built for How Modern Teams Actually Work.
Any Language. No Lock-in
Run tasks in Python, Bash, Node.js, Go, or containers. No refactoring required.
Build Everything As Code & From the UI
Empower every team member to collaborate from a single tool—code for developers, UI for everyone else, all in sync.
Agentic Automation, Built In
Copilot for speed, agents for action. Create, iterate, and automate workflows with an AI native platform.
API First. CI/CD Native.
Trigger executions, manage workflows and resources through the API, and roll out updates safely with Git-driven CI/CD pipelines.
Work With Your Stack,
Not the Other Way Around.
Kestra integrates with your existing cloud, data, infrastructure, and SaaS tools.
With 2,300+ plugins, you can orchestrate everything without building custom glue code.
We processed billions of rows and thousands of weekly API pulls in under 3 months. For the first time, our analysts aren't waiting for engineering—they're building the workflows themselves.
- Billions
- of records processed securely
- < 3 Months
- to go from zero to full production
- 100+
- users empowered to build workflows
Deploy Anywhere. Keep Everything Governed.
Open Source
Self-host on Docker or Kubernetes. Free Forever
Enterprise Edition
Built for critical environments.
SSO, RBAC, audit logs, multi-tenancy. Isolated workers and dedicated task runners.
Hybrid environments: Cloud, On-Prem, Air-Gapped.
SLA-backed support and a dedicated customer success program.
Cloud
Managed platform, production-ready, scalable. Fastest time to value.
2120+ Blueprints, Ready to Build.
Jump-start your workflows with a growing library of workflow templates
Audit Kubernetes Resource Quotas
Daily quota-usage audit that alerts Slack when a namespace rides hot.
Retire Unused Kestra Flows with Quarantine, Approval and Restore
Find flows that have not run or changed for months and that no other flow depends on, disable their triggers for a quarantine period, then delete them after approval with a restorable backup.
KMS Key Rotation Compliance Gate
Read a customer-managed KMS key's real rotation status, classify it, alert Slack when automatic rotation is disabled, and optionally enable it with a verified fix.
Kubernetes PersistentVolume Released State and Orphan Reclamation Guard
Audits Kubernetes PersistentVolumes in Released status to identify orphaned storage and safely recycle or prune them.
Kubernetes ConfigMap and Secret Hash Drift Sentinel
Audits Kubernetes Deployment annotations to detect unrolled ConfigMap/Secret changes and pod configuration drift.
Backport Kestra UI hotfixes to a Git review branch
Compare live flows with their deployed Git baseline and save approved UI edits to a review branch.
Run a Python script in a Kubernetes pod
Run a Python script inside a Kubernetes pod with declarative CPU and memory limits, straight from a Kestra flow.
Gate a Kestra upgrade against every live flow
Validate live Kestra flows against a candidate version, report only regressions and quarantine candidate-invalid triggers after approval.
Audit Kubeflow pipeline runs and escalate failures and stuck runs
Read recent Kubeflow runs, measure the failure rate and stuck runs over a window, then open an issue, ping Slack and note every failed run.
Kubernetes CoreDNS Cluster DNS Resolution and Pod Health Sentinel
Audits Kubernetes CoreDNS cluster service discovery to detect unready DNS resolver pods and internal resolution timeouts.
Run a GPU Pod and Collect Its Artifact
Run a GPU workload as a Kubernetes pod, pull its output artifact into Kestra storage, and notify Slack.
Kubernetes StatefulSet Replica Health and Quorum Degradation Sentinel
Audits Kubernetes StatefulSets across all namespaces to detect replica count deficits and impending database quorum loss.
Detect lasting KPI shifts and name the release that caused them
Remove weekly seasonality from a daily KPI per segment, find lasting level shifts with ruptures, ignore short spikes, and match each shift to the release deployed just before it.
Kubernetes Mutating Admission Webhook Timeout and Failure Policy Sentinel
Audits Kubernetes MutatingWebhookConfigurations to detect aggressive failure policies and high timeouts risking API server lockups.
Klaviyo Pre-Send Recipient Estimation Alert
Estimate a Klaviyo campaign's audience before sending, alert Slack when out of range, and optionally fail so a parent flow can gate the send.
Find the Kubernetes manifests that will break on your next cluster upgrade
Validate every manifest against the current and the target Kubernetes schemas with kubeconform, list the ones that use removed APIs, and score them with kube-score.
Kubecost Namespace Rightsizing with Approval and Chargeback
Chargeback reporting plus approved rightsizing of Kubernetes namespace resource requests.
Kubernetes Headless Service Orphaned Endpoints and DNS Resolution Sentinel
Audits Kubernetes headless services to detect orphaned endpoints with zero healthy backend pods breaking internal DNS discovery.
Kubernetes PersistentVolumeClaim (PVC) Storage Exhaustion Sentinel
Audits Kubernetes PersistentVolumeClaim disk usage via Prometheus, identifies impending volume exhaustion, and alerts SREs.
Audit a Kubernetes Cluster Against the CIS Benchmark with kube-bench
Run kube-bench on a schedule or webhook, turn failed CIS controls into a GitHub issue, a Slack alert, and a remediation report.
Kestra gives you fewer tools to maintain, fewer scripts to debug, fewer dependencies between teams, and one place to see what’s running
across your company.
One PlatformOne StandardOne Source of Truth