One orchestrator.Every workflow.
Build, run, and govern across your entire organization.
Agentic AI under the same controls.
- Declarative
- Language-Agnostic
- 2,400+ Plugins
- Cloud
- Self-Hosted
- API-First
Kestra 2.0Available now!
Cross-Cloud ETL That Starts Itself
Every VM Configured, Every Run Traceable
Triage every issue from GitHub with AI, start each day with a plan
Self-service Business automation, fully recorded
Kestra scales because it is designed for cross-team orchestration from day one.
Adopt Once.
Standardize Everywhere.
Infrastructure Engineering
Automate Infrastructure With Governance, Not Scripts
Standardize Terraform, Ansible, CI/CD and operational workflows across hybrid and air-gapped environments.
6x
faster infrastructure delivery
90%
lower legacy tooling cost
trigger
Nightly AuditCheck Hosts System
Upload Output to S3
Send Slack Success
Data Orchestration
Ship Data Pipelines Faster and Keep them Reliable
Run ingestion, transformations, dbt, Airbyte, Spark and quality checks in one workflow engine.
10x
Faster Pipeline Delivery
90%
Fewer Manual backfills
dbt
dbt
Clone Repository
dbt Build
Python
Send Slack Notification
Send Email Notification
AI Automation
Operationalize AI Workflows Without Production Chaos
Agents, RAG pipelines, evaluation, publishing, retraining all orchestrated with governance and observability.
50x
less pipeline maintenance
3x
faster AI delivery cycles
trigger
Schedule monitorKubernetes deploy
AI inference
Python script
Slack notify
One Platform. All Your Workflows.
Declarative Orchestration
Write workflows in YAML. Version them. Review them. Ship them.
Connect Everything
Cloud, data, infra, CI/CD, ITSM, messaging. Plug into your entire stack.
2,400+ plugins
Batch and Event-Driven
Cron, events, webhooks, messages. One engine to run them all.
Governance and Reliability
Retries, timeouts, SLAs, RBAC, audit logs. SOC 2, Built to run in production.
Built for How Modern Teams Actually Work.
Any Language. No Lock-in
Run tasks in Python, Bash, Node.js, Go, or containers. No refactoring required.
Build Everything As Code & From the UI
Empower every team member to collaborate from a single tool—code for developers, UI for everyone else, all in sync.
Agentic Automation, Built In
Copilot for speed, agents for action. Create, iterate, and automate workflows with an AI native platform.
API First. CI/CD Native.
Trigger executions, manage workflows and resources through the API, and roll out updates safely with Git-driven CI/CD pipelines.
Work With Your Stack,
Not the Other Way Around.
Kestra integrates with your existing cloud, data, infrastructure, and SaaS tools.
With 2,400+ plugins, you can orchestrate everything without building custom glue code.
We processed billions of rows and thousands of weekly API pulls in under 3 months. For the first time, our analysts aren't waiting for engineering—they're building the workflows themselves.
- Billions
- of records processed securely
- < 3 Months
- to go from zero to full production
- 100+
- users empowered to build workflows
Deploy Anywhere. Keep Everything Governed.
Open Source
Self-host on Docker or Kubernetes. Free Forever
Enterprise Edition
Built for critical environments.
SSO, RBAC, audit logs, multi-tenancy. Isolated workers and dedicated task runners.
Hybrid environments: Cloud, On-Prem, Air-Gapped.
SLA-backed support and a dedicated customer success program.
Cloud
Managed platform, production-ready, scalable. Fastest time to value.
2200+ Blueprints, Ready to Build.
Jump-start your workflows with a growing library of workflow templates
Release Kestra Flows from Git with Smoke Tests and Automatic Rollback
Release flows from Git to a namespace after a dry-run diff, run smoke tests against the new revisions, and restore the previous flows if any test fails.
Purge aged Kestra execution history behind an approval gate
Find Kestra executions older than a retention window, skip running, paused and protected ones, delete them behind an approval gate, then re-count and fail if the backlog is still too big.
Kubernetes OOMKilled Pod Termination Storm Sentinel
Audits Kubernetes core events to detect cluster-wide OOMKilled container termination storms and memory thrashing.
KMS Key Rotation Compliance Gate
Read a customer-managed KMS key's real rotation status, classify it, alert Slack when automatic rotation is disabled, and optionally enable it with a verified fix.
Kubernetes CoreDNS Cluster DNS Resolution and Pod Health Sentinel
Audits Kubernetes CoreDNS cluster service discovery to detect unready DNS resolver pods and internal resolution timeouts.
Recover Kestra executions abandoned in PAUSED
Find Kestra executions stuck PAUSED past a grace window, the approvals nobody answered, list them in dry run, then behind a flow allowlist, a ceiling and a Pause approval send the answer you wrote and verify each one left PAUSED.
Kubernetes API Server Request Latency Spike Sentinel
Monitors Kubernetes API Server request duration metrics to detect control plane latency spikes and client throttling.
Kinesis Stream Throughput Quota Gate
Read a Kinesis stream's real throttling and iterator age CloudWatch metrics, classify it HEALTHY, CRITICAL or PROBE_FAILED, and alert Slack with the actual values before data loss or a producer outage happens.
Kubernetes CNI IPAM Node Pod Subnet Exhaustion Sentinel
Audits Kubernetes node allocatable pod capacity to detect CNI IPAM subnet exhaustion and prevent scheduling freezes.
Kestra Orphaned Namespace Configuration Compliance Gate
Find Kestra namespaces that keep a stored configuration with zero flows, alert Slack with the exact names, and log a governance audit trail.
Weekly Klaviyo Campaign Performance Report to Slack
Pull real Klaviyo campaign KPIs on a weekly schedule, export them to CSV, and post a performance summary to Slack.
Retire Unused Kestra Flows with Quarantine, Approval and Restore
Find flows that have not run or changed for months and that no other flow depends on, disable their triggers for a quarantine period, then delete them after approval with a restorable backup.
Kubecost Namespace Rightsizing with Approval and Chargeback
Chargeback reporting plus approved rightsizing of Kubernetes namespace resource requests.
Kopia Snapshot Shrink Retention Pin Guard
Learns each Kopia backup source's normal size, detects a snapshot that suddenly shrank, and pins the last good snapshots after approval so retention cannot rotate them away.
Reap Kestra executions stuck in RUNNING
Find Kestra executions that have been stuck in RUNNING past a threshold, the dead-worker zombies that hold a slot forever, list them in dry run, then behind a Pause approval kill each one and verify it is gone.
Self-Service Kubernetes Namespace Provisioning with Policy Tiers, Approval, Verification and TTL Lifecycle
Turn namespace tickets into a golden path. Requests are checked against policy tiers, approved automatically or by the platform team, created with quota, RBAC and network policy, verified in the cluster, and torn down after approval when they expire.
Kubernetes Mutating Admission Webhook Timeout and Failure Policy Sentinel
Audits Kubernetes MutatingWebhookConfigurations to detect aggressive failure policies and high timeouts risking API server lockups.
Kubernetes Istio Sidecar Injection Omission Sentinel
Scans active workloads in Istio-enabled namespaces to detect newly created pods running without Envoy sidecars.
Audit Kubeflow pipeline runs and escalate failures and stuck runs
Read recent Kubeflow runs, measure the failure rate and stuck runs over a window, then open an issue, ping Slack and note every failed run.
Kubernetes ConfigMap and Secret Hash Drift Sentinel
Audits Kubernetes Deployment annotations to detect unrolled ConfigMap/Secret changes and pod configuration drift.
Kestra gives you fewer tools to maintain, fewer scripts to debug, fewer dependencies between teams, and one place to see what’s running
across your company.
One PlatformOne StandardOne Source of Truth