Tool profile
Kestra: cost, fit and limits
Kestra is a workflow orchestration platform made by Kestra Technologies that runs declarative, event-driven workflows for data, infrastructure and AI teams, as a free self-hosted Open Source edition, a licensed Enterprise Edition and a managed Kestra Cloud.
What to know first
Kestra comes in three forms: a free self-hosted Open Source edition, an Enterprise Edition sold as an annual per-instance subscription and a usage-based Cloud service. The Open Source plan already lists more than 2,600 plugins, code and no-code editors, an MCP server and an AI Copilot. Numeric prices for Enterprise and Cloud are not shown, so those need a quote. The privacy policy names no hosting region.
Kestra at a glance
| Maker | Kestra Technologies, France |
|---|---|
| Free plan | Yes |
| Entry price | Free (Open Source, self-hosted) |
| API access | No |
| Category | Best AI Data Orchestration Tools in 2026, rank 1 of 12 |
| Website | kestra.io |
Who Kestra is best for
Platform teams that self-host
Open Source runs on your own infrastructure with a queue on PostgreSQL or MySQL, so a team can pilot real workflows without a purchase order or a procurement cycle.
Regulated operators
Enterprise lists SSO, LDAP, SCIM, RBAC, audit logs and a secrets manager, which covers the controls an internal security review usually asks about first.
Teams mixing code and no-code authors
Flows can be edited in code or through a no-code editor, so analysts and engineers can work on the same workflow definition.
Kestra plans and pricing
| Plan | Price | What it includes |
|---|---|---|
| Open Source | Free (JSON-LD lists 0 USD) | Self-hosted with 2,600-plus plugins, declarative workflows, event-driven scheduling, code and no-code editors, MCP server, PostgreSQL or MySQL queue and AI Copilot and agents. |
| Enterprise Edition | Annual subscription, contact sales | Adds enterprise plugins, SSO, LDAP, SCIM, RBAC, audit logs, secrets manager, worker groups, multi-tenancy, Kafka, Redis and AMQP queues and Standard Support. |
| Kestra Cloud | Usage-based, no number shown | Managed hosting, upgrades and monitoring, automatic scaling, enterprise plugins and SOC2 compliance as stated on the pricing page. |
Checked November 2026.
What Kestra does
- Human-in-the-loop approvals
- An execution can pause until a person approves it, and the approver can supply custom inputs, which fits release gates and data corrections that should not run unattended.
- Quotas
- Caps how many executions a flow, namespace or tenant may start within a time window, so one misconfigured trigger cannot flood the workers or exhaust a shared database during a backfill.
- Kill switch
- Stops every execution in a flow, namespace or tenant at once. An operator can halt a bad deployment, or a runaway loop, without hunting for individual runs one by one.
- Secrets manager
- Reads secrets from HashiCorp Vault, AWS, Azure or Google Cloud, or stores them inside Kestra itself, so credentials need not sit in flow files or be pasted into task definitions.
- Plugin versioning
- Several versions of one plugin can run side by side, which lets teams upgrade a connector flow by flow instead of all at once, and roll one flow back without touching the others.
- AI Copilot and MCP
- The vendor names an AI Copilot, an agentic Copilot that accepts any LLM, AI agents and an MCP server with a tool trigger. Pages list these on the Open Source plan.
How Kestra handles your data
The privacy policy at kestra.io says data is kept as long as necessary and gives no retention period. It does not state whether customer data trains models, names no hosting region and mentions hosting providers and international transfers under European Commission standard contractual clauses. No certification is named in the policy, although the Cloud plan on the pricing page mentions SOC2 compliance. For the Open Source edition you control storage yourself. Ask the vendor in writing about AI Copilot processing before sending production metadata.
Where Kestra falls short in practice
- Open Source queue backends. The free edition runs its queue on PostgreSQL or MySQL only. Kafka, Redis and AMQP queues are Enterprise features, so very high throughput setups need a paid license.
- Prices are not printed. Enterprise is licensed per instance on an annual subscription and Cloud shows no numeric caps, so a finance team cannot model cost from the website alone.
- Support tiers carry the SLA. Enterprise support response targets are 24 hours, 6 hours or 1 hour for Standard, Premium and Platinum, so urgent coverage depends on the tier negotiated.
Works with
Alternatives to Kestra
Kestra: common questions
Is Kestra Open Source really free for production use?
The vendor lists Open Source at 0 USD in its structured data and describes it as self-hosted. You run the infrastructure yourself, and enterprise features such as SSO and audit logs are not included. The pages we read did not set a usage cap, but check the license text for your case.
What does Kestra Enterprise add over Open Source?
The pricing page lists enterprise plugins, SSO, LDAP, SCIM, RBAC, audit logs, a secrets manager, worker groups, multi-tenancy and Kafka, Redis or AMQP queues, plus Standard Support. It is sold per instance on an annual subscription, and the price is available only through sales.
Which AI features does Kestra name?
The vendor names an AI Copilot built on Gemini, an agentic Copilot that works with any LLM, AI agents, an MCP server for agents and a tool trigger. We did not run them, so output quality and which model processes your flows should be tested during a trial, ideally on a non-sensitive project first.
Can Kestra pause a workflow for a human decision?
Yes. Human-in-the-loop approvals pause an execution until someone approves it, and the approval step can collect custom inputs. That suits release sign-offs, data corrections and spend approvals where a person must confirm before the next task starts. Whether approvers need a Kestra login is not described on the pages opened.
What do the Enterprise support tiers promise?
Support is split into Standard, Premium and Platinum, with response targets of 24 hours, 6 hours and 1 hour respectively. The tiers are part of the Enterprise Edition. The pages do not say what the tiers cost, so ask sales for a quote alongside the license.