# Kestrel AI

> Kestrel AI builds AI agents for platform engineering. It automates incident response, cloud provisioning, CI/CD, security operations, and developer requests with deterministic workflows across Kubernetes, AWS, GCP, Azure, OCI, and 30+ integrations.

Kestrel combines three products: Workflows (event-driven automation pipelines built from plain English, a drag-and-drop canvas, the CLI, a Python SDK, or MCP), Incident Response (real-time detection and remediation of Kubernetes and cloud incidents), and the Cloud AI Copilot (natural-language answers about your infrastructure). It deploys via an open-source, read-only-by-default Kubernetes operator and supports fully self-hosted and air-gapped installations.

## Docs

- [Introduction](https://docs.usekestrel.ai/introduction): Overview of the Kestrel platform
- [Workflows quickstart](https://docs.usekestrel.ai/quickstart/workflows): Build and deploy your first workflow
- [CLI reference](https://docs.usekestrel.ai/workflows/cli): Manage the full workflow lifecycle from the terminal and CI/CD
- [MCP server](https://docs.usekestrel.ai/workflows/mcp): Let AI coding agents (Cursor, Claude, Codex) build and operate workflows via MCP tools
- [Python SDK](https://docs.usekestrel.ai/workflows/sdk): Typed workflows-as-code — every trigger, action, condition, and approval
- [Integration setup](https://docs.usekestrel.ai/workflows/custom-integrations): Connect Kubernetes, AWS, GitHub, Slack, and 30+ integrations
- [Create workflows](https://docs.usekestrel.ai/workflows/create-workflows): Workflow concepts, triggers, actions, and the full catalog
- [Incident response quickstart](https://docs.usekestrel.ai/quickstart/incident-response): Set up Kubernetes and cloud incident response
- [Copilot overview](https://docs.usekestrel.ai/copilot/overview): The Cloud AI Copilot
- [On-premise deployment](https://docs.usekestrel.ai/on-premise/overview): Self-hosted and air-gapped installation

## Product

- [Home](https://usekestrel.ai/): Product overview, pricing, security, and FAQ
- [Blog](https://usekestrel.ai/blog): Technical deep dives and product announcements
- [Changelog](https://usekestrel.ai/changelog): New features and platform updates
- [Status](https://status.usekestrel.ai/): Service status and uptime

## Guides

- [Build an Internal Developer Platform with Kestrel Workflows](https://usekestrel.ai/blog/internal-developer-platform): Turn Kestrel Workflows into a self-service internal developer platform — developers request infrastructure, databases, and deployments in plain English and governed, approval-gated workflows fulfill each request, with copy-paste prompts for Kubernetes, AWS, PlanetScale, and Vercel
- [How to Automate Datadog Operations with Kestrel Workflows](https://usekestrel.ai/blog/automate-datadog-operations): Automate all five domains of Datadog operations — incident response, monitor provisioning, developer requests, CI/CD, and security — with 15 copy-paste prompts that turn Datadog monitor transitions into governed, approval-gated workflows built from plain English
- [How to Automate PostHog Operations with Kestrel Workflows](https://usekestrel.ai/blog/automate-posthog-operations): Automate all five domains of PostHog operations — incident response, provisioning, developer requests, CI/CD, and security — with 15 copy-paste prompts that turn PostHog signals into governed, approval-gated workflows built from plain English
- [How to Automate Daytona Operations with Kestrel Workflows](https://usekestrel.ai/blog/automate-daytona-operations): Automate all five domains of Daytona operations — incident response, sandbox provisioning, developer requests, CI/CD, and security — with 15 copy-paste prompts that build governed, approval-gated workflows from plain English
- [How to Automate PlanetScale Operations with Kestrel Workflows](https://usekestrel.ai/blog/automate-planetscale-operations): Automate seven domains of PlanetScale operations — incident response, database provisioning, developer requests, CI/CD and schema migrations, security, backups, and branch lifecycle — with 22 copy-paste prompts that turn deploy-request, branch, and backup events into governed, approval-gated workflows built from plain English
- [How to Automate Nebius Operations with Kestrel Workflows](https://usekestrel.ai/blog/automate-nebius-operations): Automate all five domains of Nebius AI Cloud operations — incident response, GPU instance and node-group provisioning, developer requests, CI/CD, and security — with 15 copy-paste prompts that build governed, approval-gated workflows from plain English
- [How to Automate Supabase Operations with Kestrel Workflows](https://usekestrel.ai/blog/automate-supabase-operations): Automate seven domains of Supabase operations — incident response, database provisioning, developer requests, CI/CD and migrations, security, backups, and cost control — with 21 copy-paste prompts that turn project health, backup, replica, usage, and branch events into governed, approval-gated workflows built from plain English
- [How to Automate Fly.io Operations with Kestrel Workflows](https://usekestrel.ai/blog/automate-flyio-operations): Automate all five domains of Fly.io operations — incident response, machine provisioning, developer requests, CI/CD, and security — with 15 copy-paste prompts that build governed, approval-gated workflows from plain English
- [How to Automate Neon Operations with Kestrel Workflows](https://usekestrel.ai/blog/automate-neon-operations): Automate seven domains of Neon operations — incident response, database provisioning, developer requests, CI/CD, security, compute and cost control, and branch lifecycle — with 21 copy-paste prompts that turn branch, operation, compute, and usage events into governed, approval-gated workflows built from plain English
- [How to Automate Railway Operations with Kestrel Workflows](https://usekestrel.ai/blog/automate-railway-operations): Automate all five domains of Railway operations — incident response, resource provisioning, developer requests, CI/CD, and security — with 15 copy-paste prompts that build governed, approval-gated workflows from plain English
- [How to Automate ClickHouse Operations with Kestrel Workflows](https://usekestrel.ai/blog/automate-clickhouse-operations): Automate eight domains of ClickHouse Cloud operations — incident response, database provisioning, developer requests, CI/CD, security, cost control and scheduled autoscaling, ClickPipes ingestion, and backups — with 24 copy-paste prompts that turn error spikes, too-many-parts incidents, backup and ClickPipe failures, version changes, idle services, and spend thresholds into governed, approval-gated workflows built from plain English
- [How to Automate Cloudflare Operations with Kestrel Workflows](https://usekestrel.ai/blog/automate-cloudflare-operations): Automate seven domains of Cloudflare operations — incident response, edge provisioning, developer requests, CI/CD, security, traffic management and load balancing, and Zero Trust access — with 21 copy-paste prompts that turn security events, health check failures, Worker deployment failures, and SSL expirations into governed, approval-gated workflows built from plain English
- [How to Automate Terraform Operations with Kestrel Workflows](https://usekestrel.ai/blog/automate-terraform-operations): Automate seven domains of Terraform Cloud operations — incident response, infrastructure provisioning, developer requests, CI/CD, security, drift detection and remediation, and workspace lifecycle — with 21 copy-paste prompts that turn errored runs, plans awaiting confirmation, drift detections, and failed health assessments into governed, approval-gated workflows built from plain English
- [How to Automate ArgoCD Operations with Kestrel Workflows](https://usekestrel.ai/blog/automate-argocd-operations): Automate six domains of ArgoCD operations — incident response and rollbacks, application provisioning, developer requests, CI/CD and progressive delivery, security, and sync drift — with 18 copy-paste prompts that turn degraded apps, stuck syncs, bad deploys, and paused canaries into governed, approval-gated GitOps workflows built from plain English
- [How to Automate Pulumi Operations with Kestrel Workflows](https://usekestrel.ai/blog/automate-pulumi-operations): Automate seven domains of Pulumi Cloud operations — incident response, infrastructure provisioning, developer requests, CI/CD, security and policy, drift detection and remediation, and stack lifecycle — with 21 copy-paste prompts that turn failed updates, drift detections, CrossGuard policy violations, and deployment events into governed, approval-gated workflows built from plain English
- [How to Automate HashiCorp Vault Operations with Kestrel Workflows](https://usekestrel.ai/blog/automate-vault-operations): Automate six domains of HashiCorp Vault operations — seal-status incident response, secret rotation and lifecycle, developer requests, CI/CD secret fan-out, leak response and revocation, and policy governance — with 18 copy-paste prompts that turn seal transitions, stale secrets, new secret versions, and policy changes into governed, approval-gated workflows built from plain English (values redacted end to end)
- [How to Automate Infisical Operations with Kestrel Workflows](https://usekestrel.ai/blog/automate-infisical-operations): Automate six domains of Infisical operations — failed secret-sync incident response, secret change fan-out, developer requests, CI/CD and sync pipelines, access and identity governance, and change-management approvals — with 18 copy-paste prompts that turn sync failures, secret changes, approval requests, and new machine identities into governed, approval-gated workflows built from plain English
- [The 7 Best Terraform Automation and Drift Detection Tools in 2026](https://usekestrel.ai/blog/best-terraform-automation-tools): Comparison of the 7 best Terraform automation and drift detection tools — Kestrel for the operations layer around any TACOS (drift-triggered investigation, previewed remediation behind approval gates, developer self-service), plus HCP Terraform, Spacelift, env0, Atlantis, Digger, and Firefly/driftctl
- [How to Automate Vercel Operations with Kestrel Workflows](https://usekestrel.ai/blog/automate-vercel-operations): Automate all five domains of Vercel operations — incident response, resource provisioning, developer requests, CI/CD, and security — with 15 copy-paste prompts that build governed, approval-gated workflows from plain English
- [How to Automate AWS Cloud Operations with Kestrel Workflows](https://usekestrel.ai/blog/automate-aws-cloud-operations): Automate all five domains of AWS cloud operations — incident response, resource provisioning, developer requests, CI/CD, and security — with 15 copy-paste prompts that build governed, approval-gated workflows from plain English
- [How to Automate Kubernetes Operations with Kestrel Workflows](https://usekestrel.ai/blog/automate-kubernetes-operations): Automate all five domains of Kubernetes operations — incident response, resource provisioning, developer requests, CI/CD, and security — with 15 copy-paste prompts that build governed, approval-gated workflows from plain English
- [The 8 Best Kubernetes Automation Tools in 2026](https://usekestrel.ai/blog/best-kubernetes-automation-tools): Comparison of the 8 best Kubernetes automation tools organized by the layer each one automates — Kestrel for the operations layer (incident response, developer self-service, day-2 runbooks with AI investigation and approval-gated remediation), plus Argo CD, Karpenter, KEDA, Kyverno, Argo Workflows, Ansible, and K8sGPT
- [The 5 Best Tools for Building an Internal Developer Platform](https://usekestrel.ai/blog/best-tools-for-building-an-internal-developer-platform): Comparison of the 5 best IDP tools in 2026 — Kestrel's AI workflow automation, Backstage, Port, Crossplane, and Kratix — what layer of the platform each solves and how to choose where to start
- [Top 6 Port Alternatives in 2026](https://usekestrel.ai/blog/port-alternatives): The best alternatives to Port (getport.io) — Kestrel for the self-service actions layer where requests execute as governed, approval-gated workflows, plus Backstage, Cortex, OpsLevel, Atlassian Compass, and Roadie for the catalog half — and how to decide which half of Port you actually need to replace
- [Top 6 Backstage Alternatives in 2026](https://usekestrel.ai/blog/backstage-alternatives): The best alternatives to Backstage — Kestrel for self-service and day-2 automation without a portal codebase to build, plus Port, Cortex, OpsLevel, Atlassian Compass, and managed-Backstage Roadie — with an honest accounting of Backstage's total cost of ownership
- [Top 6 Crossplane Alternatives in 2026](https://usekestrel.ai/blog/crossplane-alternatives): The best alternatives to Crossplane — Kestrel for the imperative, event-driven day-2 operations reconciliation loops can't express (requests, approvals, investigations), plus Terraform/OpenTofu, Pulumi, Kratix, Humanitec, and KRO — and when you actually need a control plane
- [Top 6 Humanitec Alternatives in 2026](https://usekestrel.ai/blog/humanitec-alternatives): The best alternatives to Humanitec's platform orchestrator — Kestrel for governed developer self-service live in days with no deployment-model migration, plus Port, Backstage, Crossplane, Kratix, and Qovery — sorted by how much of your stack each asks you to change
- [Top 6 Cortex Alternatives in 2026](https://usekestrel.ai/blog/cortex-alternatives): The best alternatives to Cortex — Kestrel for enforcing engineering standards with workflows that detect violations and execute gated remediation, plus OpsLevel, Port, Backstage, Atlassian Compass, and Roadie for scorecard-style measurement — and how to close the measure-fix gap
- [The 5 Best Platform Engineering Tools in 2026](https://usekestrel.ai/blog/best-platform-engineering-tools): The best platform engineering tool for each layer of the stack — Kestrel for workflow automation, Backstage for developer portals, Terraform/OpenTofu for infrastructure as code, Argo CD for GitOps delivery, and Humanitec for platform orchestration — and how to choose which layer to invest in first
- [The Best Platform Engineering Workflow Automation Tool for AI Agents](https://usekestrel.ai/blog/platform-engineering-automation-for-ai-agents): How AI agents in Cursor, Claude, and Codex build and operate Kestrel workflows through three interfaces — the CLI (brew install KestrelAI/tap/kestrel), the MCP server (kestrel mcp), and the typed Python SDK (pip install kestrel-workflows) — with scoped API keys and full docs at docs.usekestrel.ai
- [Best Tools for Building Platform Engineering Automations in Plain Language](https://usekestrel.ai/blog/building-platform-engineering-automations-in-plain-language): How plain-language builders differ — canvas assist vs. black-box runtime AI vs. generation-based workflows — and how Kestrel, n8n, Port, Workato, and Power Automate compare for infrastructure automation
- [The 10 Best Platform Engineering Workflow Automation Tools](https://usekestrel.ai/blog/best-platform-engineering-workflow-automation-tools): Purpose-built platform engineering automation (Kestrel, Cortex, Backstage, Humanitec) compared against general-purpose workflow tools (n8n, Zapier, Make, Workato, Power Automate, Temporal) — with the evaluation criteria that matter
- [The 10 Best DevOps Automation Tools in 2026](https://usekestrel.ai/blog/best-devops-automation-tools): The 10 best DevOps automation tools mapped to the lifecycle stage each automates — Kestrel for operational workflows, GitHub Actions and GitLab for CI/CD, Jenkins, Argo CD, Ansible, Terraform/OpenTofu, Datadog, PagerDuty, and Rundeck — with a comparison table and a bottleneck-first buying guide
- [Top 7 n8n Alternatives for DevOps in 2026](https://usekestrel.ai/blog/n8n-alternatives-for-devops): The best alternatives to n8n for DevOps and infrastructure automation — Kestrel for governed plain-English workflows with approval gates and audit trails, plus StackStorm, Rundeck, Windmill, Temporal, Argo Workflows, and GitHub Actions — and why production automation needs more than a node canvas
- [Top 7 StackStorm Alternatives in 2026](https://usekestrel.ai/blog/stackstorm-alternatives): The best alternatives to StackStorm's event-driven automation — Kestrel for the same trigger-rule-action model built from plain English with approval gates and no platform to run, plus Kestra, Windmill, Rundeck, n8n, Temporal, and Argo Workflows — and how to migrate by blast radius
- [Top 7 Rundeck Alternatives in 2026](https://usekestrel.ai/blog/rundeck-alternatives): The best alternatives to Rundeck and PagerDuty Process Automation — Kestrel for self-service operations as event-triggered, approval-gated workflows instead of scripts behind a web UI, plus StackStorm, Kestra, Windmill, Ansible AWX, GitHub Actions, and Temporal
- [Top 10 DevOps Workflows to Automate First](https://usekestrel.ai/blog/top-10-devops-workflows-to-automate): The 10 highest-payoff DevOps automations — failed-deploy rollback, CI failure triage, alert-driven RCA, PR preview environments, cert and secret rotation, time-boxed access grants, migration gating, scale events, post-incident timelines, and cost anomaly response — each with the plain-English prompt that builds it
- [Platform Engineering in the Age of AI](https://usekestrel.ai/blog/platform-engineering-in-the-age-of-ai): How AI reshapes the platform — natural-language self-service, AI agents as first-class platform users via MCP, the AI-builds/deterministic-runs trust model, and what platform engineers build now
- [Top 10 Agentic Workflows for Platform Engineering in Kestrel](https://usekestrel.ai/blog/top-10-agentic-workflows-platform-engineering): Ten production agentic workflows across developer requests, cloud provisioning, CI/CD, incident response, and security — with the exact plain-English prompt to build each one
- [Best AI Tools for Platform Engineering in 2026](https://usekestrel.ai/blog/best-ai-tools-platform-engineering): Comparison of end-to-end automation platforms, self-service AI teammates, IaC copilots, AI-native CI/CD, AI SRE agents, and cost optimization tools — with a decision framework for choosing between them
- [Platform Engineering Best Practices](https://usekestrel.ai/blog/platform-engineering-best-practices): 10 practices for 2026 — platform as a product, golden paths, self-service with guardrails, executable runbooks, automated incident response, and AI-built deterministic workflows
- [DevOps Automation Best Practices](https://usekestrel.ai/blog/devops-automation-best-practices): DevOps automation across the whole delivery loop — what to automate first, everything-as-code, deploys gated on evidence, cheap rollbacks, runbooks converted to workflows, automated investigation, self-service with guardrails, and reading DORA metrics as a set
- [How to Use AI Agents for Platform Engineering](https://usekestrel.ai/blog/ai-agents-for-platform-engineering): Six production-ready agent use cases, a crawl-walk-run adoption roadmap, and the guardrails checklist for running AI agents safely in production
- [How to Use AI Agents for DevOps](https://usekestrel.ai/blog/how-to-use-ai-agents-for-devops): The six DevOps jobs AI agents do well — CI failure diagnosis, deploy verification with gated rollback, alert triage and RCA, on-call Q&A in Slack, drift checks, and drafting automation from plain English — plus the per-workflow trust ladder (read-only → gated writes → full automation) and a 30-day rollout plan
- [AIOps vs AI Agents vs Workflow Automation](https://usekestrel.ai/blog/aiops-vs-ai-agents-vs-workflow-automation): How the three approaches differ — AIOps correlates alerts, AI agents reason at runtime, workflow automation executes deterministically — and how modern platforms combine them
- [The 8 Best AI SRE Tools in 2026](https://usekestrel.ai/blog/best-ai-sre-tools): Comparison of the 8 best AI SRE tools — Kestrel for AI investigation feeding deterministic, approval-gated remediation (and self-hosted/air-gapped deployment), plus Resolve.ai, Cleric, Traversal, Parity, Datadog Bits AI, incident.io, and PagerDuty AIOps — with a trust-ladder decision framework
- [Kubernetes Incident Response Best Practices](https://usekestrel.ai/blog/kubernetes-incident-response-best-practices): The 8 most common K8s incident types with diagnostic paths, a severity-based response process, and how to automate investigation and remediation
- [AWS Incident Response Best Practices](https://usekestrel.ai/blog/aws-incident-response-best-practices): The 8 most common AWS operational incident types, CloudTrail-driven investigation, multi-account response, and approval-gated remediation workflows

## Company

- [GitHub](https://github.com/KestrelAI): Open-source Kestrel operator and tooling
- [Privacy Policy](https://usekestrel.ai/privacy)
- [Terms of Service](https://usekestrel.ai/terms)