Skip to main content

Know the blast radius
before you deploy.

Kairo is a Kubernetes change-intelligence engine — it compares a cluster snapshot with proposed manifests, runs a deterministic capacity simulation, and produces a machine-readable SAFE/REVIEW/BLOCK verdict. One dependency-light Go binary: CLI, REST API, and web dashboard.

Get StartedView on GitHub

A pre-production decision aid

Kairo models node allocatable CPU/memory/GPU capacity, existing bound Pod requests, and runs a greedy pod-fit simulation against your proposed change — flagging PVC shrinks, NetworkPolicy/CiliumNetworkPolicy changes, strict PodDisruptionBudget conflicts, and ResourceQuota pressure before you apply anything.

It's explicit about its own limits: Kairo is a decision aid, not a replacement for Kubernetes admission, the real scheduler, policy engines, or progressive delivery. The dependency-free YAML reader supports the common manifest subset and JSON; advanced YAML anchors/tags aren't supported in this release.

Deterministic capacity simulation

Node allocatable CPU, memory, and nvidia.com/gpu capacity modelling, plus existing bound Pod request accounting, against your proposed manifests.

Workload-aware modelling

Deployment, StatefulSet, DaemonSet, Pod, Job, and KubeVirt VirtualMachine request modelling, with greedy pod-fit simulation and unschedulable-replica reporting.

Blast-radius verdict

A blast-radius score, LOW/MEDIUM/HIGH level, and a SAFE/REVIEW/BLOCK verdict — machine-readable via the CLI's -json flag or the REST API.

Policy and quota change warnings

PVC shrink detection, NetworkPolicy/CiliumNetworkPolicy/CiliumClusterwideNetworkPolicy change warnings, strict PodDisruptionBudget detection, and ResourceQuota pressure checks.

CLI, REST API, and web UI

One Go binary serves all three — a polished zero-build web dashboard, a JSON REST API, and a CLI with clear exit codes (0 SAFE/REVIEW, 3 BLOCK).

Docker, CI, and remote deploy

A Docker image, health endpoint, GitHub Actions CI with unit/integration tests, and a remote systemd deploy + smoke script.

Small on purpose

Apache-2.0, one Go binary, no external dependencies for the simulation engine itself. Docker image, health endpoint, GitHub Actions CI, and unit/integration tests are all part of this release.

Read the architecture direction →
Apache 2.0 license

Need production support or SLAs?

Kairo's core is Apache-2.0 and free to run in personal, lab, and commercial production use at no charge. Zyvor Enterprise adds production support, SLAs, and additional products for teams that need them.

Contact sales@zyvor.dev