Signed everything
Ed25519 signatures on packages, agents, probes and licences. Public keys are built into the code — no environment variable can add one.
Kllyroo is delivered as one signed offline package and runs as a Docker Compose stack on your own server. Installs, updates, licences and AI all work in fully air-gapped networks.
Kllyroo is on-premise monitoring software: you install the signed kllyroo-<version>.tar package with the kllyroo install CLI on a Linux server, upload an offline licence file bound to your Installation ID, and update with kllyroo update, which backs up first and rolls back automatically on failure. There is no SaaS edition.
Ed25519 signatures on packages, agents, probes and licences. Public keys are built into the code — no environment variable can add one.
All containers run as non-root, login rate limiting and lockout, SSRF guard, security headers and CSP.
LDAP / Active Directory, SAML and OIDC single sign-on, TOTP MFA and a policy to require MFA for super administrators.
Who did what, when and from where — across monitoring, settings and Kllyroo Access sessions.
Active–standby pair with failover. The standby shares the primary’s licence.
kllyroo backup and restore; move to new hardware without a new licence.
Kllyroo is developed by Kirshi Technologies & Consulting Pvt. Ltd., an ISO/IEC 27001 and ISO 9001 certified company. Tenant isolation is tested on every release: the latest run made 9,622 cross-tenant probes across 415 API routes with zero leaks.
Sizes measured on the current release. For larger estates, Kllyroo will review your plan — options include multiple installations and remote probes.
| Monitored servers | Kllyroo server | Notes |
|---|---|---|
| Up to 50 | 2 vCPU · 4 GB RAM · 40 GB SSD | Small offices, single sites, pilots |
| Up to 250 | 4 vCPU · 8 GB RAM · 150 GB SSD | ~124–177 GB disk for 250 servers + 100 APM services at 90 days retention |
| Above 250 | Sized with Kllyroo | Ask for a deployment review |
Linux with Docker Compose; x86-64 and ARM64 packages. Runs on bare metal, VMware, Hyper-V, Proxmox or a cloud VM you control.
Chrome and Edge 87+, Firefox 78+, Safari 14+.
Run on an IP with a self-signed certificate, or a domain with Let’s Encrypt. Change later with kllyroo set-domain.
Admin screens for availability, licensing, storage and access control.

Active–standby status, database copy and failover.

Validity, limits in use and included modules.

Hot, warm and cold tiers with retention you control.

Built-in and custom roles with permission areas.
No. Kllyroo installs, updates and runs offline. Only optional features such as Let’s Encrypt certificates, cloud monitoring, cloud AI providers, WhatsApp and voice alerts, Slack or Teams need internet.
No. The licence is checked on your server, agents only talk to your own portal, and the built-in AI runs on your server too.
You get reminders from 30 days before. After expiry there is a grace period (normally 14 days). After that the portal locks, but monitoring, alerts and notifications keep running and no data is lost. Upload a renewed licence to unlock immediately.
Yes. Kllyroo runs on any Linux server you control — in your data centre or on a VM in AWS, Azure, GCP or DigitalOcean. It is still self-hosted: you own the server and the data.
Yes. Ask for the arm64 package.
Get a guided walkthrough, sizing advice for your estate, and a licence quote. Kllyroo installs on your server in under an hour and runs fully offline.