Listing Thumbnail

    Kali Linux

     Info
    Sold by: Kali 
    Deployed on AWS
    AWS Free Tier
    Kali Linux is an open-source, multi-platform distribution, aimed at advanced Penetration Testing and Security Auditing. Kali Linux provides several hundred common tools and industry specific modifications, targeted towards various information security tasks, such as Penetration Testing, Security Research, Computer Forensics, Reverse Engineering, Vulnerability Management and Red Team Testing.

    Overview

    Kali Linux (formerly known as BackTrack Linux) is an open-source, Debian-based Linux distribution aimed at advanced Penetration Testing and Security Auditing. It does this by providing common tools, configurations, and automations which allows the user to focus on the task that needs to be completed, not the surrounding activity.

    Kali Linux contains industry specific modifications as well as several hundred tools targeted towards various Information Security tasks, such as Penetration Testing, Security Research, Computer Forensics, Reverse Engineering, Vulnerability Management and Red Team Testing.

    Kali Linux is a multi-platform solution, accessible and freely available to information security professionals and hobbyists.

    Highlights

    • Advanced penetration testing platform
    • Hundreds of security tools
    • Cloud-Init support for customized configuration

    Details

    Sold by

    Delivery method

    Delivery option
    64-bit (x86) Amazon Machine Image (AMI)

    Latest version

    Operating system
    OtherLinux 2025.3

    Deployed on AWS

    Unlock automation with AI agent solutions

    Fast-track AI initiatives with agents, tools, and solutions from AWS Partners.
    AI Agents

    Features and programs

    Buyer guide

    Gain valuable insights from real users who purchased this product, powered by PeerSpot.
    Buyer guide

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    This product is available free of charge. Free subscriptions have no end date and may be canceled any time.
    Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator  to estimate your infrastructure costs.
    If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier  for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier  for more details.

    Vendor refund policy

    This is a free product

    How can we make this page better?

    We'd like to hear your feedback and ideas on how to improve this page.
    We'd like to hear your feedback and ideas on how to improve this page.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    64-bit (x86) Amazon Machine Image (AMI)

    Amazon Machine Image (AMI)

    An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.

    Version release notes

    This listing is based on Kali Linux (2025.3 - rolling) AMD64

    Release: 2025-09-23 Changelog: https://www.kali.org/blog/kali-linux-2025-3-release/ 

    Credentials information: https://www.kali.org/docs/introduction/default-credentials/ 

    For more information about upgrading, please see: https://www.kali.org/docs/general-use/updating-kali/ 

    Additional details

    Usage instructions

    Once your instance is running, connect to it with your SSH private key using the "kali" account. For more information, please see: https://www.kali.org/docs/introduction/default-credentials/ 

    For more information about our AWS cloud image, please see: https://www.kali.org/docs/cloud/aws/ 

    If you are performing penetration testing, please refer to the AWS Testing Request for more information: https://aws.amazon.com/security/penetration-testing/ 

    Support

    Vendor support

    Kali's Community:

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Similar products

    Customer reviews

    Ratings and reviews

     Info
    3.4
    26 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    38%
    23%
    4%
    12%
    23%
    26 AWS reviews
    |
    16 external reviews
    Star ratings include only reviews from verified AWS customers. External reviews can also include a star rating, but star ratings from external reviews are not averaged in with the AWS customer star ratings.
    Ciyagi Ciyagi

    Runs efficiently across devices and streamlines penetration testing workflows

    Reviewed on Nov 13, 2025
    Review provided by PeerSpot

    What is our primary use case?

    I use Kali Linux  for penetration testing, network security, and application security, utilizing various tools available on the platform.

    The primary use case for Kali Linux  is to achieve anonymity, which allows me to maintain significant control over my security measures. My day-to-day use case involves penetration testing and application security.

    What is most valuable?

    Kali Linux offers excellent features including being lightweight with low memory usage, easy installation, portability, and multiple architectures such as ARM architecture and server architecture. I can easily install various tools on these architectures and even create my own tools.

    Kali Linux has positively impacted my organization because I can utilize various tools on the platform and create custom tools. The architecture is specific enough that I can run Kali Linux on my mobile device and install it on my tablet.

    What needs improvement?

    Kali Linux could be improved by including more tools.

    I would personally like to see improvements in Kali Linux, particularly regarding Grub issues that sometimes occur when installing the VM. Additionally, I have experienced problems when updating Kali Linux from a higher version to a lower version, which resulted in crashes. These Grub issues should be resolved.

    I face significant challenges with Kali Linux regarding a major issue with the Grub loader becoming corrupted, which makes it very difficult to recover data.

    For how long have I used the solution?

    I have been using Kali Linux for more than seven to eight years.

    What do I think about the stability of the solution?

    Kali Linux is stable based on my experience.

    What do I think about the scalability of the solution?

    I find Kali Linux very scalable.

    How are customer service and support?

    There is no customer support available for Kali Linux, so I have no comment on that aspect. However, I hope that customer support should be provided in the future, though I have never attempted to use it.

    How would you rate customer service and support?

    Negative

    Which solution did I use previously and why did I switch?

    I previously used Parrot  OS before switching to Kali Linux.

    How was the initial setup?

    I can easily install Kali Linux during the installation process.

    What was our ROI?

    I have seen a return on investment with Kali Linux, particularly in time-saving.

    Kali Linux is a time-saving and cost-saving solution.

    What's my experience with pricing, setup cost, and licensing?

    My experience with pricing, setup cost, and licensing for Kali Linux is straightforward because it is open source. I simply create a VM, so there are no costs involved.

    Which other solutions did I evaluate?

    Before choosing Kali Linux, I evaluated Parrot  OS.

    What other advice do I have?

    I would rate Kali Linux an eight out of ten.

    I chose this rating because the Grub issue should be resolved, and I would like to see more penetration testing tools added. Parrot OS has some excellent features for anonymity, and other current Linux distributions also have anonymity features that should be included in Kali Linux. My overall review rating for this product is eight out of ten.

    Arka Sarkar

    Penetration testing and vulnerability assessments have improved internal processes and client security

    Reviewed on Nov 10, 2025
    Review from a verified AWS customer

    What is our primary use case?

    I use Kali Linux  typically for different report generation based on customers and for queries related to customers. When I am troubleshooting in a live customer node, all of the customer nodes are based on the Linux environment. I need to troubleshoot different issues using basic commands and troubleshooting steps, which are all based on Kali Linux . All servers, virtual and metal servers, are based on Kali Linux only.

    Last month, penetration testing was conducted in our organization for security purposes. Due to some issues in the server at that time, we switched from other servers to Kali Linux, and those experiences were very seamless. Identifying vulnerabilities and fixing those in ASAP mode was a very prominent work performed using Kali Linux. The penetration testing was successful due to Kali Linux because it simulated attacks to find and fix vulnerabilities in our systems and networks before malicious actors could exploit them. In terms of penetration testing and security auditing, it helped us significantly.

    Kali Linux is used for security auditing purposes and vulnerability assessment purposes.

    What is most valuable?

    One of the most exciting features about Kali Linux is Wireshark , a network protocol analyzer for monitoring traffic, which is very important in my day-to-day work. We analyze TCP dumps to analyze network issues, port issues, and connectivity issues such as port open and close connections and different problems that may occur. Using Wireshark  for TCP dump analysis with Kali Linux is one of the best parts I can see.

    The pre-installed toolset is one of the important features of Kali Linux because it comes with around 500-550 penetration testing, security auditing, and digital forensic tools, which are very important to me.

    Kali Linux can run directly from a USB drive without installation, which is very ideal for forensic analysis as it prevents accidental data contamination in the host system. This is one important aspect of using Kali Linux.

    The vulnerability assessments and auditing capabilities are very strong using Kali Linux because built-in tools such as OpenVAS and Burp  Suite enable comprehensive network and application scanning. This helped our clients proactively assess and fix weaknesses. When a vulnerability comes in a particular ICP  version, that part is already being fixed in a specific version. The assessments and auditing part of vulnerabilities are one of the important features which helped our organization.

    My organization uses Kali Linux as the platform for internal and commercial cybersecurity training programs, such as different certifications. This created an additional revenue stream and ensures that teams have cutting edge skills.

    Financial benefits are evident because our organization used Kali Linux to simulate real-world attacks on clients' networks, web applications, and systems to identify vulnerabilities before malicious actors do. In some latest products, our organization made a profit around 213 SEK billion by fixing one vulnerability which could have caused significant damage to our system. This was prevented by using Kali Linux and penetration testing.

    Some of our work has already been automated using Kali Linux and some headcount has already been reduced. Though this is not ideal for employees, in terms of today's AI-related market, it reduced costs significantly and made a profit for the organization.

    What needs improvement?

    Kali Linux can increase its stability. As a rolling release distribution based on Debian  testing or unstable, Kali Linux can sometimes experience breakage during updates. More robust testing before pushing updates to the main repositories could help, or offering a more stable branch for users who prioritize reliability over the absolute latest tool versions would be beneficial.

    The distribution comes with over 400 penetration testing tools, many of which are never used by an average user. It could use an easier approach with more granular ways to install or remove tool groups or meta-packages.

    Kali Linux can optimize resource management. Although Kali Linux is designed to be lightweight, users often report performance issues, specifically when using virtual machines or on less powerful hardware. Improvements could be made in these areas. In our Ericsson environment, we use virtual machines only for live customer servers. Sometimes we experience different issues with performance degradation, especially in virtual machines. These areas can be improved.

    Trial packs for one or two months at a cheaper cost would be beneficial to switch from different providers to Kali Linux. This could be explored further.

    For how long have I used the solution?

    I have been using Kali Linux for about four years.

    What do I think about the stability of the solution?

    Kali Linux is stable, but it can increase its stability. As a rolling release distribution based on Debian  testing, Kali Linux can sometimes experience breakage during updates. This aspect can be improved.

    What do I think about the scalability of the solution?

    Scalability is absolutely fine with Kali Linux.

    How are customer service and support?

    Customer support is quite good for Kali Linux. They support within hours by solving the TTs.

    How would you rate customer service and support?

    Positive

    Which solution did I use previously and why did I switch?

    We used to try different solutions such as Linux Ubuntu  and Oracle Linux  before switching back.

    What other advice do I have?

    The vulnerability assessments and auditing capabilities are very strong using Kali Linux because built-in tools such as OpenVAS and Burp  Suite enable comprehensive network and application scanning. This has helped our clients proactively assess and fix weaknesses. When a vulnerability comes in a particular ICP  version, that part is already being fixed in a specific version. The assessments and auditing part of vulnerabilities are one of the important features which helped our organization. My organization uses Kali Linux as the platform for internal and commercial cybersecurity training programs, such as different certifications. This created an additional revenue stream and ensures that teams have cutting edge skills.

    Kali Linux can optimize resource management. Although Kali Linux is designed to be lightweight, users often report performance issues, specifically when using virtual machines or on less powerful hardware. Improvements could be made in these areas. In our Ericsson environment, we use virtual machines only for live customer servers. Sometimes we experience different issues with performance degradation, especially in virtual machines. These areas can be improved.

    Trial packs for one or two months at a cheaper cost would be beneficial to switch from different providers to Kali Linux. This could be explored further.

    I would recommend that organizations try Kali Linux for several months to understand the changes and then decide according to their organization's specifications and needs before starting to use Kali Linux and purchasing packages on the marketplace. This review has received an overall rating of 9.

    Mathews Daniel

    Has accelerated website vulnerability assessments and internal testing with built-in tools and cloud deployments

    Reviewed on Oct 27, 2025
    Review from a verified AWS customer

    What is our primary use case?

    My main use case for Kali Linux  is for security testing, checking websites, security, analyzing malware, and open-source intelligence gathering.

    I have WordPress websites, so I want to identify whether they are vulnerable or not. Kali Linux  has many inbuilt tools such as WPScan, which I can use readily and analyze whether a website is secure or not, and whether the code running on it is up-to-date or has vulnerabilities. I have used it for checking Wi-Fi security, identifying whether the SSIDs are vulnerable to brute-force attacks or any other cracking attempts.

    I have used Kali Linux for penetration testing, bypassing antivirus and gaining access to machines, virtual machines for testing. I have used Metasploit , which is in-built with Kali Linux, and I have utilized many Metasploit  exploits and modules to achieve this.

    What is most valuable?

    Kali Linux has every tool needed to get started in-built, and it comes along with the OS itself. All we need to do is a bit of update and some slight configuration, but everything else is in-built. It doesn't require extensive time configuring things. It's adopted and available everywhere, including cloud, AWS  or Azure , where you can readily deploy the images. It's based on Debian  Linux, which is one of the most user-friendly flavors of Linux, making it very easy to modify or create new modules.

    In my organization, Kali Linux has positively impacted my day-to-day job, where I perform proof of concepts mostly around endpoint security testing or web vulnerability testing. Kali Linux has helped me significantly in simulating penetration testing and other activities. I can pick an exploit from Metasploit or any other Exploit-DB using Kali Linux in-built features. It has saved me considerable time and effort, and since all the tools are open source, I can easily modify and customize them based on my needs.

    What needs improvement?

    Some tools in Kali Linux lack documentation and details on how to use them, which is one area where it can be improved. It's still advertised as a Linux distro used only for security testing, and many of the tools run as root by default or with the highest privileges. If something could be modified to make it more an everyday OS, activating the security testing part and all other modules on a need-to-activate basis would be very beneficial. Additionally, it could be optimized to suit some low-powered machines.

    The UI in Kali Linux could be improved. In the drop-down menus, it takes a while to load. Trimming down the graphics and other animations could focus more on the speed of opening things and menus.

    For how long have I used the solution?

    I have been using Kali Linux for 12 years.

    What do I think about the stability of the solution?

    Kali Linux is stable.

    What do I think about the scalability of the solution?

    Kali Linux is very scalable, and when deployed from the public cloud, it offers every feature available on public cloud scalability as.

    How are customer service and support?

    The customer support for Kali Linux is good. Since most of the tools and other things are community-based, the documentation and other community support are very good.

    How would you rate customer service and support?

    Neutral

    Which solution did I use previously and why did I switch?

    I previously used Parrot  Linux and BackBox  Linux, but these were not up to the mark for what we expected, so we switched to Kali Linux.

    How was the initial setup?

    I purchased Kali Linux through the AWS Marketplace . My experience with pricing, setup cost, and licensing for Kali Linux has been good. The pricing and the deployment, resource usage are all spot on and clearly defined, making it helpful and useful for me to deploy and calculate costs.

    What about the implementation team?

    I evaluated Parrot , BackBox  Linux, and some options Ubuntu  with custom tools before choosing Kali Linux. We felt Kali Linux was the most versatile solution.

    What was our ROI?

    Kali Linux has provided a very good return on investment. When we needed training for employees, we wanted 20 or 30 instances of Kali Linux. The availability on AWS Marketplace  was helpful for us to spin up the VMs and deploy them readily. Once the need was over, we removed the instances, saving costs. If we had installed it on-premises or through other means, it would have incurred significant money and effort to create the VMs, deploy it on machines, and then delete and format it after use. The fact that it was available on public cloud helped us achieve about an 85% return on investment.

    What's my experience with pricing, setup cost, and licensing?

    My experience with pricing, setup cost, and licensing for Kali Linux has been good. The pricing and the deployment, resource usage are all spot on and clearly defined, making it helpful and useful for me to deploy and calculate costs.

    What other advice do I have?

    I would advise others looking into using Kali Linux to start with the public cloud instances or marketplace deployment if possible, and to utilize the predefined templates and other options. I would advise going through the documentation since most things are documented. Additionally, use the persistent and other forensic modules that help securely delete data after use.

    Kali Linux is a very good project and distro that can be used for multiple applications, including security testing, penetration testing, or even basic learning of information security or IT security.

    I rate Kali Linux eight out of ten.

    Which deployment model are you using for this solution?

    Public Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Gaurav Pratap Singh

    Has improved penetration testing efficiency through pre-installed tools and supports faster secure deployments

    Reviewed on Sep 30, 2025
    Review provided by PeerSpot

    What is our primary use case?

    My main use case for Kali Linux  is primarily for testing and cybersecurity, specifically for doing penetration testing on applications and network applications that we utilize for network monitoring.

    A specific penetration test I performed using Kali Linux  was for the application related to DDI , which encompasses DNS, DHCP infrastructure, and network monitoring as well as authentication for Cisco ISE , during which I used tools such as Hydra, Nmap , Ncat, and Wireshark  to capture and analyze network packets.

    Kali Linux fits into my team because I mainly work with network tools and focus primarily on DNS; it plays a crucial role in penetration testing and ensuring that my applications are secure against attacks through various cybersecurity criteria.

    What is most valuable?

    The best features Kali Linux offers include its Debian-based architecture and being open source, which is important for many reasons, such as allowing for live USB boot and custom ISOs, making penetration testing simpler with comprehensive pre-installed toolsets such as Nmap , useful for vulnerability scanning.

    The live USB and custom ISO options help me specifically as they allow for quick access to a wide selection of pre-installed security tools, saving me time on installations and configurations through live USB boot functionality, which lets me get up and running quickly.

    The integration of cloud and containers within Kali Linux is something I wish more people knew about, as it allows for utilizing containerized versions that provide scalability and eliminate the need for a virtual machine setup.

    Kali Linux has positively impacted my organization by improving efficiency in penetration testing; its open-source nature permits extensive customization and inclusion of numerous comprehensive pre-installed tools, contributing to a secure network environment with effective monitoring of network applications.

    The outcomes from using Kali Linux in our organization are significant; we experienced reduced cybersecurity attacks and improved application security, leading to decreased attack surfaces and quicker testing cycles that enabled faster launches and installations.

    What needs improvement?

    There are areas for improvement in Kali Linux, particularly regarding its use of the Linux kernel, which requires external additional patching, and the fact that network services are disabled by default, which complicates usage; enhancing user-friendliness through more GUI-based tools and better integration could be beneficial.

    While Kali Linux is open source, it lacks vendor support, and I believe that improving documentation and community engagement is essential, making it more user-friendly and encouraging the use of GUI tools can significantly enhance the overall experience.

    For how long have I used the solution?

    I have been using Kali Linux for around five years, starting in 2018 or 2019, and I continue to use it until 2024, with plans to keep using Kali Linux starting in January 2025.

    Which solution did I use previously and why did I switch?

    Before switching to Kali Linux, we used Fedora for penetration testing. The decision to move to Kali Linux was influenced by its open-source nature, which reduced costs while facilitating easier automation with DevOps tools.

    What was our ROI?

    Integrating Kali Linux with DevOps tools has resulted in reduced operational costs due to automated test cases, making it a worthwhile investment with significant returns by decreasing the attack surface area and the frequency of attack incidents.

    What's my experience with pricing, setup cost, and licensing?

    My experience with pricing, setup costs, and licensing for Kali Linux has been positive, as it operates under an open-source model with setup costs primarily related to hardware and virtual machines, eliminating the need for vendor-specific licenses.

    Which other solutions did I evaluate?

    We evaluated alternatives to Kali Linux, including Parrot  OS, BlackArch, BackBox , and the Network Security Toolkit (NST), but Kali Linux was chosen for its stability, open-source nature, and strong community support.

    What other advice do I have?

    Kali Linux's scalability is commendable; it allows for easy expansion through containerized versions and custom ISOs, although support is primarily dependent on the community rather than vendor assistance.

    My advice for others looking into using Kali Linux is to ensure they have a strong foundation in Linux knowledge and are familiar with the various toolsets available within Kali Linux so that they can select the right tools for their specific needs.

    I believe Kali Linux is a valuable open-source tool with great potential for growth through community involvement, and continuous development can enhance its position as a leading solution for penetration testing.

    On a scale of one to ten, I rate Kali Linux an eight out of ten.

    Aditya Pillai

    Has helped me learn penetration testing through hands-on tasks and faster workflows

    Reviewed on Sep 27, 2025
    Review provided by PeerSpot

    What is our primary use case?

    I mainly use Kali Linux  for educational purposes, such as learning pen testing and Linux fundamentals.

    I have been using Kali Linux  for the TryHackMe section and applying that learning into different automated scenarios of pen testing that are available on the TryHackMe website.

    I haven't used Kali Linux for my organization, only for my learning purposes.

    What is most valuable?

    Since Kali Linux is a security-focused Linux distro, that would be its main advantage compared to Ubuntu  or Arch Linux.

    The overall focus on security in Kali Linux is what I find most useful.

    TryHackMe has an inbuilt Linux distro for doing the assigned tasks, but sometimes network issues may arise or lag may occur. I use Kali Linux because it is fast and there are no hindrances. It provides quick results and helps me gain a deeper understanding of how something works.

    What needs improvement?

    It would be helpful if Kali Linux could be involved in more systems or laptops. Windows is a standard for many laptops and comes pre-installed on many devices available in the market. If Kali Linux could do the same and increase their reach to better areas, it would be beneficial.

    They could improve Kali Linux's UI/UX. They have been following a standard UI/UX. They could add more options, similar to how CachyOS distro of Arch Linux has many different UI options to select from. Making Kali Linux more customizable would allow users to personalize it to their style.

    Many users utilize Kali Linux through virtual machines. Sometimes Kali Linux has issues detecting hardware such as inbuilt or external Wi-Fi adapters. Improving device detection would be beneficial.

    For how long have I used the solution?

    I have been using Kali Linux for a couple of years.

    What do I think about the stability of the solution?

    Kali Linux is pretty stable.

    What do I think about the scalability of the solution?

    With enough resources, Kali Linux can handle enough tasks.

    Which solution did I use previously and why did I switch?

    I used Ubuntu  before. I wasn't aware of Kali Linux when I first started. I was using Ubuntu for learning about cybersecurity and pen testing. Then I discovered Kali Linux.

    I compared Ubuntu and Kali Linux, as there weren't many security-focused Linux distros available.

    How was the initial setup?

    Kali Linux is free software, an operating system that's available to download without any cost or licensing fees.

    What was our ROI?

    Kali Linux has helped me learn faster and understand concepts better. You get a sense of appreciation when completing tasks on your own machine without help or hints from available tools or operating systems, with minimal guidance.

    I have saved time by avoiding the lag I sometimes face on the TryHackMe in-built machine, and I have learned more efficiently.

    What's my experience with pricing, setup cost, and licensing?

    Kali Linux is free software, an operating system that's available to download without any cost or licensing fees.

    What other advice do I have?

    Other than increasing my knowledge of the Linux distro, Kali Linux has helped me in automated scenarios and increased my knowledge in cybersecurity pen testing. I am still learning.

    I would recommend starting with Ubuntu, learning basic Linux commands and Linux-related knowledge, including Debian . Then make the switch to Kali Linux when ready, starting with small tasks before moving on to bigger things.

    On a scale of 1-10, I rate Kali Linux an 8.

    View all reviews