Kestryl helps organizations discover personally identifiable information (PII) and sensitive data, review detection findings, and generate reports in their AWS environment. Start with an AWS Marketplace free trial; AWS infrastructure charges apply separately.
Kestryl by Pacific Data Integrators helps organizations discover personally identifiable information (PII) and sensitive data, review detection findings, and generate reports to support privacy, security, and data governance initiatives.
Kestryl is designed for customer-controlled deployment in AWS. The solution helps teams identify sensitive information, review discovery results, and generate evidence-ready HTML/CSV reports. A sample dataset may be included for onboarding and validation, while the commercial product is positioned as the paid Kestryl offering available through AWS Marketplace.
AWS Marketplace Free Trial
This commercial AWS Marketplace offer supports an AWS Marketplace software free trial. During the trial period, eligible software charges are waived for the trial instance. AWS infrastructure charges, including EC2, storage, networking, and data transfer, apply separately. After the trial period ends, published paid software pricing applies.
Deployment
Kestryl runs as an Amazon EC2 AMI in the customer AWS account. Buyers are responsible for configuring approved network access, EC2 key pairs, security groups, and required AWS infrastructure.
Discover PII and sensitive data in your AWS environment using customer-controlled deployment and read-only discovery workflows.
Review detection findings, sensitive data categories, and evidence-ready HTML/CSV reports to support privacy, security, and data governance.
Start with an AWS Marketplace software free trial. AWS infrastructure charges apply separately, and paid software pricing applies after the trial period.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
This listing is free to use and runs on a single t3.large instance, billed by the hour. You pay only for the hourly compute time while the software is deployed, with no license fee from the vendor. There is one dimension, so pricing does not scale across tiers or instance sizes here. Your total cost depends on how many hours the instance runs. Deployments are sized during scoping, and production environments may use multiple processing threads, but the Marketplace pricing covers this single instance type only.
Top-of-mind questions for buyers
What resources do I get on the single t3.large instance, and am I charged when it is stopped?
The software deploys on one t3.large instance, billed per hour it runs. Hourly software charges accrue only while the instance is running. A fully stopped instance stops software charges, though underlying AWS storage fees may still apply for retained volumes.
The product is listed as free, so what am I actually paying for by the hour?
The vendor charges no license fee, so the software itself is free. You pay only the hourly compute cost of running the t3.large instance while deployed. Your total depends on how many hours the instance stays running.
Does one t3.large instance handle large scans, or do I need more capacity?
Vendor benchmarks ran on a single processing thread. Production deployments run many threads and are sized during scoping. Marketplace pricing covers only this one t3.large instance type, so added capacity falls outside this listing and is arranged during deployment planning.
www.pacificdataintegrators.com
Helpful?
Vendor refund policy
Kestryl is a paid AWS Marketplace AMI product with published hourly and annual software pricing.
A 14-day software trial may waive Kestryl software charges during the trial period; AWS infrastructure charges apply separately. After the trial, paid software charges apply under the published offer terms. Refund requests are reviewed case by case under AWS Marketplace terms and PDI policies.
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Commercial AWS Marketplace release of Kestryl for PII and sensitive data discovery in the customer AWS environment. Includes read-only discovery workflows, findings review, and HTML/CSV reporting. AWS Marketplace free trial is available under the published paid offer.
Additional details
Usage instructions
Kestryl - PII & Sensitive Data Discovery
Launch the Kestryl AMI in your AWS account using the supported t3.large EC2 instance type, an EC2 key pair, and a security group that permits SSH access on TCP port 22 only from trusted administrator IP ranges.
Confirm the instance is running and review the included Kestryl documentation on the instance.
Configure the Kestryl workflow according to the product documentation and your approved data discovery use case. Use least-privilege AWS permissions and do not store credentials in the AMI image.
Run the documented PII and sensitive data discovery workflow and review generated findings and reports.
Generated reports are available through the documented Kestryl reporting workflow. Do not include secrets, credentials, or raw sensitive personal data in support requests.
AWS infrastructure charges, including EC2, storage, networking, and data transfer, apply separately from AWS Marketplace software charges, including during any software free trial.
Pacific Data Integrators provides Kestryl product support for installation, configuration, and troubleshooting. Contact us at https://pacificdataintegrators.com/contact-pdi or call 1-800-470-9687. Do not include credentials or raw sensitive data in support requests.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Kestryl Cockpit for Canada PIPEDA from Pacific Data Integrators (PDI) is a free, ready-to-run web console over the PIIScan engine for PII discovery and PIPEDA and provincial privacy laws reporting. The AMI ships with a certified synthetic Canada dataset preinstalled (dummy values only, no real personal data), so teams can run PII discovery scans and review findings within minutes of launch, with no setup of data sources required.
Kestryl Cockpit for India DPDP by Pacific Data Integrators helps organizations discover personally identifiable information (PII), review DPDP findings, and generate evidence-ready reports in their own AWS environment. Kestryl Cockpit runs as an EC2 AMI in the customer AWS account. AWS infrastructure charges apply separately.
Kestryl Cockpit for USA CCPA from Pacific Data Integrators (PDI) is a free, ready-to-run web console over the PIIScan engine for PII discovery and CCPA/CPRA and US state privacy laws reporting. The AMI ships with a certified synthetic USA dataset preinstalled (dummy values only, no real personal data), so teams can run PII discovery scans and review findings within minutes of launch, with no setup of data sources required.
Self-hosted discovery for sensitive fields across PostgreSQL, MySQL, MongoDB, Amazon S3, and files. Scan inside your AWS account or private network. Review evidence without sending source data to K&J.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.