Skip to content
SPECIFICTION
Get listed

Kali Linux

kali.org

Free plan Open source WindowsmacOSLinuxAndroidSelf-hosted
Visit kali.org
Spec score 8.8 #2 of 34 in Penetration Testing Software

What it is

Kali Linux is a Debian-based distribution for advanced penetration testing and security auditing. It includes tools and configurations for computer forensics, reverse engineering, vulnerability detection, and other information security work. Its listed tools include Aircrack-ng, Burp Suite, Hydra, John the Ripper, Metasploit Framework, Nmap, sqlmap, and Wireshark. Kali is intended for experienced penetration testers and security specialists; its documentation assumes Linux familiarity. It supports bare-metal installs, virtual machines, cloud, containers, ARM devices, USB or DVD live environments, and Windows Subsystem for Linux. A Live USB can run without changing the host operating system, and persistence volumes can be encrypted. Users can build custom ISO images with metapackages and live-build. Network services are disabled by default, Bluetooth is blocklisted, and packages and repositories are signed. Kali is free of charge, though its non-free section includes some tools that are not open source. It follows a rolling release model, with fresh official point-release images generated quarterly. Kali NetHunter is a free and open-source Android penetration testing platform with a Kali container, desktop experience, app, and app store.

Spec sheet

What it does
Kali Linux is a Debian-based operating system for penetration testing, security auditing, forensics, reverse engineering and vulnerability work.Read 14 Oct 2026 · kali.org
Purpose
Kali Linux is a Debian-based distribution for advanced penetration testing and security auditing.Read 5 Oct 2026 · kali.org
Audience
Kali is tailored to experienced penetration testers and security specialists, and its documentation assumes familiarity with Linux.Read 5 Oct 2026 · kali.org
Support
Official support covers Kali operating system and packaging issues, not penetration testing or tool usage support.Read 5 Oct 2026 · kali.org
License
Kali-specific infrastructure and integration code is released under GNU GPL v3, while individual packages can have separate licenses and some non-free packages exist.Read 14 Oct 2026 · kali.org
Founded
2013Read 28 Sep 2026 · kali.org
Android integration
Kali NetHunter provides Android and smartwatch variants, including an app, app store and desktop experience.Read 14 Oct 2026 · kali.org
API and SDK extensibility
Developer extensibility is centered on GitLab source repositories, live-build, package metapackages and image build scripts rather than a documented hosted SaaS API.Read 14 Oct 2026 · kali.org
ARM support
Official images and scripts support more than a dozen ARM devices, including Raspberry Pi, PineBook, ODROID and BeagleBone hardware.Read 14 Oct 2026 · kali.org
Company facts
LinkedIn lists OffSec as privately held, founded in 2006, headquartered in New York and employing 201–500 people.Read 14 Oct 2026 · linkedin.com
Company legal name
Crunchbase lists the maker’s legal name as OffSec Services Ltd., also known as Offensive Security.Read 14 Oct 2026 · crunchbase.com
Customization
Public live-build recipes allow users to create heavily customized Kali ISO images.Read 14 Oct 2026 · kali.org
Deployment integrations
Official distribution options cover bare metal, virtual machines, WSL, AWS, Azure, DigitalOcean, Linode, Docker, Podman, LXC/LXD and Vagrant.Read 14 Oct 2026 · kali.org
Free availability
The project states that Kali is completely free of charge and intended to remain free.Read 14 Oct 2026 · kali.org
Installation sizes
Documented installation sizes range from about 1.8 GB for the smallest configuration to 35 GB for the largest, with roughly 60 GB suggested for flexibility.Read 14 Oct 2026 · kali.org
Installer limitation
The standard installer requires amd64 hardware, bootable CD/DVD or USB media, network access assumptions and Secure Boot disabled because the kernel is unsigned.Read 14 Oct 2026 · kali.org
License details
Kali’s core software complies with the Debian Free Software Guidelines, while its non-free section includes some tools that are not open source.Read 5 Oct 2026 · kali.org
Limit: everyday desktop use
TrustRadius reviewers say Kali is difficult for beginners, has driver issues and is not well suited to use as a general daily operating system.Read 14 Oct 2026 · tr-web.stage.trustradius.com
Limit: fragmented documentation
A TrustRadius reviewer describes Kali documentation as fragmented because it is a collection of separate tools.Read 14 Oct 2026 · tr-web.stage.trustradius.com
Limit: hardware and drivers
G2 reviewers report Wi-Fi, Nvidia and other driver compatibility problems, especially after updates or on lower-end hardware.Read 14 Oct 2026 · g2.com
Limit: learning curve
G2 reviewers frequently describe Kali as overwhelming or difficult for beginners without Linux and cybersecurity knowledge.Read 14 Oct 2026 · g2.com
Live USB
Kali can boot from USB without modifying the host operating system, with optional persistent and encrypted storage.Read 14 Oct 2026 · kali.org
Metapackages
Metapackages let administrators install grouped tool sets such as core, headless, default desktop, ARM, NetHunter, forensics, wireless and exploitation collections.Read 14 Oct 2026 · kali.org
Mobile edition
Kali NetHunter is a free and open-source Android penetration testing platform with a Kali container, desktop experience, app, and app store.Read 5 Oct 2026 · kali.org
Named integrations
The site identifies VMware, VirtualBox, Hyper-V, QEMU, Docker, Podman, LXC/LXD, AWS, Azure, and Linode as supported environments or platforms.Read 5 Oct 2026 · kali.org
Notable news: 2026.1
The March 2026.1 release added a yearly theme refresh, BackTrack mode for Kali-Undercover and eight new tools.Read 14 Oct 2026 · kali.org
Notable news: 2026.2
The June 2026.2 release updated GNOME to 50 and KDE Plasma to 6.6, changed APT source format, reduced VM initrds and added faster boot behavior.Read 14 Oct 2026 · kali.org
Ownership
Crunchbase says OffSec was acquired by Leeds Equity Partners and records one private-equity funding round with two investors.Read 14 Oct 2026 · crunchbase.com
Package security
Kali packages are signed by individual developers and its repositories are signed as well.Read 5 Oct 2026 · kali.org
Portable use
Live USB boot can run Kali without touching the host operating system, and persistence volumes can be encrypted.Read 5 Oct 2026 · kali.org
Praise: community
G2 reviewers repeatedly cite strong community support, documentation and troubleshooting resources.Read 14 Oct 2026 · g2.com
Praise: tool breadth
G2 reviewers repeatedly praise the large preinstalled security-tool collection and the time saved during testing.Read 14 Oct 2026 · g2.com
Rating on Capterra
4.2 out of 5 from 5 reviews.Read 14 Oct 2026 · capterra.com
Rating on GetApp
4.2 out of 5 from 5 reviews.Read 14 Oct 2026 · getapp.com
Rating on Microsoft Store
4.5 out of 5 from 13 ratings.Read 14 Oct 2026 · marketplace.microsoft.com
Rating on Trustpilot
3.2 out of 5 from 2 reviews.Read 14 Oct 2026 · trustpilot.com
Rating on TrustRadius
7.3 out of 10 from 30 reviews.Read 14 Oct 2026 · tr-web.stage.trustradius.com
Release model
Kali is a rolling distribution and the site says fresh official point-release images are generated quarterly.Read 5 Oct 2026 · kali.org
Repository limits
The developers caution that adding untested repositories can break Kali and state that apt-add-repository, LaunchPad, and PPAs are unsupported.Read 5 Oct 2026 · kali.org
Secure defaults
Network services and Bluetooth are disabled or blocklisted by default through systemd controls.Read 14 Oct 2026 · kali.org
Security controls
Packages and repositories are signed with GPG, with signing performed by individual developers and the Kali team.Read 14 Oct 2026 · kali.org
Security work
It includes tools and configurations for computer forensics, reverse engineering, vulnerability detection, and other information security tasks.Read 5 Oct 2026 · kali.org
Self-hosting
Kali is distributed as installable images and can be rebuilt locally with Debian live-build scripts and public Git repositories.Read 14 Oct 2026 · kali.org
Supported environments
Official materials list bare-metal installs, virtual machines, cloud, containers, ARM devices, USB/DVD live environments, and Windows Subsystem for Linux.Read 5 Oct 2026 · kali.org
System requirements
A headless SSH installation can use 128 MB RAM and 2 GB disk, while the default Xfce desktop target is at least 2 GB RAM and 20 GB disk.Read 14 Oct 2026 · kali.org
Target users
Kali is designed primarily for experienced penetration testers and security specialists.Read 14 Oct 2026 · kali.org
Tool collection
The distribution includes several hundred security tools, configurations and scripts.Read 14 Oct 2026 · kali.org
Tool documentation
Tool guidance combines local man pages and help output with Kali tool pages that include descriptions, use cases and upstream links.Read 14 Oct 2026 · kali.org
Tool selection
The official site lists tools including Aircrack-ng, Burp Suite, Hydra, John the Ripper, Metasploit Framework, Nmap, sqlmap, and Wireshark.Read 5 Oct 2026 · kali.org
Wireless testing
Kali uses an upstream Linux kernel patched for wireless injection.Read 14 Oct 2026 · kali.org

Plans and prices

Kali Linux Free No paid license required · freely downloadable Read 14 Oct 2026 · kali.org

Every Kali Linux plan and price →

Strong points and limits

Strong points

  • Free of charge and open source distribution
  • Supports live USB and encrypted persistence
  • Custom ISO images can be built
  • Network services disabled by default
  • Available across bare metal, VMs, cloud, and containers

Limits

  • Documentation assumes familiarity with Linux
  • Official support excludes penetration testing and tool usage
  • Adding untested repositories can break Kali
  • Some non-free section tools are not open source

Who it suits

Kali is for experienced penetration testers and security specialists who are comfortable with Linux. Its supported environments also suit practitioners who need live USB, virtualized, cloud, container, ARM, or Android-based use.

Kali Linux in depth

Read the full write-up

Kali Linux is a Debian-based operating system for penetration testing and security auditing. It is best suited to experienced practitioners who know their way around Linux and need a dedicated security environment. Its breadth of deployment and customization is compelling; its limited support scope makes it a poor choice for beginners looking for guidance in using testing tools.

Overview

Kali combines tools and configurations for computer forensics, reverse engineering, vulnerability detection and other information-security work. Its selection includes Aircrack-ng, Burp Suite, Hydra, John the Ripper, Metasploit Framework, Nmap, sqlmap and Wireshark. That range gives specialists a broad working toolkit, but choosing and using those tools still requires relevant expertise.

Kali follows a rolling release model, with fresh official point-release images generated quarterly. The core software complies with the Debian Free Software Guidelines, while the non-free section contains some tools that are not open source. Users with licensing requirements should account for that distinction.

Key features

Deployment and customization

Kali supports bare-metal installations, virtual machines, cloud, containers, ARM devices, live USB/DVD environments and Windows Subsystem for Linux. Named platforms and environments include VMware, VirtualBox, Hyper-V, QEMU, Docker, Podman, LXC/LXD, AWS, Azure and Linode. That flexibility lets experienced users fit Kali to different testing setups rather than committing to one installation style.

Custom ISO images can be built with metapackages and live-build, and Kali’s build scripts are public. A live USB can run the system without touching the host operating system; encrypted persistence volumes allow changes to carry over between sessions. These options are useful for portable or tailored workflows, though they suit users comfortable managing Linux images and storage.

Security and maintenance

Network services are disabled by default, and Bluetooth is blocklisted by default. Packages are signed by individual developers and the repositories are signed as well. Kali is rolling, so it is geared toward users who want ongoing updates rather than a fixed release cadence; official point-release images are generated quarterly.

Adding untested repositories can break the system. Kali’s developers specifically do not support apt-add-repository, LaunchPad or PPAs, so users who need arbitrary external package sources should be prepared to manage that risk themselves.

Mobile edition

Kali NetHunter is a free, open-source Android penetration-testing platform that includes a Kali container, desktop experience, app and app store. It extends Kali’s reach to mobile devices, but remains a specialist security environment rather than a general Android recommendation.

Pricing

Kali Linux costs nothing. The free plan is a free-of-charge, open-source distribution, with no paid plan or free trial indicated. Its core software follows the Debian Free Software Guidelines, but some tools in the non-free section are not open source, so the distribution’s licensing is not uniform across every component.

Platforms

Kali supports Android, Linux, macOS, self-hosted deployments and Windows. Its deployment choices include local installs, virtual machines, cloud, containers, ARM devices, USB/DVD live environments and Windows Subsystem for Linux. This breadth is a practical advantage for security teams working across varied infrastructure; it does not mean every deployment is equally suited to every user.

Who it's for

Kali is designed for experienced penetration testers and security specialists. Its documentation assumes familiarity with Linux, and official support covers operating-system and packaging issues—not penetration testing or how to use the tools. It is therefore a strong fit for practitioners who can troubleshoot their environment and already understand the work, but a poor fit for newcomers seeking instruction or tool-use support.

Pros and cons

Pros: Broad tool selection spans forensics, reverse engineering, vulnerability detection and other security tasks, making Kali useful as a dedicated specialist toolkit.

Pros: Bare-metal, virtualized, cloud, container, ARM and live USB/DVD deployment options accommodate varied testing setups.

Pros: Custom ISO support, public build scripts and encrypted live persistence let experienced users tailor and carry their environments.

Pros: The distribution is free, and its default service and Bluetooth settings limit exposure from those sources.

Cons: Linux familiarity is assumed, while official support excludes penetration-testing and tool-use guidance; beginners should look elsewhere for instruction.

Cons: Untested repositories can break Kali, and apt-add-repository, LaunchPad and PPAs are unsupported, constraining users who rely on those sources.

Cons: Some tools in the non-free section are not open source, which may matter to users requiring open-source components throughout.

Alternatives

For a firewall and router rather than a penetration-testing distribution, consider pfSense: it has a free Community Edition and a Plus software plan, and offers a free trial.

Ubuntu Server is a better direction for a general Linux server environment: its free Ubuntu Pro Community plan covers up to 50 machines for active Ubuntu community members.

HPE Morpheus VM Essentials Software is an alternative for users seeking a hypervisor and VMware management software.

Nix is a free, open-source package manager for Linux, macOS, self-hosted systems and Windows, rather than a security-focused distribution.

postmarketOS is a free, open-source operating system for Android and Linux, with device support and stability that vary.

Raspberry Pi Imager is a free desktop imaging utility for Windows, macOS and Linux, not a penetration-testing operating system.

Rocky Linux is a free Linux option with a 10-year support lifecycle and community support for users who prioritize that lifecycle.

Solus is a free Linux operating system maintained by the independent Solus Project.

Browse Penetration Testing Software for more tools in this category, or compare other Operating Systems.

Verdict

Choose Kali if you are an experienced security practitioner who wants a free, adaptable environment with a broad collection of testing tools and deployment formats. Look elsewhere if you are learning penetration testing or need help using the tools: Kali’s Linux assumptions and operating-system-only support leave that need unmet.

Verdict

Kali provides a broad set of security tools and deployment choices for experienced users. Its documentation and support boundaries make it a poor fit for beginners seeking help with penetration-testing practice.

Where Specifiction places it

Alternatives to Kali LinuxAll alternatives →