Kastra runs where your workloads run. Managed cloud, single-tenant VPC, self-hosted Kubernetes, or fully air-gapped — one policy plane across every environment.