Kali Linux's tech stack
What does Kali Linux use?
Kali Linux (kali.org) uses at least 12 tools we can see from public records, including Microsoft 365 for email and documents, Cloudflare for content delivery, SendGrid for email delivery and Let's Encrypt for security. Last checked .
- Industry
- IT Services
- Size
- 11–50 employees
- Based in
- New York, United States
- Company page
- Tools found
- 12
- Categories
- 7
- Layers
- 4 of 5
- Last checked
- Oct 2026
Kali Linux's stack, layer by layer
Each tool links to the other companies we've found using it. The label says what kind of public trace gave it away.
Edge & Hosting
1 tool, where the bytes are served from
CDN & Edge
Application
2 tools, what the product is built with
Frontend
Media & UI
Go-to-market
1 tool, how they find and keep customers
Marketing
Company Ops
8 tools, what the team runs on day to day
Email Delivery
Security & Compliance
Kali Linux tech stack FAQ
What tools does Kali Linux use?
As of October 2026, runsonwhat has found 12 tools at Kali Linux (kali.org) in public records. Edge & Hosting: Cloudflare. Application: Google Fonts and Astro. Company Ops: Microsoft 365, Google Workspace and SendGrid. Last checked October 20, 2026.
What email provider does Kali Linux use?
Kali Linux uses Microsoft 365 for email and office software, alongside Google Workspace, according to runsonwhat (October 2026). runsonwhat found Microsoft 365 through a DNS verification record for Microsoft 365. Microsoft 365 is used by 715,787 companies runsonwhat tracks.
Does Kali Linux use Google Fonts?
Yes. runsonwhat found Google Fonts at Kali Linux through Google Fonts code on kali.org. Google Fonts is a Media & UI tool used by 818,404 companies runsonwhat tracks.
How does runsonwhat know what Kali Linux uses?
runsonwhat reads public records only. Of the 12 tools at Kali Linux, 7 were found through DNS records, 3 through email records and 2 through code on kali.org. A tool is listed only when a direct record backs it up; DNS is rechecked weekly and kali.org about monthly.
We read public traces only: DNS and email records, certificate logs, website code and published subprocessor lists. A tool is listed when a direct record backs it up, and dropped when a recheck no longer finds it. Is this your company? See how to opt out.