Virtual Appliance

Download Kevala

Deploy in minutes with our pre-configured virtual appliance. Import, power on, and start your compliance journey.

Free Community Edition

Self-hosted GRC for small teams. Risk register, compliance dashboard, asset management with CIA ratings, and a 30-day audit log, running entirely on your own infrastructure.

Up to 2 users · 2 compliance frameworks · 25 risks & 25 assets
Risk register, heat maps, and compliance reports
Pre-built virtual appliance, deploy in minutes

Register to Download See full pricing →

Business email required · Need Professional or Enterprise? Contact sales

Up and Running in 3 Steps

No complex installation. No dependency management. Just import and go.

1. Register

Complete the registration form with your business email to receive download links.

2. Import

Import the virtual appliance into VMware, VirtualBox, Proxmox, or your preferred hypervisor.

3. Access

Power on the VM, note the IP address shown on console, and access the web interface.

Register to Download

Complete the form below to receive your download link via email. We require a business email address to access the Community Edition.

Full Name *

Please enter your full name.

Business Email *

Please enter a valid business email address.

Personal email domains (Gmail, Yahoo, Hotmail, etc.) are not accepted.

Company Name *

Please enter your company name.

Job Title *

Please enter your job title.

I'd like a Kevala specialist to call me about the platform

Your information is secure and will not be shared with third parties.

Download Format

OVA

VMware, VirtualBox, Proxmox, KVM

~6.6 GB

Verify Your Download

After downloading, verify the file integrity using the SHA256 checksums included in your email.

Learn how to verify

Quick Start Guide

From downloaded OVA to running Kevala in under 10 minutes.

1

Import the OVA

Open your hypervisor and import kevala-grc.ova:

VirtualBox

File → Import Appliance → select OVA → Import

VMware Workstation / Fusion

File → Open → select OVA → accept license

VMware ESXi / vSphere

Deploy OVF Template → upload OVA → deploy

Proxmox VE

Extract OVA, then qm importovf <vmid> kevala-grc.ovf local-lvm

2

Set Network Adapter to Bridged

Before first boot, open the VM's Network settings and change the adapter from NAT to Bridged Adapter. This gives the VM an IP on your local network so you can reach it from your browser.

3

Power On and Find the IP

Start the VM. Boot takes about 30–60 seconds. At the login prompt, log in to the console and check the IP:

kevala-grc login: kevala
Password: kevala
$ ip -4 addr show | grep inet
inet 192.168.1.100/24 ...

In VirtualBox you can also see the IP in the VM's network details panel.

4

Open Kevala in Your Browser

Navigate to the VM's IP using HTTPS:

                                    https://192.168.1.100 (replace with your VM's IP)
                                

Kevala uses a self-signed certificate on first boot, so your browser will show a security warning. Click Advanced → Proceed anyway to continue.

5

Log In and Change the Password

Sign in with the default credentials and change the password immediately from the profile menu.

Web (admin)

Username: admin
Password: admin

Console / SSH

Username: kevala
Password: kevala

Change both passwords before deploying outside your test environment.

Virtual Machine Requirements

System Requirements

vCPUs8 cores
RAM16 GB
Disk100 GB SSD
Network1 NIC (bridged)
HypervisorVMware ESXi / VirtualBox / KVM / Proxmox

Supported Platforms

Tested and verified on all major virtualization platforms.

VMware ESXi

6.7+

VMware Workstation

15+

VirtualBox

6.0+

Proxmox VE

7.0+

KVM/QEMU

4.0+

What's Included in the Appliance

Pre-Configured

Hardened Linux OS (LTS)
Kevala GRC application
Compliance frameworks pre-loaded
Control mapping engine
Self-hosted AI assistant
Auto-start on boot

Security Hardened

Minimal attack surface
Automatic security updates
UFW firewall (HTTPS + SSH only)
Kernel hardening & auditd
Enforced password complexity
Isolated application user