Infrastructure as Code brand directory

Spacelift is a multi-IaC orchestration and governance platform that replaces ad-hoc CI/CD pipelines and heavyweight enterprise IaC tools with a purpose-built workflow engine. It unifies Terraform, OpenTofu, Pulumi, Ansible, CloudFormation, Kubernetes, and Terragrunt runs under a single control plane with OPA-based policy enforcement, automated drift detection and remediation, PR-integrated plan previews, developer self-service Blueprints, and a comprehensive audit trail. An AI infrastructure assistant (Spacelift Intelligence) enables natural-language infrastructure requests and autonomous deployment for non-critical changes. The platform is available as managed SaaS, self-hosted, on-prem/air-gapped, and as a FedRAMP-authorized SaaS offering, with private workers ensuring execution stays within the customer's environment.

Pulumi is an open-source IaC platform and managed cloud service that lets engineering teams provision and manage cloud infrastructure using familiar programming languages. Its platform spans core IaC, secrets and environment management (Pulumi ESC), cloud asset search and policy enforcement (Pulumi Insights & Governance), AI-powered automation (Pulumi Neo), and internal developer platform tooling—all backed by Pulumi Cloud for state, collaboration, and compliance.

env0 is an enterprise IaC management and cloud governance platform that provides a multi-framework control plane for automating, governing, and scaling infrastructure workflows. It enables platform and DevOps teams to deliver developer self-service with built-in guardrails—combining GitOps automation, policy enforcement, drift management, cost governance, and AI-powered cloud asset visibility across all major IaC frameworks and cloud providers.

HashiCorp offers The Infrastructure Cloud — an integrated platform combining Infrastructure Lifecycle Management (Terraform, Packer, Nomad, Waypoint) and Security Lifecycle Management (Vault, Boundary, Consul) — enabling enterprises to provision, secure, and operate hybrid and multi-cloud infrastructure through declarative code, automated workflows, and policy enforcement. Available as SaaS (HashiCorp Cloud Platform / HCP), self-managed Terraform Enterprise, or open-source community editions.

Scalr is a purpose-built Terraform and OpenTofu management platform offering a remote operations backend, PR-native GitOps automation, hierarchical governance, and enterprise security controls. It is designed as a fully API- and CLI-compatible replacement for Terraform Cloud, targeting platform engineering teams who need to govern IaC workflows at scale while enabling developer self-service across isolated environments.

Terramate is a two-part platform: Terramate CLI, a free open-source orchestration and code-generation engine for Terraform, OpenTofu, and Terragrunt; and Terramate Cloud, a managed SaaS service adding observability, drift management, asset inventory, policy enforcement, and developer self-service to IaC workflows. The CLI introduces 'stacks' that partition IaC state files, while Git-based change detection ensures only modified stacks are executed in CI/CD, improving speed and reducing risk. Terramate Cloud extends this with dashboards, DORA metrics, incident management, and Slack integrations, all without requiring access to cloud accounts or state backends.

AWS CDK is Amazon Web Services' open-source, code-first infrastructure-as-code framework that lets developers define AWS resources using TypeScript, Python, Java, C#, Go, or JavaScript, then synthesizes and deploys them via AWS CloudFormation. Its construct library provides layered abstractions from raw CloudFormation resources up to full multi-service application patterns, enabling teams to encode best practices and share reusable infrastructure components across their organizations.

OpenTofu is a free, open-source Infrastructure as Code tool and Terraform fork, governed by the Linux Foundation, that enables teams to declaratively provision and manage cloud infrastructure across any provider using HCL. It offers drop-in Terraform compatibility while adding community-driven innovations such as native state encryption, provider for_each, and early variable evaluation—all under a permissive MPL 2.0 license.

Progress Chef is a policy-as-code infrastructure automation and compliance platform. It enables enterprises to define, deploy, and continuously enforce infrastructure configurations, security policies, and compliance standards as code across multi-cloud, on-premises, and hybrid environments. The Chef 360 platform unifies Chef Infra (configuration management), Chef InSpec (compliance scanning), Chef Habitat (application delivery), and Chef Courier (job orchestration) under a single control plane with both a UI-based ClickOps experience and a code-first workflow.

Puppet is a mature infrastructure automation platform built on a declarative, agent-based desired-state model. Its core differentiator is continuous, autonomous enforcement of infrastructure configuration—agents pull policy from a central server and self-correct drift without manual intervention. The platform is designed for large enterprise environments managing thousands of heterogeneous nodes across on-premises, multi-cloud, and edge infrastructure. Puppet Enterprise Advanced adds AI-assisted infrastructure querying, advanced security baseline automation, and event-driven workflows. A 7,500+ module Forge ecosystem accelerates deployment for common platforms and applications.

Red Hat Ansible Automation Platform is the enterprise-grade distribution of the open-source Ansible project, providing a unified platform for agentless configuration management, infrastructure provisioning, application deployment, network automation, security compliance, and event-driven IT operations across hybrid cloud, on-premises, and edge environments.

Crossplane is a CNCF Graduated open-source framework that turns a Kubernetes cluster into a universal control plane for provisioning and managing cloud infrastructure and applications. It allows platform teams to define custom declarative APIs—abstracting AWS, GCP, Azure, and other providers—so that developers can self-service infrastructure through familiar Kubernetes tooling and GitOps workflows, with automatic drift correction and policy enforcement built in.