Australia verdict (TL;DR)
Verified 2026-05-24Australian IaC adoption is shaped by AWS Sydney and Melbourne, Azure Australia East and Australia Central (Canberra sovereign), and GCP Sydney and Melbourne regions. Terraform (HashiCorp, now IBM-owned) is the default at Australian enterprise and SaaS. OpenTofu (the open-source Terraform fork) is gaining share at Australian organisations concerned about HashiCorp licensing changes. Pulumi runs at Atlassian (Sydney) and other code-first Australian engineering teams. AWS CDK is the default for AWS-anchored Australian deployments. APRA CPS 234 and CPS 230 drive IaC adoption at regulated entities for auditability and change-management. ASD Essential Eight and IRAP-assessed cloud apply to Australian Government workloads.
Picks for Australia
- Australian SaaS and enterprise standard IaC: terraform Default Australian IaC platform. Used at Atlassian, Canva, SafetyCulture, Telstra, CBA, and ASX 100 majors. AWS Sydney, Azure Australia East, GCP Sydney provider depth. Strong Australian Terraform partner ecosystem.
- Australian SaaS concerned about HashiCorp BSL licensing: opentofu Open-source Terraform fork governed by Linux Foundation. Strong fit for Australian organisations wanting to avoid HashiCorp BSL licensing complexity post-2023 change. Drop-in compatibility with existing Terraform code.
- Atlassian-tier Australian engineering team wanting code-first IaC: pulumi Used at Atlassian (Sydney). Code-first IaC in TypeScript, Python, Go, Java. Strong fit for Australian engineering teams wanting language-native IaC.
- AWS-anchored Australian SaaS or enterprise: aws-cdk Default for AWS-only Australian deployments. Strong AWS Sydney depth, native CloudFormation under the hood, language-native (TypeScript, Python, Java, C#, Go).
- Australian Kubernetes-native infrastructure team: crossplane Kubernetes-native cloud resource management. Strong fit for Australian platform-engineering teams running Kubernetes-anchored infrastructure. AWS Sydney EKS, Azure Australia East AKS, GCP Sydney GKE.
- Australian DevOps team wanting Terraform CI/CD orchestration: spacelift Spacelift orchestrates Terraform, OpenTofu, Pulumi runs with strong policy, approval, and drift detection. Used at Australian mid-market and enterprise DevOps teams.
How the infrastructure as code (iac) market looks in Australia
Australian IaC adoption is concentrated at SaaS scale-ups (Atlassian, Canva, SafetyCulture, Linktree, Octopus Deploy, Employment Hero, Deputy) and large enterprise (Telstra, CBA, Westpac, ANZ, NAB, Coles, Woolworths, REA Group, Macquarie, AMP). The dominant cloud anchors are AWS Sydney + Melbourne, Azure Australia East + Australia Central (Canberra sovereign), and GCP Sydney + Melbourne. Vault Cloud and Macquarie Government Cloud serve Australian Government PROTECTED workloads.
Terraform is the default Australian IaC platform across all segments. HashiCorp's 2023 change to Business Source License (BSL) raised concerns for some Australian enterprises and led to growing OpenTofu adoption; OpenTofu is the open-source Terraform fork governed by the Linux Foundation and is gaining share at Australian organisations concerned about HashiCorp licensing complexity, particularly post-IBM-acquisition (announced 2024, closed 2025).
Pulumi runs at Atlassian (Sydney) and is the textbook choice for Australian code-first engineering teams that prefer TypeScript, Python, Go, or Java over HCL. AWS CDK dominates AWS-anchored deployments. Crossplane is gaining share at Australian Kubernetes-native platform-engineering teams. Spacelift, env0, Scalr, and Atlantis orchestrate IaC pipelines with policy, approval, and drift detection. Terragrunt is the standard wrapper for multi-environment Terraform.
Compliance: APRA CPS 234 information security obligations drive IaC adoption at regulated entities for auditability, change-management, and infrastructure-state traceability. CPS 230 operational risk management from 1 July 2025 adds operational resilience and supplier risk requirements. ASD Essential Eight Maturity Level 2 or 3 for Australian Government workloads; ML2 increasingly required for non-government work too. IRAP-assessed cloud for PROTECTED (Vault Cloud, Macquarie Government Cloud, Azure Australia Central, AWS GovCloud Australia at PROTECTED). SOCI Act 2018 critical infrastructure obligations for 11 sectors.
APRA CPS 234 information security obligations effective since 1 July 2019 require APRA-regulated entities to maintain information security capability commensurate with the threats. IaC supports CPS 234 compliance via reproducible infrastructure provisioning, version-controlled change history, and auditable infrastructure state. CPS 230 operational risk management effective 1 July 2025 adds business continuity, supplier risk assessment, exit planning. IaC supports CPS 230 via reproducible disaster recovery configurations and documented infrastructure-as-code recovery procedures. ASD Essential Eight Maturity Level 2 is the typical Australian SaaS target; ML3 for Australian Government PROTECTED. The ACSC Information Security Manual (ISM) governs PROTECTED classification work. IRAP-assessed cloud required for PROTECTED workloads: Vault Cloud, Macquarie Government Cloud, Azure Australia Central (Canberra sovereign at PROTECTED), AWS GovCloud Australia. SOCI Act 2018 covers critical infrastructure (energy, water, telecommunications, healthcare, financial market infrastructure, food and grocery, defence, transport, higher education, data storage, space technology) with mandatory cyber-incident reporting via the Cyber and Infrastructure Security Centre. Privacy Act 1988 and APP for any personal information held in infrastructure state. Data residency: Terraform Cloud, Pulumi Cloud, Spacelift, env0, Scalr typically host US/EU; APP 8 disclosure applies. Self-hosted Terraform, OpenTofu, Pulumi, Crossplane on AWS Sydney or Azure Australia East deliver in-region operation.
Quick comparison, ranked for Australia
| Product | Best for | Starts at | 10-emp/mo* | Pricing | G2 | Geo |
|---|---|---|---|---|---|---|
| 1 Terraform | Any team doing multi-cloud IaC | $0 + $0/emp | $0 | 4.5 | Global | |
| 2 OpenTofu | Any team doing multi-cloud IaC and wanting MPL-2.0 | $0 + $0/emp | $0 | 4.6 | Global | |
| 3 Pulumi | Engineering-first platform teams | $0 + $0/emp | $0 | 4.5 | Global | |
| 5 AWS CDK | AWS-anchored engineering teams | $0 + $0/emp | $0 | 4.5 | Global; AWS regions | |
| 4 Crossplane | Kubernetes-anchored platform-engineering teams | $0 + $0/emp | $0 | 4.5 | Global | |
| 6 Spacelift | Platform-engineering teams wanting engine-agnostic IaC management | $0 + $0/emp | $0 | 4.7 | Global | |
| 7 env0 | Mid-market platform teams wanting Terraform Cloud alternative | $0 + $0/emp | $0 | 4.7 | Global | |
| 8 Scalr | Enterprise platform teams wanting founder-led IaC management | $0 + $0/emp | $0 | 4.5 | Global | |
| 9 Atlantis | Open-source-first DevOps teams | $0 + $0/emp | $0 | 4.5 | Global | |
| 10 Terragrunt | Platform-engineering teams managing multi-environment Terraform | $0 + $0/emp | $0 | 4.5 | Global |
*10-employee monthly cost = base fee + (per-employee × 10) using the lowest published tier. For opaque-pricing vendors, no value is shown.
What buyers in Australia actually pay
Median annual deal size by employee band, in AUD. Crowdsourced from anonymized buyer disclosures.
| Product | Employee band | Median annual (AUD) | Sample | Notes |
|---|---|---|---|---|
| Terraform | Terraform Cloud Plus, 10-50 engineers | A$36,000 | 56 | Terraform Cloud Plus tier; AUD via HashiCorp (now IBM) Australia |
| Terraform | Terraform Enterprise self-hosted | A$180,000 | 22 | Terraform Enterprise + AU professional services; AUD |
| OpenTofu | Self-hosted 10-100 engineers | A$0 | 41 | Open-source under Linux Foundation; infrastructure cost only |
| Pulumi | 10-50 engineers | A$60,000 | 38 | Pulumi Business Critical; AUD via reseller |
| AWS CDK | AWS-anchored Australian engineering | A$0 | 87 | No CDK licence; AWS Sydney infrastructure cost only |
| Spacelift | 10-50 engineers | A$48,000 | 22 | Spacelift Business; AUD via reseller |
| env0 | 10-50 engineers | A$36,000 | 14 | env0 Team; AUD |
| Crossplane | Self-hosted Australian Kubernetes | A$0 | 18 | Open-source; Upbound Cloud commercial available |
Australia-built or Australia-strong vendors worth knowing
Not yet ranked in our global top 10, but credible options for Australia buyers and worth a shortlist.
Atlassian Pulumi adoption
Visit ↗Sydney-based Atlassian uses Pulumi extensively for infrastructure-as-code. Significant Australian Pulumi reference customer; many Sydney engineering leaders are Atlassian alumni who carry Pulumi habits to subsequent startups.
Octopus Deploy
Visit ↗Brisbane-built deployment automation that integrates with Terraform, AWS CDK, Pulumi for infrastructure-and-application deployment. Strong Australian DevOps adoption.
Servian (Cognizant)
Visit ↗Sydney-based data and cloud consultancy with strong Australian Terraform, AWS CDK, and Azure Bicep implementation practice. Major Australian IaC delivery partner.
Mantel Group
Visit ↗Melbourne-based technology consultancy with growing Australian platform-engineering practice. Builds custom Terraform, Pulumi, Crossplane platforms for Australian SaaS and enterprise.
Global picks that don't fit here
- AtlantisAtlantis is excellent open-source CI for Terraform but operates differently from commercial IaC orchestration tools (Spacelift, env0). Australian buyers self-hosting Terraform should consider Atlantis as a free alternative.
- TerragruntTerragrunt is a wrapper for Terraform rather than a standalone IaC platform. Australian Terraform-anchored buyers should evaluate Terragrunt for multi-environment management; it does not directly compete with Spacelift or env0 in the orchestration category.
- ScalrScalr has limited Australian footprint. Australian buyers should evaluate Spacelift or env0 first for similar Terraform orchestration with stronger Australian presence.
All 10, ranked for Australia
Same intelligence as the global ranking, vendor trust, review patterns, verified pricing, compliance, reordered for the Australia market.
Terraform
De facto IaC default, now post-BSL and post-IBM.
Terraform is the IaC category creator, launched 2014 by HashiCorp. The product covers declarative multi-cloud provisioning via HCL (HashiCorp Configuration Language) and a 3,000+ provider ecosystem. Strengths: largest provider catalog in the category, broadest community knowledge, HCL declarative model is well-understood by 10+ years of practitioners, Terraform Cloud (now HCP Terraform) covers managed state, runs, and policy. Best fit for buyers wanting the conservative IaC default. Trade-offs: HashiCorp relicensed Terraform under the Business Source License (BSL) on August 10, 2023, sparking the OpenTofu fork; IBM closed its $6.4B acquisition of HashiCorp on February 27, 2025, and the post-IBM product strategy clarification is still pending into H2 2025; pricing for HCP Terraform climbed meaningfully in 2024-2025; and customer trust on license stability is materially lower than pre-BSL.
Enterprises and mid-market teams (50-50,000+ employees) wanting the conservative multi-cloud IaC default, particularly those with existing Terraform investments where switching cost outweighs BSL concerns and those buying HashiCorp via IBM enterprise procurement.
BSL-averse buyers (OpenTofu better), teams that prefer programming languages over HCL (Pulumi or AWS CDK better), Kubernetes-native platform teams (Crossplane better), or buyers concerned about post-IBM strategic direction.
Strengths
- Largest provider ecosystem (3,000+ providers)
- Broadest community knowledge and Stack Overflow corpus
- HCL declarative model well-understood after 10+ years
- HCP Terraform (managed state, runs, policy)
- Mature enterprise governance features (Sentinel policy)
- Native cloud-provider partnerships (AWS, Azure, GCP)
- Established migration paths from CloudFormation
Weaknesses
- BSL relicensing Aug 2023 sparked OpenTofu fork; license trust permanently damaged for some buyers
- IBM acquisition closed Feb 27, 2025 ($6.4B); post-IBM product strategy clarification still pending into H2 2025
- HCP Terraform pricing climbed meaningfully 2024-2025
- HCL learning curve for teams used to programming languages
- Drift detection without HCP Terraform is manual
Pricing tiers
public- Terraform CLI (BSL)Open-source under BSL since Aug 2023; production use restrictions for direct competitors$0+$0 /mo +/emp
- HCP Terraform FreeUp to 500 managed resources$0+$0 /mo +/emp
- HCP Terraform Standard$0.00014 per resource-hour; ~$1-$5 per managed resource/month$0+$0 /mo +/emp
- HCP Terraform PlusCustom; includes drift detection, RBAC, Sentinel; typical $50K-$500K/yearQuote
- Terraform Enterprise (self-hosted)Self-managed; $100K-$1M+/year typicalQuote
- · Per-resource-hour pricing scales with infrastructure growth
- · Sentinel policy engine in Plus tier only
- · BSL license review for procurement-sensitive buyers
- · Implementation services for Terraform Enterprise
Key features
- +HCL declarative IaC
- +3,000+ provider ecosystem
- +HCP Terraform managed state + runs
- +Sentinel policy-as-code
- +Drift detection (Plus tier)
- +Workspaces + run triggers
- +Private module registry
- +Terraform Cloud Agents (private network)
- +Cost estimation (Plus)
- +RBAC + SSO (Plus)
OpenTofu
MPL-2.0 community fork of Terraform under Linux Foundation governance.
OpenTofu is the community-driven fork of Terraform created in direct response to HashiCorp BSL relicensing in August 2023. The project sits under Linux Foundation governance and ships under MPL-2.0. The fork was announced September 5, 2023, the inaugural release shipped January 2024, and the project crossed 1.7M monthly downloads in early 2026. Strengths: MPL-2.0 open-source license (no BSL production-use restrictions), Linux Foundation governance with diverse contributor base (Spacelift, env0, Gruntwork, Harness, others), Terraform 1.5.x compatibility maintained, community-fork momentum continues 2024-2026, drop-in CLI compatibility for most Terraform workflows. Best fit for BSL-averse buyers. Trade-offs: ecosystem is younger than HashiCorp Terraform, no commercial entity owns OpenTofu (support comes from third-party platforms like Spacelift or env0), some advanced HashiCorp-only providers may lag, and procurement teams unfamiliar with foundation-governed software need education.
BSL-averse buyers, teams that view the August 2023 license switch as a permanent trust event, and modern platform-engineering teams wanting open-source-first IaC under foundation governance.
Buyers with existing HashiCorp enterprise contracts and unwilling to test fork compatibility, regulated buyers requiring single-vendor commercial support, or teams using advanced HashiCorp-only provider features.
Strengths
- MPL-2.0 open-source license (no BSL restrictions)
- Linux Foundation governance
- Diverse contributor base (Spacelift, env0, Gruntwork, Harness)
- Terraform 1.5.x compatibility maintained
- Drop-in CLI compatibility for most workflows
- Community-fork momentum continues 2024-2026
- 1.7M+ monthly downloads in early 2026
Weaknesses
- Ecosystem younger than HashiCorp Terraform
- No commercial entity owns OpenTofu (support via third parties)
- Some advanced HashiCorp-only providers may lag
- Procurement teams unfamiliar with foundation-governed software
- State migration from Terraform to OpenTofu still requires manual planning
Pricing tiers
public- OpenTofu CLIOpen-source MPL-2.0; free for any use including commercial$0+$0 /mo +/emp
- Commercial supportVia Spacelift, env0, Gruntwork, Scalr as third-party support contractsQuote
- · Third-party commercial support contracts if required
- · Migration planning from Terraform state
- · Provider compatibility testing for advanced HashiCorp-only features
Key features
- +HCL declarative IaC
- +Terraform 1.5.x compatibility
- +MPL-2.0 license
- +State encryption (1.7 release)
- +Provider ecosystem (largely Terraform-compatible)
- +Module compatibility with Terraform
- +No vendor lock-in by design
Pulumi
Programming-language IaC for engineering-first teams.
Pulumi is the programming-language IaC platform, founded 2017 by ex-Microsoft engineers (Joe Duffy and team). The product lets teams provision infrastructure using real languages (TypeScript, Python, Go, C#, Java) instead of HCL. Pulumi raised a $37.5M Series B in October 2021 and the ESC product (environments, secrets, configurations) launched in 2023. Strengths: real programming languages instead of HCL (loops, conditionals, abstractions feel natural), strong typing and IDE support, ESC product covers environments + secrets + configurations as a managed layer, multi-language SDK with broad cloud coverage. Best fit for engineering-first teams that already think in TypeScript or Python. Trade-offs: smaller ecosystem than Terraform (provider count meaningfully lower), some customer reports of free-tier limits triggering surprise paywalls in 2024, programming-language IaC has a different mental model that not every ops team adopts, and Pulumi Cloud pricing scales per-resource similar to HCP Terraform.
Engineering-first teams that think in TypeScript, Python, or Go and want loops, conditionals, and abstractions natively, particularly startups and mid-market platform teams (10-2,000 employees).
Teams with deep HCL muscle memory unwilling to retrain, ops teams that prefer declarative over imperative reasoning, or buyers wanting the largest possible provider ecosystem (Terraform / OpenTofu broader).
Strengths
- Real programming languages (TypeScript, Python, Go, C#, Java)
- Strong typing and IDE support out of the box
- ESC product (environments + secrets + configurations) shipped 2023
- Multi-language SDK with broad cloud coverage
- Natural fit for engineering-first teams
- Active product velocity post-Series B
Weaknesses
- Smaller ecosystem than Terraform (provider count lower)
- Customer reports of free-tier limits triggering surprise paywalls in 2024
- Programming-language IaC mental model not for every ops team
- Pulumi Cloud pricing scales per-resource (similar to HCP Terraform)
- HCL muscle memory hard to break for teams switching from Terraform
Pricing tiers
public- IndividualFree; up to 200 resources/month$0+$0 /mo +/emp
- TeamPer user; 5K resources/month included$50 /mo
- EnterpriseCustom; SSO, audit, RBAC; typical $30K-$300K/yearQuote
- Business CriticalCustom; self-hosted Pulumi Cloud; typical $150K-$1M/yearQuote
- · Per-resource overages on Team plan
- · ESC pricing layered on top
- · Customer reports of free-tier paywall surprises in 2024
Key features
- +Programming-language IaC (TypeScript, Python, Go, C#, Java)
- +Pulumi Cloud managed state
- +Pulumi ESC (environments, secrets, configs)
- +Crosswalk modules for AWS / Azure / GCP
- +Policy as code (CrossGuard)
- +Cloud-engineering platform positioning
- +Strong typing and IDE support
- +Multi-cloud SDK
AWS CDK
Programming-language IaC for AWS-anchored teams.
AWS CDK (Cloud Development Kit) is the AWS programming-language IaC framework, generally available since July 2019. The product compiles TypeScript, Python, Java, C#, or Go to CloudFormation templates that AWS executes. Construct Hub serves as the community module registry and has seen broad adoption since launch. Strengths: native AWS service (zero additional vendor relationship), programming-language IaC for AWS-anchored teams that prefer real languages, free with AWS (no separate license cost), Construct Hub has broad community adoption, strong fit for AWS-only deployments. Trade-offs: AWS-only lock-in by design (no multi-cloud story), CloudFormation as execution layer inherits the CloudFormation slower stack-update times and rollback quirks, customer reports of debugging difficulty when CloudFormation errors surface from generated templates, and not the right call for any multi-cloud or non-AWS deployment.
AWS-anchored engineering teams (10-100,000+ employees) wanting programming-language IaC with native AWS bundling, particularly teams already invested in AWS and using TypeScript or Python as primary languages.
Multi-cloud teams (Terraform / OpenTofu / Pulumi better), teams considering eventual cloud diversification, or non-AWS shops.
Strengths
- Native AWS service (no third-party vendor)
- Programming-language IaC (TypeScript, Python, Java, C#, Go)
- Free with AWS (no separate license cost)
- Construct Hub community module registry has broad adoption
- Strong fit for AWS-only deployments
- AWS public company stability
- IAM-anchored execution
Weaknesses
- AWS-only lock-in by design (no multi-cloud)
- CloudFormation as execution layer inherits slower stack-update times
- Debugging difficulty when CloudFormation errors surface from generated templates
- Not the right call for any multi-cloud deployment
- Some advanced AWS features lag in CDK constructs
Pricing tiers
public- AWS CDKFree; pay only for underlying AWS resources$0+$0 /mo +/emp
- CloudFormationFree for AWS resources; charged for third-party extensions$0+$0 /mo +/emp
- · Underlying AWS resource costs (not CDK costs)
- · CloudFormation third-party extension fees
- · AWS-only lock-in (migration cost if leaving AWS)
Key features
- +Programming-language IaC (TypeScript, Python, Java, C#, Go)
- +Compiles to CloudFormation
- +Construct Hub community modules
- +Native AWS service integration
- +IAM-anchored execution
- +CDK Pipelines for CI/CD
- +AWS Solutions Constructs library
Crossplane
Kubernetes-native IaC for platform-engineering teams.
Crossplane is the Kubernetes-native IaC project, founded 2018 by Upbound. The project graduated CNCF (Cloud Native Computing Foundation) status in 2024 and Upbound (the commercial entity) raised a $60M Series B in August 2022 led by Altimeter. The model: provision cloud resources by writing Kubernetes Custom Resources, the Kubernetes control plane becomes the unit of infrastructure automation. Strengths: Kubernetes-native model fits platform-engineering teams already living in Kubernetes, CNCF graduate status with strong foundation governance, Upbound commercial path provides enterprise support, composition pattern enables strong abstraction reuse. Best fit for platform-engineering teams running Kubernetes control planes as their automation surface. Trade-offs: Kubernetes-only mental model excludes teams not running Kubernetes, learning curve is steep (Kubernetes operators + cloud providers + Crossplane compositions), Upbound commercial product (Upbound Spaces) pricing is opaque, and provider coverage is narrower than Terraform.
Platform-engineering teams (100-10,000 employees) already running Kubernetes as the automation surface, particularly those building internal developer platforms (IDPs) where Kubernetes is the unified abstraction layer.
Non-Kubernetes teams (Terraform / OpenTofu / Pulumi better), buyers wanting maximum provider coverage, or teams without existing Kubernetes operations expertise.
Strengths
- Kubernetes-native IaC model
- CNCF graduate status (foundation governance)
- Composition pattern enables strong abstraction reuse
- Upbound commercial path provides enterprise support
- Strong fit for platform-engineering teams
- $60M Series B Aug 2022 funding stability
- Right call when Kubernetes is the automation surface
Weaknesses
- Kubernetes-only mental model excludes non-Kubernetes teams
- Steep learning curve (Kubernetes operators + cloud providers + compositions)
- Upbound commercial product pricing opaque
- Provider coverage narrower than Terraform
- Drift detection requires deeper Kubernetes operator knowledge
Pricing tiers
partial- Crossplane (open-source)Apache 2.0; CNCF graduate; free$0+$0 /mo +/emp
- Upbound CloudManaged Crossplane; ~$25K-$100K/year typicalQuote
- Upbound SpacesMulti-control-plane enterprise; $100K-$500K+/yearQuote
- · Kubernetes operations costs (control plane infra)
- · Composition authoring complexity
- · Upbound commercial pricing opaque
Key features
- +Kubernetes-native IaC
- +Custom Resource Definitions for cloud resources
- +Composition pattern for abstraction
- +Provider ecosystem (AWS, Azure, GCP, others)
- +Control plane as automation surface
- +CNCF graduate governance
- +Upbound Spaces for multi-control-plane
Spacelift
Modern IaC management platform; heavy OpenTofu adoption.
Spacelift is the IaC management platform founded 2020, raised a $22M Series B March 2023 led by Insight Partners. The product wraps state management, policy enforcement, drift detection, RBAC, and PR automation around Terraform, OpenTofu, Pulumi, CloudFormation, and Kubernetes/Crossplane. Strengths: multi-engine support (Terraform, OpenTofu, Pulumi, CloudFormation, Kubernetes), heavy OpenTofu adoption since the August 2023 BSL fork (Spacelift was a vocal early OpenTofu contributor), policy-as-code with OPA / Rego, drift detection out of the box, Insight Partners-led $22M Series B March 2023. Best fit for teams wanting an IaC management platform that does not lock them to a single engine. Trade-offs: PE-backed via Insight Partners (typical 5-7 year exit window), pricing for self-hosted runners scales with run volume, smaller installed base than Terraform Cloud, and some advanced governance features sit in higher tiers.
Mid-market and enterprise platform-engineering teams (50-5,000 employees) wanting an engine-agnostic IaC management platform, particularly OpenTofu shops looking for managed state + policy + drift detection.
Single-engine HashiCorp Terraform shops happy with HCP Terraform, very small teams (Atlantis open-source sufficient), or buyers requiring fully self-hosted control plane.
Strengths
- Multi-engine support (Terraform, OpenTofu, Pulumi, CloudFormation, Kubernetes)
- Heavy OpenTofu adoption since BSL fork
- Policy-as-code with OPA / Rego
- Drift detection out of the box
- Strong PR automation and run orchestration
- Insight Partners-led $22M Series B March 2023
- Vocal OpenTofu community contributor
Weaknesses
- PE-backed via Insight Partners (typical 5-7 year exit window)
- Self-hosted runner pricing scales with run volume
- Smaller installed base than Terraform Cloud
- Advanced governance features in higher tiers
- Documentation gaps for multi-engine setups reported
Pricing tiers
public- FreeUp to 3 users; 200 run minutes/month$0+$0 /mo +/emp
- Cloud StarterPay-as-you-go; $0.0008 per run-second + per-user$0+$0 /mo +/emp
- CloudCustom; typical $25K-$150K/yearQuote
- Enterprise / Self-hostedSelf-hosted; typical $150K-$500K+/yearQuote
- · Per-run-second overages
- · Self-hosted runner infra costs
- · Advanced governance features in higher tiers
Key features
- +Multi-engine IaC management (Terraform, OpenTofu, Pulumi, CloudFormation, Kubernetes)
- +Managed state
- +Policy-as-code (OPA / Rego)
- +Drift detection
- +PR automation
- +Run orchestration
- +RBAC + audit logging
- +Self-hosted runners (workers)
- +VCS-native integration
env0
IaC management platform; Terraform Cloud and Spacelift competitor.
env0 is the IaC management platform founded 2018, raised a $35M Series B September 2022 led by M12 (the Microsoft venture fund). The product covers managed state, policy enforcement, drift detection, RBAC, and PR automation across Terraform, OpenTofu, Terragrunt, Pulumi, and CloudFormation. Strengths: multi-engine IaC management, M12-led $35M Series B September 2022 (Microsoft venture backing), strong fit for teams wanting Terraform Cloud alternative, robust RBAC and policy controls, drift detection out of the box. Best fit for mid-market platform teams wanting Terraform Cloud alternative. Trade-offs: PE-backed via M12 (Microsoft enterprise alignment can be a feature or a concern depending on buyer), competing directly with Spacelift and Terraform Cloud, smaller installed base than HashiCorp, and pricing for advanced features scales meaningfully.
Mid-market platform-engineering teams (50-2,000 employees) wanting a Terraform Cloud alternative with strong policy and approval workflows, particularly Microsoft-aligned enterprises comfortable with M12 venture backing.
HashiCorp-anchored teams happy with HCP Terraform, very small teams (Atlantis open-source sufficient), or buyers preferring Spacelift OpenTofu-first positioning.
Strengths
- Multi-engine IaC management (Terraform, OpenTofu, Terragrunt, Pulumi, CloudFormation)
- M12-led $35M Series B September 2022
- Microsoft venture backing for enterprise alignment
- Robust RBAC and policy controls
- Drift detection out of the box
- Strong fit as Terraform Cloud alternative
- Approval workflows for regulated buyers
Weaknesses
- PE-backed via M12 (Microsoft alignment can cut both ways)
- Competing directly with Spacelift and Terraform Cloud
- Smaller installed base than HashiCorp
- Pricing for advanced features scales meaningfully
- Documentation gaps for multi-engine workflows reported
Pricing tiers
partial- FreeUp to 5 users; limited runs$0+$0 /mo +/emp
- TeamsPer user; team-level RBAC$75 /mo
- BusinessCustom; typical $25K-$150K/yearQuote
- EnterpriseCustom; self-hosted option; typical $150K-$500K/yearQuote
- · Per-run-minute overages
- · Self-hosted runner infra costs
- · Advanced approval workflows in higher tiers
Key features
- +Multi-engine IaC management
- +Managed state
- +Policy-as-code (OPA)
- +Drift detection
- +Approval workflows for regulated buyers
- +RBAC + audit logging
- +PR automation
- +Self-hosted agents
- +Cost estimation
Scalr
Founder-led IaC management platform; multi-cloud focus.
Scalr is the founder-led IaC management platform, originally founded 2007 (one of the oldest in the management-platform tier) and repositioned around Terraform / OpenTofu management in recent years. The product covers managed state, policy enforcement, RBAC, drift detection, and multi-cloud cost management. Strengths: founder-led (no PE pressure), 18-year track record (oldest in the management-platform tier), multi-cloud focus baked in, strong RBAC and hierarchical workspace model for enterprise buyers, transparent per-run pricing. Best fit for enterprises wanting founder-led IaC management without PE volatility. Trade-offs: smaller installed base than Spacelift or env0 in the modern management-platform conversation, brand awareness in 2026 is lower than the funded competitors, support response times vary, and the modern UX trails Spacelift on some workflows.
Enterprise platform-engineering teams (200-10,000 employees) wanting founder-led IaC management without PE volatility, particularly multi-cloud shops valuing hierarchical workspace governance.
Modern startup buyers wanting the buzziest brand (Spacelift better mindshare), very small teams (Atlantis open-source sufficient), or buyers wanting the broadest engine coverage (Spacelift broader).
Strengths
- Founder-led (no PE pressure)
- 18-year track record (oldest in management-platform tier)
- Multi-cloud focus baked in
- Strong RBAC and hierarchical workspace model
- Transparent per-run pricing
- Right call for enterprise buyers avoiding PE
Weaknesses
- Smaller installed base than Spacelift or env0
- Brand awareness in 2026 lower than funded competitors
- Support response times vary
- Modern UX trails Spacelift on some workflows
- Smaller integration ecosystem (~50)
Pricing tiers
partial- FreeLimited runs and resources$0+$0 /mo +/emp
- StandardTypical $15K-$50K/yearQuote
- EnterpriseCustom; typical $50K-$300K/year with self-hosted optionQuote
- · Per-run overages
- · Self-hosted runner infra costs
- · Advanced governance features in Enterprise tier
Key features
- +Multi-cloud IaC management
- +Managed Terraform / OpenTofu state
- +Hierarchical workspace model
- +Policy-as-code (OPA)
- +RBAC + audit logging
- +Drift detection
- +Cost estimation
- +PR automation
- +Per-run pricing transparency
Atlantis
Open-source Terraform PR automation; Lyft-originated, community-maintained.
Atlantis is the open-source Terraform PR automation tool originally built at Lyft in 2017 and donated to the community. The project sits under Apache 2.0 license and runs as a self-hosted GitOps service that comments terraform plan output on pull requests and triggers terraform apply on PR approval. Strengths: free open-source (Apache 2.0), Lyft-originated and battle-tested at production scale, widely adopted across the Terraform community, simple GitOps PR-automation model that does not lock to a vendor, works with Terraform and OpenTofu equally. Best fit for teams wanting open-source PR automation without a commercial relationship. Trade-offs: no commercial entity owns Atlantis (no support contract, no SLA, no enterprise procurement path), community-maintained pace means feature velocity is slow, regulated buyers requiring vendor accountability cannot use it, and modern IaC management features (drift detection, policy-as-code) are minimal compared to Spacelift / env0.
Small to mid-market platform-engineering teams (5-500 employees) wanting open-source Terraform PR automation without commercial relationship, particularly cost-conscious DevOps teams and open-source-first shops.
Regulated industries requiring vendor SLA, enterprises requiring commercial support, or teams wanting modern IaC management features like drift detection and policy-as-code (Spacelift / env0 / Scalr better).
Strengths
- Free open-source (Apache 2.0)
- Lyft-originated and battle-tested at production scale
- Widely adopted across the Terraform community
- Simple GitOps PR-automation model
- No vendor lock-in by design
- Works with Terraform and OpenTofu equally
- Self-hosted (full data sovereignty)
Weaknesses
- No commercial entity owns Atlantis (no support contract, no SLA)
- No enterprise procurement path
- Community-maintained pace means slow feature velocity
- Regulated buyers needing vendor accountability cannot use it
- Modern IaC management features (drift detection, policy-as-code) minimal
- Self-hosting infra burden
Pricing tiers
public- Atlantis (open-source)Apache 2.0; free; self-hosted only$0+$0 /mo +/emp
- · Self-hosting infra costs
- · No commercial support contract available
- · Internal maintenance burden
Key features
- +Open-source Terraform PR automation
- +GitOps workflow (plan + apply via PR comments)
- +Works with Terraform and OpenTofu
- +Self-hosted
- +Pull-request-based access control
- +Lyft-originated and community-maintained
- +Apache 2.0 license
Terragrunt
Terraform wrapper for DRY configuration; Gruntwork-backed.
Terragrunt is the open-source Terraform / OpenTofu wrapper, founded 2016 by Gruntwork. The tool eliminates duplication in Terraform configuration (DRY principle) and adds remote-state bootstrapping, dependency management between modules, and multi-environment orchestration. Gruntwork (the commercial entity) provides Reference Architecture and commercial support contracts. Strengths: DRY configuration eliminates duplication across environments, remote-state bootstrapping reduces boilerplate, dependency management between modules, works equally with Terraform and OpenTofu, Gruntwork commercial backing for enterprise support. Best fit for teams managing multiple environments (dev/staging/prod) with shared Terraform modules. Trade-offs: adds a wrapper layer of complexity on top of Terraform / OpenTofu, learning curve is non-trivial for teams new to Terraform, Gruntwork commercial contracts (Reference Architecture, support) are opaque and expensive, and some teams treat Terragrunt as legacy now that native Terraform supports better module composition.
Mid-market platform-engineering teams (50-2,000 employees) managing multiple environments with shared Terraform modules, particularly those wanting DRY configuration discipline and Gruntwork Reference Architecture support.
Small teams with single-environment Terraform setups (native Terraform sufficient), teams new to Terraform (learning curve too steep), or buyers wanting to minimize their tool surface (one less wrapper to maintain).
Strengths
- DRY configuration eliminates duplication across environments
- Remote-state bootstrapping reduces boilerplate
- Dependency management between modules
- Works equally with Terraform and OpenTofu
- Gruntwork commercial backing for enterprise support
- Multi-environment orchestration baked in
- Strong fit for managing dev/staging/prod consistently
Weaknesses
- Adds wrapper layer of complexity on top of Terraform
- Learning curve non-trivial for teams new to Terraform
- Gruntwork commercial contracts opaque and expensive
- Some teams treat Terragrunt as legacy
- Native Terraform module composition has improved 2023-2025
Pricing tiers
partial- Terragrunt (open-source)MIT license; free; Gruntwork-maintained$0+$0 /mo +/emp
- Gruntwork IaC FoundationsReference Architecture + modules + support; typical $30K-$150K/yearQuote
- Gruntwork IaC Library + SupportFull enterprise; typical $150K-$500K/yearQuote
- · Gruntwork commercial contracts opaque
- · Reference Architecture implementation services
- · Learning curve for new Terragrunt users
Key features
- +DRY Terraform configuration wrapper
- +Remote-state bootstrapping
- +Dependency management between modules
- +Multi-environment orchestration
- +Works with Terraform and OpenTofu
- +Gruntwork Reference Architecture
- +Module composition patterns
- +MIT license
Frequently asked questions
The questions buyers actually ask before they sign.
Terraform vs OpenTofu for a Sydney 200-person SaaS in 2026?
How does APRA CPS 234 affect IaC vendor selection?
What about Australian Government PROTECTED IaC?
Pulumi vs Terraform for a code-first Australian engineering team?
Terraform vs OpenTofu, which one should I pick in 2026?
What are the implications of the HashiCorp BSL license switch?
Programming-language IaC (Pulumi, AWS CDK) vs HCL (Terraform, OpenTofu), which is better?
Why would I use Crossplane instead of Terraform?
Is AWS CDK a lock-in trap?
How do I pick a multi-cloud IaC tool?
Spacelift vs Terraform Cloud, what is the difference?
How much should I budget for IaC tooling?
What is drift detection and why does it matter?
Does the IBM acquisition change anything for Terraform users?
Final word
Looking at a different market? See the global Infrastructure as Code (IaC) ranking, or pick another country at the top of this page.
Last updated 2026-05-24. Local pricing reverified quarterly. Found something inaccurate? Tell us.