Infrastructure as code

Open-source, self-hosted alternatives to HashiCorp's HCP Terraform and Terraform Enterprise, built on the OpenTofu CLI with Terrakube or Atlantis for remote runs, state and pull request automation.

HCP Terraform

HCP Terraform, formerly Terraform Cloud, is HashiCorp's hosted Terraform run, state and registry service, with Terraform Enterprise as its self-managed edition; these pages cover replacing it with OpenTofu plus Terrakube or Atlantis.

Terraform

Terraform, HashiCorp's infrastructure as code CLI owned by IBM, has been under the Business Source License since version 1.6.0. Pages here cover moving to OpenTofu, the open-source fork.

Spacelift

Spacelift is a commercial orchestration platform for OpenTofu, Terraform, Pulumi and other IaC tools, sold on annual subscriptions. Pages here cover replacing it with self-hosted Terrakube or Atlantis.

env zero (env0)

env zero, formerly styled env0, is a commercial platform for Terraform, OpenTofu and other IaC with environment-based billing. Pages here cover replacing it with self-hosted Terrakube or Atlantis.

Scalr

Scalr is a commercial Terraform and OpenTofu automation platform billed per run. Pages here cover replacing it with self-hosted Terrakube or Atlantis.

Pulumi Cloud

Pulumi Cloud is the hosted state, secrets and automation service behind the open-source Pulumi CLI, billed in credits and per managed resource. Pages here cover running Pulumi on a self-managed backend instead.

Red Hat Ansible Automation Platform

Red Hat Ansible Automation Platform bundles automation controller (formerly Ansible Tower), Event-Driven Ansible and private automation hub under quoted subscriptions. Pages here cover replacing it with self-hosted AWX or Semaphore UI.

Puppet Enterprise

Puppet Enterprise is Perforce's commercial configuration management platform; since 2025 even open-source Puppet binaries come from Perforce under a EULA. Pages here cover replacing it with OpenVox, the community fork.

Talk to our team.

Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.

  • 30-minute call: free, with no obligation.
  • NDA on request: we can sign before you share details.
  • Clear next steps: a scope and plan after the call.