Cycode
A platform for security, governance, and pipeline integrity for all your development tools & infrastructure. Harden your source control management systems (SCM), find secrets, leaks and prevent code tampering. Scan your CI/CD settings and Infrastructure-as-Code (IaC) for security misconfiguration. Identify drift between production systems IaC configurations and prevent source code tampering. Stop developers from inadvertently exposing proprietary code in public repositories, fingerprint code assets and proactively identify exposure on public sites. Inventory assets, enforce security policies, and easily demonstrate compliance across all your DevOps tools and infrastructure, both in the cloud and on-premises. Scan IaC for security misconfigurations and ensure compliance between defined IaC configurations and production infrastructure. Scan every commit or pull/merge request for hard-coded secrets and prevent them from reaching the master branch across all SCMs and programming languages.
Learn more
OpenTofu
OpenTofu is a Terraform fork, created as an initiative of Gruntwork, Spacelift, Harness, Env0, Scalr, and others, in response to HashiCorp’s switch from an open source license to the BUSL. The initiative has many supporters. On the technical level, OpenTofu 1.6.x is very similar feature-wise to Terraform 1.6.x. In the future, the projects feature sets will diverge. The other main difference is that OpenTofu is open source, and it's goal is to be driven collaboratively with no single company being able to dictate the roadmap. Companies will encounter more difficulties with the situation. Switching to a new project carries risks, but staying with a project that changes its license without warning is far riskier. This risk is minimized by giving OpenTofu to the Linux Foundation, and OpenTofu’s aim of maintaining feature parity with Terraform for future releases reduces the technical risks.
Learn more
Datree
Block misconfigurations, not deployments. Automated policy enforcement for Infrastructure as Code. Enforce policies to prevent misconfigurations in Infrastructure as Code such as Kubernetes, Terraform, CloudFormation, and more. Achieve application stability with automatic tests of every code change for policy violations or misconfigurations that may cause service outages or degraded performance. Adopt cloud-native infrastructure with minimal risk by applying built-in policies, or create custom policies to meet specific requirements. Focus on building better applications, not on infrastructure, by enforcing built-in policies for Kubernetes, Terraform, CloudFormation, and other infrastructure orchestrators. Eliminate manual code reviews for infrastructure-as-code changes, with checks that run automatically on every pull request. Keep the current DevOps workflow, with policy enforcement that integrates seamlessly with existing source control systems and CI/CD pipelines.
Learn more
Massdriver
Massdriver is a self-service infrastructure platform designed around the principle of prevention, not permission. It empowers operations teams to encode their expertise, and your organization’s security, compliance, and cost requirements, into pre-approved modules using the Infrastructure-as-Code tools you already know, such as Terraform, Helm, or OpenTofu.
These modules become functional software assets, integrating policy and governance so developers can easily discover and provision them from a central service catalog. With built-in secrets management, monitoring, and ABAC, teams can manage multi-cloud deployments across AWS, Azure, GCP, and Kubernetes faster and more reliably.
By replacing traditional, brittle CI/CD pipelines with ephemeral pipelines that spin up automatically from each module’s tooling, Massdriver frees DevOps and Platform teams to focus on innovation rather than maintenance. In short, it’s a self-service approach that cuts operational overhead, accelerate
Learn more
