Massdriver
Massdriver is a self-service infrastructure platform designed around the principle of prevention, not permission. It empowers operations teams to encode their expertise, and your organization’s security, compliance, and cost requirements, into pre-approved modules using the Infrastructure-as-Code tools you already know, such as Terraform, Helm, or OpenTofu.
These modules become functional software assets, integrating policy and governance so developers can easily discover and provision them from a central service catalog. With built-in secrets management, monitoring, and ABAC, teams can manage multi-cloud deployments across AWS, Azure, GCP, and Kubernetes faster and more reliably.
By replacing traditional, brittle CI/CD pipelines with ephemeral pipelines that spin up automatically from each module’s tooling, Massdriver frees DevOps and Platform teams to focus on innovation rather than maintenance. In short, it’s a self-service approach that cuts operational overhead, accelerate
Learn more
Atlantis
Atlantis is self-hosted. Your credentials don't leave your infrastructure. Runs as a Golang binary or Docker image and can be deployed on VMs, Kubernetes, Fargate, etc. Listens for webhooks from GitHub/GitLab/Bitbucket/Azure DevOps. Runs terraform commands remotely and comment back with their output. Used by one of the world's top companies to manage over 600 Terraform repos with 300 developers. In production use for over 2 years. Each pull request now holds a detailed log of what infrastructure changes were made and when; along with who made the change and who approved it. Atlantis can be configured to require approvals on every production change. Pass audits without compromising your workflow. Developers can submit Terraform pull requests without needing credentials. Operators can require approvals prior to allowing an application. Ensure that you apply changes before merging to master.
Learn more
JFrog Artifactory
The Industry Standard Universal Binary Repository Manager.
Supports all major package types (over 27 and growing) such as Maven, npm, Python, NuGet, Gradle, Go, and Helm including Kubernetes and Docker as well as integration with leading CI servers and DevOps tools that you already use.
Additional functionalities include:
- High Availability that scales to infinity with active/active clustering of your DevOps environment and scales as business grows
- On-Prem, Cloud, Hybrid, or Multi-Cloud Solution
- De Facto Kubernetes Registry managing application packages, operating system’s component dependencies, open source libraries, Docker containers, and Helm charts with full visibility of all dependencies. Compatible with a growing list of Kubernetes cluster providers.
Learn more
Cycode
A platform for security, governance, and pipeline integrity for all your development tools & infrastructure. Harden your source control management systems (SCM), find secrets, leaks and prevent code tampering. Scan your CI/CD settings and Infrastructure-as-Code (IaC) for security misconfiguration. Identify drift between production systems IaC configurations and prevent source code tampering. Stop developers from inadvertently exposing proprietary code in public repositories, fingerprint code assets and proactively identify exposure on public sites. Inventory assets, enforce security policies, and easily demonstrate compliance across all your DevOps tools and infrastructure, both in the cloud and on-premises. Scan IaC for security misconfigurations and ensure compliance between defined IaC configurations and production infrastructure. Scan every commit or pull/merge request for hard-coded secrets and prevent them from reaching the master branch across all SCMs and programming languages.
Learn more
