Business Software for Terraform

Authentik serves as an open-source identity provider that consolidates all your identity management needs into a singular platform, effectively replacing solutions like Okta, Active Directory, and Auth0. Authentik Security operates as a public benefit company focused on enhancing the open-source initiative. By utilizing a self-hosted, open-source identity provider, you are able to emphasize security and maintain control over your most confidential information. With authentik, the reliance on third-party services for your identity management is eliminated, offering greater peace of mind. You can seamlessly integrate authentik into your existing environment, tailoring it to meet diverse requirements. Our APIs and fully customizable policies empower you to automate workflows effectively. Deployment and scaling are made easier with our prebuilt templates and compatibility with Kubernetes, Terraform, and Docker Compose. You can avoid depending on external services for essential infrastructure and safeguard your sensitive data from the public internet. Take advantage of our pre-built workflows, or opt to modify every stage of authentication through flexible templates, infrastructure as code, and extensive APIs, ensuring a personalized experience. This flexibility allows you to adapt authentik to suit your unique organizational needs while enhancing security measures.

Opengrep serves as an open-source static code analysis tool aimed at uncovering security vulnerabilities in various codebases. Being a fork of Semgrep, it shares a common goal of delivering rapid and effective code pattern searching across over 30 programming languages, such as Python, JavaScript, and Go. The platform allows developers to create personalized rules for pattern detection, which aids in identifying potential security flaws while also encouraging compliance with coding standards. Incorporating Opengrep into the development process empowers teams to take a proactive stance on vulnerabilities, significantly improving the security and reliability of their software projects. Additionally, its user-friendly interface and customizable features make it an appealing choice for developers seeking to enhance their coding practices.

Streamkap is a modern streaming ETL platform built on top of Apache Kafka and Flink, designed to replace batch ETL with streaming in minutes. It enables data movement with sub-second latency using change data capture for minimal impact on source databases and real-time updates. The platform offers dozens of pre-built, no-code source connectors, automated schema drift handling, updates, data normalization, and high-performance CDC for efficient and low-impact data movement. Streaming transformations power faster, cheaper, and richer data pipelines, supporting Python and SQL transformations for common use cases like hashing, masking, aggregations, joins, and unnesting JSON. Streamkap allows users to connect data sources and move data to target destinations with an automated, reliable, and scalable data movement platform. It supports a broad range of event and database sources.

CloudRay is a cloud-based service designed to simplify the automation and management of Bash scripts on remote servers. With CloudRay, users can schedule scripts to run at specific times, monitor their execution in real-time, and capture outputs for record-keeping. The platform’s flexibility extends to using Liquid templates for dynamic scripting and running multiple scripts in a sequence, making it highly adaptable for complex workflows. Additionally, CloudRay provides tools for managing sensitive data through environment variables and integrating with external systems via custom webhooks. The platform’s easy-to-use interface and scalability make it an excellent choice for developers and system administrators.

Amplication serves as an open-source platform for backend development, simplifying the processes of creating, managing, and scaling backend services while incorporating industry best practices and standards. By allowing developers to quickly produce production-ready Node.js applications through the definition of data models, roles, and permissions, it automatically generates REST and GraphQL APIs, along with features for authentication, role-based authorization, logging, and an administrative user interface. Additionally, Amplication is designed to be customizable through private plugins, which support the integration of internal tools, workflows, and coding standards. The platform also provides a service catalog, ensuring enhanced visibility and governance, which aids in proactive maintenance and uniformity among development teams. Furthermore, its user-friendly interface encourages collaboration and efficiency, making it a valuable resource for modern backend development.

Revolte is an AI-native software engineering platform that helps development teams automate the complete software delivery lifecycle from initial requirements through production operations. Rather than focusing only on AI code generation, the platform executes planning, development, testing, deployment, release management, runtime monitoring, and operational workflows across the entire SDLC. Engineers define project requirements, approve outcomes, and maintain governance while Revolte handles repetitive engineering tasks through coordinated AI agents. The platform integrates with existing tools including Jira, Git, Figma, Kubernetes, Terraform, Slack, Grafana, GitLab, AWS, Google Cloud, and other engineering services, allowing organizations to adopt AI without replacing their current toolchain. Revolte supports use cases including new application development, legacy application modernization, production operations, and continuous feature evolution. Agent Harness allows teams to define platform requirements in YAML, automatically provisioning environments, infrastructure, and services needed to build and operate applications. Delivery Intelligence provides visibility into software delivery performance while runtime observability helps monitor production systems and respond to operational issues. Developer-in-the-loop workflows ensure engineers remain responsible for reviews, approvals, and deployment decisions while AI accelerates execution. By combining workflow orchestration, AI automation, and engineering governance, Revolte helps organizations release software faster, improve delivery consistency, and reduce operational overhead.

ArchFormation is an easy-to-use, no-code platform designed to help users design and deploy AWS cloud infrastructure with speed and efficiency. The platform offers a drag-and-drop interface that enables users to build infrastructure diagrams using a wide range of AWS components, which are automatically converted into production-ready Terraform code. This code can be exported to GitHub or downloaded directly, ensuring full ownership and flexibility for the user. ArchFormation also supports multi-environment configurations and integrates DevOps best practices, making it a powerful solution for startups, developers, and organizations looking to streamline cloud adoption while avoiding vendor lock-in. With its focus on enterprise-level security, ArchFormation ensures that users can deploy secure and scalable cloud infrastructure quickly and effectively.

Pinecone Rerank V0 is a cross-encoder model specifically designed to enhance precision in reranking tasks, thereby improving enterprise search and retrieval-augmented generation (RAG) systems. This model processes both queries and documents simultaneously, enabling it to assess fine-grained relevance and assign a relevance score ranging from 0 to 1 for each query-document pair. With a maximum context length of 512 tokens, it ensures that the quality of ranking is maintained. In evaluations based on the BEIR benchmark, Pinecone Rerank V0 stood out by achieving the highest average NDCG@10, surpassing other competing models in 6 out of 12 datasets. Notably, it achieved an impressive 60% increase in performance on the Fever dataset when compared to Google Semantic Ranker, along with over 40% improvement on the Climate-Fever dataset against alternatives like cohere-v3-multilingual and voyageai-rerank-2. Accessible via Pinecone Inference, this model is currently available to all users in a public preview, allowing for broader experimentation and feedback. Its design reflects an ongoing commitment to innovation in search technology, making it a valuable tool for organizations seeking to enhance their information retrieval capabilities.

Codiac serves as a comprehensive platform designed for large-scale infrastructure management, featuring a cohesive control plane that simplifies aspects such as container orchestration, multi-cluster management, and dynamic configuration without requiring YAML files or GitOps. Its Kubernetes-driven closed-loop system efficiently automates various processes, including workload scaling, the creation of temporary clusters, blue/green and canary deployments, and innovative “zombie mode” scheduling that optimizes costs by powering down inactive environments. Users benefit from immediate ingress, domain, and URL management alongside the effortless integration of TLS certificates through Let’s Encrypt. Each deployment not only produces immutable system snapshots and maintains versioning for instantaneous rollbacks but also ensures compliance through audit-ready features. Security is bolstered by role-based access control (RBAC), finely tuned permissions, and comprehensive audit logs that adhere to enterprise standards, while integration with CI/CD pipelines, real-time logging, and observability dashboards grants complete visibility over all resources and environments, thereby enhancing operational efficiency. All these features work together to create a seamless user experience, making Codiac an invaluable tool for modern infrastructure challenges.

Constellation stands out as a Kubernetes distribution certified by the CNCF, utilizing confidential computing to ensure the encryption and isolation of entire clusters, thus safeguarding data at rest, in transit, and during processing by executing control and worker planes within hardware-enforced trusted execution environments. The platform guarantees workload integrity through the use of cryptographic certificates and robust supply-chain security practices, including SLSA Level 3 and sigstore-based signing, while successfully meeting the benchmarks set by the Center for Internet Security for Kubernetes. Additionally, it employs Cilium alongside WireGuard to facilitate precise eBPF traffic management and comprehensive end-to-end encryption. Engineered for high availability and automatic scaling, Constellation enables near-native performance across all leading cloud providers and simplifies the deployment process with an intuitive CLI and kubeadm interface. It ensures the implementation of Kubernetes security updates within a 24-hour timeframe, features hardware-backed attestation, and offers reproducible builds, making it a reliable choice for organizations. Furthermore, it integrates effortlessly with existing DevOps tools through standard APIs, streamlining workflows and enhancing overall productivity.

Nitric is a versatile, open-source backend framework that operates across various cloud platforms, allowing developers to easily define their infrastructure through code and streamline deployment processes with customizable plugins. It is compatible with several programming languages, such as JavaScript, TypeScript, Python, Go, and Dart. Among its prominent features are the ability to create APIs (including REST and HTTP), serverless functions, routing, and handling authentication and authorization via OIDC. Additionally, it provides support for storage solutions, such as object and file storage, signed URLs, and bucket events, as well as database management, including managed Postgres with migration capabilities. Messaging features like queues, topics, and pub/sub are also integrated, alongside support for websockets, scheduled tasks, and managing sensitive information securely. Nitric can seamlessly integrate with infrastructure management tools like Terraform or Pulumi, or you can develop your own plugins, and it is compatible with leading cloud service providers like AWS, Azure, and Google Cloud. Furthermore, it offers a local development environment that simulates cloud conditions, enabling developers to prototype, test, and refine their applications without incurring any cloud expenses. The framework also places a strong emphasis on declarative security, efficient resource access management, and ensuring portability across different environments, making it a powerful choice for modern application development.

Storm MCP serves as an advanced gateway centered on the Model Context Protocol (MCP), facilitating seamless connections between AI applications and multiple verified MCP servers through a straightforward one-click deployment process. It ensures robust enterprise-level security, enhanced observability, and easy integration of tools without the need for extensive custom development. By standardizing AI connections and only exposing specific tools from each MCP server, it helps minimize token consumption and optimizes the selection of model tools. With its Lightning deployment feature, users can access over 30 secure MCP servers, while Storm efficiently manages OAuth-based access, comprehensive usage logs, rate limitations, and monitoring. This innovative solution is crafted to connect AI agents to external context sources securely, allowing developers to sidestep the complexities of building and maintaining their own MCP servers. Tailored for AI agent developers, workflow creators, and independent innovators, Storm MCP stands out as a flexible and configurable API gateway, simplifying infrastructure challenges while delivering dependable context for diverse applications. Its unique capabilities make it an essential tool for those looking to enhance their AI integration experience.

Brainboard is an innovative AI-powered platform tailored for cloud architects, DevOps professionals, and platform engineers, allowing them to visually design, deploy, and manage multi-cloud infrastructures while effortlessly generating Infrastructure as Code. It provides compatibility with leading cloud providers and features robust integration with Terraform/OpenTofu, permitting users to drag-and-drop architectural diagrams that are immediately converted into functional Terraform code, promoting the approach of "design first, code when necessary." Additionally, the platform encompasses essential features like CI/CD pipelines specifically for infrastructure, drift detection, versioning, and role-based access controls, all aimed at ensuring governance, consistency, and enhanced collaboration among teams. Furthermore, Brainboard facilitates the development of reusable service-catalog templates, empowering internal teams to independently provision validated and compliant infrastructure, thereby reducing their dependency on central DevOps resources. This not only streamlines workflows but also fosters innovation and agility within organizations.

Stakpak is an innovative open-source AI DevOps agent crafted in Rust, designed to seamlessly operate within your terminal, CI/CD pipelines, or cloud infrastructures, assisting in the secure deployment and maintenance of production-ready environments through advanced automation and contextual intelligence. This tool offers essential functionalities such as rapid incident resolution to pinpoint root causes and apply solutions, comprehensive cloud cost analysis with immediate optimization suggestions, automated IAM security features for crafting and assessing secure policies and audit scripts, and streamlined application containerization that simplifies the generation of reliable, well-documented Dockerfiles. Stakpak integrates smoothly with existing tools like Terraform, AWS, Kubernetes, Azure, and Docker, continuously learning from your infrastructure to provide pertinent recommendations. Additionally, it boasts robust security features capable of detecting and redacting over 210 different types of sensitive information, complemented by a deterministic guardrail enforcer, known as Warden, which safeguards against harmful actions within production settings. With these capabilities, Stakpak not only enhances the efficiency of DevOps processes but also significantly boosts the overall security posture of your infrastructure.

Kubegrade is an innovative cloud-based platform designed for managing Kubernetes clusters, streamlining intricate operations to aid engineering and platform teams in tasks such as upgrading, securing, monitoring, troubleshooting, optimizing, and scaling their environments while maintaining human oversight. The platform provides a clear visualization of the cluster's state and its dependencies, identifies configuration drift, and highlights deprecated APIs. Additionally, it utilizes AI-driven insights to suggest corrective actions through GitOps-compatible pull requests, allowing teams to review and approve changes, which minimizes manual effort and aligns deployments with infrastructure as code practices. Kubegrade’s automation throughout the lifecycle encompasses secure upgrades, patch management, cost attribution, rightsizing, centralized logging and monitoring, security enforcement, and troubleshooting, employing intelligent agents that foresee potential issues and continuously analyze real-time telemetry data. This proactive approach not only helps to reduce downtime and mitigate risks but also enhances reliability on a larger scale, ultimately transforming how teams manage their Kubernetes environments. By integrating these advanced features, Kubegrade empowers teams to focus on innovation instead of being bogged down by operational challenges.

Outcron is an innovative hosted job scheduler crafted to offer a more dependable alternative to conventional cron configurations, eliminating the hassle of server maintenance and the cumbersome process of integrating scripts. This platform centralizes the scheduling and execution of essential jobs, delivering built-in reliability that guarantees tasks are carried out consistently without requiring manual intervention or the management of underlying infrastructure. With support for a variety of job types, Outcron features an adaptable scheduling system that transcends the limitations of standard cron syntax, facilitating the creation of intricate and flexible workflows. One of its standout functionalities is misfire recovery, which automatically identifies and retries missed or failed jobs, thereby minimizing the likelihood of unnoticed failures that can plague self-managed cron setups. Additionally, Outcron comes equipped with tools for execution history and observability, empowering users to monitor every job run, review logs, and gain insights into job performance over time. This comprehensive solution not only enhances reliability but also streamlines job management, making it an invaluable resource for teams looking to optimize their workflow automation.

LocalStack serves as a cloud development solution that enables teams to mimic cloud services in their development, testing, and CI environments, facilitating faster iterations while allowing them to work locally. It features a cloud emulator that operates within a single container, whether on a laptop or in a CI setup, which empowers developers to execute AWS applications and Lambda functions without the need to access a distant cloud provider. By replicating a production-like environment on local hardware, LocalStack equips teams to develop for AWS with increased speed and assurance. It is tailored for testing intricate CDK applications, verifying Terraform setups, gaining familiarity with AWS services, troubleshooting cloud workflows, conducting integration tests, and enhancing the development cycle. Additionally, developers can create fully operational local environments that accurately reflect authentic cloud operations, encompassing AWS services and Snowflake, all without the necessity of real cloud infrastructure. This capability not only streamlines development but also significantly reduces costs associated with cloud resource usage.

AI Workers are independent agents crafted specifically for your organization; these advanced AI entities function like genuine colleagues rather than mere chatbots awaiting instructions. Each comes equipped with its own professional identity, including an email, phone number, and presence on platforms like Slack and Teams, demonstrating initiative and the capacity to operate around the clock without needing prompts. Rather than dictating every detail of their tasks, you simply define the objectives, and they autonomously develop the necessary workflows, accommodating a variety of tasks such as generating daily reports, conducting weekly follow-ups, managing CRM updates, handling client interactions, performing research, overseeing content creation, executing finance responsibilities, coordinating HR activities, supporting design projects, and assisting with development operations. This system includes a diverse range of specialized AI Workers tailored for functions in marketing, development, design, HR, finance, and more, with each worker crafted for a specific role and practical applications. Furthermore, AI Workers can integrate seamlessly with over 3,000 tools, such as Slack, Microsoft Teams, Gmail, Notion, HubSpot, Salesforce, and various other business applications, ensuring they fit effortlessly into your existing workflows. Their versatility and adaptability make them an invaluable asset for enhancing productivity and streamlining processes in any business environment.

AquilaX is an advanced application security platform powered by AI that simultaneously operates 32 security scanners within an organization's software framework, delivering results in less than a minute. Its extensive coverage encompasses various security aspects, including static application security evaluation, analysis of software components, dynamic assessments, identification of leaked secrets, handling of personally identifiable information, infrastructure as code, container security, API protection, malware detection, license compliance, and even AI-generated "vibe code." Central to this system is Securitron AI, a continuously learning security engine that has been trained on over 300 million projects. This engine meticulously analyzes each codebase’s unique context, data flows, taint paths, and recurring patterns, enabling it to differentiate between genuinely exploitable vulnerabilities and mere theoretical risks, thereby automatically reducing 93.54% of false positives. The platform provides validated vulnerabilities with detailed information, including their severity, context related to CWE and CVE, thorough explanations, and guidance for remediation. Additionally, AquilaX possesses the capability to create context-aware patches, verify these fixes against the code repository, and initiate pull requests for streamlined integration. By addressing both security and operational efficiency, AquilaX significantly enhances an organization’s ability to protect its software assets.

Lojycal represents the pioneering Digital Operations Workstation (DOW) that integrates IT, HR, finance, procurement, and compliance into a cohesive multi-tenant environment. Rather than viewing hardware, software, identities, assets, contracts, and financial records as isolated entities, Lojycal merges them into a unified operational framework. A laptop should not merely be a stand-alone entry; its acquisition, delivery, software, identity details, financial information, compliance documentation, ownership history, and audit trail must be interlinked. From the processes of onboarding and offboarding to managing assets, procurement, contracts, renewals, vendor relations, and operational risks, all workflows are derived from a single, interconnected record. Designed by an IT professional for fellow operators, Lojycal seamlessly integrates with existing identity, MDM, finance, HR, ticketing, and SaaS systems, serving as the operational layer that binds them together. This innovative approach ensures that businesses operate with heightened efficiency and clarity. One Workspace. One Operational Record. One Source of Truth. One Operational Graph.

Stategraph serves as an operational database tailored for infrastructure, aiming to establish itself as the definitive record for the resources you manage, the modifications you implement, and the individuals or AI agents responsible for them. Unlike the traditional method of storing Terraform state as a simple JSON blob, it transforms infrastructure into a detailed, queryable graph that accurately reflects relationships, historical data, and ownership. This allows plans and applications to operate solely on the affected subgraph, enabling independent changes to be executed concurrently without requiring a global workspace lock. Teams are empowered to coordinate alterations across various states in one cohesive atomic transaction, use SQL to query infrastructure, identify drift and unmanaged resources, analyze potential impacts, and comprehend dependencies prior to implementing changes. Furthermore, compliance measures and internal policies are executed based on the real state of the infrastructure, complete with full attribution, historical context, and exportable proof, while financial data can be directly linked to resources, owners, modifications, and interdependencies. This innovative approach enhances operational efficiency and accountability within infrastructure management.

Cloudgeni serves as an intelligent AIOps platform tailored for cloud infrastructure, adept at analyzing incidents, compliance, drift, and financial operations issues, subsequently rectifying them through validated Infrastructure-as-Code pull requests. It consolidates cloud states, Infrastructure-as-Code, and operational signals into a unified context layer, enabling agents to grasp dependencies, pinpoint root causes, implement changes aligned with the organization's standards, validate these changes prior to deployment, and confirm the resolution of issues post-implementation. The platform's agents are equipped to handle various tasks, including compliance remediation, managing configuration drift, resource imports, DevOps activities, pull request evaluations, Infrastructure-as-Code pipelines, cost management, Site Reliability Engineering workflows, AI infrastructure governance, and bespoke automation solutions. Additionally, Cloudgeni seamlessly integrates with a multitude of platforms and tools such as AWS, Azure, GCP, OCI, Kubernetes, OpenShift, Terraform, OpenTofu, Terragrunt, Bicep, Pulumi, Helm, GitHub, GitLab, Azure DevOps, security instruments, observability solutions, and internal knowledge repositories, fostering a comprehensive ecosystem for cloud management. This versatility ensures that organizations can maintain optimal performance and security across their cloud environments while streamlining their operational processes.

Icinga is an internet monitoring system that checks the availability of your network resources and notifies users when there are outages. It also generates performance data for reporting. Icinga is flexible and extensible. It can monitor complex environments in multiple locations. Icinga 2 is the monitoring server and requires Icinga Web 2 on top in your Icinga Stack. You can manage the configuration with the Icinga Director or config management tools. Plain text is also available within the Icinga DSL. Find solutions, take action and become a problem-solver. Flexibility is key. Keep curious, stay passionate, and stay in the loop. Tackle your monitoring challenge. The Icinga stack consists of six core strengths that cover all aspects related to monitoring. You can get valuable insights, on-time notifications and eye-opening visuals as well as analytics. Icinga integrates easily into your systems and gives you the power of automating your tasks.

Enhance your productivity by ensuring only high-quality code is released, as SonarQube Cloud (previously known as SonarCloud) seamlessly evaluates branches and enriches pull requests with insights. Identify subtle bugs to avoid unpredictable behavior that could affect users and address security vulnerabilities that threaten your application while gaining knowledge of application security through the Security Hotspots feature. Within moments, you can begin using the platform right where your code resides, benefiting from immediate access to the most current features and updates. Project dashboards provide vital information on code quality and readiness for release, keeping both teams and stakeholders in the loop. Showcase project badges to demonstrate your commitment to excellence within your communities. Code quality and security are essential across your entire technology stack, encompassing both front-end and back-end development. That’s why we support a wide range of 24 programming languages, including Python, Java, C++, and many more. The demand for transparency in coding practices is on the rise, and we invite you to be a part of this movement; it's completely free for open-source projects, making it an accessible opportunity for all developers! Plus, by participating, you contribute to a larger community dedicated to improving software quality.

Tenable One Cloud Exposure is a CNAPP solution that helps organizations find, prioritize, and reduce cloud security risks across multi-cloud and hybrid cloud environments. The platform is designed to address cloud exposure caused by misconfigurations, excessive permissions, risky identities, vulnerable workloads, containers, exposed data, and other cloud security gaps. It gives security teams deep insight into cloud resources, identities, risks, and relationships so they can make better decisions about what to fix first. Tenable One Cloud Exposure supports contextual cloud analysis, continuous detection, identity right-sizing, vulnerability management, data protection, AI security, prioritization, and detection and response. As part of Tenable One, it extends exposure management beyond traditional infrastructure into cloud-native environments. The platform helps organizations connect cloud risk with broader attack surface visibility across IT, cloud, identity, and critical infrastructure. Security teams can use it to reduce cloud breaches, enforce least privilege access, improve risk prioritization, and close gaps before attackers exploit them. Tenable also offers related cloud security tools for vulnerability management and cloud infrastructure entitlement management. Tenable One Cloud Exposure is designed for organizations that need actionable cloud security, stronger visibility, and a unified approach to reducing cloud risk.