What Integrates with Terraform?
Find out what Terraform integrations exist in 2025. Learn what software and services currently integrate with Terraform, and sort them by reviews, cost, features, and more. Below is a list of products that Terraform currently integrates with:
-
1
New Relic
New Relic
Free 2,572 RatingsAround 25 million engineers work across dozens of distinct functions. Engineers are using New Relic as every company is becoming a software company to gather real-time insight and trending data on the performance of their software. This allows them to be more resilient and provide exceptional customer experiences. New Relic is the only platform that offers an all-in one solution. New Relic offers customers a secure cloud for all metrics and events, powerful full-stack analytics tools, and simple, transparent pricing based on usage. New Relic also has curated the largest open source ecosystem in the industry, making it simple for engineers to get started using observability. -
2
Cody
Sourcegraph
$0 86 RatingsCody is an advanced AI coding assistant developed by Sourcegraph to enhance the efficiency and quality of software development. It integrates seamlessly with popular Integrated Development Environments (IDEs) such as VS Code, Visual Studio, Eclipse, and various JetBrains IDEs, providing features like AI-driven chat, code autocompletion, and inline editing without altering existing workflows. Designed to support both individual developers and teams, Cody emphasizes consistency and quality across entire codebases by utilizing comprehensive context and shared prompts. It also extends its contextual understanding beyond code by integrating with tools like Notion, Linear, and Prometheus, thereby gathering a holistic view of the development environment. By leveraging the latest Large Language Models (LLMs), including Claude 3.5 Sonnet and GPT-4o, Cody offers tailored assistance that can be optimized for specific use cases, balancing speed and performance. Developers have reported significant productivity gains, with some noting time savings of approximately 5-6 hours per week and a doubling of coding speed when using Cody. -
3
MongoDB Atlas stands out as the leading cloud database service available, offering unparalleled data distribution and seamless mobility across all major platforms, including AWS, Azure, and Google Cloud. Its built-in automation tools enhance resource management and workload optimization, making it the go-to choice for modern application deployment. As a fully managed service, it ensures best-in-class automation and adheres to established practices that support high availability, scalability, and compliance with stringent data security and privacy regulations. Furthermore, MongoDB Atlas provides robust security controls tailored for your data needs, allowing for the integration of enterprise-grade features that align with existing security protocols and compliance measures. With preconfigured elements for authentication, authorization, and encryption, you can rest assured that your data remains secure and protected at all times. Ultimately, MongoDB Atlas not only simplifies deployment and scaling in the cloud but also fortifies your data with comprehensive security features that adapt to evolving requirements.
-
4
Files.com
Files.com
239 Ratings6,000+ companies trust Files.com to automate and secure business critical transfers. We obsess about security, compliance, reliability, and performance so your critical business processes just work every time. Easily manage any transfer flow without writing scripts or code, and onboard workloads and partners effortlessly. We support standard file transfer protocols (FTP, SFTP, AS2) for working with external partners and also provide native apps for high performance internal transfers. As a fully Cloud-Native SaaS, there are no servers for you to buy or maintain, there is no installation required, and high availability and redundancy are built in and free. Our InfoSec Program is audited annually by Kirkpatrick Price, a leading information security CPA firm. Our audit covers the scope of the entire Files.com business (not just datacenter operations) and names Files.com specifically. Beware of smaller competitors who try to pass off someone else’s audit as their own. Technical capabilities include encryption at-rest and in-transit, four types of two-factor authentication, nine enterprise identity (SSO) integrations, configurable password and session policies, and a perfect “A+” score from Qualys SSL Labs. -
5
Stonebranch
Stonebranch
123 RatingsStonebranch’s Universal Automation Center (UAC) is a Hybrid IT automation platform, offering real-time management of tasks and processes within hybrid IT settings, encompassing both on-premises and cloud environments. As a versatile software platform, UAC streamlines and coordinates your IT and business operations, while ensuring the secure administration of file transfers and centralizing IT job scheduling and automation solutions. Powered by event-driven automation technology, UAC empowers you to achieve instantaneous automation throughout your entire hybrid IT landscape. Enjoy real-time hybrid IT automation for diverse environments, including cloud, mainframe, distributed, and hybrid setups. Experience the convenience of Managed File Transfers (MFT) automation, effortlessly managing and orchestrating file transfers between mainframes and systems, seamlessly connecting with AWS or Azure cloud services. -
6
ClouDNS
ClouDNS
$2.95 per month 133 RatingsClouDNS provides a range of DNS hosting services, offering both free and premium options to meet various needs. Services include dynamic DNS, DDoS protection, GeoDNS, and advanced features like DNS Failover, DNSSEC, and Anycast DNS for faster and more reliable performance. The platform features a robust global network with a 10,000% uptime guarantee, ensuring consistent domain availability. Custom DNS solutions are available for hosting companies, along with SSL certificates and domain management tools. -
7
As a global IaaS solutions provider, phoenixNAP helps organizations of different sizes meet their IT performance, security, and scalability needs. Delivered from strategic edge locations in the U.S., Europe, Asia-Pacific, and Latin America, phoenixNAP's solutions are globally available, enabling businesses reach their target locales. Its colocation, HaaS, private and hybrid cloud, backup, disaster recovery, and security services are available on an opex-friendly model, providing flexibility and cost-efficiency. Based on world-class technologies, they provide redundancy, security, and advanced connectivity. Companies of all verticals and sizes can leverage phoenixNAP infrastructure for their evolving IT requirements at any stage of growth.
-
8
Whether you already have a platform team or are just at the beginning of your internal platform development, Cycloid is designed to complete your internal solution with high-quality building blocks focused on specific DevOps and hybrid cloud best practices. Self-service portal, cloud governance, RBAC, CI/CD pipelines, built-in FinOps, and GreenOps are all modules that you can pick and choose to complement your internal solution or begin your digital transformation. Like a piece of a puzzle, Git-based and lock-free Cycloid can fit into your organizational strategy and solve the burning issues at hand. We can be a pillar for your organizational transformation by empowering and upskilling your existing teams, as well as improving DevX, the developer experience. How? We offer an engineering platform dedicated to DevOps and hybrid cloud adoption, allowing you to optimize how DevOps and end-users use technologies and clouds while working in alignment on common projects.
-
9
Access and access management today have become more complex and frustrating. strongDM redesigns access around the people who need it, making it incredibly simple and usable while ensuring total security and compliance. We call it People-First Access. End users enjoy fast, intuitive, and auditable access to the resources they need. Administrators gain precise controls, eliminating unauthorized and excessive access permissions. IT, Security, DevOps, and Compliance teams can easily answer who did what, where, and when with comprehensive audit logs. It seamlessly and securely integrates with every environment and protocol your team needs, with responsive 24/7 support.
-
10
IBM® Cloud Automation Manager is a versatile, self-service management solution designed for multi-cloud environments, operating on IBM Cloud Private, which equips both developers and administrators to fulfill organizational needs. This platform enables seamless management and service delivery through comprehensive automation, while also allowing developers to create applications that adhere to corporate policies. By leveraging the power of IBM Watson®, users can optimize their operational landscape in just a few minutes. It provides the necessary flexibility for hybrid IT setups, enhances efficiency via self-service capabilities, and ensures governance through robust, enforceable policies along with insightful intelligence to maintain a secure and compliant IT framework. Additionally, developers gain the convenience of self-service access and the ability to automate the entire application lifecycle through the use of prebuilt automation packs, ultimately fostering a more agile and responsive development environment. With these features, organizations can not only streamline their processes but also ensure that their IT operations remain secure and compliant.
-
11
Massdriver
Massdriver
Free trial 3 RatingsAt Massdriver, we believe in prevention, not permission. Our self-service platform lets ops teams encode their expertise and your organization’s non-negotiables into pre-approved infrastructure modules—using familiar IaC tools like Terraform, Helm, or OpenTofu. Each module embeds policy, security, and cost controls, transforming raw configuration into functional software assets that streamline multi-cloud deployments across AWS, Azure, GCP, and Kubernetes. By centralizing provisioning, secrets management, and RBAC, Massdriver cuts overhead for ops teams while empowering developers to visualize and deploy resources without bottlenecks. Built-in monitoring, alerting, and metrics retention reduce downtime and expedite incident resolution, driving ROI through proactive issue detection and optimized spend. No more juggling brittle pipelines—ephemeral CI/CD automatically spins up based on the tooling in each module. Scale faster and safer with unlimited projects and cloud accounts while ensuring compliance at every step. Massdriver—fast by default, safe by design. -
12
GitHub
GitHub
$7 per month 22 RatingsGitHub stands as the leading platform for developers globally, renowned for its security, scalability, and community appreciation. By joining the ranks of millions of developers and businesses, you can contribute to the software that drives the world forward. Collaborate within the most inventive communities, all while utilizing our top-tier tools, support, and services. If you're overseeing various contributors, take advantage of our free GitHub Team for Open Source option. Additionally, GitHub Sponsors is available to assist in financing your projects. We're thrilled to announce the return of The Pack, where we’ve teamed up to provide students and educators with complimentary access to premier developer tools throughout the academic year and beyond. Furthermore, if you work for a recognized nonprofit, association, or a 501(c)(3), we offer a discounted Organization account to support your mission. With these offerings, GitHub continues to empower diverse users in their software development journeys. -
13
Microsoft Azure
Microsoft
21 RatingsMicrosoft Azure serves as a versatile cloud computing platform that facilitates swift and secure development, testing, and management of applications. With Azure, you can innovate purposefully, transforming your concepts into actionable solutions through access to over 100 services that enable you to build, deploy, and manage applications in various environments—be it in the cloud, on-premises, or at the edge—utilizing your preferred tools and frameworks. The continuous advancements from Microsoft empower your current development needs while also aligning with your future product aspirations. Committed to open-source principles and accommodating all programming languages and frameworks, Azure allows you the freedom to build in your desired manner and deploy wherever it suits you best. Whether you're operating on-premises, in the cloud, or at the edge, Azure is ready to adapt to your current setup. Additionally, it offers services tailored for hybrid cloud environments, enabling seamless integration and management. Security is a foundational aspect, reinforced by a team of experts and proactive compliance measures that are trusted by enterprises, governments, and startups alike. Ultimately, Azure represents a reliable cloud solution, backed by impressive performance metrics that validate its trustworthiness. This platform not only meets your needs today but also equips you for the evolving challenges of tomorrow. -
14
Confluence by Atlassian, a leading content collaboration tool for modern teams, is Confluence. It allows teams to collaborate, create, and share projects in one place. They can also easily publish and access company information and capture, store, and grow their knowledge. Confluence can also be used on mobile devices, allowing teams to track and give feedback, and keep in touch regardless of where they are.
-
15
Port is a platform that allows you to build no-code, holistic, internal developer portals. Port's software catalog includes microservices, custom assets, and can be used with any data model. It also supports in-context maturity scorecards. Portals allow developers to automate workflows and self-service actions.
-
16
Flex83 Application Enablement Platform enables you to reimagine IoT innovation. You can create compelling and powerful IoT solutions faster than ever before, and at a fraction the cost. - Use no-code workflows to build professional-grade connect/monitor/analyze/manage solutions fast. - Connect to virtually any device with low-code tools, add custom business logic, create custom dashboards and launch multiple applications. - Use the SaaS model to build and prove your solution. Then scale using a "pay-as-you-grow" model. With the right tools and workflows, you can create IoT applications that are sophisticated in a matter of hours. This allows you to quickly build what your customers or business need, without worrying about lengthy development cycles, underlying complexity or large budgets. You can iteratively improve your solution to expand your capabilities and drive greater customer value. The Flex83 platform has been tested on 65M devices. Flex83 is worth a try!
-
17
SonarQube Server
SonarSource
2 RatingsSonarQube Server serves as a self-hosted solution for ongoing code quality assessment, enabling development teams to detect and address bugs, vulnerabilities, and code issues in real time. It delivers automated static analysis across multiple programming languages, ensuring that the highest standards of quality and security are upheld throughout the software development process. Additionally, SonarQube Server integrates effortlessly with current CI/CD workflows, providing options for both on-premise and cloud deployments. Equipped with sophisticated reporting capabilities, it assists teams in managing technical debt, monitoring progress, and maintaining coding standards. This platform is particularly well-suited for organizations desiring comprehensive oversight of their code quality and security while maintaining high performance levels. Furthermore, SonarQube fosters a culture of continuous improvement within development teams, encouraging proactive measures to enhance code integrity over time. -
18
Snyk is the leader in developer security. We empower the world’s developers to build secure applications and equip security teams to meet the demands of the digital world. Our developer-first approach ensures organizations can secure all of the critical components of their applications from code to cloud, leading to increased developer productivity, revenue growth, customer satisfaction, cost savings and an overall improved security posture. Snyk is a developer security platform that automatically integrates with a developer’s workflow and is purpose-built for security teams to collaborate with their development teams.
- 19
-
20
Our Linux virtual machines simplify cloud infrastructure and provide a robust set of tools that make it easy to develop, deploy, scale, and scale modern applications faster and more efficiently. Linode believes virtual computing is essential to enable innovation in the cloud. It must be accessible, affordable, and easy. Our infrastructure-as-a-service platform is deployed across 11 global markets from our data centers around the world and is supported by our Next Generation Network, advanced APIs, comprehensive services, and vast library of educational resources. Linode products, services and people allow developers and businesses to create, deploy, scale, and scale applications in the cloud more efficiently and cost-effectively.
-
21
F5 Distributed Cloud Platform
F5
$25 per month 1 RatingThe F5 Distributed Cloud Platform offers enhanced features, robust security measures, and streamlined operations superior to those provided by native cloud services. This platform is specifically designed to cater to distributed applications operating in multi-cloud, on-premises, and edge settings. As software applications transition into microservices and increasingly rely on APIs, the emergence of complex and highly distributed architectures brings about challenges, escalated costs, and heightened risks. To effectively deliver applications, it is necessary to deploy and manage various appliances, software, and connectivity services. Conventional CDNs and hub-and-spoke networks fall short when it comes to supporting immersive or large-scale SaaS applications. With differing APIs, policies, and levels of observability, there is a pressing need for significant investments in automation. Applications that are distributed across various environments often face unequal protection levels. Furthermore, achieving alignment among DevOps, NetOps, and SecOps during service provisioning and security poses significant challenges, particularly when relying on ticket-based workflows, which can hinder efficiency and responsiveness. Addressing these complexities is crucial for optimizing the management of distributed applications. -
22
ServiceNow
ServiceNow
$100 per month 1 RatingEmbrace digital workflows and watch your team flourish. By leveraging advanced solutions, your organization can enhance productivity and foster greater employee engagement. ServiceNow revolutionizes the way work is done, transforming outdated manual processes into efficient digital workflows, ensuring that both employees and customers receive prompt and seamless support. With ServiceNow, you gain access to digital workflows that not only enhance user experiences but also boost overall productivity for both staff and the organization as a whole. Our platform streamlines work complexities through a unified cloud system, known as the Now Platform: an intelligent and user-friendly solution tailored for modern work environments. You can select from our pre-designed workflows or craft custom applications tailored to your needs. Built on the Now Platform, our diverse product portfolio addresses critical IT, Employee, and Customer Workflows, providing the enterprise solutions necessary for a thorough digital transformation. Elevate the experiences you offer and unleash the productivity you seek, now enhanced with native mobile functionalities for daily tasks across your organization. This transition to digital workflows is not just beneficial; it is essential for staying competitive in today's fast-paced business landscape. -
23
Cequence Security
Cequence Security
1 RatingProtect your APIs by analyzing and protecting them with passive, inline, or API-based integration with any network component, such as an API gateway, proxy or CDN. Predefined policies that are fine-tuned based on threat patterns, which have been used to protect billions of API transactions every day, provide unmatched protection. An API-based architecture and rich user interface allow integration with threat intelligence feeds and other security components. Patented ML based analysis eliminates JavaScript integration pen-alties like slow page loads, extended development cycles, and forced mobile-app upgrade. ML-based analysis generates a unique Behavioral Footprint to identify malicious intent and continuously tracks attackers as they retool. -
24
Genymotion
Genymobile
$0.05 per minute 1 RatingElevate your Android development teams by utilizing virtual devices that offer exceptional scalability. These devices support all major testing frameworks such as ADB, Appium, Espresso, and Robotium. They seamlessly integrate with leading continuous integration platforms like CircleCI, Bitrise, and Terraform. By eliminating nested virtualization, you can enhance the speed of your testing and operational processes, regardless of whether you have a dedicated GPU. Gain immediate access to limitless virtual devices that can operate concurrently for test sharding or parallel execution. The offering spans from Android 4.4 to the most recent versions, accommodating various screen sizes and supporting numerous platforms, including our own infrastructure as well as AWS, Google, Azure, and Alibaba. You maintain complete control over your infrastructure without any maintenance requirements, ensuring top-tier security and dependability for enterprise applications. Experience infinite scalability through cloud provider data centers, with dedicated GPUs available for select devices. Furthermore, you can emulate over 3000 unique virtual Android device configurations, including variations in Android versions, screen dimensions, and hardware capabilities, thereby enhancing your testing versatility. This comprehensive approach ensures that your Android teams are equipped with all the tools necessary for streamlined and effective development workflows. -
25
Jit's DevSecOps Orchestration Platform allows high-velocity Engineering teams to own product security while increasing dev velocity. With a unified and friendly developer experience, we envision a world where every cloud application is born with Minimal Viable Security (MVS) embedded and iteratively improves by adding Continuous Security into CI/CD/CS.
-
26
Enhance the security of web applications against various attacks and vulnerabilities by employing robust security measures and a consistent policy framework through our SaaS-based Web Application Firewall (WAF), which is designed for rapid deployment and effortless scalability in any environment. Streamline application security by integrating protective features directly into the development workflow, supported by essential security capabilities, centralized management, and comprehensive monitoring. The F5 Distributed Cloud WAF simplifies the challenges of maintaining secure applications across multiple cloud platforms, on-premises infrastructures, and edge environments. By providing the programmability essential for DevOps alongside the oversight required by SecOps, it facilitates quicker and safer application delivery and release processes. Additionally, users can enhance their understanding of security events, including WAF signature activations, denial-of-service incidents, ongoing automated threats, and all interactions with clients, while also gaining insight into application performance, complete with user-friendly drill-down options. This holistic approach ensures that security is not just an afterthought but an integral part of the development lifecycle.
-
27
DDI automation is designed to assist enterprises and service providers in swiftly launching services, preventing outages, and facilitating a smooth transition to cloud transformation. With a scalable DDI architecture, organizations can effectively address surges, cloud requirements, and automation challenges. This architecture not only offers superior performance but also ensures a more favorable total cost of ownership, enabling businesses to expand both horizontally and vertically. By utilizing our advanced fault prevention solutions, mission-critical networks can be safeguarded against ransomware, phishing, botnet attacks, malware, and spyware, effectively mitigating security breaches. TCPWave stands out by providing both speed and security to fulfill the demands of modern, secure network infrastructures. Unlike typical IPAM software, TCPWave is highly scalable and can adapt to evolving needs. It is unwise to attempt retrofitting a two-decade-old legacy system to meet the contemporary requirements of DevOps and CloudOps. The innovative TCPWave DDI, equipped with over 1500 REST APIs, is specifically crafted to cater to the needs of today’s enterprises right out of the box, ensuring they can thrive in a rapidly changing digital landscape. This comprehensive solution not only enhances operational efficiency but also positions organizations to be resilient against emerging cyber threats.
-
28
Activeeon ProActive
Activeeon
$10,000ProActive Parallel Suite, a member of the OW2 Open Source Community for acceleration and orchestration, seamlessly integrated with the management and operation of high-performance Clouds (Private, Public with bursting capabilities). ProActive Parallel Suite platforms offer high-performance workflows and application parallelization, enterprise Scheduling & Orchestration, and dynamic management of private Heterogeneous Grids & Clouds. Our users can now simultaneously manage their Enterprise Cloud and accelerate and orchestrate all of their enterprise applications with the ProActive platform. -
29
Ably
Ably
$49.99/month Ably is the definitive realtime experience platform. We power more WebSocket connections than any other pub/sub platform, serving over a billion devices monthly. Businesses trust us with their critical applications like chat, notifications and broadcast - reliably, securely and at serious scale. -
30
CodeScene
CodeScene
€18 per active author/month CodeScene's powerful features go beyond traditional code analysis. Visualize and evaluate all the factors that influence software delivery and quality, not just the code itself. Make informed, data-driven decisions based on CodeScene’s actionable insights and recommendations. CodeScene guides developers and technical leaders to: - Get a holistic overview and evolution of your software system in one single dashboard. - Identify, prioritize, and tackle technical debt based on return on investment. - Maintain a healthy codebase with powerful CodeHealth™ Metrics, spend less time on rework and more time on innovation. - Seamlessly integrate with Pull Requests and editors, get actionable code reviews and refactoring recommendations. - Set Improvement goals and quality gates for teams to work towards while monitoring the progress. - Support retrospectives by identifying areas for improvement. - Benchmark performance against personalized trends. - Understand the social side of the code, measure socio-technical factors like key personnel dependencies, knowledge sharing and inter-team coordination. -
31
Traceable
Traceable
$0Meet the Industry’s Context-Aware API Security Platform Traceable identifies all of your APIs, and evaluates your API risk posture, stops API attacks that lead to incidents such as data exfiltration, and provides analytics for threat hunting and forensic research. With our solution, you can confidently discover, manage and secure all of your APIs, quickly deploy, and easily scale to meet the ongoing needs of your organization. -
32
redirect.pizza
redirect.pizza
FreeYou can easily manage redirects using HTTPS support. redirect.pizza takes the hassle out of managing, hosting, and configuring your redirects. You get automatic HTTPS support, email forwarded, detailed traffic statistics, and much more. Start now and save yourself the hassle! -
33
env0
env0
$349 per monthenv0 is the best way to deploy and manage your IaC including Terraform, Terragrunt, CloudFormation, Kubernetes, and others. env0 enables users and teams to collaborate and manage self-service cloud deployments, and makes your DevOps, development, and SRE teams more efficient, effective, and impactful. -
34
GoLand
JetBrains
$199 per user per yearReal-time error detection and fix suggestions, along with swift and secure refactoring options that allow for easy one-step undo, intelligent code completion, the identification of unused code, and helpful documentation prompts, assist all Go developers—from beginners to seasoned experts—in crafting fast, efficient, and dependable code. Delving into and deciphering team projects, legacy code, or unfamiliar systems can be time-consuming and challenging. GoLand's navigation tools facilitate seamless movement through code by allowing instant transitions to shadowed methods, various implementations, usages, declarations, or interfaces tied to specific types. You can easily navigate between different types, files, or symbols, and assess their usages, all while benefiting from organized grouping by the type of usage. Additionally, integrated tools enable you to run and debug applications effortlessly, as you can write and test your code without needing extra plugins or complex configurations, all within the IDE environment. With a built-in Code Coverage feature, you can ensure that your tests are thorough and comprehensive, preventing any critical areas from being overlooked. This comprehensive set of tools ultimately streamlines the development process and enhances overall productivity. -
35
Loft
Loft Labs
$25 per user per monthWhile many Kubernetes platforms enable users to create and oversee Kubernetes clusters, Loft takes a different approach. Rather than being a standalone solution for managing clusters, Loft serves as an advanced control plane that enhances your current Kubernetes environments by introducing multi-tenancy and self-service functionalities, maximizing the benefits of Kubernetes beyond mere cluster oversight. It boasts an intuitive user interface and command-line interface, yet operates entirely on the Kubernetes framework, allowing seamless management through kubectl and the Kubernetes API, which ensures exceptional compatibility with pre-existing cloud-native tools. The commitment to developing open-source solutions is integral to our mission, as Loft Labs proudly holds membership with both the CNCF and the Linux Foundation. By utilizing Loft, organizations can enable their teams to create economical and efficient Kubernetes environments tailored for diverse applications, fostering innovation and agility in their workflows. This unique capability empowers businesses to harness the true potential of Kubernetes without the complexity often associated with cluster management. -
36
Accelario
Accelario
$0 Free Forever Up to 10GBDevOps can be simplified and privacy concerns eliminated by giving your teams full data autonomy via an easy-to use self-service portal. You can simplify access, remove data roadblocks, and speed up provisioning for data analysts, dev, testing, and other purposes. The Accelario Continuous DataOps platform is your one-stop-shop to all of your data needs. Eliminate DevOps bottlenecks, and give your teams high-quality, privacy-compliant information. The platform's four modules can be used as standalone solutions or as part of a comprehensive DataOps management platform. Existing data provisioning systems can't keep pace with agile requirements for continuous, independent access and privacy-compliant data in autonomous environments. With a single-stop-shop that provides comprehensive, high-quality, self-provisioning privacy compliant data, teams can meet agile requirements for frequent deliveries. -
37
Checkov
Prisma Cloud
FreeValidate modifications across numerous supported resource types in all leading cloud service providers. Conduct scans of cloud resources during the build phase to identify misconfigured settings using a straightforward Python policy-as-code framework. Examine the connections between cloud resources through Checkov’s graph-oriented YAML policies. Run, test, and adjust runner parameters within the context of a specific repository's CI/CD processes and version control systems. Customize Checkov to create your own unique policies, providers, and suppression terms. Avoid the deployment of misconfigurations by integrating this process into the current workflows of developers. Facilitate automated annotations on pull or merge requests in your repositories, eliminating the need to establish a CI pipeline or perform routine checks. The Bridgecrew platform will automatically review new pull requests and provide comments highlighting any policy violations it uncovers, ensuring continuous compliance and security improvements in your cloud infrastructure. This proactive approach helps maintain best practices and enhances the overall security posture of your cloud environment. -
38
Flawnter
CyberTest
$495Flawnter automates static application security testing to detect hidden security bugs and quality issues at the source. Flawnter is a great alternative to manual code review. It can speed up the process and find bugs you may not have noticed. You can either create your own extensions for Flawnter or use existing ones. Extensions allow you to test more bugs and expand your testing coverage. Extensions are easy and allow you to access Flawnter functionality. Flawnter has a simple and flexible pricing structure that makes it affordable for all sizes of organizations to improve their application code security. Other options are also available. -
39
Mage
Mage
FreeMage is a powerful tool designed to convert your data into actionable predictions effortlessly. You can construct, train, and launch predictive models in just a matter of minutes, without needing any prior AI expertise. Boost user engagement by effectively ranking content on your users' home feeds. Enhance conversion rates by displaying the most pertinent products tailored to individual users. Improve user retention by forecasting which users might discontinue using your application. Additionally, facilitate better conversions by effectively matching users within a marketplace. The foundation of successful AI lies in the quality of data, and Mage is equipped to assist you throughout this journey, providing valuable suggestions to refine your data and elevate your expertise in AI. Understanding AI and its predictions can often be a complex task, but Mage demystifies the process, offering detailed explanations of each metric to help you grasp how your AI model operates. With just a few lines of code, you can receive real-time predictions and seamlessly integrate your AI model into any application, making the entire process not only efficient but also accessible for everyone. This comprehensive approach ensures that you are not only utilizing AI effectively but also gaining insights that can drive your business forward. -
40
Onboardbase
Onboardbase
FreeOnboardbase is a secret management platform that provides a single source of shared truth regarding app secrets and usage. It allows dev teams to securely share and work together with environment-specific configurations at every stage of development, synced across infrastructure and without compromising security. This allows developers to focus on building great apps and not managing secrets. Secrets are dynamically updated across your infrastructure and environments with 50+ integrations. Dev teams can track and audit how long, where, and when secrets are used. They can also revoke any usage with a click. Strong, always-on codebase scanning features prevent developers accidentally leaking secrets into production. This maintains a strong security model. -
41
Panoptica
Cisco
$0Panoptica makes it easy for you to secure containers, APIs and serverless functions and manage your software bills of material. It analyzes both internal and external APIs, assigns risk scores, and then reports back to you. Your policies determine which API calls the gateway allows or disables. Cloud-native architectures enable teams to develop and deploy software faster, keeping up with today's market. However, this speed comes at a cost: security. Panoptica fills these gaps by integrating automated policy-based security and visibility at every stage of the software-development process. The number of attack points has increased significantly with the decentralized cloud-native architectures. Changes in the computing landscape have also increased the risk of security breaches. Here are some reasons why comprehensive security is so important. A platform that protects all aspects of an application's lifecycle, from development to runtime, is essential. -
42
IBM NS1 Connect
IBM
$250/month IBM NS1 Connect offers premium, authoritative DNS & advanced traffic steering to deliver the high-performance, reliable, secure network connectivity that businesses need to meet increasingly sophisticated customer expectations through our: Global anycast network: Providing massive capacity & scale needed to keep users reliably connected across the world. API-first Architecture: Easily integrate & automate all NS1 Connect function. HTTPS Redirects: Manage every element of your HTTPS redirects from one platform. GSLB and RUM-based traffic steering: Balance loads at a global scale & reduce latency with near-real-time device performance data DDoS Attack Protection: Ensuring sufficient capacity to absorb traffic spikes & controls in place to guard against automated “junk” queries. NS1 Connect offers add-on options to suite your business needs including: DNS Insights: Providing the data you need to quickly identify & deal with misconfigurations impacting application performance. Dedicated DNS: Stay up & running with a native secondary DNS resolution infrastructure for seamless continuity of operations. DNS Traffic Steering: Optimize connections to applications, services & content based on geography, RUM data, load and more. -
43
SonarQube Cloud
SonarSource
€10 per monthEnhance your productivity by ensuring only high-quality code is released, as SonarQube Cloud (previously known as SonarCloud) seamlessly evaluates branches and enriches pull requests with insights. Identify subtle bugs to avoid unpredictable behavior that could affect users and address security vulnerabilities that threaten your application while gaining knowledge of application security through the Security Hotspots feature. Within moments, you can begin using the platform right where your code resides, benefiting from immediate access to the most current features and updates. Project dashboards provide vital information on code quality and readiness for release, keeping both teams and stakeholders in the loop. Showcase project badges to demonstrate your commitment to excellence within your communities. Code quality and security are essential across your entire technology stack, encompassing both front-end and back-end development. That’s why we support a wide range of 24 programming languages, including Python, Java, C++, and many more. The demand for transparency in coding practices is on the rise, and we invite you to be a part of this movement; it's completely free for open-source projects, making it an accessible opportunity for all developers! Plus, by participating, you contribute to a larger community dedicated to improving software quality. -
44
JupiterOne
JupiterOne
$2000 per monthGo beyond asset management. Turn complexity into capability. Our cyber asset analysis platform empowers security teams by providing total visibility into the assets, context and risks that make up their attack surface. With JupiterOne, organizations transform asset visibility from frustration into strength. -
45
Honeycomb
Honeycomb.io
$70 per monthElevate your log management with Honeycomb, a platform designed specifically for contemporary development teams aiming to gain insights into application performance while enhancing log management capabilities. With Honeycomb’s rapid query functionality, you can uncover hidden issues across your system’s logs, metrics, and traces, utilizing interactive charts that provide an in-depth analysis of raw data that boasts high cardinality. You can set up Service Level Objectives (SLOs) that reflect user priorities, which helps in reducing unnecessary alerts and allows you to focus on what truly matters. By minimizing on-call responsibilities and speeding up code deployment, you can ensure customer satisfaction remains high. Identify the root causes of performance issues, optimize your code efficiently, and view your production environment in high resolution. Our SLOs will alert you when customers experience difficulties, enabling you to swiftly investigate the underlying problems—all from a single interface. Additionally, the Query Builder empowers you to dissect your data effortlessly, allowing you to visualize behavioral trends for both individual users and services, organized by various dimensions for enhanced analytical insights. This comprehensive approach ensures that your team can respond proactively to performance challenges while refining the overall user experience. -
46
Octopus Deploy
Octopus Deploy
FreeOctopus Deploy was founded in 2012 and has enabled successful deployments for more than 25,000 companies worldwide. Octopus Deploy was the first release orchestration and DevOps automation tool. They were limited to large enterprises, slow, and didn't deliver on their promises. Octopus Deploy was first to be adopted by software teams. We continue to innovate new ways for Dev & Ops to automate releases and deliver software to production. Octopus Deploy provides a single location for your team: - Manage releases - Automate complex application deployments - Automate routine or emergency operations tasks Octopus is different because it focuses on repeatable, reliable deployments and has a deep understanding about how software teams work. Octopus is our philosophy about what makes good automation. This philosophy has been refined over a decade of many thousands of successful deployments. Octopus is designed to handle the most complex deployments. -
47
Datree
Datree.io
$10 per user per monthPrevent misconfigurations rather than halting deployments through automated policy enforcement for Infrastructure as Code. Implement policies designed to avert misconfigurations across platforms like Kubernetes, Terraform, and CloudFormation, thereby ensuring application stability with automated testing for policy infringements or potential issues that could disrupt services or negatively impact performance. Transition to cloud-native infrastructure with reduced risk by utilizing pre-defined policies, or tailor your own to fulfill unique needs. Concentrate on enhancing your applications instead of getting bogged down by infrastructure management by enforcing standard policies applicable to various infrastructure orchestrators. Streamline the process by removing the necessity for manual code reviews for infrastructure-as-code adjustments, as checks are automatically conducted with each pull request. Maintain your current DevOps practices with a policy enforcement system that harmonizes effortlessly with your existing source control and CI/CD frameworks, allowing for a more efficient and responsive development cycle. This approach not only enhances productivity but also fosters a culture of continuous improvement and reliability in software deployment. -
48
IriusRisk
IriusRisk
IriusRisk is an open Threat Modeling platform that can be used by any development and operations team – even those without prior security training. Whether your organization follows a framework or not, we can work with all the threat modeling methodologies, such as STRIDE, TRIKE, OCTAVE and PASTA. We support organisations in financial services, insurance, industrial automation, healthcare, private sector and more. IriusRisk is the industry's leading threat modeling and secure design solution in Application Security. With enterprise clients including Fortune 500 banks, payments, and technology providers, it empowers security and development teams to ensure applications have security built-in from the start - using its powerful threat modeling platform. Whether teams are implementing threat modeling from scratch, or scaling-up their existing operations, the IriusRisk approach results in improved speed-to-market, collaboration across security and development teams, and the avoidance of costly security flaws. -
49
DeepSource
DeepSource
$12 per user per monthDeepSource streamlines the process of identifying and resolving code issues during reviews, including risks of bugs, anti-patterns, performance bottlenecks, and security vulnerabilities. Setting it up with your Bitbucket, GitHub, or GitLab account takes under five minutes, making it incredibly convenient. It supports various programming languages such as Python, Go, Ruby, and JavaScript. Additionally, DeepSource encompasses all essential programming languages, Infrastructure-as-Code capabilities, secret detection, code coverage, and much more. This means you can rely solely on DeepSource for code protection. Initiate your development with the most advanced static analysis platform, ensuring that you catch bugs before they make their way into production. It boasts the largest array of static analysis rules available in the market. Your team will benefit from having a centralized location to monitor and address code health effectively. With DeepSource, code formatting can be automated, ensuring your CI pipeline remains intact without style violations disrupting the process. Furthermore, it can automatically generate and implement fixes for detected issues with just a few clicks, enhancing your team's productivity and efficiency. -
50
Authress
Rhosys
$1.10 per monthAuthress offers a comprehensive Authentication API tailored for B2B needs. While authentication may seem straightforward at first glance, the intricacies of authorization can quickly escalate, making it unwise to navigate this complexity alone. Achieving robust authorization is a time-consuming endeavor; an average software team might spend around 840 hours developing authorization logic for basic scenarios, and this effort can multiply as additional features are integrated into the application. Lacking the necessary expertise exposes your organization to significant security vulnerabilities, potentially leading to breaches of user data, non-compliance with regulatory standards, and substantial financial repercussions. * Secure authorization API—Rather than constructing your own authorization framework, leverage our API for seamless integration. * Granular permissions—Establish various access levels and categorize them according to user roles, allowing for as much detail as needed. * Identity Provider integrations—Effortlessly connect your chosen identity providers through a straightforward API call. * SSO and comprehensive user management—Enjoy streamlined single sign-on capabilities along with complete control over user administration, ensuring a secure and efficient user experience.