24 alternatives · from infrastructure policy as code tools

Alternatives to Open Policy Agent

Open Policy Agent is a free, open-source policy engine for separating decisions from enforcement. Rego handles complex hierarchical data, while OPA evaluates arbitrary structured input and returns structured output through REST, Go, WebAssembly, or custom evaluators. It can govern microservices, Kubernetes, CI/CD pipelines, and API gateways, distribute policies with bundles, expose health and decision-log interfaces, and run on Linux, macOS, Windows, Docker, or as a…

18.0

Terraform

Terraform is an infrastructure-as-code tool for defining and managing cloud and on-premises resources with human-readable configuration files.

Free planWebAPILinux

Free plan

Visit Details

27.7

AWS CloudFormation

AWS CloudFormation models, provisions, and manages related AWS and third-party resources as infrastructure as code.

Free planiOSWebAPI

Free plan

Visit Details

37.7

Kyverno

Kyverno is a free, open-source policy engine designed for Kubernetes.

Free planOpen sourceWebAPILinux

Free plan

Visit Details

4
Open Policy Agent Gatekeeper
Open Policy Agent Gatekeeper is a free, open-source policy controller for Kubernetes.
Free planOpen sourceAPILinuxSelf-hosted
7.2Free plan
Visit
5
Fairwinds Polaris
Fairwinds Polaris is an open source policy engine that validates and can remediate Kubernetes resource configuration.
Free planWebLinuxmacOSSelf-hosted
7.1Free plan
Visit
6
Google Cloud Organization Policy
Google Cloud Organization Policy gives administrators centralized, programmatic control over Google Cloud resources by applying constraints across an…
Free planWebAPILinuxmacOS
7.1Free plan
Visit
7
Conftest
Conftest is a free utility for testing structured configuration data, designed especially for CI environments.
Free planLinuxmacOSWindows
6.8Free plan
Visit
8
Google Cloud Terraform Policy Validation
Google Cloud Terraform Policy Validation checks Terraform plans against organizational security and governance constraints before infrastructure changes are applied.
Free planLinuxmacOSWindows
6.7Free plan
Visit
9
Firefly
Firefly automates cloud infrastructure through Infrastructure-as-Code and helps teams govern cloud environments and recover from outages and cyberattacks.
WebAPISelf-hosted
6.4From $2,499 a month
Visit
10
Checkov
Checkov is a free infrastructure-as-code scanner that identifies misconfigurations that may create security or compliance problems.
Free planLinuxmacOS
6.2Free plan
Visit
11
Cloud Custodian
Cloud Custodian manages cloud resources through policies written in YAML.
Free planLinuxmacOSSelf-hostedWindows
6.2Free plan
Visit
12
KICS
KICS is an open-source static code analysis solution for finding security vulnerabilities, compliance issues, and infrastructure misconfigurations in…
Free planLinuxmacOSSelf-hostedWindows
6.2Free plan
Visit
13
Kubewarden
Kubewarden is an open-source security platform for Kubernetes workloads, with components that can be used together or independently.
LinuxmacOSSelf-hostedWindows
6.1
Visit
14
PolicyForge
PolicyForge is an open-source policy-as-code scanner for infrastructure-as-code, aimed at teams working with Terraform, Bicep, Kubernetes manifests, or Helm charts.
Free planWebLinuxSelf-hosted
6.1Free plan
Visit
15
KubeLinter
KubeLinter is a free static analyzer for Kubernetes configuration files.
Free planLinuxmacOSSelf-hosted
6.0Free plan
Visit
16
terraform-compliance
terraform-compliance is a free, open-source framework for testing Terraform infrastructure code against security and compliance policies before deployment.
Free planLinuxSelf-hosted
5.9Free plan
Visit
17
Tirith
Tirith is a free, open-source command-line tool for evaluating infrastructure documents against JSON policies.
Free planLinux
5.8Free plan
Visit
18
Nirmata Enterprise for Kyverno
Nirmata Enterprise for Kyverno is a supported, OSS-compatible distribution of the Kyverno Kubernetes policy engine.
LinuxSelf-hosted
5.5From $14,800 a year
Visit
19
Terraform Test Framework
Terraform Test Framework, or TF2, is a free, open-source framework for testing Terraform code and Terraform-provisioned infrastructure.
LinuxSelf-hosted
5.2
Visit
20
AWS CloudFormation Guard
LinuxmacOSWindows
4.8
Visit
21
Chef InSpec
LinuxmacOSWindows
4.8
Visit
22
Azure Policy
Azure Policy is a free web service for defining and applying rules to Azure resources.
Web
4.7
Visit
23
HashiCorp Sentinel
LinuxmacOSWindows
4.7
Visit
24
Google Cloud Policy Controller
Web
4.6
Visit

Back to Open Policy Agent