18.0
Terraform is an infrastructure-as-code tool for defining and managing cloud and on-premises resources with human-readable configuration files.
Free planWebAPILinux
Best Infrastructure Policy as Code Tools in 2026
Infrastructure policy as code tools help you express rules for infrastructure and apply them across deployment workflows. Compare IaC formats and policy languages to see what each tool can work with, then consider where enforcement belongs: CI/CD integration, admission control, or runtime enforcement. Policy testing and reporting offer further ways to assess how rules are checked and surfaced. Google Cloud Terraform…
27.7
AWS CloudFormation models, provisions, and manages related AWS and third-party resources as infrastructure as code.
Free planiOSWebAPI
37.7
Kyverno is a free, open-source policy engine designed for Kubernetes.
Free planOpen sourceWebAPILinux
- 4
Open Policy Agent Gatekeeper
Open Policy Agent Gatekeeper is a free, open-source policy controller for Kubernetes.
Free planOpen sourceAPILinuxSelf-hosted7.2Free plan - 5
Fairwinds Polaris
Fairwinds Polaris is an open source policy engine that validates and can remediate Kubernetes resource configuration.
Free planWebLinuxmacOSSelf-hosted7.1Free plan - 6
Google Cloud Organization Policy
Google Cloud Organization Policy gives administrators centralized, programmatic control over Google Cloud resources by applying constraints across an…
Free planWebAPILinuxmacOS7.1Free plan - 7
Conftest
Conftest is a free utility for testing structured configuration data, designed especially for CI environments.
Free planLinuxmacOSWindows6.8Free plan - 8
Open Policy Agent
Open Policy Agent (OPA) is a free, open-source policy engine for separating policy decisions from the systems that enforce them.
Free planWebAPILinuxmacOS6.8Free plan - 9
Google Cloud Terraform Policy Validation
Google Cloud Terraform Policy Validation checks Terraform plans against organizational security and governance constraints before infrastructure changes are applied.
Free planLinuxmacOSWindows6.7Free plan - 10
Firefly
Firefly automates cloud infrastructure through Infrastructure-as-Code and helps teams govern cloud environments and recover from outages and cyberattacks.
WebAPISelf-hosted6.4From $2,499 a month - 11
Checkov
Checkov is a free infrastructure-as-code scanner that identifies misconfigurations that may create security or compliance problems.
Free planLinuxmacOS6.2Free plan - 12
Cloud Custodian
Cloud Custodian manages cloud resources through policies written in YAML.
Free planLinuxmacOSSelf-hostedWindows6.2Free plan - 13
KICS
KICS is an open-source static code analysis solution for finding security vulnerabilities, compliance issues, and infrastructure misconfigurations in…
Free planLinuxmacOSSelf-hostedWindows6.2Free plan - 14
Kubewarden
Kubewarden is an open-source security platform for Kubernetes workloads, with components that can be used together or independently.
LinuxmacOSSelf-hostedWindows6.1 - 15
PolicyForge
PolicyForge is an open-source policy-as-code scanner for infrastructure-as-code, aimed at teams working with Terraform, Bicep, Kubernetes manifests, or Helm charts.
Free planWebLinuxSelf-hosted6.1Free plan - 16
KubeLinter
KubeLinter is a free static analyzer for Kubernetes configuration files.
Free planLinuxmacOSSelf-hosted6.0Free plan - 17
terraform-compliance
terraform-compliance is a free, open-source framework for testing Terraform infrastructure code against security and compliance policies before deployment.
Free planLinuxSelf-hosted5.9Free plan - 18
Tirith
Tirith is a free, open-source command-line tool for evaluating infrastructure documents against JSON policies.
Free planLinux5.8Free plan - 19
Nirmata Enterprise for Kyverno
Nirmata Enterprise for Kyverno is a supported, OSS-compatible distribution of the Kyverno Kubernetes policy engine.
LinuxSelf-hosted5.5From $14,800 a year - 20
Terraform Test Framework
Terraform Test Framework, or TF2, is a free, open-source framework for testing Terraform code and Terraform-provisioned infrastructure.
LinuxSelf-hosted5.2 - 21
AWS CloudFormation Guard
LinuxmacOSWindows4.8 - 22
Chef InSpec
LinuxmacOSWindows4.8 - 23
Azure Policy
Azure Policy is a free web service for defining and applying rules to Azure resources.
Web4.7 - 24
HashiCorp Sentinel
LinuxmacOSWindows4.7 - 254.6