● Beta — KubeEra is in active development. Profiles are live; AI-perception measurement is rolling out.
KubeEra
O

OpenTofu

SandboxProvisioning & Security
Open source · CNCF · CNCF Sandbox · MPL-2.0

OpenTofu is an open source infrastructure-as-code tool for provisioning and managing cloud and on-prem infrastructure through declarative configuration.

updated 2026-07-01

What it is

OpenTofu is an open source infrastructure-as-code tool for provisioning and managing cloud and on-prem infrastructure through declarative configuration. It's a fork of Terraform, created after HashiCorp switched Terraform's license from MPL-2.0 to BUSL in 2023. OpenTofu maintains state-based provisioning, provider plugins, and a config language (HCL) largely compatible with existing Terraform codebases, while adding features HashiCorp has been slower to ship — like native state encryption and improved for_each support for provider instances.

Who builds it and why

OpenTofu is a Linux Foundation project, currently in CNCF sandbox, backed by a coalition that includes Gruntwork, Spacelift, Harness, Env0, Scalr, and other infra-tooling vendors who had a direct commercial stake in Terraform staying open source. It's not a single-vendor project pretending to be community-run — the governance and contributor base genuinely spans multiple competing companies, which is unusual and mostly a good sign for long-term neutrality. 2,348 contributors and continued active commits indicate real engineering investment, not just a fork that got attention and stalled.

Production readiness signal

29,287 GitHub stars and 2,348 contributors is a large, active base for a two-year-old fork. Latest release is v1.12.3, suggesting a mature, iterating release cadence rather than a 0.x experiment. CNCF sandbox status means it's early in CNCF's formal maturity ladder — sandbox is the entry tier, not an endorsement of production hardening by CNCF itself. That said, OpenTofu isn't "early" in the way a sandbox project usually is: it launched as a drop-in replacement for a tool already running in production everywhere, so its real-world battle-testing significantly outpaces its CNCF tier. MPL-2.0 licensing removes the legal ambiguity that drove the fork in the first place.

Who should use this

  • Teams currently on Terraform who want to stay fully open source and avoid BUSL licensing terms or HashiCorp's commercial roadmap.
  • Platform teams building internal developer platforms or CI/CD pipelines who need a provisioning engine with no vendor lock-in risk.
  • Organizations that need state encryption at rest without paying for Terraform Cloud/Enterprise.
  • Anyone already running Terraform ≤1.5.x — migration is close to a drop-in swap for most configs and providers.

Who should NOT use this

  • Teams deep into Terraform Cloud/Enterprise-specific features (Sentinel policies, HCP-specific integrations) — those don't port over and OpenTofu's ecosystem equivalents are newer and less mature.
  • Shops that need guaranteed long-term commercial support contracts with an SLA from a single vendor — OpenTofu's support model is distributed across member companies, not a single throat to choke.
  • Teams wanting cutting-edge Terraform features the moment HashiCorp ships them — OpenTofu sometimes lags on parity for brand-new HashiCorp-only functionality, and provider vendors occasionally prioritize Terraform-first.
  • Organizations that are provider-agnostic-indifferent and already happy paying for Terraform Cloud — if BUSL licensing isn't a business concern for you, switching costs may not be worth it yet.

Alternatives

  • Terraform — the original tool OpenTofu forked from; still the larger ecosystem and provider-first target for most vendors, but BUSL-licensed.
  • Pulumi — IaC using general-purpose languages (TypeScript, Python, Go) instead of HCL, better for teams wanting real programming constructs over declarative config.
  • AWS CDK / CDKTF — code-first infrastructure definition that compiles to CloudFormation or Terraform, useful if you want to stay in a single application language and are AWS-centric (CDK) or want CDKTF's Terraform provider ecosystem without HCL.

Pricing

Fully open source, MPL-2.0 licensed, no paid tier from the OpenTofu project itself. Commercial support and hosted state/CI platforms are available from member companies (Spacelift, Env0, Scalr, Harness) as separate paid products, but the core tool has no license cost or usage limits.

Frequently asked

What is OpenTofu?+
OpenTofu is an open source infrastructure-as-code tool for provisioning and managing cloud and on-prem infrastructure through declarative configuration. It's a fork of Terraform, created after HashiCorp switched Terraform's license from MPL-2.0 to BUSL in 2023.
Who builds OpenTofu?+
OpenTofu is a Linux Foundation project, currently in CNCF sandbox, backed by a coalition that includes Gruntwork, Spacelift, Harness, Env0, Scalr, and other infra-tooling vendors who had a direct commercial stake in Terraform staying open source.
Is OpenTofu production ready?+
29,287 GitHub stars and 2,348 contributors is a large, active base for a two-year-old fork. Latest release is v1.12.3, suggesting a mature, iterating release cadence rather than a 0.x experiment.
Who should use OpenTofu?+
Teams currently on Terraform who want to stay fully open source and avoid BUSL licensing terms or HashiCorp's commercial roadmap. Platform teams building internal developer platforms or CI/CD pipelines who need a provisioning engine with no vendor lock-in risk.
Who should not use OpenTofu?+
Teams deep into Terraform Cloud/Enterprise-specific features (Sentinel policies, HCP-specific integrations) — those don't port over and OpenTofu's ecosystem equivalents are newer and less mature.
What are the alternatives to OpenTofu?+
Terraform — the original tool OpenTofu forked from; still the larger ecosystem and provider-first target for most vendors, but BUSL-licensed. Pulumi — IaC using general-purpose languages (TypeScript, Python, Go) instead of HCL, better for teams wanting real programming constructs over declarative config.
How much does OpenTofu cost?+
Fully open source, MPL-2.0 licensed, no paid tier from the OpenTofu project itself. Commercial support and hosted state/CI platforms are available from member companies (Spacelift, Env0, Scalr, Harness) as separate paid products, but the core tool has no license cost or usage limits.