Terraform
Provisioning & SecurityTerraform is an infrastructure-as-code tool: you write declarative config (HCL) describing the cloud resources you want, and Terraform figures out the plan to create, update, or destroy infrastructure to match that state.
What it is
Terraform is an infrastructure-as-code tool: you write declarative config (HCL) describing the cloud resources you want, and Terraform figures out the plan to create, update, or destroy infrastructure to match that state. It's the de facto standard for provisioning across AWS, Azure, GCP, and hundreds of other providers via its plugin ecosystem. Core mechanics: state file, plan/apply workflow, provider abstraction. Category here is listed as Provisioning — accurate; it's not a config management tool or a CI/CD tool, it's specifically about standing up and tearing down infrastructure.
Who builds it and why
Originally built by HashiCorp. Contributor count (2,331) reflects a genuinely broad community — provider maintainers, module authors, and core contributors — not just a single vendor team, though HashiCorp still drives core direction and release cadence. Latest release is v1.15.7, and commits are landing as recently as July 2026, so this is actively maintained, not coasting.
The license field shows NOASSERTION, which is worth flagging directly: HashiCorp moved Terraform from MPL 2.0 to the Business Source License (BSL) in 2023, restricting commercial competing use. That single decision fractured the ecosystem and produced the OpenTofu fork under the Linux Foundation. If you care about license terms for redistribution or building a competing product, read the actual license text yourself — don't assume MPL-era assumptions still apply.
CNCF maturity: not publicly available — and for good reason, Terraform was never a CNCF project. It lives under HashiCorp/IBM governance now, separate from CNCF's graduation ladder.
Production readiness signal
48,748 GitHub stars and 2,331 contributors indicate a massive, battle-tested user base — this isn't an experimental tool. Commit activity through mid-2026 and a recent stable release (v1.15.7) show the project isn't stagnant. Founded date isn't publicly listed here, but Terraform has been running production infrastructure at scale for over a decade at this point — the maturity of the tool itself isn't in question, even if some metadata fields are thin.
Who should use this
- Teams managing multi-cloud or hybrid infrastructure who need one tool and one state model across providers.
- Platform teams building internal modules/self-service infra for other teams.
- Anyone who needs plan-before-apply visibility and drift detection as a core workflow, not an afterthought.
- Organizations already invested in the HashiCorp ecosystem (Vault, Consul) where integration matters.
Who should NOT use this
- Teams that need real-time, event-driven infrastructure changes — Terraform's plan/apply cycle is inherently batch-oriented, not reactive.
- Small shops running a handful of resources on a single cloud — a cloud-native tool like CloudFormation or Pulumi's lighter modes may have less overhead.
- Anyone allergic to HCL who wants infra defined in a general-purpose language with full programming constructs (loops, real conditionals) — Terraform's language is deliberately constrained.
- Organizations sensitive to licensing risk who can't accept BSL terms — evaluate OpenTofu instead before committing.
- Teams that need strong day-2 operational tooling (patching, config drift remediation) built in — Terraform provisions, it doesn't manage ongoing state; you'll need something else alongside it.
Alternatives
- OpenTofu — direct open-source fork of Terraform pre-BSL, drop-in compatible, community-governed under Linux Foundation.
- Pulumi — same IaC model but uses general-purpose languages (Python, TypeScript, Go) instead of HCL, appealing if your team wants real programming constructs.
- AWS CloudFormation / Azure Bicep — cloud-native, single-provider alternatives with tighter integration if you're not multi-cloud and want to avoid third-party state management.
Pricing
Terraform CLI itself is free to use under its current license (BSL, not fully open source since the 2023 change — check terms if you're building a competing commercial product). HashiCorp monetizes through Terraform Cloud/Enterprise (state management, policy-as-code, collaboration features) with tiered paid plans. If license purity matters to you, OpenTofu is the fully open-source (MPL 2.0) path forward.