📋 GitOps Tools

Akuity

Enterprise Argo CD, from the creators.

A managed cloud platform offering enterprise-grade Argo CD, founded by the creators of the Argo project.

For more tool information ➜

Northflank

The full-stack cloud platform.

A full-stack deployment platform that uses bidirectional GitOps to manage applications, jobs, and infrastructure.

For more tool information ➜

Spacelift

The most flexible and sophisticated CI/CD for Infrastructure as Code.

A specialized CI/CD platform for Infrastructure as Code (IaC) that supports GitOps workflows.

For more tool information ➜

Akuity Platform

The Enterprise Platform for Argo.

A fully-managed SaaS platform for Argo CD, created by the founders of the Argo project.

For more tool information ➜

Spacelift

The most flexible and collaborative CI/CD for Infrastructure as Code.

A specialized CI/CD platform for Infrastructure as Code (IaC) that uses GitOps principles to manage infrastructure.

For more tool information ➜

Semgrep

Static analysis at ludicrous speed.

A fast, open-source, static analysis tool for finding bugs and enforcing code standards.

For more tool information ➜

env0

The complete platform to manage your IaC.

An automation platform for managing Infrastructure as Code (IaC) environments.

For more tool information ➜

Scalr

The Terraform Automation & Collaboration Platform.

A remote state and operations backend for Terraform, designed to provide a GitOps workflow for infrastructure.

For more tool information ➜

Argo CD

Declarative continuous delivery for Kubernetes.

An open-source, declarative, GitOps continuous delivery tool for Kubernetes.

For more tool information ➜

Atlantis

Terraform Pull Request Automation.

An open-source tool that automates Terraform pull request workflows, enabling a GitOps approach for infrastructure.

For more tool information ➜

SpectralOps

Automated code security for developers.

A developer-first security tool that scans code, configuration, and other artifacts for secrets, security misconfigurations, and vulnerabilities.

For more tool information ➜

Portainer

The simple, powerful, and open-source way to manage containers.

A universal container management platform that provides a UI to manage Docker, Swarm, and Kubernetes, including multi-cluster GitOps.

For more tool information ➜

HashiCorp Vault

Manage secrets and protect sensitive data.

A tool for securely accessing secrets. A secret is anything that you want to tightly control access to, such as API keys, passwords, or certificates.

For more tool information ➜

Rancher

Unified Kubernetes Management. From datacenter to cloud to edge.

An open-source platform for managing multiple Kubernetes clusters across any infrastructure.

For more tool information ➜

GitHub Actions

Automate your workflow from idea to production.

An automation and CI/CD platform integrated directly into GitHub.

For more tool information ➜

Argo CD

Declarative continuous delivery for Kubernetes.

A declarative, GitOps continuous delivery tool for Kubernetes.

For more tool information ➜

Terraform Cloud

Provision, and manage any cloud, infrastructure, or service.

A managed service from HashiCorp to collaborate on Terraform workflows.

For more tool information ➜

Argo CD

Declarative GitOps continuous delivery for Kubernetes.

An open-source, declarative, GitOps continuous delivery tool specifically for Kubernetes applications.

For more tool information ➜

Crossplane

The cloud native control plane framework.

An open-source Kubernetes add-on that enables GitOps for managing cloud infrastructure and services.

For more tool information ➜

Octopus Deploy

Happy deployments.

A deployment automation and release orchestration tool that supports GitOps workflows for both modern and traditional applications.

For more tool information ➜

Octopus Deploy

Reliable, repeatable, and traceable deployments.

A unified DevOps automation platform for release management, deployment automation, and operations.

For more tool information ➜

GitHub Actions

Automate your workflow from idea to production.

A CI/CD and workflow automation platform built into GitHub, which can be used to implement GitOps workflows.

For more tool information ➜

Snyk

Developer security that helps you build secure applications and secure your cloud, from code to cloud.

A developer-first security platform for finding and fixing vulnerabilities in code, dependencies, containers, and IaC.

For more tool information ➜

Argo CD

Declarative, GitOps continuous delivery for Kubernetes.

A declarative, GitOps continuous delivery tool for Kubernetes.

For more tool information ➜

Coralogix

Log Analytics, Reimagined.

A stateful streaming data platform for logs, metrics, and traces.

For more tool information ➜

Lightstep

The observability platform for modern applications.

An observability platform focused on distributed tracing and service health.

For more tool information ➜

Honeycomb

The observability platform for modern engineering teams.

An observability platform for debugging production systems.

For more tool information ➜

Snyk

Developer security. Built for you, and the way you work.

A developer-first security platform for finding and fixing vulnerabilities.

For more tool information ➜

Harness

The Modern Software Delivery Platform.

An end-to-end platform for intelligent software delivery.

For more tool information ➜

GitLab

The One DevOps Platform.

A single application for the entire DevOps lifecycle.

For more tool information ➜

Dynatrace

Software intelligence for the enterprise cloud.

An all-in-one platform for observability, AIOps, and application security.

For more tool information ➜

Sysdig

Secure your cloud from source to run.

A cloud security platform that provides threat detection and response.

For more tool information ➜

Flux CD

The GitOps family of projects. A set of continuous and progressive delivery solutions for Kubernetes.

An open-source, extensible GitOps toolkit for Kubernetes that automates deployments from Git.

For more tool information ➜

Harness

The Modern Software Delivery Platform.

An enterprise software delivery platform that includes a GitOps-as-a-Service module.

For more tool information ➜

Prometheus

From metrics to insight.

An open-source monitoring and alerting toolkit.

For more tool information ➜

GitLab

The DevSecOps Platform.

An all-in-one DevSecOps platform that incorporates GitOps workflows using an agent for Kubernetes.

For more tool information ➜

Pulumi

Cloud Infrastructure with Code.

An open-source Infrastructure as Code tool that uses general-purpose programming languages and can be used in GitOps workflows.

For more tool information ➜

Flux CD

The GitOps family of projects. One CNCF project to rule them all!

A set of continuous and progressive delivery solutions for Kubernetes that are open and extensible.

For more tool information ➜

Flux CD

The GitOps family of projects.

A set of continuous and progressive delivery solutions for Kubernetes that are open and extensible.

For more tool information ➜

Harness

The AI-powered software delivery platform.

An end-to-end platform for software delivery, including CI, CD, GitOps, and more.

For more tool information ➜

Pulumi

Infrastructure as Code in any programming language.

An open-source IaC platform that lets you use general-purpose programming languages.

For more tool information ➜

Red Hat OpenShift GitOps

Automate and simplify Kubernetes application delivery.

An operator that brings Argo CD and other GitOps tools to the Red Hat OpenShift platform.

For more tool information ➜

GitLab

The DevSecOps Platform.

A single application for the entire DevOps lifecycle.

For more tool information ➜

Harness CD & GitOps

The future of software delivery is intelligent, automated, and self-service.

An intelligent Continuous Delivery platform with advanced GitOps, verification, and governance features.

For more tool information ➜

TeamCity

Powerful Continuous Integration out of the box.

A CI/CD server from JetBrains that offers both cloud and on-premises options.

For more tool information ➜

Codefresh

The enterprise-grade, Argo-powered platform for GitOps and CI/CD.

A commercial platform built on Argo for scalable, enterprise-grade GitOps and CI/CD.

For more tool information ➜

GitLab

The One DevOps Platform.

A complete DevOps platform with built-in GitOps capabilities for Kubernetes deployments.

For more tool information ➜

Prisma Cloud by Palo Alto Networks

The industry’s most complete Cloud-Native Application Protection Platform (CNAPP).

A comprehensive CNAPP that provides security and compliance coverage from code to cloud.

For more tool information ➜

Sysdig Secure

Threat detection and response, built on runtime insights.

A cloud security platform that provides threat detection, compliance, and vulnerability management based on deep runtime visibility.

For more tool information ➜

Grafana

The open observability platform.

An open-source platform for monitoring and observability.

For more tool information ➜

Flux

The GitOps family of projects.

A tool for keeping Kubernetes clusters in sync with sources of configuration (like Git repositories).

For more tool information ➜

Codefresh

The trusted GitOps platform for cloud-native applications.

An enterprise GitOps platform built on Argo, providing enhanced management and monitoring for large-scale deployments.

For more tool information ➜

Codefresh

The GitOps Platform for Scale.

A software delivery platform for cloud-native applications, built on Argo.

For more tool information ➜

Weave GitOps

A powerful extension to Flux, making GitOps easier to adopt and scale.

An open-source and enterprise platform that simplifies GitOps adoption and management on top of Flux.

For more tool information ➜

Weave GitOps

Trusted GitOps for Kubernetes. Automate application delivery and cluster management.

An enterprise GitOps platform that builds on Flux to provide multi-cluster management, progressive delivery, and observability.

For more tool information ➜

Azure DevOps

Plan smarter, collaborate better, and ship faster with a modern set of dev services.

A suite of development tools from Microsoft, including CI/CD pipelines that can be used for GitOps.

For more tool information ➜

Codefresh

The enterprise platform for GitOps & CI/CD, at scale.

A GitOps platform for continuous integration and delivery built on Argo.

For more tool information ➜

Bitbucket Pipelines

Integrated CI/CD for Bitbucket Cloud.

A CI/CD service built directly into Atlassian's Bitbucket Cloud.

For more tool information ➜

Azure DevOps

Plan smarter, collaborate better, and ship faster with a modern dev service.

A suite of development tools from Microsoft, including CI/CD, repos, and boards.

For more tool information ➜

CircleCI

The CI/CD platform for every team.

A leading continuous integration and delivery platform that automates software development workflows.

For more tool information ➜

Google Cloud Anthos

Build and manage modern apps on-premises, in the cloud, and at the edge.

A hybrid and multi-cloud application platform that enables GitOps and configuration management at scale.

For more tool information ➜

Logz.io

Open Source Observability, Done Right.

A cloud observability platform based on open source ELK and Grafana.

For more tool information ➜

Aqua Security

The Cloud Native Security Platform.

A comprehensive security platform for cloud-native applications.

For more tool information ➜

Splunk

The Data-to-Everything Platform.

A platform for searching, monitoring, and analyzing machine-generated data.

For more tool information ➜

Sumo Logic

The SaaS Log Analytics Platform for Modern Applications.

A cloud-native platform for continuous intelligence and log management.

For more tool information ➜

Weave GitOps

The GitOps Automation and Control Plane.

An enterprise platform for continuous delivery and automated operations with GitOps.

For more tool information ➜

Azure Arc

Extend Azure management and services to any infrastructure.

A bridge that extends the Azure platform to help you build applications and services with the flexibility to run across datacenters, at the edge, and in multicloud environments.

For more tool information ➜

Datadog Cloud Security Platform

Unified security for the entire cloud-native stack.

A security platform that provides threat detection, posture management, and vulnerability scanning in a single unified platform.

For more tool information ➜

Aqua Security

Stop cloud native attacks.

A cloud-native security platform that secures applications from development to production, across VMs, containers, and serverless.

For more tool information ➜

Weave GitOps

The GitOps platform for building and operating your own Kubernetes platform.

An open-source GitOps platform built on Flux, designed for managing Kubernetes applications and clusters.

For more tool information ➜

Datadog

See inside any stack, any app, at any scale, anywhere.

A monitoring and security platform for cloud applications.

For more tool information ➜

New Relic

The All-in-One Observability Platform.

A cloud-based observability platform that helps you build better software.

For more tool information ➜

Red Hat Advanced Cluster Management for Kubernetes

Control your clusters. Tame your cloud.

A management platform for controlling clusters and applications across clouds and on-premise.

For more tool information ➜

Jenkins X

An open source opinionated CI/CD solution for Kubernetes.

An automated CI/CD platform for Kubernetes that uses GitOps and preview environments.

For more tool information ➜

Jenkins X

Cloud Native CI/CD Built On Kubernetes.

An open-source, opinionated CI/CD solution for Kubernetes that automates the entire development lifecycle.

For more tool information ➜

D2iQ Kubernetes Platform (DKP)

Enterprise-Grade Kubernetes for Production Environments.

An independent Kubernetes platform that provides multi-cluster management with built-in GitOps.

For more tool information ➜

Jenkins X

An open source opinionated CI/CD solution for modern cloud applications on Kubernetes.

An automated CI/CD project for Kubernetes that uses GitOps and best practices.

For more tool information ➜

GoCD

Open-source continuous delivery server.

An open-source CI/CD tool from ThoughtWorks focused on modeling complex workflows.

For more tool information ➜

Jenkins X

CI/CD for Cloud Native.

An open-source, opinionated CI/CD platform for Kubernetes that automates GitOps and preview environments.

For more tool information ➜

KICS

Keeping Infrastructure as Code Secure.

An open-source static analysis tool that finds security vulnerabilities, compliance issues, and infrastructure misconfigurations in IaC.

For more tool information ➜

Terrascan

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

An open-source static code analyzer for IaC that helps detect security and compliance issues.

For more tool information ➜

Open Policy Agent (OPA)

Policy-based control for cloud native environments.

An open-source, general-purpose policy engine that enables unified, context-aware policy enforcement.

For more tool information ➜

Kyverno

Kubernetes Native Policy Management.

A policy engine designed specifically for Kubernetes, allowing you to manage and enforce policies as Kubernetes resources.

For more tool information ➜

Falco

The cloud-native runtime security project.

An open-source behavioral activity monitor designed to detect anomalous activity in your applications and containers.

For more tool information ➜

Argo CD

Declarative, GitOps continuous delivery for Kubernetes.

An open-source GitOps continuous delivery tool for Kubernetes.

For more tool information ➜

Flux CD

The GitOps family of projects.

A set of continuous and progressive delivery solutions for Kubernetes that are open and extensible.

For more tool information ➜

Atlantis

Terraform Pull Request Automation.

An open-source tool for automating Terraform via pull requests.

For more tool information ➜

Werf

Consistent GitOps delivery.

An open-source CLI tool that combines image building and deployment to Kubernetes, enabling GitOps workflows.

For more tool information ➜

Gimlet

The developer-centric GitOps platform.

An open-source GitOps platform designed to simplify Kubernetes for developers.

For more tool information ➜

PipeCD

Continuous Delivery for Declarative Applications.

An open-source CD tool for declarative applications, supporting Kubernetes, Serverless, and Terraform with a focus on progressive delivery.

For more tool information ➜

KubeVela

Make shipping applications more enjoyable.

An open-source, application-centric delivery platform that supports hybrid, multi-cloud, and multi-cluster scenarios.

For more tool information ➜

Gitleaks

Audit git repos for secrets.

An open-source tool for detecting and preventing secrets in Git repositories.

For more tool information ➜

Kube-bench

Checks whether Kubernetes is deployed securely by running the checks documented in the CIS Kubernetes Benchmark.

An open-source tool that checks whether Kubernetes is deployed according to security best practices from the CIS Benchmark.

For more tool information ➜

Kubescape

The first tool for testing if Kubernetes is deployed securely according to multiple frameworks.

An open-source tool that provides risk analysis, security compliance, and misconfiguration scanning for Kubernetes.

For more tool information ➜

Karmada

Open, Multi-Cloud, Multi-Cluster Kubernetes Orchestration.

A CNCF sandbox project for enabling multi-cloud and multi-cluster container orchestration.

For more tool information ➜

Git-secrets

Prevents you from committing secrets and credentials into git repositories.

A tool by AWS Labs that prevents committing passwords and other sensitive information to a Git repository.

For more tool information ➜

tfsec

Security scanner for your Terraform code.

An open-source static analysis tool for finding security misconfigurations in Terraform code.

For more tool information ➜

SOPS

Secrets OPerationS.

An open-source editor for encrypted files that supports YAML, JSON, ENV, INI and BINARY formats and encrypts with AWS KMS, GCP KMS, Azure Key Vault, age, and PGP.

For more tool information ➜

Bitnami Sealed Secrets

A Kubernetes controller and tool for one-way encrypted Secrets.

An open-source tool for encrypting Kubernetes Secrets so they can be safely stored in a public Git repository.

For more tool information ➜

External Secrets Operator

Synchronize secrets from external APIs into Kubernetes.

A Kubernetes operator that reads information from external secret management systems and automatically injects it as Kubernetes Secrets.

For more tool information ➜

PipeCD

The One CD for All {applications}.

A continuous delivery platform that provides a unified deployment experience for any kind of application, including multi-cluster Kubernetes.

For more tool information ➜

Cluster API

Declarative APIs for creating, configuring, and managing Kubernetes clusters.

A Kubernetes sub-project focused on providing declarative APIs and tooling to simplify provisioning, upgrading, and operating multiple Kubernetes clusters.

For more tool information ➜

Fleet

GitOps at scale.

An open-source GitOps and multi-cluster management engine, integrated into Rancher.

For more tool information ➜

Kargo

A new way to do continuous delivery.

An open-source project from Akuity for continuous delivery, focusing on post-deployment application lifecycle management.

For more tool information ➜

Checkov

Prevent cloud misconfigurations during build time for Terraform, CloudFormation, Kubernetes, Serverless framework and other infrastructure-as-code-languages.

An open-source static analysis tool for scanning infrastructure as code (IaC) files for misconfigurations.

For more tool information ➜

Trivy

A comprehensive and versatile security scanner.

An open-source security scanner for vulnerabilities in container images, filesystems, and Git repositories, as well as for misconfigurations.

For more tool information ➜

Prowler

The most-used open source tool for AWS security.

An open-source security tool for AWS, Azure, and GCP to perform security assessments, audits, incident response, hardening, and forensics readiness.

For more tool information ➜