Our Blog

Checkov and Tirith: Where Each Fits in Your IaC Policy Pipeline

Keep the Checkov scans you trust, add Tirith for your own rules, and see how StackGuardian enforces both centrally and flags pipelines that skip them.

Terraform Query: What It Is and How It Works

IaC Security Best Practices: Policy Enforcement in Terraform Workflows

A clean terraform plan doesn't mean secure infrastructure. See where shift left security actually needs to run, and how policy enforcement closes the gap

Terraform MCP Server: What It Is and How It Actually Works

HashiCorp's Terraform MCP Server connects AI assistants to live provider docs and workspace data. See how it works, and where StackGuardian's MCP server fits.

OpenTofu vs Terraform in 2026: Which Should You Use for IaC?

Different licenses, governance, and a growing feature gap. See what's actually changed since the 2023 fork, and how StackGuardian runs both natively.

What Is Brownfield Infrastructure? A Guide to Codifying What Already Exists

Brownfield infrastructure sits outside drift detection and policy checks until it's codified. See how discovery, generation, and validation actually work.

Agentic IaC Explained: How AI Closes the Terraform Drift Gap

Agentic IaC uses AI to continuously detect drift, unmanaged resources, and policy gaps in Terraform. See how the observe-detect-plan-validate loop works.

Terraform Cloud Migration: State, Policy, and the Steps Most Guides Skip

A scenario-based guide to migrating off Terraform Cloud: state export order, Sentinel policy rewrites, and the steps most migration guides leave out.

Policy as Code: From Zero to Enforced Guardrails on Your Infrastructure

Policy as Code turns governance into version-controlled, auto-enforced rules. See how Tirith and OPA block bad deployments before they ship.

Terraform Automation: How Modern Teams Automate the Entire Infrastructure Lifecycle

Terraform automation means more than terraform apply in CI. See the 5-layer framework for discovery, governance, drift detection & orchestration.

Terraform Cloud Alternatives for Multi-Cloud Enterprises [2026]

Compare 6 Terraform Cloud alternatives on policy enforcement, drift detection, OpenTofu support & pricing , pick the right fit for multi-cloud teams.

What Codifying 1,000 Azure Resources Actually Looks Like: Terraform Isn’t the Bottleneck. Discovery Is.

We ran a live codification test against an Azure subscription with over 1,000 resources. Here's what the process actually looked like.