Start free forever, or try any paid plan for 14 days with no credit card. Unlimited users on every plan.
Ship governed deployments from repo to production.
Includes
Standardize how your team ships with templates and policies.
Everything in Free, plus
Offer self-service to many developers and teams.
Everything in Standard, plus
Scale, compliance and dedicated support for large organizations.
Usage, AI credits and support SLA sized to your organization.
Everything in Pro, plus
Need more? Add a deployment for $1.15 a day or a cloud account for $1.12 a day, or 1,000 AI credits for $200. Prorated daily.
Early access features go to our Founding 50 design partners first. Apply to join →
Pro and Enterprise include expert hours to move from Terraform Cloud or another IaC platform.
Plan your migration →Buy through your cloud and count it toward eligible commitments.
Ask about marketplace →Observe, orchestrate and operate infrastructure, for developers and agents.
| Feature | Free forever | Standard | Pro | Enterprise |
|---|---|---|---|---|
| Usage | ||||
| Deployments (active workflows) | 10 | 20 | 30 | Custom |
| Cloud accounts | 1 | 3 | 10 | Custom |
| Monthly AI credits (SGCredits) | 600 | 2,000 | 2,500 | Custom |
| Users | Unlimited | Unlimited | Unlimited | Unlimited |
| Runs, including concurrent runs | Unlimited | Unlimited | Unlimited | Unlimited |
| Managed resources | Unlimited | Unlimited | Unlimited | Unlimited |
| Managed IaC code Early access | Unlimited | Unlimited | Unlimited | Unlimited |
| ObserveExplore → | ||||
| Cloud discovery and inventory | Yes | Yes | Yes | Yes |
| Misconfiguration checks for cost, security and compliance | Yes | Yes | Yes | Yes |
| Custom benchmarks | Yes | Yes | Yes | Yes |
| IaC coverage and insights dashboards | Yes | Yes | Yes | Yes |
| Code generation for resources created by hand | Yes | Yes | Yes | Yes |
| AI remediations of code and cloud findings a month Early access | 5 | 25 | 100 | Custom |
| OrchestrateExplore → | ||||
| Any IaC: Terraform, OpenTofu, Helm, Ansible, CloudFormation and custom scripts | Yes | Yes | Yes | Yes |
| Workflows, stacks and workflow steps | Yes | Yes | Yes | Yes |
| Fully automated GitOps | Yes | Yes | Yes | Yes |
| GitOps with GitHub, GitLab, Bitbucket, Azure DevOps, Gitea and Forgejo | Yes | Yes | Yes | Yes |
| Self-hosted Git servers | No | No | Yes | Yes |
| Custom runtimes from your own container image | No | Yes | Yes | Yes |
| Templates and private library | No | Yes | Yes | Yes |
| No-code forms | No | Yes | Yes | Yes |
| Developer portal | No | No | Yes | Yes |
| ServiceNow (certified) and Backstage | No | No | No | Yes |
| Policy as code with OPA, Tirith, Checkov, Trivy, Wiz and more | No | Up to 300 | Yes | Yes |
| Configuration policies | No | Yes | Yes | Yes |
| Cost estimation with Infracost | Yes | Yes | Yes | Yes |
| OperateExplore → | ||||
| Drift detection | Basic | Basic | Advanced | Advanced |
| Scheduled runs and destroys | No | Up to 300 | Yes | Yes |
| Audit trail of every run and approval | No | Yes | Yes | Yes |
| External approval systems, for highly regulated environments | No | No | No | Yes |
| Infrastructure recovery from your own state storage, with scheduled recovery checks | No | No | Yes | Yes |
| Roll back to a previous run, straight into a reviewed plan Early access | No | No | Yes | Yes |
| Resilience policy pack: multi-AZ, deletion protection and backup settings Early access | No | Yes | Yes | Yes |
| Recovery readiness per application, against its SLA, RTO and RPO Planned | No | No | Yes | Yes |
| Recovery into another region or account Early access | No | No | Yes | Yes |
| Data restores through AWS Backup, Azure Backup, Rubrik, Cohesity, Veeam and Commvault Planned | No | No | No | Yes |
| Scheduled recovery drills and audit evidence, for example for DORA Planned | No | No | No | Yes |
| Across Observe, Orchestrate and Operate | ||||
| Agents and automationPowered by Kyro ↗ | ||||
| AI agents for autonomous cloud ops, within your guardrails | Yes | Yes | Yes | Yes |
| StackGuardian CLI | Yes | Yes | Yes | Yes |
| MCP server for Claude Code, Cursor and other agents | Yes | Yes | Yes | Yes |
| Terraform provider | Yes | Yes | Yes | Yes |
| API and webhooks | Yes | Yes | Yes | Yes |
| Runners, security and support | ||||
| Shared runners managed by StackGuardian | Yes | Yes | Yes | Yes |
| Private runners in your cloud or data center | No | No | Yes | Yes |
| SSO/SAML | No | Yes | Yes | Yes |
| Custom roles | No | No | Yes | Yes |
| Support | Next business day | Priority | Custom SLA | |
| Migration credits: expert hours, setup and onboarding | No | No | Yes | Yes |
| Dedicated customer success and architect | No | No | No | Yes |
Early access and Planned features go to our Founding 50 design partners first. Apply to join →
Every feature, on any paid plan. No credit card needed. At the end of the trial, pick a plan or stay on Free forever.
Your existing deployments keep running. To add more, an admin adds extra deployments (active workflows) at $1.15 a day or cloud accounts at $1.12 a day, prorated daily. Extra AI credits cost $200 per 1,000. Example: a team on Standard with 25 deployments pays $359 plus 5 × $1.15 × 30 = $531.50 a month.
A deployment is one workflow in StackGuardian. For Terraform or OpenTofu, one workflow manages one state file, so 20 state files means 20 deployments. Helm, Ansible, CloudFormation and script workflows count the same way: one workflow, one deployment. It counts as active from its first deploy until it is destroyed, however often you plan, apply or change it, and admins can mark it inactive. Users, runs and managed resources are never counted.
AI credits, called SGCredits in the product, pay for all AI work in StackGuardian: generating and codifying infrastructure, remediating findings, troubleshooting failed runs and answering questions about your estate. These AI features are powered by Kyro, our AI agents. Meet Kyro. Each plan includes AI credits every month, and you can add more at $200 per 1,000.
No. Private runners run in your own cloud or data center and connect to StackGuardian. Deploy as many as you need without an extra license. They are included from Pro.
Startups with less than $1M in funding, open-source projects and non-profits. Tell us about your team and we will set you up.
On Pro and Enterprise, a StackGuardian migration expert works with your team to plan the move from Terraform Cloud or another IaC platform, set up your first workflows and onboard your teams.
Join the Founding 50, a small group of design partners who get early access and planned features first and help shape what ships next. Apply to join, and we will set up a 30-minute call.
By credit card, through AWS Marketplace or Azure Marketplace, or through selected partners. Marketplace purchases can count toward eligible cloud commitment programs.
Empower your teams with secure self-service deployments. Join thousands of engineers who trust StackGuardian.
Free Forever ○ No Credit Card Required