driftctl
The open-source tool for infrastructure drift detection.
Overview
driftctl is a free and open-source command-line interface tool that specializes in detecting drift between your Infrastructure as Code (IaC) and the actual state of your cloud resources. It scans cloud provider APIs and compares the live environment with your Terraform state files to identify discrepancies, including unmanaged resources (those created outside of IaC) and configuration changes to managed resources. It supports major cloud providers like AWS, Azure, and Google Cloud.
✨ Key Features
- Drift Detection for Managed Resources
- Unmanaged Resource Detection
- IaC Coverage Analysis
- CI/CD Integration
- Multiple Output Formats (JSON, HTML, etc.)
- Customizable Filtering and Ignoring Resources
🎯 Key Differentiators
- Open-source and free.
- Focuses specifically on drift detection and IaC coverage.
- Provider-agnostic within supported clouds.
- Detects unmanaged resources, which many built-in tools do not.
Unique Value: Provides a simple, fast, and extensible way to manage infrastructure drift as code, completely for free.
🎯 Use Cases (4)
✅ Best For
- Continuous monitoring of infrastructure drift
- Security auditing for unauthorized changes
💡 Check With Vendor
Verify these considerations match your specific requirements:
- Real-time infrastructure provisioning
- Cost management
🏆 Alternatives
Unlike managed platforms, it's a lightweight CLI that can be easily integrated anywhere without vendor lock-in.
💻 Platforms
🔌 Integrations
💰 Pricing
Free tier: Fully open-source and free.
🔄 Similar Tools in IaC Drift Detection
Spacelift
A sophisticated CI/CD platform for IaC that offers drift detection and automated remediation....
env0
An automation platform for IaC that simplifies governance and collaboration, with drift detection....
Scalr
A Terraform automation platform that provides hierarchical governance and self-service for developer...
Prisma Cloud (Bridgecrew)
A comprehensive cloud security platform that includes IaC scanning, drift detection, and compliance ...
Snyk Infrastructure as Code
A developer-focused security platform that includes IaC scanning and drift detection....
Firefly
A platform for cloud asset management, IaC adoption, and governance....