Gruntwork

What Gruntwork does

Gruntwork, Inc. is a privately held, Delaware-incorporated Infrastructure as Code (IaC) software company founded around 2015–2016 and operating as a 100% distributed team with a registered address in San Diego. The company sells a unified platform for cloud foundations, AI-agent context, and infrastructure guardrails, built on top of Terraform, OpenTofu, and Terragrunt. Its commercial product surface consists of four core modules — an IaC Library of 300+ reusable, Terratest/Terrascan-tested modules for AWS, GCP, and Azure; an Account Factory for vending CIS-compliant AWS accounts; Pipelines for GitOps-driven infrastructure CI/CD with audit logging and drift detection; and Patcher for automated dependency and live-infrastructure updates — packaged into Team and Enterprise subscription tiers sold via quote-based enterprise sales, with perpetual-license fallback on cancellation. The team is also the creator and maintainer of the open-source projects OpenTofu (now a Linux Foundation project, 3.0M monthly downloads, 24k GitHub stars) and Terragrunt (2.5M monthly downloads, 8.34k GitHub stars), as well as Terratest, Boilerplate, Cloudnuke, and Git Xargs.

The company's go-to-market blends product-led growth through these open-source tools with a sales-led enterprise motion and AWS Marketplace distribution. Customers span Fortune 500 and mid-market companies across automotive (Toyota, CarGurus), aerospace and defense (Maxar, Clara Copilot), media and publishing (Informa, Fanatics, Atmosphere TV), identity verification (Jumio), insurance technology (Pearl), e-commerce (Goods), biotechnology (Genialis), and technology (Easygo, Caddi). Gruntwork monetizes through recurring subscriptions (Team monthly, Enterprise annual), tiered support contracts (Standard, Silver, Gold), AWS Marketplace transactions that can be funded with AWS Enterprise Discount Program credits, and professional services delivered under statement of work, including an Accelerator implementation program and IaC Residency engagements. The company is bootstrapped with no disclosed outside funding, led by co-founders Josh Padnick and Yevgeniy Brikman, the latter of whom authored the widely cited book "Terraform: Up & Running."

In 2025 Gruntwork extended the platform with an AI Infrastructure Delivery solution that combines an MCP-server-based knowledge layer with a governance layer so AI agents can compose infrastructure from approved primitives and route changes through plans, policies, reviews, and gated applies before reaching production. The company holds no disclosed patents, has no parent or subsidiary entities, and is not subject to any disclosed regulatory actions or mergers and acquisitions. Gruntwork's strategic posture is unusual for a sub-50-person firm: it controls a large open-source footprint, sells directly to enterprise DevOps and platform-engineering organizations, and increasingly positions itself as the safety-and-governance layer between AI agents and production cloud infrastructure.

Name

Gruntwork

Legal name

Gruntwork, Inc.

Website

https://gruntwork.io

Company type

Private

Founded year

2016

Operating status

Operating

Headcount range

11–50 employees

Short description

Gruntwork sells an Infrastructure as Code platform — IaC Library, Account Factory, Pipelines, and Patcher — for DevOps and platform engineering teams to deploy compliant, GitOps-managed landing zones across AWS, GCP, and Azure, monetized via enterprise subscriptions and AWS Marketplace.

Ownership category

akta.pro rank

Product category

Infrastructure as Code Platform

NAICS

Computer Systems Design and Related Services (5415), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (51821)

SIC

Services-Prepackaged Software (7372), Services-Computer Programming Services (7371)

akta.pro primary industry

Developer Tools & DevOps Platform Services (CI/CD, Artifacts, IaC) (HDABAAAI)

akta.pro secondary industries

DevOps Consulting & Transformation (BPAEAKAA), Managed DevOps / Platform Operations (Run & Operate) (BPAEAKAO)

Keywords

• Infrastructure as code
• DevOps automation
• Cloud landing zone
• GitOps pipelines
• Terraform modules

Headquarters

HQ city

San Diego

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations

Revenue model

1. Subscription - Team Plan: Monthly or annual subscription for small teams. Includes IaC Library, Account Factory, Pipelines, and Patcher. Platform usage includes 3+ Pipeline users, 10+ Cloud Accounts.
2. Subscription - Enterprise Plan: Annual subscription for large platform teams. Includes everything in Team plus self-hosted IaC Library, Team Factory, and multi-repo management for many app teams.
3. Support Services: Tiered support offerings including Standard Support, Silver Support (with live video calls and prioritized bug fixes), and Gold Support (with private Slack channel, quarterly architecture reviews, and next-business-day response SLA).
4. AWS Marketplace: Available through AWS Marketplace, allowing customers to use AWS credits for purchase and potentially offset bills.
5. Professional Services: Initial configuration assistance, customer training, migration or other professional services related to the Services, delivered under statement of work.

Pricing tiers

Go-to-market motion3 records

Distribution channels3 records

Marketing channels8 records

Core offering

Gruntwork provides an Infrastructure as Code platform built on Terraform, OpenTofu, and Terragrunt that delivers reusable IaC modules, automated AWS account vending with CIS-compliant security baselines, GitOps-based deployment pipelines, and automated infrastructure patching. Customers use it to stand up production-ready landing zones across AWS, GCP, and Azure in days rather than months, and to govern infrastructure changes — including those proposed by AI agents — through plans, policy-as-code, reviews, and gated applies. The company also maintains flagship open-source projects OpenTofu and Terragrunt, and offers professional services, an Accelerator implementation program, and IaC Residency engagements.

Product overview

Gruntwork is an Infrastructure as Code platform built for Terraform and OpenTofu, providing a unified system for cloud foundations, AI context, and infrastructure guardrails. The platform consists of four core products: the IaC Library (a collection of reusable infrastructure modules), Account Factory (for vending new AWS accounts with compliance baselines), Pipelines (for secure GitOps-driven infrastructure deployments), and Patcher (for automated infrastructure updates). These products work together to enable teams to stand up secure, production-ready landing zones across AWS, GCP, and Azure in days rather than months. Gruntwork also offers AI Infrastructure Delivery with MCP server integration for AI agents, professional services for OpenTofu and Terragrunt, and maintains several open source tools including Terragrunt, Terratest, Boilerplate, Cloudnuke, and Git Xargs. The company is available via AWS Marketplace and offers Team and Enterprise pricing tiers.

Differentiator

Problem solved

Functional benefit

Products and services

• IaC Library A collection of reusable, commercially maintained Infrastructure as Code modules enabling deployment and management of AWS, GCP, and Azure infrastructure using best practices, including CIS-compliant VPC and Account Baselines. Targeted at DevOps engineers and platform teams that use Terraform, OpenTofu, and Terragrunt.
• Account Factory Automated system that vends new AWS accounts with CIS-compliant security baselines, centralized approval workflows, and auto-configured Pipelines and Patcher for every vended account. Targeted at platform engineering teams managing multi-account AWS environments.
• Pipelines Framework for running secure, GitHub pull-request-driven deployments for infrastructure code and application code, with audit logging, least-privilege OIDC roles, and drift detection. Targeted at DevOps teams that need controlled, reviewable infrastructure delivery.
• Patcher Automated system that creates pull requests for module dependency updates and live infrastructure updates, enabling promotion of changes across environments without manual intervention. Targeted at DevOps teams that want infrastructure code kept current without manual upkeep.
• AWS Landing Zone Production-ready AWS landing zone providing multi-account structure, identity, network, guardrails, and CI/CD delivered as code that customers fully own. Targeted at enterprise DevOps teams building secure AWS foundations.
• GCP Landing Zone Production-ready GCP landing zone providing multi-project structure, identity, network, guardrails, and CI/CD delivered as code. Targeted at DevOps teams standardizing Google Cloud foundations.
• Azure Landing Zone Production-ready Azure landing zone providing multi-subscription structure, identity, network, guardrails, and CI/CD delivered as code. Targeted at DevOps teams standardizing Microsoft Azure foundations.
• HIPAA Compliant Infrastructure Infrastructure modules and configurations designed to meet HIPAA compliance requirements for healthcare organizations running on AWS, GCP, or Azure. Targeted at healthcare and healthtech DevOps teams with regulatory obligations.
• AI Infrastructure Delivery Solution combining an MCP-based knowledge layer (opinionated rules files and module library) with a governance layer (pipelines, policy-as-code, runbooks) to govern AI-authored infrastructure changes. Targeted at DevOps and platform teams adopting AI agents to author infrastructure.
• Terragrunt Open-source thin wrapper for Terraform and OpenTofu that keeps configurations DRY, manages multiple modules, and handles remote state at scale. Targeted at DevOps engineers and platform teams using Terraform/OpenTofu at scale.
• Terratest Open-source Go library providing patterns and helper functions for testing infrastructure code, with first-class support for Terraform, Packer, Docker, Kubernetes, AWS, and GCP. Targeted at DevOps engineers writing infrastructure tests.
• OpenTofu Open-source infrastructure-as-code tool, hosted as a Linux Foundation project, that defines and provisions infrastructure as a community-driven alternative to Terraform. Targeted at DevOps engineers and platform teams adopting open-source IaC.
• Boilerplate Open-source Go library and command-line tool for rendering boilerplate content as part of DevOps pipelines. Targeted at DevOps teams templating project files and infrastructure scaffolding.
• Cloudnuke Open-source tool for cleaning up cloud resources across AWS, GCP, and other providers. Targeted at DevOps engineers needing to remove temporary or orphaned cloud infrastructure.
• Git Xargs Open-source tool for updating multiple GitHub repositories in bulk. Targeted at DevOps and platform engineers managing many repositories that need synchronized changes.
• OpenTofu Professional Services Professional services for OpenTofu delivered by founding members and core contributors of the project. Targeted at enterprise teams adopting OpenTofu who need expert implementation and migration assistance.
• Terragrunt Professional Services Professional services for Terragrunt delivered by the creators and maintainers of the tool. Targeted at teams adopting Terragrunt for Terraform/OpenTofu orchestration at scale.
• Accelerator Guided implementation program delivering foundational architecture, IaC core foundations, guided setup, training, and platform support. Targeted at enterprise customers that need hands-on help standing up the Gruntwork platform.
• IaC Residency On-site or remote residency program delivering IaC best practices and implementation guidance from Gruntwork engineers. Targeted at enterprise platform teams embedding IaC expertise within their organization.

Quantifiable outcome

• Easygo scales AWS 10x, cuts maintenance by 90 percent
• +2 more outcomes

Named customers14 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration3 records

AI capability3 records

Feature7 records

Partnerships

Seven partnerships are on record, tiered core and minor.

• EPAMcoreImplementation/ SI/ Consulting Partner · 13 January 2025EPAM collaborated with Gruntwork on Toyota's integrated DevOps platform at enterprise scale. EPAM is a global digital platform services company that implements Gruntwork solutions for enterprise customers.
• AWS MarketplacecoreChannel Partner/ Reseller/ DistributorGruntwork is available in the AWS Marketplace, allowing customers to subscribe through AWS and potentially offset purchases using AWS credits. This streamlines the procurement process for AWS customers and enables use of enterprise cloud spend.
• KodeKloudminorImplementation/ SI/ Consulting PartnerKodeKloud DevOps training platform users are available with Gruntwork subscriptions for training on deploying apps with EKS, ECS, and RDS.
• AWScoreTechnology or IntegrationAWS is the primary cloud platform supported by Gruntwork. Solutions include AWS Landing Zone, AWS Account Factory, and comprehensive IaC modules for AWS services including EKS, ECS, RDS, and more.
• Google Cloud PlatformcoreTechnology or IntegrationGCP Landing Zone solution available for deploying production-ready infrastructure on Google Cloud Platform with similar patterns to AWS solution.
• Microsoft AzurecoreTechnology or IntegrationAzure Landing Zone solution available for deploying production-ready infrastructure on Microsoft Azure with consistent IaC patterns.
• Linux FoundationcoreStrategic or Co-development PartnerGruntwork team are creators and maintainers of OpenTofu, which is a Linux Foundation project. This represents deep open source leadership and strategic partnership in the IaC ecosystem.

Scale indicators6 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• HashiCorp: HashiCorp is the creator of Terraform and offers Terraform Cloud/Enterprise, which is the closest direct competitor to Gruntwork's IaC Library, Pipelines, and overall platform. The two vendors compete head-to-head for the same DevOps and platform-engineering buyer, with HashiCorp providing the underlying declarative IaC engine and commercial collaboration layer.
• Spacelift: Spacelift is a SaaS platform for IaC orchestration and collaboration that directly competes with Gruntwork Pipelines. It supports Terraform, OpenTofu, Pulumi, CloudFormation, and Kubernetes, offering policy-as-code, drift detection, and self-hosted runners — the same pillars Gruntwork sells.
• env0: env0 is a self-service IaC automation platform with policy-as-code, drift detection, and cost estimation, directly competing with Gruntwork Pipelines and the broader platform for enterprise platform-team budgets.
• Pulumi: Pulumi is a multi-cloud IaC platform supporting general-purpose languages (TypeScript, Python, Go) instead of HCL. It competes with Gruntwork for the same platform-engineering team and multi-cloud landing zone use cases, though it takes a fundamentally different language approach.
• Scalr: Scalr is an enterprise IaC collaboration and governance platform built on Terraform/OpenTofu that competes with Gruntwork Pipelines for the same platform-team buyer, with similar policy-as-code, runbooks, and self-service provisioning features.
• Atlantis: Atlantis is an open-source Terraform pull-request automation tool that is frequently cited as the free alternative to Gruntwork Pipelines. It competes at the same workflow layer for teams that want GitOps-driven Terraform deployments without a commercial platform.

Broad incumbents

• AWS Proton: AWS Proton is AWS's first-party managed IaC service for container and serverless deployments, offering templated environments and services. It overlaps with Gruntwork's AWS Landing Zone and Account Factory for AWS-native customers and benefits from bundled cloud spend economics.

Emerging players

• Massdriver: Massdriver is an emerging IaC platform providing application infrastructure automation with pre-built patterns and self-service provisioning, overlapping with Gruntwork's IaC Library and Pipelines offerings for fast-growing platform teams.
• Brainboard: Brainboard is a visual IaC platform for designing and deploying cloud architectures on Terraform, offering drag-and-drop design, collaboration, and CI/CD. It overlaps with Gruntwork Pipelines at the infrastructure-deployment collaboration layer.
• Firefly: Firefly provides cloud asset inventory, IaC codification, and drift detection across multi-cloud environments, complementing and partially overlapping with Gruntwork's Patcher and Pipelines for cloud infrastructure governance and asset management.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key highlights7 records

Customer concentration

• Xx.com/gruntwork_io
• GitHubgithub.com/gruntwork-io
• LinkedInlinkedin.com/company/gruntwork

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Gruntwork