Limited visibility
As infrastructure scales, it gets harder to get visibility needed to find and fix issues.
Attending KubeCon in Salt Lake City? Meet with the Spacelift team
IaC Orchestration that moves at AI speed
IaC Orchestration that moves at AI speed
Provision, configure, and govern cloud infrastructure in one workflow
Every push to go faster costs you more control
Poor visibility into what’s running, limited control over provisioning, and no centralized IaC pipelines slow you down
Guardrails that don’t scale
The more access developers need, the harder it is to enforce Golden Paths and catch rogue changes.
Slow deployments
No self-service means developers wait on you for every deployment.
Keep pace with Spacelift Deploy
Provision, configure, and govern every IaC tool you run, in one workflow
Use Terraform, OpenTofu, CloudFormation, Pulumi, Kubernetes, Ansible, or Terragrunt, or just describe what you need. Your teams keep their tools, and Spacelift standardizes how they run.
- Run every major IaC tool in one workflow
- Model environments with stacks, not one giant pipeline
- Publish reusable modules to a private registry
Push code to your VCS system or ask the infrastructure assistant to generate, update, and open pull requests for you.
- Trigger runs from GitHub, GitLab, Bitbucket, or Azure DevOps
- See the plan on every pull request before it merges
- Give developers real self service with Templates
Provisioning is half the job. Spacelift configures resources in the same workflow, with shared contexts and credentials.
- Run Ansible right after infrastructure changes
- Share configuration and secrets with Contexts
- Run workers in your own cloud or network
Embed plan, approval, and notification policies with OPA, or describe the guardrails you want and let the assistant generate the policy for you.
- Enforce security, compliance, and cost as policy as code
- Route approvals to the right people, automatically
- Delegate safely with Spaces, Contexts, and RBAC
Run every deployment through a Git-driven, policy-enforced workflow built specifically for IaC and audited automatically.
- Coordinate rollouts with stack dependencies
- Track every change from plan to apply
- Prove who changed what, when, and why
Spacelift continuously monitors your deployed resources and automatically detects when reality drifts from your desired state.
- See every resource across stacks and clouds
- Detect drift and remediate it automatically
- Surface unmanaged resources so nothing hides
Ask the infrastructure assistant what’s deployed, what changed, or where you’re exposed, and get answers grounded in your actual stacks, state, and history.
- Diagnose failed runs with context pulled directly from your infrastructure
- Give agents governed access through Spacelift MCP
- Turn answers into pull requests, instantly
Powerful components
Stacks
Ship infrastructure in clean, isolated units that are easy to manage, scale, and own.
Stack dependencies
Coordinate complex, multi-environment deployments with relationships that define ordering and data flow between stacks.
OPA policies
Enforce security, compliance, and approvals with automated policy-as-code rules across runs and access events.
State management
Protect your infrastructure state with secure, centralized storage and handling of Terraform and OpenTofu state files.
Role-based access control (RBAC)
Define who can view, modify, or execute actions within Spacelift.
Contexts
Share configuration, secrets, and standards across environments without duplicating effort.
SSO/SAML
Centralize authentication through an identity provider and eliminate credential sprawl.
Cloud integrations
Provision and authenticate securely across clouds using dynamic, short-lived credentials.
Resource view
VCS integrations
Connect to version control systems that trigger runs based on repository changes.
Templates/Blueprints
Let developers self-serve infrastructure with reusable templates that standardize and automate the creation of new stacks.
Spaces
Segment teams, environments and processes with logical boundaries that organize stacks, access controls, and policies within an account.
Audit logs
Prove who changed what, when, and why with records of activity and system events for traceability and compliance.
Module registry
A private registry for publishing and consuming reusable Terraform or OpenTofu modules.
Drift detection
Catch configuration drift automatically before it becomes a problem.
Plugins
Connect helpful tools such as Checkov, Infracost, and Wiz directly into your workflows with a few clicks.
Why platform teams choose Spacelift Deploy
Governance that doesn’t slow you down
Provision and configure infrastructure in one workflow. The controls to manage risk and meet compliance are already built in.
- Self-service inside guardrails and Golden Paths you se
- Plans checked and approvals routed automatically
- Drift detected and resources restored automatically
Unblock developers without losing control
Every deployment through your platform team is a queue. Give developers automated workflows, so they provision on their own.
- Developers deploy in one click from Templates you define
- Self-provision in Kubernetes with the Spacelift Operator
- Preview changes before committing or pushing them
Workflows that grow with your site
Tooling built for one team and one cloud breaks as you scale. Spacelift connects every tool into one workflow.
- Manage environments with stack dependencies
- Scale securely with dynamic credentials and scanners
- Spot unhealthy resources and remediate them automatically
A single control plane for your pipelines
Inconsistent practices mean more manual requests and audits. Spacelift gives you a single governed workflow for provisioning, configuration, and management.
- Provision and destroy automatically, no ticket needed
- Stop bad deployments at the pull request
- Replace manual audits with real-time visibility
Trusted by engineering teams worldwide
Teams use Spacelift to shrink infrastructure provisioning lead times from days to minutes, cut down on drift and manual approvals, and finally get out of the ClickOps era.
- Spacelift has enabled Checkout to scale from a handful of deployments per day to averaging over 500 per day
- “The great thing about Spacelift is it does what we need it to do without getting in the way. Once we had it installed and configured, it faded into the background of our workflow, letting us operate more efficiently with no hassle,”
- “We needed a way to create consistent run environments and provide auditing. And we increasingly needed to be able to hand off approvals for runs to developers and security staff. Spacelift has made it simple, so it’s had a positive impact on the company as a whole.”
Ready to ship infrastructure as fast as your code?
See how Spacelift can turn your infrastructure provisioning from a ticket queue into a governed, self-service workflow your teams actually like using.