We Charge for People, Not Machines
Per-user pricing for infrastructure teams
Infrastructure automation is about collaboration through pull requests, not CPU cycles. We charge per user because that's where governance happens. Runners, workspaces, and executions are free. Isolate environments and automate aggressively without financial penalties.
Security architecture shouldn't cost extra
Best practice is to isolate runners per environment, team, and compliance boundary. Platforms that charge per runner penalize you for doing this correctly. We make private runners free because isolation is security, not a premium feature.
Use as many as you need. Isolate by environment, team, or compliance zone. No limits. No per-runner charges.
Automate drift detection, run speculative plans, validate on every commit—no per-run charges
Price scales with team size, not architectural decisions or automation maturity
GitOps Workflow Integration
Automate plan and apply operations directly within pull requests.
Drift Detection & Notification
Detect infrastructure drift on a customizable schedule with optional reconciliation.
Granular Access Control Policies
Restrict actions by team, directory, or tag using advanced rule-based access controls.
Plan & Apply Approval Workflows
Enforce reviewer approvals, status checks, and superapprovals before applying changes.
Multi-Engine IaC Support
Use Terraform, Terragrunt, OpenTofu, Pulumi, CDKTF, and more.
Cost Estimation
Understand the financial impact of changes before applying them.
Trusted by engineering teams at
"Terrateam made it a lot easier for me and others to make Terraform changes and stay aligned."
Gautam Gupta
Software Engineer, Convex
Git is the control plane
Every Terraform operation originates from a developer proposing a change, a teammate reviewing it, and someone approving it to land in production. That pull request, that review flow, that human decision point is where governance actually happens, where security boundaries get enforced, where the audit trail matters.
We price there because that's where the control plane lives. Runners, workspaces, and executions are operational substrate that should be fast, reliable, and isolated, but they shouldn't be line items on your invoice because they're not where governance happens.
Free
Perfect for getting started
Up to 3 users
- All core features
- Up to 3 users
- 50 runs per month
- Private runners free (as many as you need)
- Audit Trail (30d retention)
- Community support
Basic
For growing teams
Save 10% with annual billing
Includes 10 users
+$10/user after
- All core features
- Includes 10 users (+$10/user after)
- Unlimited runs (no per-run charges)
- Private runners free (as many as you need)
- Audit Trail (90d retention)
- Email & Slack support
Enterprise
For large organizations
Starts at 25 users
Volume discounts available
- All core features
- Starts at 25 users (volume pricing)
- Private runners free (isolate by environment, team, compliance zone—as many as you need)
- Unlimited runs (no per-run charges)
- Unlimited concurrency (no queuing)
- CODEOWNERS support
- Centralized Configuration
- Gatekeeper policy engine
- Role-Based Access Control
- Audit Trail (365d+ retention)
- Priority Support (video calls)
- Dedicated Shared Slack
- Flexible deployment options
- Hands-on Real-Time Support
- Custom On-Boarding
- SLA guarantees
- Custom contract terms
Built-to-scale features for every team
Layered Orchestration
Run plans and applies in order across nested directories. Perfect for complex monorepos with shared state.
Gatekeeper Overrides
Approve policy failures via comment, with a full audit trail. Speed up deploys without sacrificing security.
Dynamic Workflow Routing
Route plans and applies based on directory, tag, team, or environment.
Role-Based Access Control
Enforce least-privilege access using your existing team structure and directory-based scoping.
CODEOWNERS Support
Automatically enforce code review requirements based on CODEOWNERS files.
Centralized Configuration
Manage Terrateam configuration centrally across all repositories in your organization.
Complete Audit & Compliance
Terrateam provides a visual, queryable audit trail of all infrastructure changes. Search, filter, and export your audit history directly from the UI, not just from log files.
- Visual audit UI with filtering and search
- Complete history of plans, applies, and approvals
- Exportable logs for compliance reporting
Audit Trail UI
All plans include
Infrastructure Freedom
Private Runners Included
Run operations inside your infrastructure. Scale from 1 to unlimited private runners based on your plan.
Bring Your Own Engine
Use Terraform, OpenTofu, CDKTF, Pulumi, Terragrunt or any CLI-based tool.
Secure by Design
Code and credentials stay inside your CI/CD pipeline.
Scale Without Limits
No per-run charges. Unlimited runs on paid plans.
Native OIDC Integration
Secure cloud access using OpenID Connect.
Per-Workspace Runners
Customize `runs-on` logic for each team or module.
Encrypted Secrets Support
Securely manage CI/CD secrets for teams using OIDC or other authentication methods.
Workflow Features
Custom Workflows and Hooks
Run scripts before or after plan/apply using any language.
Environment Isolation
Isolate infrastructure by directory, workspace, or tfvars.
Dynamic Config Builder
Generate config at runtime using templates and scripts.
Monorepo & Dependency Awareness
Automatically detect and apply in the correct order.
Policy-Based Workflow Routing
Automate actions based on PR metadata, tags, or branch patterns.
Orchestrated Runs
Safe dependency-ordered orchestration across nested directories.
Slack Notifications
Get real-time alerts for plans, applies, and drift events.
Security & Compliance
Audit Logs and Change History
Track changes directly in pull requests and UI.
Built-In Cost Estimation
See cost estimates inline with each change.
Policy-as-Code Enforcement
Use OPA, Conftest, or Checkov to enforce policies.
Flexible Deployment Options
Deploy as SaaS, private cloud, or self-hosted.
Role-Based Access Control
Restrict access by team, directory, or environment using your VCS team structure.
Audit Dashboard
Search plan/apply history in the UI with filtering options.
Plan Summarization
Cleaner plan outputs for faster code review and better readability.
What this looks like in practice
Real-world examples of how per-user pricing encourages security best practices instead of penalizing them.
10 engineers, 30 isolated runners
A team managing infrastructure across AWS, GCP, and Azure runs 30 isolated Terrateam runners (one per environment per cloud provider, plus dedicated runners for compliance-scoped workloads).
The team with better isolation pays the same as a team with sloppy runner consolidation. No penalty for doing it right.
10,000 operations per month
A team running drift detection every hour, speculative plans on every commit, and validation checks in CI generates 10,000 Terraform operations monthly.
Automate as aggressively as you want. We're not counting executions.
This isn't altruism. It's a bet that if we remove the financial friction around security isolation and automation maturity, teams will build better infrastructure, have fewer incidents, and move faster.
How our pricing compares
Most platforms charge per workspace, per runner, or per run, creating financial penalties for security isolation or automation. We charge per user because that's where collaboration happens.
| Platform | Pricing Unit | What Costs Extra | Encourages Best Practices? |
|---|---|---|---|
| Terrateam | Per user | Nothing (unlimited runners & runs on paid plans) | ✓ Yes |
| Spacelift | Tiered by private workers | Additional private workers | ✗ Penalizes isolation |
| env0 | Per environment/workspace | More environments | ✗ Penalizes isolation |
| Scalr | Per run (plan/apply) | More automation | ✗ Penalizes automation |
The difference: Competitors make you choose between cost efficiency and security isolation. We don't. Isolate every environment, every repo, every team if you want, and we'll cheer you on, not charge you for it.
Compare plans
Team Size & Access
Includes 3 users
Single organization
Includes 10 users
$10/user/mo after
Starts at 25 users
Volume pricing
Infrastructure Operations
50 monthly runs
✓ Private runners free
✓ No per-run fees
Unlimited runs
✓ Private runners free
✓ No per-run fees
Unlimited runs
✓ Private runners free
✓ Unlimited concurrency
Security & Compliance
Basic audit logs
30-day retention
Advanced audit logs
90-day retention
Enterprise audit logs
365-day retention
Governance & Control
—
—
✓ CODEOWNERS
✓ Centralized Config
✓ Gatekeeper
✓ Role-Based Access Control
Support & Success
Community support
Community forums & Slack
Standard support
Email & Slack Community
Premium support
Slack Connect
Deployment Options
Cloud only
Managed service
Cloud only
Managed service
Flexible deployment
Cloud or self-hosted
Open source changes the math
Terrateam's open-source core gives you the full platform. Run it on your own infrastructure, bring your own compute, manage your own runners. The only cost is what you're paying your cloud provider for the machines.
| Pricing Tier | Terrateam Cloud Managed by us | Self-Hosted You manage |
|---|---|---|
| Free | Up to 3 users 50 runs/month | Open Source - Unlimited runs No cost from us |
| Basic | 10 users (+$10/user after) Unlimited runs | Open Source - Unlimited runs No cost from us |
| Enterprise | Custom pricing Unlimited runs Advanced features* | Enterprise license required Unlimited runs Advanced features* |
*Advanced features: CODEOWNERS, Centralized Configuration, Gatekeeper, Role-Based Access Control
No vendor lock-in
You're not held hostage by vendor pricing. You can always self-host if our managed offering doesn't work for you.
Feature parity
The open-source version is a first-class citizen with full feature parity, not a crippled community edition.
Keeps us honest
We have to keep our managed offering competitively priced and valuable, or customers will just run it themselves.
This changes the negotiating position. Infrastructure is too important to be held hostage by vendor pricing. Self-hosting isn't an afterthought, it's a strategic option that keeps pricing fair.
Why we built pricing this way
Our pricing model isn't a marketing decision, it's an architectural statement about what we believe is valuable in infrastructure automation. Read the full story behind our pricing philosophy.
Read the full postYour questions, answered
A Terrateam user is anyone who triggers a Terrateam operation or logs into the Terrateam UI.
The Free tier is our hosted service (Terrateam Cloud) with a limit of 50 runs per month for up to 3 users. The open source version is the full Terrateam platform that you can self-host on your own infrastructure with unlimited runs and no usage limits. When you self-host, you only pay for your own cloud infrastructure costs. Enterprise features (CODEOWNERS, Centralized Configuration, Gatekeeper, RBAC) are available as a separate tier and can be used on either Terrateam Cloud or self-hosted with an Enterprise license.
Terrateam supports Terraform, OpenTofu, CDKTF, Terragrunt, Pulumi, and any CLI-based tool as an engine.
Yes, Terrateam is compatible with all cloud providers, including AWS, Azure, and Google Cloud, ensuring flexibility in your infrastructure management.
Setting up Terrateam is quick and straightforward, often taking just a few minutes. Comprehensive guides and support are available to help you get started.
No, your source code and data never reach our servers. CI/CD runtime environments are isolated to your Git organization.
Yes, you can install Terrateam on an unlimited number of organizations and repositories. Basic-level subscriptions are tied to a single organization but support unlimited repositories within that organization.
Terrateam offers multiple deployment options. Terrateam Cloud is our fully managed SaaS (Free, Basic, or Enterprise tiers). For self-hosting, you can deploy the open source version on your own infrastructure with unlimited runs, or use the Enterprise version (with additional features like CODEOWNERS, Centralized Configuration, Gatekeeper, and RBAC) with an Enterprise license. We also offer private cloud deployments where our team handles the deployment for you. Self-hosted deployments work with GitHub and GitLab.
Terrateam takes security very seriously. See our security page: https://terrateam.io/security
Terrateam offers three support levels: Community, Basic, and Enterprise. Enterprise customers benefit from priority support, dedicated account managers, and custom SLAs tailored to your organization's needs. You can read more about the support options here: https://docs.terrateam.io/company/support
After the 30-day free trial, you can choose to continue with one of our paid plans. If you decide not to subscribe, your access will revert to the free tier, which offers limited functionality.
Yes, Terrateam provides audit logs for tracking infrastructure changes and applying policies. Advanced audit trails with more comprehensive insights are available with our premium plans.
Our SaaS version is designed for high availability with redundant infrastructure. For self-hosted or private cloud deployments, we provide detailed documentation to help you set up high-availability environments.
Payment options vary based on the plan selected. Basic plans require monthly or annual payments made with a credit card. The Enterprise plan offers more flexibility, allowing payment through either purchase order and invoice, or by credit card on a monthly or annual basis.
Fair pricing that encourages best practices
We charge for collaboration (people), not for operational substrate (runners, workspaces, runs). That means security isolation becomes the default, automation maturity gets encouraged, and architectural decisions are made on technical merit instead of cost optimization. No per-run charges. No workspace limits. No penalties for doing it right.
No credit card required. 30-day free trial includes all features.