New: Native support for Terraform and HCL

Unleash agents
on your infrastructure.

Ship infrastructure faster with tools that let agents do what they do best — without letting them go off the rails.

Get started Download open source

Trusted by over 4,000 innovative companies

The infrastructure platform for humans and agents

Coding agents have reset the pace at which we build software. Pulumi brings that same agent-driven velocity to infrastructure.

Open source and powered by languages agents know well, Pulumi is infrastructure as software that gives humans and agents the tools they need to build and scale infrastructure — safely.

Explore the platform

Use your language of choice

Build infrastructure with modern languages like TypeScript, Python, Go, .NET, and more — or config languages like YAML and HCL.

Keep it secure at every step

Meet compliance requirements with encrypted secrets, dynamic credentials, policy as code, and full audit trails. Pulumi is SOC 2 Type II certified.

Bring full context to agents

Use our open-source skills with any coding agent — or use Pulumi Neo — to automate workflows with best practices and full organizational context.

"Pulumi helped our team to ship a new product faster. We needed one tool to set up and manage multi-cloud, multi-region Kubernetes clusters that infrastructure and applications teams could use collaboratively."

Justin Fitzhugh

VP of Cloud Platform Engineering

Don't just write IaC — compose it

Take full advantage of your preferred language to build reusable components and share them with package managers like npm, PyPI, and NuGet. Get all of the benefits of your IDE, including type checking, code navigation, inline docs, testing, and more.

Learn more about IaC

Meet Neo, your AI platform engineer

The first AI agent built for infrastructure, Pulumi Neo understands your code and organizational context, respects your policies, and executes complex tasks end-to-end — with or without a human in the loop. And it works alongside the coding agents you already use.

Learn more about Neo

Centralized configuration & secrets

A single interface across all of your secrets. Pull in Vault, AWS Secrets Manager, Azure Key Vault, and more, plus support for short-lived creds with OIDC.

Learn more about Pulumi ESC

Discovery & governance

Use natural language queries to find managed and unmanaged resources — even across clouds. Enforce policies, track compliance in real-time, and find vulnerabilities before they become incidents.

Learn more about Discovery & governance

Self-service infrastructure

Define golden paths for approved infrastructure with configurable components and customizable templates that enable developers while keeping platform teams in control.

Learn more about IDP

Trusted by 4,000+ innovative companies

See how engineering teams use Pulumi to ship infrastructure faster, improve security, and reduce cloud complexity.

Read our customer stories

“There’s no question that, if we had gone down the traditional infrastructure automation route, it would have taken us a week or a week and a half to do one deployment of the cluster […] When we demonstrated to people that what used to take a week and a half now, with Pulumi, took under a day, they were shocked.”

Raman Hariharan, Director of Cloud Platform Engineering, Snowflake

“The infrastructure team acts as groundkeepers of our Pulumi practices, not gatekeepers, but promoters for the entire org.”

Paul Cioanca, Platform Engineer at Supabase

“Pulumi supercharged our infrastructure team by helping us create reusable building blocks that developers can leverage to provision new resources and enforce organizational policies for logging, permissions, resource tagging, and security."

Igor Shapiro, Principal Engineer, Lemonade

“Terraform relies on HCL and lacks support for concepts like classes, objects and inheritance. An equivalent deployment would take more lines of code while yielding IaC that is less reusable.”

“There’s no question that, if we had gone down the traditional infrastructure automation route, it would have taken us a week or a week and a half to do one deployment of the cluster […] When we demonstrated to people that what used to take a week and a half now, with Pulumi, took under a day, they were shocked.”

Raman Hariharan, Director of Cloud Platform Engineering, Snowflake

“The infrastructure team acts as groundkeepers of our Pulumi practices, not gatekeepers, but promoters for the entire org.”

Paul Cioanca, Platform Engineer at Supabase

“Pulumi supercharged our infrastructure team by helping us create reusable building blocks that developers can leverage to provision new resources and enforce organizational policies for logging, permissions, resource tagging, and security."

Igor Shapiro, Principal Engineer, Lemonade

“Terraform relies on HCL and lacks support for concepts like classes, objects and inheritance. An equivalent deployment would take more lines of code while yielding IaC that is less reusable.”

What's new at Pulumi

Product news, engineering insights, and hands-on workshops from the team.

Product

Pulumi ESC now issues OIDC tokens for any service

Pulumi ESC now signs short-lived OIDC tokens for any audience you set, with a stable subject you can pin in each service's trust policy.

Devon Grove Oct 15, 2026 6 min read

Product

Scale your team's use of AWS IAM account access manager with Pulumi

Manage AWS IAM account access manager (AAM) as code with Pulumi: define IAM roles, applications, and entitlements across your AWS organization in one program.