TrademarkTrademark
Features
Documentation

What Is an OpenTofu Management Platform?

An OpenTofu management platform runs your plans and applies as a service and adds the state, locking, RBAC, policy, and drift detection a team needs on top of the CLI. Here are the 2026 options and how they price.
Ryan FeeJuly 8, 2026
What Is an OpenTofu Management Platform?
Key takeaways
  • An OpenTofu management platform runs your OpenTofu plans and applies as a remote service and adds what the CLI leaves to you: shared state and locking, RBAC, policy enforcement, and drift detection.
  • HCP Terraform does not run OpenTofu. Its managed runs execute the Terraform binary only (as of July 2026), so teams standardizing on OpenTofu look elsewhere.
  • The SaaS platforms that run OpenTofu natively are Scalr, Spacelift, and env0. Terrakube and Atlantis are open-source options you host and operate yourself.
  • Pricing models differ more than the feature lists: Scalr bills per run (free up to 50 runs a month), Spacelift by the number of concurrent private workers, and env0 by tier and active-environment count.
  • Scalr is a founding member of the OpenTofu project and runs OpenTofu on the same per-run billing as Terraform, so the engine choice doesn't change the bill.

The OpenTofu CLI plans and applies infrastructure well. What it doesn't do is store state safely for a team, stop two people applying at once, decide who can touch production, or tell you when reality has drifted from your code. An OpenTofu management platform is the layer that adds those things around the runs.

What is an OpenTofu management platform?

It is a service that runs your OpenTofu plans and applies remotely and adds the controls a team needs on top: a shared remote backend with state locking, role-based access control, policy-as-code, drift detection, and an audit trail. You keep writing standard OpenTofu, and the platform takes over execution, state, and governance instead of you wiring them together from cloud storage, a CI runner, and a pile of scripts.

The distinction matters because the CLI is single-player by design. It assumes one operator, one working directory, and a backend you configured yourself. The moment a second engineer needs to run a plan against the same state, you need locking. The moment an auditor asks who changed the database tier, you need a log. Those needs are what the platform category exists to serve, and they are the same whether the engine underneath is Terraform or OpenTofu.

Why do teams need a platform for OpenTofu specifically?

Adopting OpenTofu often comes bundled with a second decision. Many teams moved to OpenTofu after HashiCorp changed Terraform's license in August 2023, and a good number of them were also reconsidering where their runs execute at the same time. If you are already changing engines, it's a natural moment to ask whether your remote-operations layer runs the engine you're standardizing on.

That is where a lot of teams hit a wall, because the most obvious managed option doesn't run OpenTofu at all.

Does HCP Terraform support OpenTofu?

No. As of July 2026, HCP Terraform's managed runs execute the Terraform binary only, and there is no setting to run OpenTofu instead. OpenTofu can use HCP Terraform's remote backend purely for state storage, but the managed run engine, Sentinel policies, and no-code modules are all Terraform-only.

So a team that has committed to OpenTofu can keep HCP Terraform as a state store, but not as the thing that runs their plans and applies. For most people that defeats the point of a managed platform. This is the single most common reason teams standardizing on OpenTofu end up shopping for a different control plane.

Which platforms run OpenTofu?

Five come up most often. Three are SaaS control planes, and two are open-source tools you host yourself.

Platform Runs OpenTofu Hosting Pricing model
Scalr Yes, native (same billing as Terraform) SaaS, with optional self-hosted agents Per run, free up to 50 runs/month
Spacelift Yes (workflow tool set to OpenTofu) SaaS, with self-hosted workers By concurrent private workers
env0 Yes, native SaaS, with self-hosted agents By tier and active-environment count
Terrakube Yes (engine chosen per workspace) Self-hosted (open source, Apache 2.0) No license fee, you operate it
Atlantis Yes (tofu distribution) Self-hosted (open source) No license fee, you operate it
HCP Terraform No (Terraform binary only) SaaS, with self-hosted agents Not an OpenTofu option

A few notes behind the table. Spacelift exposes a workflow-tool setting whose value can be OpenTofu, and you pick the version per stack. env0 connects OpenTofu repositories the same way it connects Terraform ones, with state, plan-on-PR, drift, and cost all working. Terrakube added OpenTofu selection at the workspace level, and Atlantis runs tofu once you set its distribution to opentofu. Scalr is a founding member of the OpenTofu project and runs OpenTofu as a native engine, billed exactly like a Terraform run.

For the self-hosted comparison specifically, the OpenTofu plus Atlantis versus a managed platform breakdown walks through where running your own stack costs less and where it costs more.

How much does an OpenTofu management platform cost?

The headline numbers are less useful than the model each vendor uses to count your usage, because that is what decides whether the bill tracks your team or fights it.

  • Scalr bills per run, and the free tier covers up to 50 runs a month with two concurrent runs. There are no per-user or per-resource charges, so the engine you choose (Terraform or OpenTofu) doesn't change the price. See the pricing page for the current tiers.
  • Spacelift prices paid tiers by the number of concurrent private workers, which is the compute that executes your runs. Users are unlimited; worker count is the lever.
  • env0 prices by tier and the number of active environments, with unlimited users and runs across tiers.
  • Terrakube and Atlantis have no license fee. The cost is the engineering time to run the server, wire up state storage and locking, handle secrets, and keep it patched.

Check the vendors' own pricing pages for exact figures before you commit, since worker counts, environment caps, and tier boundaries change. The point here is to match the counting model to how you work: bursty plan-heavy teams and steady high-concurrency teams get very different bills from the same platform depending on whether it charges per run, per worker, or per environment. Our own take on why per-run beats the alternatives for most teams is in how to evaluate IaC platform pricing models.

How do I choose an OpenTofu management platform?

Start with three questions. First, is running OpenTofu a hard requirement or a nice-to-have? If it's hard, HCP Terraform is out and you're choosing among the platforms above. Second, do you want to operate the control plane yourself? If yes, Terrakube or Atlantis; if no, a SaaS platform. Third, which pricing model fits your run pattern? Map your monthly run count, your concurrency needs, and your environment count against per-run, per-worker, and per-environment pricing, and one of them will usually be clearly cheaper for how your team actually operates.

If you're weighing this as part of a broader move off Terraform Cloud, the guide to selecting a Terraform Cloud alternative covers the migration side, and OpenTofu versus Terraform covers the engine decision itself.

Scalr runs OpenTofu natively on usage-based pricing that's free up to 50 runs a month, with state, locking, RBAC, policy, and drift detection included. If you want to keep OpenTofu without running the backend and workers yourself, it's a straightforward place to start.

Frequently asked questions

What is an OpenTofu management platform?

It is a service that executes your OpenTofu runs (plan and apply) remotely and layers on the controls a team needs around them: a shared remote backend with state locking, role-based access control, policy-as-code enforcement, drift detection, and an audit trail. You keep writing standard OpenTofu configuration; the platform handles execution, state, and governance instead of you assembling them from cloud storage, a CI runner, and scripts.

Does HCP Terraform or Terraform Cloud support OpenTofu?

No. As of July 2026, HCP Terraform's managed remote runs execute the Terraform binary only, and you cannot select OpenTofu as the run engine. OpenTofu can point at HCP Terraform's remote backend for state storage, but managed runs, Sentinel policies, and no-code modules are Terraform-only. Teams that have standardized on OpenTofu use a platform that runs it natively, such as Scalr, Spacelift, or env0, or a self-hosted option.

Which platforms run OpenTofu natively?

As SaaS, Scalr, Spacelift, and env0 all run OpenTofu as a first-class engine. As self-hosted open source, Terrakube lets you pick Terraform or OpenTofu per workspace, and Atlantis can run the tofu binary when you set its distribution to opentofu. Scalr, Spacelift, and env0 also support self-hosted agents or workers if you want the control plane managed but the compute in your own network.

How much does an OpenTofu management platform cost?

It depends on how each vendor counts usage. Scalr bills per run and is free up to 50 runs a month. Spacelift prices by the number of concurrent private workers on paid tiers. env0 prices by tier and the number of active environments. Terrakube and Atlantis have no license fee, but you pay in the engineering time to run, secure, and upgrade them. Compare the model to how your team actually works before comparing headline numbers.

Can I self-host an OpenTofu management platform?

Yes, in two senses. Terrakube and Atlantis are fully self-hosted open-source tools you run end to end. Separately, the SaaS platforms (Scalr, Spacelift, env0) offer self-hosted agents or workers so runs execute inside your network and reach private infrastructure while the vendor still runs the control plane, dashboards, and state.

Is OpenTofu production-ready in 2026?

Yes. As of July 2026 the current release is OpenTofu v1.12.3 (June 2026). OpenTofu is MPL 2.0 licensed, governed under the Linux Foundation, and was accepted as a CNCF Sandbox project in April 2025. Most Terraform configurations run on it unchanged, and the major managed platforms treat it as a supported engine.
About the author
Ryan Feedirector of platform engineering at Scalr
Ryan Fee is the director of platform engineering at Scalr, with over 15 years of experience improving infrastructure experiences at companies large and small.