CFEngine automates infrastructure, security, and compliance across large server fleets, with an open-source core and a Northern.tech Enterprise edition.
Category
Automation
Pricing
Pricing is not publicly disclosed; the open-source core is free, with a commercial Enterprise edition sold by Northern.tech. Contact CFEngine for Enterprise pricing.
Verified
Not yet
Last updated
August 5, 2026
EnterpriseAutomationAPIOpen Source
CFEngine is a configuration-management and infrastructure-automation tool used to keep large numbers of servers in a consistent, secure, and compliant state. The vendor's own homepage frames the product around three pillars — automating infrastructure, improving security, and ensuring compliance — and its product-overview page describes the offering as "Enterprise grade automation." The homepage also surfaces dashboard-style widgets referencing policy compliance across a host fleet and pending software updates, consistent with CFEngine's role as a continuous configuration and compliance engine. CFEngine has both an open-source core, developed in the open on GitHub with a public build/contribution index at build.cfengine.com, and a commercial Enterprise product from Northern.tech. Enterprise customers get access to a dedicated Enterprise API, documented at docs.cfengine.com, for querying and controlling policy status programmatically. The company's case-studies page cites real production deployments, including using CFEngine to help HIPAA Vault provide HIPAA-compliant hosting, to help LinkedIn automate IT infrastructure, and to help Locaweb automate more than 30,000 servers. A comparison graphic on the infrastructure-automation solutions page also claims CFEngine's round-trip time for making and observing changes stays constant as host count grows, contrasted with a linear increase for Ansible on the same chart.
Key Features
Policy Compliance Monitoring — Tracks policy-compliance percentage across a host fleet.
Enterprise API — Documented API for querying and controlling policy status programmatically.
Cross-Platform Automation — Automates configuration across Windows, macOS, and Linux hosts.
Pros & Cons
Pros
Marketing materials claim CFEngine's automation performance stays constant as the number of managed hosts grows, versus a linear increase shown for a competing tool (Ansible) on the same chart.
Dual open-source/commercial model: the core is developed publicly on GitHub with a documented contribution process, giving teams a free entry point before committing to the paid Enterprise edition.
Backed by real-world case studies spanning regulated hosting (HIPAA Vault) and very large deployments (LinkedIn, Locaweb's 30,000+ servers).
Enterprise edition ships with a documented Enterprise API for programmatically querying and acting on policy/compliance status.
Cons
No pricing, plan tiers, or cost information is published anywhere on the crawled marketing pages, so prospective buyers must contact the vendor directly.
Public-facing case studies on the crawled case-studies page are a short, curated list rather than a broad customer directory.