Cloudkeel-DD review

Reviewed by iTechGuides Editors · Editorial team · Updated Nov 2026

Cloudkeel-DD detects configuration drift between declared infrastructure and live resources, and can identify unmanaged cloud resources and enabled policy violations. It is designed for teams operating AWS, Azure, GCP, or Kubernetes environments that want findings and credentials to remain in their own environment. It runs in a customer-managed Kubernetes cluster and uses read-only access to connected cloud and cluster environments, making it a fit for teams that want visibility without granting the product permission to change infrastructure directly.

Its coverage extends across several infrastructure sources: Terraform Cloud and Enterprise plan JSON, local Terraform plan files, raw .tfstate, Helm release records, and ArgoCD or Flux managed-state sources. Scheduled, field-level comparison gives teams a way to inspect specific configuration differences, while cloud audit log reads can help attribute changes. It also detects enabled policy violations and can generate revert plans and GitHub or GitLab remediation pull requests. Those actions remain reviewable: plans are run by the user rather than applied automatically. That guided approach suits teams wanting human review in their change process, but teams seeking automatic remediation should look elsewhere.

Pricing is available as an ongoing Free plan with every feature and docs and community support. Team includes every feature and email support with a two-business-day response; according to the vendor's pricing page, it costs $79 per enabled scope per month with annual billing or $99 per enabled scope per month month-to-month. Enterprise offers custom scope count and users, priority support with a named contact, invoicing, an MSA, and security-review support. The Free plan gives teams a way to evaluate the core feature set, while paid Team pricing scales by enabled scope. Cloudkeel-DD is most suitable for teams comfortable operating a self-hosted Kubernetes deployment and reviewing proposed remediation; it is less suited to organizations needing automatic changes or a managed SaaS service.

Cloudkeel-DD pros and cons

• Where it wins
  • Compares Terraform state and live infrastructure at the field level
  • Checks Helm records and ArgoCD or Flux managed-state sources
  • Creates reviewable remediation pull requests; changes are not auto-applied
• Where it doesn't
  • Requires a customer-managed Kubernetes cluster
  • Team pricing is per enabled scope, with annual billing at the lower listed rate
  • Free plan support is limited to documentation and community

Cloudkeel-DD fact sheet, pricing and score →

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated 14 Nov 2026 · How we research and update