terraform-compliance

At a glance

• Editor score
  7.4 / 10
• Pricing
  Free plan
• Best for
  BDD-style Terraform compliance testing
• Free plan
  Yes
• Paid from
  None
• Policy testing
  Yes
• Facts checked
  20 Sep 2026

• Where it wins

  • Readable BDD-style feature files for compliance scenarios
  • Validates both Terraform plan and state output
  • Works with CI/CD, Git hooks, pip, and Docker

• Where it doesn't

  • Focused on Terraform rather than multiple IaC formats
  • Provides pre-deployment validation, not runtime enforcement
  • Requires policy checks to be expressed as feature files

Our verdict on terraform-compliance

terraform-compliance is an open-source command-line test framework for developers, infrastructure teams, and security teams that need automated compliance checks before applying Terraform changes. It uses BDD-style feature files to express readable policy scenarios, then validates Terraform plan or state output against those scenarios. Provider-agnostic checks allow the same testing approach across Terraform providers, while negative testing helps verify that prohibited infrastructure configurations are rejected.

The tool fits workflows that already use Git-based development and continuous integration. Feature files can come from local directories or Git repositories, and the published integrations include GitHub Actions, CircleCI, and Git hooks. Installation is available through pip or Docker, giving teams several ways to add validation to existing development and CI/CD processes. Its pre-deployment focus makes it suitable for catching compliance issues before infrastructure changes are applied, rather than managing controls after deployment.

terraform-compliance is free to use and open source, with no paid tier structure described. Its main strength is a narrow, clear scope: readable policy testing for Terraform plan and state output. That focus is useful for teams seeking policy-as-code checks without tying scenarios to a specific provider. It is less suitable for organizations that need one policy tool across multiple infrastructure-as-code formats, runtime enforcement, or broader admission and operational controls. Choose it when Terraform validation and BDD-style scenarios are the priority; consider a broader platform when policy coverage must extend beyond Terraform or continue into runtime environments.

terraform-compliance pricing

terraform-compliance fact sheet

terraform-compliance integrations

terraform-compliance lists 3 integrations on its own site.

• GitHub Actions
• CircleCI
• Git hooks

Alternatives to terraform-compliance

• TerraformA broad Terraform workflow for multi-cloud teams that need policy and state controls.9.4
• Azure PolicyA free Azure-native policy service with broad enforcement, remediation, and CI/CD coverage.9.3
• Open Policy AgentA broad, programmable policy engine for teams building policy platforms.9.1

See all terraform-compliance alternatives →

Also listed in

• Infrastructure Testing Tools
• IaC Security Scanners

Featured on iTechGuides

terraform-compliance is listed in our Infrastructure Policy as Code Tools directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/terraform-compliance/"><img src="https://www.itechguides.com/best/badge/terraform-compliance.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. We may earn a commission when you click some links. How we rank.

Last updated 7 Oct 2026 · How we research and update