Become a Gruntwork Subscriber

Choose the plan just right for your team.

Standard

Enterprise


  • Gruntwork Landing Zone
  • Automatically apply security baselines, defined in Terraform, to all your AWS accounts, ensuring that all of your accounts are properly configured with AWS CloudTrail, AWS Config, AWS Config rules, Amazon GuardDuty, Macie, IAM roles, IAM Access Analyzer, VPCs, and more.
    Terraform account baselines
    including
    including
  • Configure monitoring and audit logging for all your AWS accounts using CloudTrail and AWS Config.
    Monitoring: CloudTrail, AWS Config
    including
    including
  • Set up best-practice networking infrastructure for all of your AWS accounts, including VPCs, subnets, route tables, Internet Gateways, NAT Gateways, VPC endpoints, NACLs, and more.
    Networking: VPCs, subnets, etc
    including
    including
  • Configure security scanning for all your AWS accounts using GuardDuty and Macie.
    Scanning: GuardDuty, Macie
    including
    including
  • Use IAM users, roles, and groups for authentication and authorization in your AWS accounts.
    IAM: users, roles, groups
    including
    including
  • Use Control Tower to create and manage your AWS accounts, OUs, and controls, while under the hood, managing everything as code using Terraform.
    Control Tower integration
    not_including
    including
  • Use Single Sign On (SSO) with an existing Identity Provider (e.g., Active Directory, Google, Okta) for authentication and authorization in your AWS accounts.
    AWS Identity Center (SSO)
    not_including
    including
  • Configure guard rails for all your AWS accounts using Service Control Policies (SCPs) and AWS Config Rules.
    Guard Rails: SCPs, Config Rules
    not_including
    including

  • Gruntwork Pipelines
  • Instead of directly giving your CI server admin-level permissions needed to launch arbitrary infrastructure, Gruntwork Pipelines enables a secure infrastructure pipeline by granting the sensitive permissions solely to an isolated worker that exposes a limited, locked down interface.
    Secure, isolated workers
    including
    including
  • Automatically run terraform/terragrunt 'plan' on PRs and 'apply' on merge.
    Plan and apply workflows
    including
    including
  • Automatically require approvals for terraform/terragrunt 'plan' output before an 'apply' is allowed. Includes Slack integration for a ChatOps driven approach.
    Approval workflows
    including
    including
  • Automatically promote releases across your environments: e.g., dev -> stage -> prod.
    Promotion workflows
    not_including
    including

  • Patcher
  • Use the patcher CLI to automatically update your Terraform and Terragrunt dependencies.
    CLI-driven updates
    including
    including
  • When a new release contains breaking changes, Patcher can automatically apply patches from the maintainer to transform your code to work around the backward compatibility.
    Patch breaking changes
    including
    including
  • When new releases come out, get automated pull-requests to update you to the new version.
    Automated (PR-driven) updates
    not_including
    including

  • IaC Library
  • Reusable, battle-tested Terraform modules for deploying application workloads on top of ECS, EKS, EC2, and ASGs.
    Orchestration: ECS, EKS, EC2, ASG
    including
    including
  • Reusable, battle-tested Terraform modules for deploying data stores such as RDS, ElastiCache, and S3.
    Data stores: RDS, ElastiCache, S3
    including
    including
  • Reusable, battle-tested Terraform modules for deploying analytics, search, and streaming tools such as Elasticsearch, Kafka, and Kinesis.
    Analytics: Elasticsearch, Kafka
    including
    including
  • Reusable, battle-tested Terraform modules for deploying serverless workloads on top of Lambda and API Gateway.
    Serverless: Lambda, API Gateway
    including
    including
  • Use the repo-copier CLI tool to copy all the Terraform code to your own version control system, including updating all internal cross-references and authentication details.
    Self-hosting (repo-copier)
    not_including
    including

  • Support
  • Get support from the Gruntwork team and other Gruntwork customers via the Gruntwork Knowledge Base.
    Community support
    including
    including
  • Get support via email, a private shared Slack channel, and scheduled video calls directly from the Gruntwork team. Includes SLAs on response times.
    Enterprise support
    not_including
    including
  • Get hands-on help, onboarding, and guidance from the Gruntwork team in setting up your DevOps Foundations.
    Guided onboarding
    not_including
    including
  • Gruntwork works directly with your team to build world-class infrastructure, which we then support & maintain on an ongoing basis.
    Consulting
    not_including
    Available

  • Add-ons
  • Get an opinionated, best-practices, end-to-end tech stack, customized to your needs, 100% defined as code, deployed into your AWS accounts—all in about a day!
    Reference Architecture
    not_including
    included
  • Get support via email or a private Slack channel, with an SLA of 2 business days.
    Professional Support
    +$1,950 / month
    included
  • Get access to our CIS Service Catalog, where all the modules are compliant with the CIS AWS Foundations Benchmark. If you pick this and the Reference Architecture add-on, the entire Reference Architecture will be compliant with the CIS AWS Foundations Benchmark!
    CIS Compliance Package
    +$1,250 / month
    included

  • Pricing
  • Annual contract, billed monthly.
    Subscription fee
    $795 / per month
  • A user is a human or machine that accesses the Gruntwork code repos, training materials, or support services.
    Included users
    20
  • Standard

     

    $795

    / per month

    +$4,950

    / one time

    Annual contract, billed monthly. View our Terms of Service.

    Contact Us

    Enterprise

    Annual contract, billed annually. View our Terms of Service.

Need help deciding?

Discounted pricing is available for non-profits, educational institutions, and startups with fewer than 10 employees. We are happy to answer your questions and provide additional information: contact us.

AWS Marketplace

Gruntwork is available in the AWS marketplace!

Please contact our sales team to subscribe to Gruntwork through the AWS Marketplace, which may allow you to streamline the procurement process and potentially offset your bill (check with your AWS rep to see which credits and offsets are available to you).

30 day money back guarantee

No Risk

Cancel for any reason within 30 days and we'll refund 100% of your fees.

Padlock with key

No lock-in

If you cancel, you'll lose support and updates, but as long as any outstanding contract obligations are paid, you can keep using the code at no further cost.

Shield with an "X" and rotating arrow

No More Grunt Work

Let us handle the grunt work of the most common infrastructure patterns so you can focus on your business.

Pricing FAQ's

What's included with each Gruntwork user license?

When you become a Gruntwork Subscriber, each user license will allow one human or machine user to access our Infrastructure as Code Library, DevOps Training Library plus our community and paid support services In addition, a user license grants the right to a user to access, fork and modify the code, and create derivative works as much as you want.

Can I try Gruntwork Services before committing to an annual subscription?

There are three ways you can try out Gruntwork Services with no commitment:

  1. You can try out parts of the IaC Library for free by checking out our open source modules.
  2. Before any contracts are signed, we'd be happy to do a walkthrough of our code, training, and process.
  3. We offer a 30-day money-back guarantee, so if for any reason you're not happy after signing up, we'll refund 100% of your money in the first 30 days. Check out "What if I want to cancel my Gruntwork Subscription?" for more info.

What if I want to use the code with my own customers?

The Gruntwork Subscription is valid for one company to use to manage its own infrastructure. If you are an agency or reseller that manages infrastructure for other companies, please contact us to discuss licensing options.

How can I modify your Terms of Service?

We recommend that most customers go through our normal checkout flow and accept our standard Terms of Service. In some cases, we can make minor changes to our standard Terms of Service by sending you a DocuSign contract with explicit modifications to the terms, however if you need to make material updates to our standard Terms of Service, you will need to purchase an Enterprise subscription.

Still have questions?

Check out our Full FAQ's.

What payment options do you accept?

For monthly billing, we require automated payments via credit card or ACH transfer. If you wish to use invoices and pay by wire transfer or check instead, you must do annual billing. We also accept AWS Marketplace for annual contracts.

Can I pay with AWS credits?

Yes, please reach out to sales@gruntwork.io.

What's a user?

A user is any human or machine that makes use of Gruntwork's services, including accessing code from the Infrastructure as Code Library, watching videos in the DevOps Training Library, or submitting requests to support.

Is an annual subscription required?

With the exception of the Reference Architecture, all our products require an annual subscription, however we can bill you either annually or monthly. Why an annual subscription? We give you access to all the code in the IaC Library, and we let you keep that code even if you cancel. If we didn't have the annual subscription requirement, customers could sign up for one day, get access to all the code, and cancel immediately.

However, we offer a 30-day money back guarantee, so if for any reason you're not happy after signing up, we'll let you out of the annual subscription and refund 100% of your money in the first 30 days. Check out "What if I want to cancel my Gruntwork Subscription?" for more info.

What if I want to cancel my Gruntwork Subscription?

We offer a 30-day money-back guarantee. You can try out the Gruntwork Subscription, Professional Support, and the Reference Architecture, and if you're not happy for any reason, you can cancel within the first 30 days, and we'll let you out of the annual subscription and refund 100% of your money.

Note that if you cancel in the first 30 days, you lose the license to the code in the Infrastructure as Code Library, so you must stop using it and delete any references to it; on the other hand, if you do stick with the annual subscription, and cancel after at least one year, you can keep using all the code you had been using up to that point. See "What happens to my code if I cancel my subscription?" for more info.

What happens to my code if I cancel my subscription?

If you cancel within the first 30 days, we'll refund 100% of your money and let you out of the annual subscription, but you lose the license to the code in the Infrastructure as Code Library, so you must stop using it and delete all copies of the code.

If, however, you remain a subscriber for at least 12 months, the license allows you to fork and modify the code and create derivative works as much as you want, and even if you cancel your subscription, you can keep using all the code you had been using up to that point. We recommend that prior to canceling, you make copies of all the repos in the Infrastructure as Code Library into your own version control system. After you cancel your Gruntwork Subscription, you'll no longer have access to the updates, additions, and fixes we make to the Infrastructure as Code Library, support from the Gruntwork team, security alerts, and any other subscription benefits. However, your infrastructure will continue to work just fine and you'll still have all the code you had been using up to that point.

If I require product customization or consulting support, what options are provided?

The best way to personalize and customize products is through our limited consulting services. We are ready to collaborate closely with you to tailor our solutions according to your specific objectives. Please reach out to our team for a detailed discussion of your requirements and to explore the available options for the consulting support.

Need something else?

To discuss volume discounts, or custom support needs, please contact us.