Spacelift Enterprise

Basic information

Spacelift Enterprise is an infrastructure orchestration platform designed for provisioning, configuration, and governance of infrastructure-as-code (IaC) workflows. It supports a wide array of IaC tools including Terraform, OpenTofu, Pulumi, CloudFormation, Kubernetes, and Ansible. The platform is continuously updated, with significant releases such as Spacelift Self-Hosted v3. A new deployment model, Spacelift Intent, was introduced on October 8, 2025, offering natural language provisioning for non-critical workloads.

• Model/Version: Spacelift Self-Hosted v3 (latest significant self-hosted release). The Terraform provider is at v1.33.0.
• Release Date: Company founded in 2020. Expanded enterprise deployment options announced May 13, 2025. Spacelift Intent released October 8, 2025.
• Minimum Requirements: For self-hosted deployments, requires a PostgreSQL database (version 14 or later) and object storage (e.g., AWS S3, Google Cloud Storage). It runs as containerized applications.
• Supported Operating Systems: The platform itself is web-based and OS-agnostic for users. Self-hosted deployments are supported on containerized environments, including Kubernetes clusters, across AWS, Azure, GCP, and on-premises infrastructure.
• Latest Stable Version: Spacelift Self-Hosted v3 for self-managed environments.
• End of Support Date: Not publicly specified; support is provided under Enterprise plan SLAs.
• End of Life Date: Not publicly specified.
• Auto-update Expiration Date: Not publicly specified for SaaS; self-hosted updates are managed by the customer.
• License Type: Custom pricing for Enterprise tier. Spacelift Intent offers an open-source version.
• Deployment Model: Available as SaaS (in multiple regions including US and Europe), self-hosted on any cloud (AWS, Azure, GCP, regional/sovereign clouds), on-premises, and air-gapped environments. FedRAMP-authorized SaaS is also available.

Analysis: Spacelift Enterprise is a flexible, continuously evolving software platform primarily offered as a service or a self-hosted solution. Its deployment models cater to diverse enterprise needs, from fully managed SaaS to highly controlled on-premises or air-gapped environments, emphasizing compliance and data residency. The lack of specific end-of-support dates is typical for continuously updated software, with support tied to active enterprise contracts. Minimum requirements for self-hosted deployments are infrastructure-centric, focusing on containerization and standard data services rather than specific hardware.

Technical Requirements

• RAM: Not specified for the platform itself; depends on the underlying container orchestration environment (e.g., Kubernetes cluster size) for self-hosted deployments.
• Processor: Not specified; depends on the underlying container orchestration environment for self-hosted deployments.
• Storage: Requires access to an object storage system (e.g., AWS S3, Google Cloud Storage) for self-hosted deployments. Database storage for PostgreSQL (v14 or later) is also required.
• Display: Web-based user interface, requiring a standard web browser.
• Ports: Requires specific hostnames and network access for the Spacelift UI/API and MQTT broker for worker communication. Networking must allow access to external dependencies like PostgreSQL, object storage, and VCS.
• Operating System: For self-hosted deployments, it runs in containerized environments on platforms like AWS, Azure, GCP, or on-premise Kubernetes clusters.

Analysis: Spacelift Enterprise's technical requirements are primarily for its operational environment in self-hosted scenarios, not for end-user devices. The platform is designed to run within existing cloud or on-premises container orchestration infrastructures. Key dependencies include a robust PostgreSQL database and scalable object storage. This architecture allows for significant flexibility in scaling and resource allocation, offloading specific hardware requirements to the chosen cloud provider or on-premises infrastructure.

Support & Compatibility

• Latest Version: Spacelift Self-Hosted v3.
• OS Support: Web-based UI is OS-agnostic. Self-hosted deployments support containerized environments on AWS, Azure, GCP, and on-premise Kubernetes.
• End of Support Date: Not publicly specified. Enterprise plan includes specific support SLAs: 1-hour response for critical issues (24x7), 8 hours for major issues, 48 hours for minor issues, and 72 hours for general guidance during business hours.
• Localization: SaaS available in US and European regions.
• Available Drivers: Integrates with major IaC tools (Terraform, OpenTofu, Pulumi, CloudFormation, Ansible, Kubernetes) and Version Control Systems (VCS) such as GitHub, GitLab, Bitbucket, and Azure DevOps. Spacelift also provides its own Terraform provider.

Analysis: Spacelift Enterprise demonstrates strong compatibility with the modern DevOps ecosystem, supporting a broad range of IaC tools and VCS platforms. Its deployment flexibility across major cloud providers and on-premises environments ensures wide applicability. Support for Enterprise customers is robust, with defined SLAs for critical issues, indicating a commitment to operational continuity for large organizations. The regional availability of SaaS options addresses data residency and compliance needs.

Security Status

• Security Features: Multi-Factor Authentication (MFA) with FIDO2 security keys, Single Sign-On (SSO) via SAML or OIDC, private worker pools, private VCS integration, granular user management, cloud integrations with dynamic and short-lived credentials, secure management of environment variables and secrets (encrypted at rest), Policy as Code (OPA-based) for governance, audit trails for all operations, and drift detection.
• Known Vulnerabilities: Spacelift maintains a responsible disclosure policy and regularly engages external security firms for audits and penetration testing at least once per year.
• Blacklist Status: No information found.
• Certifications: SOC2 Type II Certified, GDPR Compliant, FedRAMP Authorized (for SaaS), HIPAA, SOC 2, ISO 27001, CSA Star Level 1.
• Encryption Support: All data is encrypted at rest and in transit. Customer secrets are extra encrypted at rest. Data sources (e.g., Amazon S3, databases) are encrypted at rest using AWS KMS keys with restricted access.
• Authentication Methods: SSO (SAML 2.0, OIDC, GitHub, GitLab, Google), MFA (FIDO2, software, TOTP, U2F, email, SMS).
• General Recommendations: Adheres to best practices such as least privilege access, network segmentation, firewalls, and regular backups. Integrates with third-party security scanning tools (e.g., Bridgecrew, Snyk) for IaC configuration analysis.

Analysis: Spacelift Enterprise exhibits a robust and comprehensive security posture. Its extensive list of certifications, including SOC2 Type II and FedRAMP, underscores its commitment to enterprise-grade security and compliance. The platform incorporates multiple layers of defense, from strong authentication and access control mechanisms (MFA, SSO, OPA-based policies) to data encryption at rest and in transit. Regular security audits and a responsible disclosure program further enhance its security rating, demonstrating a proactive approach to identifying and mitigating vulnerabilities.

Performance & Benchmarks

• Benchmark Scores: No specific numerical benchmark scores are publicly available.
• Real-world Performance Metrics: Users report significant improvements in scaling infrastructure deployment, streamlining CI/CD processes, and accelerating developer velocity. The platform is noted for its stability and scalability, handling thousands of stacks without issues.
• Power Consumption: No information found.
• Carbon Footprint: No information found.
• Comparison with Similar Assets: Users frequently switch from Terraform Enterprise due to Spacelift's modern features and substantial cost savings (e.g., reducing annual costs from $3 million to $60,000). Spacelift is often highlighted for its transparent and predictable pricing model, which does not charge based on Resources Under Management (RUM), unlike some competitors. It offers more comprehensive IaC-specific features compared to generic CI/CD pipelines.

Analysis: While specific technical benchmarks are not provided, the overall performance status of Spacelift Enterprise is highly positive based on user feedback. The platform excels in operational efficiency, scalability, and cost-effectiveness, particularly when compared to legacy or alternative IaC orchestration solutions. Its ability to automate and streamline complex infrastructure deployments translates directly into faster development cycles and reduced operational overhead for enterprises.

User Reviews & Feedback

User reviews consistently highlight Spacelift Enterprise's effectiveness in managing and automating Infrastructure as Code.

• Strengths:
  • Streamlines infrastructure deployment and CI/CD processes.
  • Excellent integration with Version Control Systems (GitLab, Bitbucket, GitHub).
  • Robust scheduling and state management features.
  • Offers significant cost savings compared to alternatives like Terraform Enterprise.
  • Provides built-in guards and policy enforcement for developer self-service.
  • Supports a wide range of IaC tools (Terraform, OpenTofu, Pulumi, etc.).
  • Noted for stability and high scalability, even with thousands of stacks.
  • Transparent and predictable pricing model.
  • Responsive and helpful support team for critical issues.
• Weaknesses:
  • General customer service needs improvement, especially for non-critical issues.
  • Notification webhooks can be challenging to configure, particularly in the free version.
  • Requires creating multiple IAM roles for new AWS projects, which some users find inefficient.
  • The self-hosted version may lack some cloud integrations present in the SaaS offering.
  • Complexity in configuring advanced policies.
• Recommended Use Cases:
  • Deploying and managing all infrastructure with Terraform and other IaC tools.
  • Managing infrastructure at scale, including configuration management and container orchestration.
  • Implementing CI/CD for infrastructure.
  • Ensuring infrastructure governance and compliance in highly regulated industries.
  • Enabling secure developer self-service for infrastructure provisioning.
  • Supporting multicloud and hybrid infrastructure strategies.

Summary

Spacelift Enterprise is a powerful and flexible infrastructure orchestration platform that significantly enhances the management, automation, and governance of Infrastructure as Code (IaC) for large organizations. Its core strength lies in its comprehensive support for diverse IaC tools and seamless integration with major Version Control Systems, enabling efficient CI/CD pipelines for infrastructure. The platform offers extensive deployment flexibility, including SaaS, self-hosted on any cloud, and on-premises/air-gapped options, catering to stringent compliance and data residency requirements.

Key strengths include its robust security features, backed by multiple certifications like SOC2 Type II and FedRAMP authorization, ensuring data encryption, strong authentication, and policy-driven governance. Users consistently praise its ability to streamline infrastructure deployments, provide substantial cost savings compared to competitors, and offer high scalability and stability. The platform's predictable pricing model, which avoids charging based on Resources Under Management, is also a notable advantage.

While Spacelift Enterprise excels in many areas, some users note that general customer service could be more responsive for non-critical issues, and policy configuration can be complex. Despite these minor drawbacks, the overall assessment is overwhelmingly positive, positioning Spacelift Enterprise as a leading solution for organizations seeking to accelerate developer velocity, maintain strict governance, and achieve secure, cost-effective infrastructure management at scale.

Recommendations: Spacelift Enterprise is highly recommended for enterprises operating in complex, multi-cloud, or hybrid environments that require advanced IaC orchestration, strong governance, and robust security. It is particularly beneficial for organizations looking to optimize costs, enhance developer self-service capabilities with guardrails, and ensure compliance in regulated industries. For organizations with specific security or data residency needs, the self-hosted and air-gapped deployment options provide unparalleled control.

The information provided is based on publicly available data and may vary depending on specific device configurations. For up-to-date information, please consult official manufacturer resources.