Pricing & Packaging
Choose the plan just right for your team.
Team
Enterprise
- Initial Setup
- IaC Account Foundations
-
AWS multi-account setup
-
Use Control Tower as a single pane of glass to see all your accounts and manage their controls.Control Tower configuration
-
We’ll set you up with best-practice IaC folder structure and infrastructure patterns.IaC foundations
-
Tagging & labeling enforcement
-
AWS multi-account setup
-
CIS-compliant AWS account baselines
-
Custom Account Factory baselines
- Gruntwork Component Setup
-
Gruntwork Pipelines setup
-
Gruntwork Patcher setup BETA
- Network configuration
-
The standard network configuration provides an app VPC with multiple public & private subnet tiers including IGWs, public NGWs, and NACLs.Standard secure network configuration
-
Work with a Gruntwork Solutions Architect to design a network that suits your needs, with features such as an AWS Transit Gateway, inspection VPC, AWS Firewall manager, RAM networks, zero-trust networks, IPAM, IPv6, and more.Custom network design
- Account Factory
-
Vend individual AWS accounts
-
Centralized account approval workflow
-
CIS-compliant AWS baselines for all vended accounts
-
Gruntwork Pipelines auto-configured for all vended accounts
-
Gruntwork Patcher BETAauto-configured for all vended accounts
-
Promotion workflows auto-configured for all vended accounts
-
Vend a set of accounts, such as dev/stage/prod, in a single, automated operation.Multi-account vending
-
Vend a separate infrastructure repository for each team/project.Multi-repo vending for project/teams
-
Customized baselines for all vended accounts
- Pipelines
-
Pull request driven workflow
-
GitOps infrastructure deployments
-
Terragrunt plan/apply/destroy
-
Due to licensing restrictions, we can only support Terraform 1.5.x and earlier.Works with OpenTofu and Terraform
-
Access AWS with automatically managed and rotated credentials (instead of manually managed, long-lived secrets).Use OIDC for AWS authentication
-
Automatically capture the underlying user who triggered the CI/CD pipeline in the IAM role session name, so you can audit all API calls in CloudTrail.Audit logging with intelligent pass-through
-
Vend a set of accounts, such as dev/stage/prod, in a single, automated operation.Multi-account vending
-
We provide a single place and tooling to vend IAM roles that give each app team the permissions they need.Centralized IAM role provisioning
-
Automatically provision least-privilege IAM roles for use with OIDC, limiting each team to only the GitHub repos, AWS accounts, and AWS resources they should have access to.Least-privilege OIDC roles
-
A “team” refers to a unique git repo used to manage infrastructure-as-code. Only git repos that use Gruntwork Pipelines require a team license.Number of team licenses included12+
-
Patcher BETA
-
Keep your infrastructure modules up to date with automatic PRs for any releases of module dependencies.Automatic PRs for module dependency updates
-
Keep your live infrastructure up to date with automatic PRs for any releases of module dependencies.Automatic PRs for live infrastructure updates
-
Safely and automatically propagate changes from dev to stage to prod, building confidence at each step.Promote changes across environments
- Library
-
Library user licenses
5 Upgradeable to a maximum of 3020+
-
Machine user licenses
24+
-
Commercial maintenance for all modules
-
Thoroughly tested using Terratest & Terrascan
-
Due to licensing restrictions, we can only support Terraform 1.5.x and earlier.Compatible with OpenTofu, Terraform, & Terragrunt
-
Self-hosted private mirror of Gruntwork Library
- AWS Foundations
-
Our VPC module is compliant with the CIS AWS Foundations BenchmarkCIS-compliant VPC
-
Our account baseline module is compliant with the CIS AWS Foundations BenchmarkCIS-compliant Account Baseline
-
Dual Stack/IPv6 BETA
- EKS & Running Apps
-
Robust EKS cluster support
-
CArgoCD for EKS GitOps
-
AWS ECS, ASG, EC2, and Lambda
-
Application and Network load balancing
- Storing Data & Event Streaming
-
RDS, Aurora
-
S3
-
EFS
-
ElastiCache
-
MSK, SQS, SNS, Kinesis, Redshift
- Support
-
Technical contacts are members of your team that can submit support requests via email.Number of technical contacts25+
-
Gruntwork has partnered with KodeKloud to give your team access to over 75 best-in-class DevOps training courses.KodeKloud training licenses25+
-
Basic Terragrunt support
-
Bugfix & General Support
-
Email Support
-
Knowledge Base
-
Community Slack
-
Private Slack Channel
-
Support SLA
1-Day
-
Team
$24,000/yr $ 2,000*/mo
+5 Library Users $3,600 /yr ($300* /mo)
+1 Pipelines Team $3,000 /yr ($250* /mo)
*Numbers included for reference
$ 2,000*/mo
Need help deciding?
We are happy to answer your questions and provide additional information. Contact sales
Discounted pricing is available for non-profits, educational institutions, and startups with fewer than 10 employees. Contact us to get the discounted pricing.
Gruntwork is available in the AWS marketplace!
Please contact our sales team to subscribe to Gruntwork through the AWS Marketplace, which may allow you to streamline the procurement process and potentially offset your bill (check with your AWS rep to see which credits and offsets are available to you).
No Risk
Cancel for any reason within 30 days and we'll refund 100% of your fees.
No lock-in
If you cancel, you'll lose support and updates, but as long as any outstanding contract obligations are paid, you can keep using the code at no further cost.
No More Grunt Work
Let us handle the grunt work of the most common infrastructure patterns so you can focus on your business.
Pricing FAQ's
What's included with each Gruntwork user license?
When you become a Gruntwork Subscriber, each user license will allow one human or machine user to access our Infrastructure as Code Library, DevOps Training Library plus our community and paid support services In addition, a user license grants the right to a user to access, fork and modify the code, and create derivative works as much as you want.
Can I try Gruntwork Services before committing to an annual subscription?
Yes! If you’re not sure whether a Gruntwork subscription is right for you, we recommend signing up for the Team subscription on a monthly contract. That way, you pay as you go, and aren’t locked into an annual contract if you decide Gruntwork isn’t a good fit for your needs.
We can also do extensive walkthroughs in a live discussion with you to help you evaluate if Gruntwork is right for you.
What if I want to use the code with my own customers?
The Gruntwork Subscription is valid for one company to use to manage its own infrastructure. If you are an agency or reseller that manages infrastructure for other companies, please contact us to discuss licensing options.
How can I modify your Terms of Service?
We recommend that most customers go through our normal checkout flow and accept our standard Terms of Service. In some cases, we can make minor changes to our standard Terms of Service by sending you a DocuSign contract with explicit modifications to the terms, however if you need to make material updates to our standard Terms of Service, you will need to purchase an Enterprise subscription.
Still have questions?
Check out our Full FAQ's.
What payment options do you accept?
For monthly billing, we require automated payments via credit card or ACH transfer. If you wish to use invoices and pay by wire transfer or check instead, you must do annual billing. We also accept AWS Marketplace for annual contracts.
Can I pay with AWS credits?
Yes, please reach out to sales@gruntwork.io.
What's a user?
A user is any human or machine that makes use of Gruntwork's services, including accessing code from the Infrastructure as Code Library, watching videos in the DevOps Training Library, or submitting requests to support.
Is an annual subscription required?
No. With our team subscription, you can choose between a monthly or annual contract.
Our Enterprise subscription is designed for larger organizations and does require an annual contract. Contact our sales team to find out which solution best meets your needs.
What if I want to cancel my Gruntwork Subscription?
You can cancel at any time and your subscription will end when your monthly or annual term expires.
As long as you subscribe for at least one 12-month period, you can keep using all the Gruntwork Library code you previously accessed, even if you cancel the subscription. However, you will lose access to new features, updates, and support.
See "What happens to my code if I cancel my subscription?" for more info.
What happens to my code if I cancel my subscription?
If you cancel within the first 30 days, we'll refund 100% of your money and let you out of the annual subscription, but you lose the license to the code in the Infrastructure as Code Library, so you must stop using it and delete all copies of the code.
If, however, you remain a subscriber for at least 12 months, the license allows you to fork and modify the code and create derivative works as much as you want, and even if you cancel your subscription, you can keep using all the code you had been using up to that point. We recommend that prior to canceling, you make copies of all the repos in the Infrastructure as Code Library into your own version control system. After you cancel your Gruntwork Subscription, you'll no longer have access to the updates, additions, and fixes we make to the Infrastructure as Code Library, support from the Gruntwork team, security alerts, and any other subscription benefits. However, your infrastructure will continue to work just fine and you'll still have all the code you had been using up to that point.
If I require product customization or consulting support, what options are provided?
The best way to personalize and customize products is through our limited consulting services. We are ready to collaborate closely with you to tailor our solutions according to your specific objectives. Please reach out to our team for a detailed discussion of your requirements and to explore the available options for the consulting support.
Need something else?
To discuss volume discounts, or custom support needs, please contact us.
-
Team
$24,000/yr $ 2,000*/mo
+5 Library Users $3,600 /yr ($300* /mo)
+1 Pipelines Team $3,000 /yr ($250* /mo)
*Numbers included for reference
$ 2,000*/mo