env zero
@envzero

env zero enables platform teams to deliver infrastructure 10x faster without losing control, with standardized, governed workflows at the speed and scale of AI.

 Boston, MA
envzero.com
Joined November 2019
413 Photos and videos
Ownership that lives in a wiki is invisible to your policy engine and to every agent you hand a credential. Put the owner on the resource at creation with default_tags, then block any change that's missing it. Same rule for people and agents.
57
EZ Release Weekly - October 16, 2026 #devops #platformengineering #infra... piped.video/EAu0zZigK7s?si=2snf… via @YouTube

EZ Release Weekly - October 16, 2026 #devops #platformengineering #infrastructureascode

env zero now connects to Azure DevOps through Microsoft Entra ID, P...

youtube.com
91
Every drift alert is a question: is the code right, or the cloud? A tool that only detects never makes you answer it, so the alerts pile up and someone mutes the channel. Decide per resource which side wins.
1
55
Day two at DevOpsCon NYC. The env zero team is at the booth showing EZ Control: it finds the gap between the cloud you declared and the cloud you actually run, and closes it under policy. Early Access: hubs.la/Q04yKbF50
58
Today, we are at #DevOpsCon & AI Platform Engineering Day New York announcing the Early Access launch of EZ Control, the autonomous cloud control plane for the AI era. EZ Control closes the loop between the state an enterprise intends and the state its cloud is actually in, whether that intent is written as infrastructure code, a rule in a cloud security posture management tool, a policy-as-code repository or a guardrail set within the cloud provider itself. It detects divergence continuously, decides the correct response under policy, and executes the remediation itself. 🗞️ Read the release >> hubs.la/Q04yyhs_0
1
1
96
The Replit agent that deleted a production database during a code freeze wasn't compromised. Neither was the Gemini CLI run that turned a file reorg into data loss. Both had permission to do what they did. Nobody had reviewed it.
1
1
161
OIDC credentials in env zero shared one audience claim across AWS, Azure, GCP and Vault, so a token minted for one was replayable against another. v2 issues a provider-specific aud. Opt-in per credential, v1 untouched. hubs.la/Q04xpcSR0

V2 OIDC Tokens: Per-Cloud-Provider Audiences - env zero docs

OIDC credentials for AWS, Azure, GCP, and Vault can now use a provider-specific token audience instead of a single shared audience across all providers.

docs.envzero.com
68
-auto-approve applies to terraform destroy exactly the way it applies to terraform apply. It exists so pipelines don't wait on someone typing yes. Agents reach for it for the same reason. hubs.la/Q04xpd4x0

AI Agent Governance for Infrastructure Teams | env zero

AI agents can deploy and destroy infrastructure now. Learn the governance controls that stop them from causing damage or runaway cloud costs.

envzero.com
62
Infrastructure risk models assume two actors: someone who makes a mistake, and an attacker who shouldn't have access. An agent with a real credential, inside permissions you approved, reasoning its way to a destructive action, is neither.
64
🏗️ Having an amazing show at AWS Summit Tel Aviv! Come visit the env zero engineers at Booth S15 for a sneak peek at what we're building, a limited edition t-shirt, and chance to win a LEGO Star Wars Grogu. תערוכה מדהימה בכנס AWS Summit תל אביב! בואו לבקר את מהנדסי env zero בביתן S15 לקבלת הצצה למה שאנחנו בונים, חולצת טריקו במהדורה מוגבלת והזדמנות לזכות בגרוגו של LEGO Star Wars. #AWS #AWSSummit #AWSSummit2026 #AWSSummitTLV
85
Single-resource terraform import assumes you already know what to import. Most teams don't: the unmanaged resources are unmanaged because nobody knows they exist. Finding hundreds at a time, then importing them under policy: bit.ly/45J1RRf

Terraform Bulk Import: Finding Resources at Scale | env zero

How to find and import unmanaged infrastructure at scale using Terraform's native query workflow, CloudQuery, and env zero's Cloud Compass.

envzero.com
57
Nobody's deployment fails in the interesting layer. It fails because a log forwarding transport threw an error, or the remote backend returned a 503 in exactly the window you needed it. Reliability work is unglamorous, and it is most of the job.
69
Stale SSO connections are an audit finding waiting to happen. When you migrate identity providers, the new SAML or Azure AD connection works, the old one lingers because deleting it needed a support ticket. It doesn't anymore. Delete it where you created it.
85
The tell that your internal platform isn't working isn't complaints. It's the Terraform in someone's personal repo, applied from a laptop, that never comes up in standup. Teams route around friction quietly. Go find where the workarounds live.
75
If your org outgrew 1,000 members, env zero's member list was quietly lying to you. Counts, search, and SCIM reconcile all stopped at the cap. They don't anymore: member reads now come from the membership mirror instead of the provider list API.
82
Now available in env zero: Full SCIM Provisioning Read the blog 👉 hubs.la/Q04vJ0DD0
66
One of the bigger names in IaC orchestration recently published a 2,000-word comparison of their platform and env zero. We didn't ask for it, didn't review it, and didn't get a say in the framing. Read it anyway. If you're shortlisting IaC platforms right now, a comparison written by the other side is worth more than anything either of us puts on a landing page. One thing it missed by a few weeks: env zero has a free tier now. 250 runs a month, 30 environments, unlimited users, no credit card. So take the article's own advice. Stop reading comparisons, run both against your own stacks, and decide for yourselves. #InfrastructureAsCode #PlatformEngineering #InfrastructureOrchestration #OpenTofu #Terraform
3
1
55
Link to article: linkedin.com/feed/update/urn…

The choice between env zero and Spacelift comes down to one question | env zero

A great write-up from the team at Spacelift comparing two of the best solutions in the IaC orchestration space. One small correction... We do have a free tier: 250 runs a month, 30 environments,...

linkedin.com
16
🏷️ Now Available: env zero Environment Tagging Read the blog: bit.ly/4zvHbda
44
Most "free" IaC tiers cap you at 2 users and strip out the good stuff. We went the other way. The env zero Free Tier is $0 forever: → 250 runs/mo → 30 environments → unlimited users (humans + agents) → full Navigator set: drift detection + OIDC SSO envzero.com/blog/introducing…
68
Load more