Stop approving
infrastructure blind.

See every change before you approve. Catch drift before it becomes an incident.

run #R-4291 · vpc-core · production
# Plan: 3 to add 1 to change 0 to destroy
# Blast radius
aws_vpc.main [~] cidr_block: "10.0.0.0/16" → "10.1.0.0/16"
aws_subnet.private[0] [+] new us-east-1c coverage
aws_subnet.private[1] [+] new us-east-1d coverage
aws_route_table.main [+] updated routing rules
✓ Policy: passed · Cost: +$0.00/mo · Security: clean
# alice@acme.com approved → applying...
✓ Applied 3 added, 1 changed
✓ Verified 0 changes in post-apply plan — state confirmed

Runs on the infrastructure your team already manages

Terraform
Terraform
OpenTofu
OpenTofu
AWS
AWS
Google Cloud
Google Cloud
Azure
Azure
Kubernetes
Kubernetes
GitHub
GitHub
Claude
Claude
ChatGPT
ChatGPT
Terraform
Terraform
OpenTofu
OpenTofu
AWS
AWS
Google Cloud
Google Cloud
Azure
Azure
Kubernetes
Kubernetes
GitHub
GitHub
Claude
Claude
ChatGPT
ChatGPT

Three checks that catch problems before they become incidents

Production incidents rarely come from nowhere. These run on a schedule so your team doesn't have to.

Drift Monitor

< 11 min avg detection

Flags infrastructure drift before your next deploy.

Scheduled scansHuman review onlyAuto-closes

Resource Audit

$4,200/mo avg savings

Surfaces orphaned resources eating your cloud budget.

Cost estimate includedAge thresholdNo active deps

Version Guard

4 days avg time saved

Proposes provider upgrades only when dry-plan passes.

Dry-plan requiredOne PR per upgradeNo major jumps

Every finding goes through your approval workflow

No check self-applies. Each opens a PR and waits for your team.

Check runsFinding surfacedPR openedPolicy + Cost + SecurityTeam reviewsApproved & applied

One workflow. Tuned per environment.

Same approval pipeline everywhere — you control how strict each gate is per environment.

production
Public bucket accessHard Block
Cost delta > $500/moHard Block
Missing tagsSoft Block
Non-latest provider versionSoft Block
staging
Public bucket accessSoft Block
Cost delta > $500/moSoft Block
Missing tagsInformational
Non-latest provider versionInformational
development
Public bucket accessInformational
Cost delta > $500/moInformational
Missing tagsInformational
Non-latest provider versionInformational
Change ProposedHuman or agentPolicy CheckCompliance gatesCost AnalysisBudget gatesSecurity ScanVulnerability checkBlast RadiusImpact visibleHuman ApprovesFinal sayApplyChanges executeVerifiedState confirmed

Each gate returns one of three outcomes

Hard Block

The plan cannot be approved.

Soft Block

Approval requires an explicit override.

Informational

The finding is visible. Nothing is blocked.

What changes when you use Atlantas

Every feature closes the gap between what you think is deployed and what's actually running.

< 11 min
Avg drift detection
30 min
Time to first run
100%
Changes audited
0
Unauthorized applies

Approve with certainty

Dependency graph. Every resource, color-coded by action.

Drift caught early

Scheduled scans open PRs before you hit a wall.

Full audit trail

Every action logged. CSV export in one click.

Readable state

Browse state like a database. Diff any two versions.

Live streaming

Terraform output streams live as plans run.

No unauthorized changes

Every change requires explicit approval. Always.

Verified, not assumed

Post-apply reconciliation confirms state matches reality.

Zero team bleed

Full team isolation at the data layer.

Up and running in five steps

Under 30 minutes from signup to first verified apply.

1
Connect
Link cloud accounts and repos in minutes.
2
Define
Set governance levels per deployment target.
3
Plan
Every PR shows diffs, cost delta, and policy results.
4
Approve
Review the full picture. Approve or reject.
5
Verify
Post-apply check confirms state matches reality.

State management

Your infrastructure state, always inspectable

Browse deployed resources, diff any two state versions, and unlock a stuck state — without console access.

  • Browse resources, not JSON
  • Diff any two versions
  • Instant unlock from the UI
  • Every version on record
  • Checks read before they propose
backend.tf
terraform {
  backend "http" {
    address        = "https://atlantas.io/api/v1/tfstate/vpc-core/default"
    lock_address   = "https://atlantas.io/api/v1/tfstate/vpc-core/default"
    unlock_address = "https://atlantas.io/api/v1/tfstate/vpc-core/default"
    lock_method    = "LOCK"
    unlock_method  = "UNLOCK"
  }
}

# That's it. Atlantas handles the rest.

Infrastructure topology

Know what depends on what

Dependency graph enforces execution order and catches circular dependencies at plan time.

Project Graph4 projects · 2 instances
iam-policiesorg/security · prodworkspace: prodvpc-coreorg/infra · prodworkspace: prodeks-clusterorg/platform · stgworkspace: stagingmonitoringorg/observabilityworkspace: staginginfra-prodRunningenvironment: production2 projects assignedinfra-stagingRunningenvironment: staging2 projects assigneddependencyassigned to instance

How Atlantas compares

Every change visible, gated, and on record.

FeatureAtlantasHCP CloudSelf-Hosted
Blast radius graph before every applyYes
Post-apply verification (state confirmed)Yes
Drift detection agent (auto reconcile PRs)Yes
Orphaned resource cleanup agentYes
Automated version upgrade agentYes
Policy, cost & security gates per environmentYesPartial
Full audit log with CSV exportYesPartialDIY
State version browser and diff viewerYes
Encrypted state hosting (per-tenant keys)YesYesDIY
Real-time plan and apply streamingYes
SSO (Google, GitHub, OIDC, SAML)YesYesDIY
Setup time< 30 minHoursDays
Self-hosted optionYesYes

Simple, transparent pricing

$40 per user per month + $0.15 per resource per month.

Free tier is and will always be free — hosted Atlantis for up to 2 users, no expiry.

Always free

Free

Hosted Atlantis. No credit card, no time limit.

Free
  • 2 users · 50 resources
  • 1 instance · 3 environments
  • State browser & history
  • GitHub SSO
Start Free
Most Popular

Pro

Scales with your team and infrastructure.

$40/ user / month
  • $40 / user · $0.15 / resource / mo
  • All 3 production checks
  • Blast radius + closed-loop verify
  • 5 GB encrypted state · full SSO
Start Free Trial

Enterprise

Full control, compliance, and dedicated support.

Custom
  • Volume discounts on seats & resources
  • Custom policies · Agent RBAC
  • OIDC + SAML SSO
  • SLA + dedicated support
Talk to Sales

Estimate your cost

Adjust the sliders to match your team size and infrastructure.

5
1100
200
105,000
5 users × $40/mo$200/mo
200 resources × $0.15/mo$30/mo
Estimated monthly total$230/mo
Annual estimate$2,760/yr

No credit card required. Free tier forever. Cancel anytime.

What teams say

Trusted by platform teams and their agents

We used to approve plans from a wall of green text. Now we see the dependency graph and know exactly what's changing.
Sarah Chen·Head of Platform Engineering, Fintech Startup
The audit log got us through SOC 2 Type II. Every action logged — who, when, and with what result.
Marcus Johansson·DevOps Lead, E-commerce Scale-up
The Drift Monitor caught a manual VPC change 11 minutes after it happened. With our old process it would've sat undetected for weeks.
Priya Patel·VP of Engineering, Healthcare SaaS

Your next production change, approved with full context.

See every change. Catch drift early. Every action on the record.

No credit card required · Free tier forever · Cancel anytime