Pulumi Corporation

Pulumi

AI-native infrastructure agent built into Pulumi Cloud. Synthesizes, deploys, and operates infrastructure from natural language or chat — beyond code completion to understand cloud APIs and state. Targets platform teams using Pulumi or TypeScript/Python/Go who want to eliminate boilerplate and accelerate developer self-service without losing type safety or policy guardrails.

Provision Deploy

Visit website

Last reviewedMay 15, 2026

How we review

Overview

Pulumi is an Infrastructure as Code platform that uses general-purpose programming languages (TypeScript, Python, Go, Java, C#) rather than a domain-specific language. Infrastructure resources are defined as objects in the chosen language; the Pulumi engine computes the diff between the current program state and actual cloud state, then applies only the necessary changes.

Pulumi Cloud provides managed state storage with deployment history, a visual resource graph, and drift detection that compares live cloud state against last-applied state. CrossGuard is the policy-as-code engine: policies written in Python or OPA evaluate the resource graph during every preview and update.

Pulumi AI accepts natural-language descriptions and generates working infrastructure programs in the user's chosen language. PulumiIQ extends this with suggestions across the authoring and drift remediation lifecycle; it requires Team tier or above. Component resources package reusable infrastructure patterns as versioned, typed constructs. Provider coverage spans 150+ targets. Pricing: Individual (free), Team ($50/seat/month), Enterprise (custom).

Key Features

Infrastructure defined in TypeScript, Python, Go, Java, or C#: use real language features — loops, functions, conditionals, and package imports — rather than DSL templating or YAML anchors
Pulumi AI: generates working infrastructure programs in any supported language from a natural language description, then previews the diff and deploys from the same interface without leaving the CLI
Pulumi Cloud state backend: managed state storage with deployment history, drift detection that compares live cloud state against last-applied state, and a visual resource graph per stack
CrossGuard policy-as-code: policies written in Python or OPA evaluate the resource graph during every preview and update — block, warn, or require approval based on resource attributes, tags, or costs
Component resources: package reusable infrastructure patterns (a VPC with standard subnets, a K8s cluster with node pools and RBAC) as versioned, typed, shareable constructs across the organization
150+ provider coverage: all major clouds, Kubernetes, Datadog, GitHub, Cloudflare, and others — the same program model applies regardless of provider, with no per-provider DSL to learn

Integrations

9 total

scm

GitHubGitLab

ci / cd

TerraformOpenTofuPulumi

cloud

AWSGCPAzure

orchestration

Kubernetes

Pricing

3 tiers

Individual

Free

Free tier: 1 user, AI Prompting and AI Guardrails included

Team

—

Paid; AI features included

Enterprise

Contact sales

Role-Based AI Controls, AI Security Scanning

Compliance

0 / 6 attested

SOC 2

HIPAA

GDPR

FedRAMP

PCI DSS

ISO 27001

No compliance attestations on file. Confirm directly with the vendor before procurement.

Freshness

Heartbeatverified · 5d ago

Listings are re-verified on a recurring sweep. If the website 200s and pricing hasn't shifted since the last check, the heartbeat stays green.

UpdatedJun 18, 2026

What does AI Native mean?

AI maturity is an independent editorial rating assigned by infraplz.dev — not a vendor self-claim. We assess how meaningfully each tool actually uses AI in production workflows, cutting through marketing copy.

AI NativeAI is the core product — the tool wouldn't exist without it.
AI EnhancedAI is a first-class feature that materially changes the workflow.
AI AdjacentAI features exist but are superficial or bolt-on additions.
AI MinimalNo meaningful AI features; listed as a critical platform engineering tool.

AboutSubmit a tool