Terraform vs Pulumi vs OpenTofu: IaC Tools Compared in 2026
HashiCorp's BSL license change sent shockwaves through the IaC community. OpenTofu forked Terraform, Pulumi gained momentum, and teams are re-evaluating their infrastructure tooling.
The State of Each Tool
| Feature | Terraform | OpenTofu | Pulumi |
|---|---|---|---|
| Language | HCL | HCL | Python/Go/TS/Java |
| License | BSL 1.1 | MPL 2.0 | Apache 2.0 |
| State Encryption | Enterprise | Built-in | Built-in |
| Provider Ecosystem | 4,000+ | 4,000+ (compatible) | 200+ native |
| Testing | terraform test | tofu test | Unit tests in code |
When to Choose Each
Terraform: You are already invested and HashiCorp's license does not affect your use case. Enterprise features like Sentinel policies matter.
OpenTofu: Drop-in Terraform replacement when BSL is a concern. State encryption and provider-defined functions are bonuses.
Pulumi: Your team prefers real programming languages over DSLs. Testing infrastructure with pytest or Go tests is natural. Complex logic that HCL handles awkwardly becomes simple code.