env zero: Infrastructure Automation Ledger 2026 Scorecard

Part of the Infrastructure Automation Ledger (edition 2026-10-16). How the scores work: methodology.

Snapshot

Type: product
Owner: env0 Inc., now written env zero on vendor pages (private, venture backed; Series A total $35.1M by 2023-03; Steve Corndell CEO since 2025-05; no acquisition found)
Engine: none of its own; runs OpenTofu, Terraform, Terragrunt, Pulumi, AWS CloudFormation, Helm and Kubernetes manifests
Licence: proprietary SaaS; Free plan (250 runs a month, 30 environments, 1 self-hosted agent); Cloud Navigator and Cloud Pilot by quote, priced per successful apply or environment; MCP server Apache-2.0
Latest release: SaaS, changelog entry October 2026; terraform-provider-env0 1.33.2 (2026-10-05); mcp-server 1.1.3 (2026-09-27)
Support lifecycle: SaaS, continuous; no version policy published for the self-hosted agent
Next milestone: none published; Azure DevOps connections must move to Microsoft Entra ID (October 2026 changelog, no deadline given)
Targets: Terraform up to 1.5.x only, OpenTofu for anything newer (supported platforms page, read 2026-10-15); Terragrunt, Pulumi, CloudFormation, Helm, Kubernetes; Ansible only as a Custom Flow step; self-hosted agents on Kubernetes or Docker with outbound internet, control plane SaaS only
Tier: IaC management platform
Archetype: Dependable builder
Evidence grade: B. Changelog (January 2025 onward), pricing, billing and supported platform pages were read from primary sources (2026-10-15). Funding, the CEO change and the MCP server details come from search results and GitHub summaries. Changelog entries before 2025 were not read, so the 2020 to 2024 capability states are inferred.

Scorecard

Dimension	Score	Direction
Capability today	60.3 / 100	higher is better
Momentum since end of 2022	+18.0 points (2020 to 2022: +0.0)	higher is better
Credibility	15.5 / 25	higher is better
Commercial risk	11.5 / 25	lower is better
Technical lock-in	8.5 / 25	lower is better
Integrator fit	12.0 / 20	higher is better
AI leverage	5.5 / 20	higher is better
Ledger Index	58.8 / 100	balanced weights; see the methodology

Capability by domain, 2015 to today

Scores 0 to 5 against fixed anchors; total is weighted to 100.

Domain (weight)	2015	2019	2022	Today
Provisioning breadth (15)	n/a	n/a	2.5	3.5
Configuration management depth (12)	n/a	n/a	1	1
State, planning and safety (12)	n/a	n/a	3	4.5
Language and authoring (10)	n/a	n/a	2.5	3
Orchestration and self-service (10)	n/a	n/a	3.5	4
Scale and control plane (8)	n/a	n/a	2	3
Security and compliance (10)	n/a	n/a	3	4
Bare metal and day-2 operations (8)	n/a	n/a	0	0
Ecosystem and integrations (8)	n/a	n/a	2.5	3.5
AI assistance (7)	n/a	n/a	0	3
Total / 100	n/a	n/a	42.3	60.3

Year by year: 2020: 42.3 · 2021: 42.3 · 2022: 42.3 · 2023: 42.3 · 2024: 42.3 · 2025: 55.7 · 2026: 60.3

What moved the score

Year	Domain	Change	Points	Trigger
2025	AI assistance	0 → 3	+4.2	2025-09: official MCP server with approval before deploys; Cloud Analyst (2025-03)
2025	Ecosystem and integrations	2.5 → 3	+0.8	2025-01: Backstage plugin
2025	Language and authoring	2.5 → 3	+1.0	2025-11: Code Optimizer (Beta, half step) on top of the private registry and templates
2025	Orchestration and self-service	3.5 → 4	+1.0	2025-01: Backstage plugin for self-service deploys from a developer portal
2025	Provisioning breadth	2.5 → 3.5	+3.0	2025-06: Cloud Compass adds GCP; dedicated credentials for AWS, Azure, GCP, OCI and Kubernetes beside OpenTofu, Pulumi, CloudFormation and Helm
2025	Security and compliance	3 → 3.5	+1.0	2025-09: ready-to-use policies
2025	State, planning and safety	3 → 4	+2.4	2025-02 to 2025-05: drift remediation, drift cause analysis and automated code updates
2026	Ecosystem and integrations	3 → 3.5	+0.8	2026-03: Terraform Cloud migration wizard; 2026-04: centralised VCS connections
2026	Scale and control plane	2 → 3	+1.6	2026-03: self-service agent pools for self-hosted agents
2026	Security and compliance	3.5 → 4	+1.0	2026-01 to 2026-08: self-service SSO, SCIM, IP allowlisting and V2 OIDC tokens
2026	State, planning and safety	4 → 4.5	+1.2	2026-05: saved cloud plans on the remote backend

Direction, 2023 to 2026

Each release item carries one theme and one driver (V vision, C customer need, M market window, U upstream, P portfolio).

Date	Item	Theme	Driver
2023-03	Series A extended to $35.1M	Packaging	P
2023-08	Terraform support held at 1.5.x after the BSL change; founding OpenTofu supporter with five engineers for five years	Licensing	M
2025-01	Backstage plugin to deploy IaC from an internal developer portal	Ecosystem	C
2025-02	Drift remediation; Cloud Compass spots drift before onboarding	State and planning	C
2025-03	Cloud Analyst: AI infrastructure intelligence add-on	AI	V
2025-04	Drift cause analysis; AI summaries and error insights (Beta)	State and planning	C
2025-05	Drift remediation with automated code updates	State and planning	C
2025-05	CEO change; product and pricing updates announced	Packaging	P
2025-06	Cloud Compass adds GCP	Provisioning breadth	C
2025-09	env zero MCP server (Apache-2.0); ready-to-use policies	AI	V
2025-11	Code Optimizer (Beta)	Language	V
2026-01	Self-service SSO	Security	C
2026-02	SCIM provisioning	Security	C
2026-03	Self-service agent pools for self-hosted agents	Scale	C
2026-03	Terraform Cloud migration wizard	Ecosystem	M
2026-04	Centralised VCS connections for all providers	Ecosystem	C
2026-05	Saved cloud plans on the remote backend; IP allowlisting including the Agent API	State and planning	C
2026-07	New CLI built for AI agents with skill install; Free plan	AI	V
2026-08	Full SCIM provisioning; key-value environment tags; reworked search	Security	C
2026-10	Azure DevOps connections move to Microsoft Entra ID (action required)	Ecosystem	U

Centre of gravity: Ecosystem (4), State and planning (4), AI (3)
Blind spots (no items): Configuration management, Orchestration, Bare metal
Driver mix: Vision 20%, Customer need 55%, Market window 10%, Upstream 5%, Portfolio 10%
Idea-to-need index: 0.24 (0 = demand-pulled, 1 = thesis-pushed)

Credibility: 15.5 / 25

Criterion	Score	Basis
Cadence	3.5	Changelog posts most months; none from September to December 2025 apart from November; about three entries a month in 2026
Roadmap transparency	2.5	Changelog only; no public roadmap or tracker
Say-do	3	MCP server shipped in 2025-09 within its quarter; AI summaries (Beta 2025-04) and Code Optimizer (Beta 2025-11) have no GA entry
Velocity	3.5	Drift remediation, Cloud Analyst, MCP server, SCIM, agent pools and a new CLI within 18 months
Lifecycle stability	3	Terraform held at 1.5.x by design; rebrand to env zero without a published notice; Azure DevOps connections must move to Entra ID

Commercial risk: 11.5 / 25 (lower is better)

Criterion	Score	Basis
Price and licence volatility	2.5	Pricing updates announced 2025-05 without published detail; tiers renamed Cloud Navigator and Cloud Pilot; Free plan added 2026-07
Purchase constraints	2	Free plan with 250 runs a month; paid plans by quote only, metered per successful apply or environment
Channel and access	2.5	Direct sales; no partner programme found; control plane SaaS only
Owner stability	2.5	Venture backed; CEO changed 2025-05; last funding found 2023-03
Cost of staying supported	2	SaaS; per-apply metering grows with use; no upgrade work on the control plane

Technical lock-in: 8.5 / 25 (lower is better)

Criterion	Score	Basis
Formats	1	Standard engine code in your Git; state on the env zero backend or your own
Export path	2	Code is portable; an exit path for environments, templates and approval policies is not documented
Stack coupling	2	Projects, environments, templates and OPA approval policies are env zero objects
Hardware / cloud coupling	2	SaaS control plane; self-hosted agents need outbound internet; no air-gapped mode
Skills and tooling coupling	1.5	Terraform, OpenTofu and Rego skills transfer

Integrator fit: 12.0 / 20

Criterion	Score	Basis
Partner programme openness	2	No partner programme found
Multi-tenancy and self-service	4	Projects, RBAC, SSO and SCIM, managed self-service with a template catalogue
API and infrastructure-as-code	4	REST API, Terraform provider (1.33.2), CLI (2026-07) and an open-source MCP server
Skills and certification	2	Documentation; no certification found

AI leverage: 5.5 / 20

How the product uses AI, scored per year like capability. Only GA counts.

Criterion	2019	2022	Today	Latest step
AI code and plan generation	n/a	0	0.5	2025: 2025-11: Code Optimizer in Beta improves existing code; no HCL generation found (half step)
AI platform stack	n/a	0	0	2020: None
AI-assisted operations	n/a	0	2	2025: 2025-03: Cloud Analyst answers natural language questions over drift and DORA data as a Cloud Pilot add-on; AI error insights in Beta since 2025-04; no GA label on either
Agent openness	n/a	1.5	3	2025: 2025-09: official open-source MCP server (Apache-2.0) with deploy and approve tools gated by in-product approval; 2026-07 CLI ships agent skills

Year by year: 2020: 1.5 · 2021: 1.5 · 2022: 1.5 · 2023: 1.5 · 2024: 1.5 · 2025: 5.5 · 2026: 5.5

AI say-do, 2023 to 2026: 5 AI items announced; 3 GA, 2 still preview, 0 pending, 0 dropped. Cloud Analyst, the MCP server and the agent CLI shipped without a stated stage; AI summaries and Code Optimizer are still Beta.

env zero's AI work is strongest on the agent side: an open-source MCP server whose deploy tools wait for approval inside the product, and a CLI that installs skills for coding agents. Code generation is absent and the operator assistant is an add-on without a GA label.

Reading

env zero covers the core platform job well: plan and approval policies, drift detection with remediation and cause analysis, saved plans and SCIM, shipped at a steady monthly pace. It scores close to Spacelift on state and self-service and below it on configuration management, scale and transparency, because the control plane is SaaS only and there is no public roadmap. The rebrand from env0 and the 2025 pricing update both happened without a published notice, which is why lifecycle stability and price volatility sit in the middle. Check whether the Free plan's self-hosted runner is real: the pricing page lists one, the agent documentation says agents are for Enterprise customers.

Open questions and items to re-score

Free tier conflict: the pricing page includes one self-hosted runner, the agent overview restricts agents to Enterprise (both read 2026-10-15).
The env0 to env zero rename has no announcement found; only the redirects and page titles show it.
GA status of Cloud Analyst, AI summaries and Code Optimizer.
Contents of the 2025-05 pricing update.
Depth of the Ansible integration beyond a Custom Flow step.
Partner programme and certification: none found.
Capability before 2025 is inferred; the older changelog pages were not read.