Mr.PlanB Logo
    Infrastructure Automation Ledger 2026
    Ledger
    Infrastructure Automation Ledger 2026

    Harness: Infrastructure Automation Ledger 2026 Scorecard

    Harness IaCM ships monthly with the broadest agent line-up in Beta, sold only as part of the Harness platform bundle, with Terraform capped at 1.5.x.

    Edition October 16, 20268 min read

    Where Harness IaCM put its effort, 2026 to 2026

    Each square is one capability area in one year. The brighter it is, the more the area gained in the Infrastructure Automation Ledger that year; 1, 2 and 3 mark that year's biggest pushes.

    ’26
    Provisioning breadth2
    Configuration management depth3
    State, planning and safety
    Language and authoring
    Orchestration and self-service
    Scale and control plane
    Security and compliance
    Bare metal and day-2 operations
    Ecosystem and integrations
    AI assistance1
    no change+0.5+1+1.5 or moreScores out of 5 per area.

    Biggest pushes overall: AI assistance (+3), Provisioning breadth (+0.5), Configuration management depth (+0.5). Already strong in 2025: State, planning and safety, Orchestration and self-service, Scale and control plane.

    Top focus each year: 2026 AI assistance.

    Part of the Infrastructure Automation Ledger (edition 2026-10-16). How the scores work: methodology.

    Snapshot

    • Type: product (a module of the Harness platform)
    • Owner: Harness Inc., San Francisco (private, venture backed; $570M total funding stated by the vendor; no acquisition found)
    • Engine: none of its own; runs OpenTofu, Terraform, Terragrunt, Ansible and AWS CDK (Beta)
    • Licence: proprietary; sold inside the Essentials bundle or as an Enterprise module, quote only; Self-Managed Enterprise Edition as an add-on; not in the Free plan
    • Latest release: release notes to October 2026; version numbers published only for February to May 2025 (IAC-Server 1.116.0 to 1.145.0); Harness MCP server 3.2.34 (2026-10-13)
    • Support lifecycle: SaaS, continuous; Self-Managed Enterprise Edition has separate release notes (not read)
    • Next milestone: none published; AWS CDK, module version lifecycle, Remediation Agent, Blast Radius Agent and Ansible static inventory are in Beta
    • Targets: Terraform up to 1.5.x only, versions from 1.6.0 unsupported (whats-supported page, read 2026-10-15); OpenTofu all versions; Terragrunt GA 2026-04; Ansible over SSH and WinRM; AWS CDK Beta; SaaS or Self-Managed Enterprise Edition
    • Tier: IaC management platform
    • Archetype: Dependable builder
    • Evidence grade: B. Release notes (February 2025 onward), the supported platforms page, the pricing page and the MCP server tags were read from primary sources (2026-10-15). Corporate history rests on the vendor's About page. The first GA date of the module was not found, so scores start in 2025, the first month of the release notes read.

    Scorecard

    DimensionScoreDirection
    Capability today64.3 / 100higher is better
    Momentum since 2025+10.1 pointshigher is better
    Credibility18.5 / 25higher is better
    Commercial risk13.0 / 25lower is better
    Technical lock-in9.5 / 25lower is better
    Integrator fit12.0 / 20higher is better
    AI leverage5.0 / 20higher is better
    Ledger Index59.3 / 100balanced weights; see the methodology

    Capability by domain, 2015 to today

    Scores 0 to 5 against fixed anchors; total is weighted to 100.

    Domain (weight)201520192022Today
    Provisioning breadth (15)n/an/an/a3.5
    Configuration management depth (12)n/an/an/a2.5
    State, planning and safety (12)n/an/an/a4
    Language and authoring (10)n/an/an/a3
    Orchestration and self-service (10)n/an/an/a4
    Scale and control plane (8)n/an/an/a3.5
    Security and compliance (10)n/an/an/a4
    Bare metal and day-2 operations (8)n/an/an/a0.5
    Ecosystem and integrations (8)n/an/an/a3.5
    AI assistance (7)n/an/an/a3
    Total / 100n/an/an/a64.3

    Year by year: 2025: 54.2 · 2026: 64.3

    What moved the score

    YearDomainChangePointsTrigger
    2026AI assistance0 → 3+4.22026-02: native MCP server support; 2026-09: MCP creates and updates IaCM entities; Remediation and Blast Radius agents in Beta
    2026Configuration management depth2 → 2.5+1.22026-02: Ansible WinRM, event logs and preflight validation; inventory plugin UI (2026-03)
    2026Orchestration and self-service3.5 → 4+1.02026-08: Ephemeral Workspaces in Limited GA (half step) on top of pipelines and approvals
    2026Provisioning breadth3 → 3.5+1.52026-04: Terragrunt GA; Ansible and AWS CDK (Beta) beside OpenTofu and Terraform 1.5.x
    2026Security and compliance3.5 → 4+1.02026-03: Vault integration; mTLS since 1.126 (2025-03); OPA policy sets
    2026State, planning and safety3.5 → 4+1.22026-04: Terragrunt drift, approvals and OPA enforcement GA; plan and drift blocked on locked workspaces (2026-10)

    Direction, 2023 to 2026

    Each release item carries one theme and one driver (V vision, C customer need, M market window, U upstream, P portfolio).

    DateItemThemeDriver
    2023-08Terraform held at 1.5.x after the BSL change; OpenTofu supporter funding five engineers for five yearsLicensingM
    2025-02IAC-Server 1.116.0: Module Registry; import in pipelinesLanguageC
    2025-031.126: sparse checkout and mTLSSecurityC
    2025-041.138.0: workspace wizard; Essentials licence enforcementPackagingP
    2025-06Module testing for Terraform modulesLanguageC
    2025-08Resource tracking; target and replace in plan stepsState and planningC
    2025-10Terragrunt Beta with drift, cost estimation and OPA; provider registry Beta; variable setsProvisioning breadthC
    2025-12OpenTofu 1.11.0 supportProvisioning breadthU
    2026-02Native MCP server supportAIV
    2026-02Ansible WinRM, event-based logs, preflight validationConfiguration managementC
    2026-03AWS CDK supportProvisioning breadthM
    2026-03Vault integration; iacm plan CLI; Ansible inventory plugin UIEcosystemC
    2026-04Terragrunt GA with drift, approvals and OPA; Module Registry 2.0; CDK BetaState and planningC
    2026-07CDK Phase 2: CloudFormation-based drift detection and destroy; module version lifecycle BetaState and planningC
    2026-08Remediation Agent and Blast Radius Agent (Beta); Insights tabAIV
    2026-08Ephemeral Workspaces (Limited GA)OrchestrationC
    2026-09MCP server creates and updates IaCM entities; pre-baked OpenTofu and Terraform binariesAIV
    2026-09Ansible playbook scope and remote static inventory (Beta)Configuration managementC
    2026-10Plan and drift detection blocked on locked workspaces; Ansible variables (Beta)State and planningC
    • Centre of gravity: State and planning (4), Provisioning breadth (3), AI (3)
    • Blind spots (no items): Scale, Bare metal
    • Driver mix: Vision 16%, Customer need 63%, Market window 11%, Upstream 5%, Portfolio 5%
    • Idea-to-need index: 0.18 (0 = demand-pulled, 1 = thesis-pushed)

    Credibility: 18.5 / 25

    CriterionScoreBasis
    Cadence4.5Release notes every month from 2025-02 to 2026-10 except May and June 2026
    Roadmap transparency3Release notes label Beta and Limited GA; no public roadmap read
    Say-do3.5Terragrunt went from Beta (2025-10) to GA (2026-04) in six months; the provider registry (Beta 2025-10) and AWS CDK (2026-03) have no GA entry
    Velocity4.5Terragrunt, CDK, Ansible depth, two agents and the MCP server within 12 months
    Lifecycle stability3Terraform capped at 1.5.x; many features in Beta; a module inside a larger platform with its own licence enforcement since 2025-04

    Commercial risk: 13.0 / 25 (lower is better)

    CriterionScoreBasis
    Price and licence volatility2Prices undisclosed; Essentials licence enforcement for IaCM added 2025-04
    Purchase constraints4Sold only inside the Essentials bundle or as an Enterprise module; absent from the Free plan; Self-Managed is an add-on; Essentials capped at 500 users
    Channel and access3Direct sales, quote only; no partner programme found for the module
    Owner stability1.5Independent with $570M raised (vendor figure); no sale found
    Cost of staying supported2.5Self-Managed release notes are separate and trail SaaS; a bundle renewal carries the whole platform

    Technical lock-in: 9.5 / 25 (lower is better)

    CriterionScoreBasis
    Formats1Standard Terraform, OpenTofu, Terragrunt and Ansible code in your Git
    Export path2Code is portable; state export from workspaces is not documented; pipelines and policy sets are Harness objects
    Stack coupling3Account, organisation, project and workspace hierarchy, pipelines and connectors
    Hardware / cloud coupling1.5SaaS or Self-Managed Enterprise Edition; air-gapped use not confirmed
    Skills and tooling coupling2Harness pipeline YAML and OPA

    Integrator fit: 12.0 / 20

    CriterionScoreBasis
    Partner programme openness2None found for the module
    Multi-tenancy and self-service4Organisations and projects with RBAC; Ephemeral Workspaces in Limited GA
    API and infrastructure-as-code4API, iacm plan CLI and the Harness MCP server
    Skills and certification2No IaCM certification found; Harness training not checked

    AI leverage: 5.0 / 20

    How the product uses AI, scored per year like capability. Only GA counts.

    Criterion20192022TodayLatest step
    AI code and plan generationn/an/a0.52026: Vendor says pipelines and OPA policies can be generated from prompts (vendor claim); no HCL generation confirmed
    AI platform stackn/an/a02025: None
    AI-assisted operationsn/an/a1.52026: 2026-08: Remediation Agent opens pull requests for drift and Blast Radius Agent scores plan risk, both Beta (half credit)
    Agent opennessn/an/a32026: 2026-02: native MCP server support, extended 2026-09 to create and update IaCM entities; the MCP repository's licence and authentication were not read

    Year by year: 2025: 1.5 · 2026: 5

    AI say-do, 2023 to 2026: 4 AI items announced; 2 GA, 2 still preview, 0 pending, 0 dropped. The MCP server and the query assistant shipped without a stated stage; both agents are Beta as of 2026-10-15.

    Harness has the longest AI list in this group, two autonomous agents plus an MCP server that can now write IaCM objects, but only the MCP server is in general use and neither agent carries a GA label. The score rises when the Remediation Agent leaves Beta.

    Reading

    Harness IaCM has moved fastest of the six since early 2025: Terragrunt from Beta to GA in six months, Ansible depth, AWS CDK, two agents and an MCP server, all logged in monthly release notes. Its capability sits between Spacelift and env zero, and its credibility is second only to Spacelift. The commercial side is the drag: the module cannot be bought on its own, prices are undisclosed and self-management is an add-on, so a buyer takes on the whole Harness platform to get it. The thing to check is how much of what you need is still Beta, since the CDK, module lifecycle, both agents and parts of Ansible were Beta on 2026-10-15.

    Open questions and items to re-score

    • First GA date of the module; scores start in 2025 for lack of earlier evidence.
    • Pricing metric for the module; the page says no per-pipeline charges and nothing more.
    • Self-Managed Enterprise Edition release notes and versions were not read; air-gapped operation not confirmed.
    • GA status of both agents, the MCP server and the query assistant.
    • Drift detection on plain Terraform and OpenTofu workspaces: only Terragrunt and CDK drift entries were seen in the release notes.
    • The product page schema shows a $0 offer while the pricing page's Free plan excludes IaCM.

    Related reading

    More from Infrastructure Automation Ledger 2026