Harness: Infrastructure Automation Ledger 2026 Scorecard
Harness IaCM ships monthly with the broadest agent line-up in Beta, sold only as part of the Harness platform bundle, with Terraform capped at 1.5.x.
Where Harness IaCM put its effort, 2026 to 2026
Each square is one capability area in one year. The brighter it is, the more the area gained in the Infrastructure Automation Ledger that year; 1, 2 and 3 mark that year's biggest pushes.
| ’26 | |
|---|---|
| Provisioning breadth | 2 |
| Configuration management depth | 3 |
| State, planning and safety | |
| Language and authoring | |
| Orchestration and self-service | |
| Scale and control plane | |
| Security and compliance | |
| Bare metal and day-2 operations | |
| Ecosystem and integrations | |
| AI assistance | 1 |
Biggest pushes overall: AI assistance (+3), Provisioning breadth (+0.5), Configuration management depth (+0.5). Already strong in 2025: State, planning and safety, Orchestration and self-service, Scale and control plane.
Top focus each year: 2026 AI assistance.
Part of the Infrastructure Automation Ledger (edition 2026-10-16). How the scores work: methodology.
Snapshot
- Type: product (a module of the Harness platform)
- Owner: Harness Inc., San Francisco (private, venture backed; $570M total funding stated by the vendor; no acquisition found)
- Engine: none of its own; runs OpenTofu, Terraform, Terragrunt, Ansible and AWS CDK (Beta)
- Licence: proprietary; sold inside the Essentials bundle or as an Enterprise module, quote only; Self-Managed Enterprise Edition as an add-on; not in the Free plan
- Latest release: release notes to October 2026; version numbers published only for February to May 2025 (IAC-Server 1.116.0 to 1.145.0); Harness MCP server 3.2.34 (2026-10-13)
- Support lifecycle: SaaS, continuous; Self-Managed Enterprise Edition has separate release notes (not read)
- Next milestone: none published; AWS CDK, module version lifecycle, Remediation Agent, Blast Radius Agent and Ansible static inventory are in Beta
- Targets: Terraform up to 1.5.x only, versions from 1.6.0 unsupported (whats-supported page, read 2026-10-15); OpenTofu all versions; Terragrunt GA 2026-04; Ansible over SSH and WinRM; AWS CDK Beta; SaaS or Self-Managed Enterprise Edition
- Tier: IaC management platform
- Archetype: Dependable builder
- Evidence grade: B. Release notes (February 2025 onward), the supported platforms page, the pricing page and the MCP server tags were read from primary sources (2026-10-15). Corporate history rests on the vendor's About page. The first GA date of the module was not found, so scores start in 2025, the first month of the release notes read.
Scorecard
| Dimension | Score | Direction |
|---|---|---|
| Capability today | 64.3 / 100 | higher is better |
| Momentum since 2025 | +10.1 points | higher is better |
| Credibility | 18.5 / 25 | higher is better |
| Commercial risk | 13.0 / 25 | lower is better |
| Technical lock-in | 9.5 / 25 | lower is better |
| Integrator fit | 12.0 / 20 | higher is better |
| AI leverage | 5.0 / 20 | higher is better |
| Ledger Index | 59.3 / 100 | balanced weights; see the methodology |
Capability by domain, 2015 to today
Scores 0 to 5 against fixed anchors; total is weighted to 100.
| Domain (weight) | 2015 | 2019 | 2022 | Today |
|---|---|---|---|---|
| Provisioning breadth (15) | n/a | n/a | n/a | 3.5 |
| Configuration management depth (12) | n/a | n/a | n/a | 2.5 |
| State, planning and safety (12) | n/a | n/a | n/a | 4 |
| Language and authoring (10) | n/a | n/a | n/a | 3 |
| Orchestration and self-service (10) | n/a | n/a | n/a | 4 |
| Scale and control plane (8) | n/a | n/a | n/a | 3.5 |
| Security and compliance (10) | n/a | n/a | n/a | 4 |
| Bare metal and day-2 operations (8) | n/a | n/a | n/a | 0.5 |
| Ecosystem and integrations (8) | n/a | n/a | n/a | 3.5 |
| AI assistance (7) | n/a | n/a | n/a | 3 |
| Total / 100 | n/a | n/a | n/a | 64.3 |
Year by year: 2025: 54.2 · 2026: 64.3
What moved the score
| Year | Domain | Change | Points | Trigger |
|---|---|---|---|---|
| 2026 | AI assistance | 0 → 3 | +4.2 | 2026-02: native MCP server support; 2026-09: MCP creates and updates IaCM entities; Remediation and Blast Radius agents in Beta |
| 2026 | Configuration management depth | 2 → 2.5 | +1.2 | 2026-02: Ansible WinRM, event logs and preflight validation; inventory plugin UI (2026-03) |
| 2026 | Orchestration and self-service | 3.5 → 4 | +1.0 | 2026-08: Ephemeral Workspaces in Limited GA (half step) on top of pipelines and approvals |
| 2026 | Provisioning breadth | 3 → 3.5 | +1.5 | 2026-04: Terragrunt GA; Ansible and AWS CDK (Beta) beside OpenTofu and Terraform 1.5.x |
| 2026 | Security and compliance | 3.5 → 4 | +1.0 | 2026-03: Vault integration; mTLS since 1.126 (2025-03); OPA policy sets |
| 2026 | State, planning and safety | 3.5 → 4 | +1.2 | 2026-04: Terragrunt drift, approvals and OPA enforcement GA; plan and drift blocked on locked workspaces (2026-10) |
Direction, 2023 to 2026
Each release item carries one theme and one driver (V vision, C customer need, M market window, U upstream, P portfolio).
| Date | Item | Theme | Driver |
|---|---|---|---|
| 2023-08 | Terraform held at 1.5.x after the BSL change; OpenTofu supporter funding five engineers for five years | Licensing | M |
| 2025-02 | IAC-Server 1.116.0: Module Registry; import in pipelines | Language | C |
| 2025-03 | 1.126: sparse checkout and mTLS | Security | C |
| 2025-04 | 1.138.0: workspace wizard; Essentials licence enforcement | Packaging | P |
| 2025-06 | Module testing for Terraform modules | Language | C |
| 2025-08 | Resource tracking; target and replace in plan steps | State and planning | C |
| 2025-10 | Terragrunt Beta with drift, cost estimation and OPA; provider registry Beta; variable sets | Provisioning breadth | C |
| 2025-12 | OpenTofu 1.11.0 support | Provisioning breadth | U |
| 2026-02 | Native MCP server support | AI | V |
| 2026-02 | Ansible WinRM, event-based logs, preflight validation | Configuration management | C |
| 2026-03 | AWS CDK support | Provisioning breadth | M |
| 2026-03 | Vault integration; iacm plan CLI; Ansible inventory plugin UI | Ecosystem | C |
| 2026-04 | Terragrunt GA with drift, approvals and OPA; Module Registry 2.0; CDK Beta | State and planning | C |
| 2026-07 | CDK Phase 2: CloudFormation-based drift detection and destroy; module version lifecycle Beta | State and planning | C |
| 2026-08 | Remediation Agent and Blast Radius Agent (Beta); Insights tab | AI | V |
| 2026-08 | Ephemeral Workspaces (Limited GA) | Orchestration | C |
| 2026-09 | MCP server creates and updates IaCM entities; pre-baked OpenTofu and Terraform binaries | AI | V |
| 2026-09 | Ansible playbook scope and remote static inventory (Beta) | Configuration management | C |
| 2026-10 | Plan and drift detection blocked on locked workspaces; Ansible variables (Beta) | State and planning | C |
- Centre of gravity: State and planning (4), Provisioning breadth (3), AI (3)
- Blind spots (no items): Scale, Bare metal
- Driver mix: Vision 16%, Customer need 63%, Market window 11%, Upstream 5%, Portfolio 5%
- Idea-to-need index: 0.18 (0 = demand-pulled, 1 = thesis-pushed)
Credibility: 18.5 / 25
| Criterion | Score | Basis |
|---|---|---|
| Cadence | 4.5 | Release notes every month from 2025-02 to 2026-10 except May and June 2026 |
| Roadmap transparency | 3 | Release notes label Beta and Limited GA; no public roadmap read |
| Say-do | 3.5 | Terragrunt went from Beta (2025-10) to GA (2026-04) in six months; the provider registry (Beta 2025-10) and AWS CDK (2026-03) have no GA entry |
| Velocity | 4.5 | Terragrunt, CDK, Ansible depth, two agents and the MCP server within 12 months |
| Lifecycle stability | 3 | Terraform capped at 1.5.x; many features in Beta; a module inside a larger platform with its own licence enforcement since 2025-04 |
Commercial risk: 13.0 / 25 (lower is better)
| Criterion | Score | Basis |
|---|---|---|
| Price and licence volatility | 2 | Prices undisclosed; Essentials licence enforcement for IaCM added 2025-04 |
| Purchase constraints | 4 | Sold only inside the Essentials bundle or as an Enterprise module; absent from the Free plan; Self-Managed is an add-on; Essentials capped at 500 users |
| Channel and access | 3 | Direct sales, quote only; no partner programme found for the module |
| Owner stability | 1.5 | Independent with $570M raised (vendor figure); no sale found |
| Cost of staying supported | 2.5 | Self-Managed release notes are separate and trail SaaS; a bundle renewal carries the whole platform |
Technical lock-in: 9.5 / 25 (lower is better)
| Criterion | Score | Basis |
|---|---|---|
| Formats | 1 | Standard Terraform, OpenTofu, Terragrunt and Ansible code in your Git |
| Export path | 2 | Code is portable; state export from workspaces is not documented; pipelines and policy sets are Harness objects |
| Stack coupling | 3 | Account, organisation, project and workspace hierarchy, pipelines and connectors |
| Hardware / cloud coupling | 1.5 | SaaS or Self-Managed Enterprise Edition; air-gapped use not confirmed |
| Skills and tooling coupling | 2 | Harness pipeline YAML and OPA |
Integrator fit: 12.0 / 20
| Criterion | Score | Basis |
|---|---|---|
| Partner programme openness | 2 | None found for the module |
| Multi-tenancy and self-service | 4 | Organisations and projects with RBAC; Ephemeral Workspaces in Limited GA |
| API and infrastructure-as-code | 4 | API, iacm plan CLI and the Harness MCP server |
| Skills and certification | 2 | No IaCM certification found; Harness training not checked |
AI leverage: 5.0 / 20
How the product uses AI, scored per year like capability. Only GA counts.
| Criterion | 2019 | 2022 | Today | Latest step |
|---|---|---|---|---|
| AI code and plan generation | n/a | n/a | 0.5 | 2026: Vendor says pipelines and OPA policies can be generated from prompts (vendor claim); no HCL generation confirmed |
| AI platform stack | n/a | n/a | 0 | 2025: None |
| AI-assisted operations | n/a | n/a | 1.5 | 2026: 2026-08: Remediation Agent opens pull requests for drift and Blast Radius Agent scores plan risk, both Beta (half credit) |
| Agent openness | n/a | n/a | 3 | 2026: 2026-02: native MCP server support, extended 2026-09 to create and update IaCM entities; the MCP repository's licence and authentication were not read |
Year by year: 2025: 1.5 · 2026: 5
AI say-do, 2023 to 2026: 4 AI items announced; 2 GA, 2 still preview, 0 pending, 0 dropped. The MCP server and the query assistant shipped without a stated stage; both agents are Beta as of 2026-10-15.
Harness has the longest AI list in this group, two autonomous agents plus an MCP server that can now write IaCM objects, but only the MCP server is in general use and neither agent carries a GA label. The score rises when the Remediation Agent leaves Beta.
Reading
Harness IaCM has moved fastest of the six since early 2025: Terragrunt from Beta to GA in six months, Ansible depth, AWS CDK, two agents and an MCP server, all logged in monthly release notes. Its capability sits between Spacelift and env zero, and its credibility is second only to Spacelift. The commercial side is the drag: the module cannot be bought on its own, prices are undisclosed and self-management is an add-on, so a buyer takes on the whole Harness platform to get it. The thing to check is how much of what you need is still Beta, since the CDK, module lifecycle, both agents and parts of Ansible were Beta on 2026-10-15.
Open questions and items to re-score
- First GA date of the module; scores start in 2025 for lack of earlier evidence.
- Pricing metric for the module; the page says no per-pipeline charges and nothing more.
- Self-Managed Enterprise Edition release notes and versions were not read; air-gapped operation not confirmed.
- GA status of both agents, the MCP server and the query assistant.
- Drift detection on plain Terraform and OpenTofu workspaces: only Terragrunt and CDK drift entries were seen in the release notes.
- The product page schema shows a $0 offer while the pricing page's Free plan excludes IaCM.
Related reading
More from Infrastructure Automation Ledger 2026
- Overview: all platforms side by side
- Infrastructure Automation Ledger Methodology: How Every Score Is Built
- Ansible AAP: Infrastructure Automation Ledger 2026 Scorecard
- Ansible: Infrastructure Automation Ledger 2026 Scorecard
- Atlantis: Infrastructure Automation Ledger 2026 Scorecard
- Bicep: Infrastructure Automation Ledger 2026 Scorecard
- CFEngine: Infrastructure Automation Ledger 2026 Scorecard
- Chef: Infrastructure Automation Ledger 2026 Scorecard
- Cinc: Infrastructure Automation Ledger 2026 Scorecard
- CloudFormation: Infrastructure Automation Ledger Scorecard
- Crossplane: Infrastructure Automation Ledger 2026 Scorecard
- Digger: Infrastructure Automation Ledger 2026 Scorecard
- env zero: Infrastructure Automation Ledger 2026 Scorecard
- Foreman: Infrastructure Automation Ledger 2026 Scorecard
- Ironic: Infrastructure Automation Ledger 2026 Scorecard
- Juju: Infrastructure Automation Ledger 2026 Scorecard
- MAAS: Infrastructure Automation Ledger 2026 Scorecard
- Metal3: Infrastructure Automation Ledger 2026 Scorecard
- OpenTofu: Infrastructure Automation Ledger 2026 Scorecard
- OpenVox: Infrastructure Automation Ledger 2026 Scorecard
- Pulumi: Infrastructure Automation Ledger 2026 Scorecard
- Puppet: Infrastructure Automation Ledger 2026 Scorecard
- Salt: Infrastructure Automation Ledger 2026 Scorecard
- Satellite: Infrastructure Automation Ledger 2026 Scorecard
- Scalr: Infrastructure Automation Ledger 2026 Scorecard
- Semaphore: Infrastructure Automation Ledger 2026 Scorecard
- Spacelift: Infrastructure Automation Ledger 2026 Scorecard
- Terraform: Infrastructure Automation Ledger 2026 Scorecard
- Terragrunt: Infrastructure Automation Ledger 2026 Scorecard
- Tinkerbell: Infrastructure Automation Ledger 2026 Scorecard