Works with your existing Terraform & OpenTofu

Replace Terraform's state file with a control plane.

Stategraph turns Terraform state into a database. Plans run in seconds on the affected graph, not the whole state. Parallel, auditable, no code changes required.

Plans in seconds One data model Parallel by default

You already know where Terraform breaks at scale

The problem is not that you need another tool on top. The problem is that every control plane for Terraform has been built around the same flat state file. Everything downstream inherits that limitation.

Workspace sprawl

Hundreds of states. No coherent view of what depends on what.

Global locks

A single workspace lock serializes the whole team behind a 15 minute run.

Slow runs

Every plan refreshes the entire state just to change three resources.

Weak visibility

You can see whether a run succeeded. You cannot query what you actually have.

Add-on sprawl

Policy, cost, drift, and inventory each become another product to pay for and wire up.

Coordination cost

Any change across states becomes a pipeline of wrappers, waits, and rollback risk.

These are not independent problems. They are symptoms of the same missing layer: a real data model underneath.

The model is the product

Terraform is a distributed systems problem pretending to be a JSON file.

Today's tools wrap the JSON file in a UI, a runner, and a pile of add-ons. Stategraph replaces the JSON file with a real database. Every capability below falls out of that single decision.

File-based
{
  "version": 4,
  "resources": [
    { "type": "aws_vpc", ... },
    { "type": "aws_instance", ... },
    { "type": "aws_s3_bucket", ... },
    ...2,847 more
  ]
}
Read it, lock it, rewrite it. Every operation touches the whole file.
Stategraph
vpc rds eks sg net pod svc
Graph of queryable resources with real relationships. Touch only what changed.
File-based control planes Stategraph
State model Flat state blob per workspace Structured, normalized database
Lock model Global workspace lock Graph-scoped, resource-level
Plan scope Refresh and plan the whole state Operate on the affected subgraph
Visibility Run history and a log viewer SQL across every resource and state
Governance Layered add-on products Capabilities that emerge from the data model
Multi-state change One workspace at a time One atomic transaction across states

One data model. Every capability flows from it.

Today's infrastructure teams stitch together half a dozen tools for plans, policy, cost, drift, inventory, and audit. Each one parses the same state file, badly. Stategraph collapses that sprawl into one control plane. Every capability below is the same database answering a different question.

STATE as a database Velocity graph-scoped plans Orchestration atomic cross-state apply Security blast-radius on the graph Compliance evidence by query Cost spend on real structure Inventory SQL across every state
Velocity
vpc rds sg eks
โ†“ plan scope: 2 of 4
plan skipped ยท 2

Plans and applies on the affected graph

Change three resources, touch three resources. Skip the 3,000 you did not touch. Disjoint subgraphs run in parallel without waiting on a global lock. No path globs, no change-detection config โ€” Stategraph reads the graph and runs only what your change actually reaches.

Orchestration
PLAN โœ“ โ†’ REVIEW โœ“ โ†’ APPLY

Coordinate changes without a wrapper maze

Plan and apply across states in one atomic transaction. Dependency-aware execution, run from PRs, without hand-built pipeline glue.

Security
sg.api
โ†“ reaches
api-1 api-2 lb.api

Reason about real infrastructure relationships

Resource-level RBAC. Blast-radius analysis on the actual graph, not a static file scan. See what a change reaches before it ships.

Compliance
โœ“ encryption at rest enforced
โœ“ policy ยท restricted bucket access
โ–ธ internal ยท tag coverage 98%

Query and validate state for audit and governance

Compliance and internal policy run against real infrastructure data. Full attribution, full history, exportable evidence.

Cost
aws_rds.prod$4,210 โ†‘ aws_eks.web$2,780 aws_s3.logs$142 โ†“ ฮ” this week +$612

Understand cost in context of actual infrastructure

Cost attached to the resource graph, not a flat line item. See spend by change, by owner, by dependency, across every state.

Inventory
SELECT type, count(*)
FROM resources GROUP BY type;
aws_instance47
aws_s3_bucket23
aws_lambda18

Treat infrastructure as queryable data

SQL across every state, every resource, every environment. Gap analysis finds unmanaged resources and drift automatically.

None of these are add-ons. They are the data model doing its job. One surface. One pricing line. One place the data lives.

Keep your Terraform. Replace the control plane.

Stategraph is not a rewrite. It runs your existing Terraform with a smarter engine underneath. Same HCL, same providers, same workflow. Better execution, better visibility, starting on day one.

Terraform & OpenTofu

Same HCL, same providers, same CLI. Drop-in for the runtime you already use.

Reversible import

Ingest your existing .tfstate and export it back anytime. Never locked in.

Zero code changes

No HCL edits. No module rewrites. No provider swaps.

Same plan / apply

The workflow your team runs today.

Swap the backend

Point your backend block at Stategraph and ship.

migrate
$ # 1. Import your existing state
$ stategraph import terraform.tfstate
โœ“ Imported 847 resources. Graph built.
$ # 2. Plan on the affected subgraph
$ stategraph plan --out plan.json
โœ“ 3 to add, 1 to change, 0 to destroy
2 independent subgraphs detected
$ # 3. Apply in parallel
$ stategraph apply plan.json
โœ“ Apply complete. 4 resources updated.

Adopt at your pace. Move root modules over one at a time, keep the rest on your existing backend until you're ready. No big-bang migration, no painted corners โ€” stategraph states export returns any state to plain .tfstate whenever you want.

Read the migration guide Book a migration demo

Graph-scoped execution, measured

Same infrastructure. Same change. The data model does the work.

File-based backend

terraform apply 00:00
[VPC ] waiting
[Subnets ] waiting
[Security ] waiting
[RDS ] waiting
[ALB ] waiting
[ASG ] waiting
[Route53 ] waiting
[CloudFront ] waiting

Stategraph

stategraph apply 00:00
[VPC ] waiting
[Subnets ] waiting
[Security ] waiting
[RDS ] waiting
[ALB ] waiting
[ASG ] waiting
[Route53 ] waiting
[CloudFront ] waiting
Subgraph Plans scoped to what changed
Parallel Independent branches apply concurrently
Atomic Cross-state changes in one transaction
SQL Every resource queryable, every run

See how the graph model works โ†’

Deploy where your policy requires

Stategraph is infrastructure software. It ships like infrastructure software. Enterprise control, security, and compliance teams get the deployment model they need, not the one the vendor prefers.

STATEGRAPH CLOUD YOUR INSTANCE

Stategraph Cloud

Fully managed SaaS. Free tier is shared-tenant; paid tiers run single-tenant with your own isolated instance and Postgres database. The fastest way to get started.

Start free โ†’
YOUR NETWORK STATEGRAPH

Self-hosted Enterprise

Run Stategraph in your VPC on your PostgreSQL. State never leaves your network. Full control over upgrades, secrets, and access.

Talk to sales โ†’
YOUR CLOUD ACCOUNT WE OPERATE IT

BYOC Enterprise

Bring Your Own Cloud. We operate Stategraph inside your AWS, GCP, or Azure account with private connectivity. You own the data, we run the software.

Talk to sales โ†’

Frequently Asked Questions

See it on your state.

Bring a state file. In under 30 minutes you will see graph-scoped plans, parallel applies, and queryable infrastructure running against your own resources, with the add-ons you no longer need.

Book a demo Read the docs