Best Configuration Management Tools

Configuration management tool reviews covering idempotency in practice, agent overhead, drift detection, module ecosystem and scaling.

8 products

CFEngine

by Northern.tech

No reviews yet

CFEngine is agent-based configuration management for large server fleets: a GPL open source engine plus an Enterprise edition with a web console, sold by quote.

Features

Has Declarative desired-state enforcement
Has Idempotent configuration runs
Missing Agentless execution over SSH and WinRM
Has Agent-based scheduled convergence
Has Node drift detection and remediation
Has No-op dry run of pending changes
Has Community module registry
Missing Dynamic inventory from cloud providers
Missing Linux, Windows and network device management
Has Encrypted secrets in configuration data
Missing Rolling orchestration across node batches
Has Web console with node inventory
Has Role-based access on the control server
Has CIS and STIG compliance profiles
Missing Event-driven automation triggers
Has Change audit trail per node
Has Open source configuration engine

Chef is a configuration management and compliance automation platform from Progress for server, desktop and network fleets, built on an open-source engine.

Features

Has Declarative desired-state enforcement
Has Idempotent configuration runs
Has Agentless execution over SSH and WinRM
Has Agent-based scheduled convergence
Has Node drift detection and remediation
Has No-op dry run of pending changes
Has Community module registry
Missing Dynamic inventory from cloud providers
Has Linux, Windows and network device management
Has Encrypted secrets in configuration data
Has Rolling orchestration across node batches
Has Web console with node inventory
Has Role-based access on the control server
Has CIS and STIG compliance profiles
Has Event-driven automation triggers
Missing Change audit trail per node
Has Open source configuration engine
Foreman

by Foreman

No reviews yet

Foreman is open-source server lifecycle management software, self-hosted by sysadmins who provision physical and virtual hosts and run Puppet or Ansible.

Features

Has Declarative desired-state enforcement
Missing Idempotent configuration runs
Missing Agentless execution over SSH and WinRM
Has Agent-based scheduled convergence
Has Node drift detection and remediation
Has No-op dry run of pending changes
Missing Community module registry
Has Dynamic inventory from cloud providers
Missing Linux, Windows and network device management
Has Encrypted secrets in configuration data
Missing Rolling orchestration across node batches
Has Web console with node inventory
Has Role-based access on the control server
Has CIS and STIG compliance profiles
Missing Event-driven automation triggers
Has Change audit trail per node
Has Open source configuration engine

Puppet is Perforce's configuration management tool for infrastructure teams. It enforces declared state on servers and network devices; the core is open source.

Features

Has Declarative desired-state enforcement
Has Idempotent configuration runs
Has Agentless execution over SSH and WinRM
Has Agent-based scheduled convergence
Has Node drift detection and remediation
Has No-op dry run of pending changes
Has Community module registry
Missing Dynamic inventory from cloud providers
Has Linux, Windows and network device management
Has Encrypted secrets in configuration data
Missing Rolling orchestration across node batches
Has Web console with node inventory
Has Role-based access on the control server
Has CIS and STIG compliance profiles
Has Event-driven automation triggers
Has Change audit trail per node
Has Open source configuration engine

Red Hat Ansible Automation Platform is agentless configuration management and IT automation software built on open source Ansible and sold by quote.

Features

Has Declarative desired-state enforcement
Has Idempotent configuration runs
Has Agentless execution over SSH and WinRM
Missing Agent-based scheduled convergence
Has Node drift detection and remediation
Has No-op dry run of pending changes
Has Community module registry
Has Dynamic inventory from cloud providers
Has Linux, Windows and network device management
Has Encrypted secrets in configuration data
Has Rolling orchestration across node batches
Has Web console with node inventory
Has Role-based access on the control server
Missing CIS and STIG compliance profiles
Has Event-driven automation triggers
Missing Change audit trail per node
Has Open source configuration engine
Rudder

by Normation

No reviews yet

Rudder is an open-source configuration management and security automation platform for Linux and Windows fleets, made by Paris-based Normation.

Features

Has Declarative desired-state enforcement
Has Idempotent configuration runs
Missing Agentless execution over SSH and WinRM
Has Agent-based scheduled convergence
Has Node drift detection and remediation
Has No-op dry run of pending changes
Missing Community module registry
Missing Dynamic inventory from cloud providers
Missing Linux, Windows and network device management
Has Encrypted secrets in configuration data
Missing Rolling orchestration across node batches
Has Web console with node inventory
Has Role-based access on the control server
Has CIS and STIG compliance profiles
Missing Event-driven automation triggers
Has Change audit trail per node
Has Open source configuration engine
Rundeck

by PagerDuty

No reviews yet

Rundeck is open source job scheduling and runbook automation software from PagerDuty, for operations and platform teams running scripts across servers.

Features

Missing Declarative desired-state enforcement
Missing Idempotent configuration runs
Has Agentless execution over SSH and WinRM
Missing Agent-based scheduled convergence
Missing Node drift detection and remediation
Missing No-op dry run of pending changes
Missing Community module registry
Has Dynamic inventory from cloud providers
Has Linux, Windows and network device management
Has Encrypted secrets in configuration data
Has Rolling orchestration across node batches
Has Web console with node inventory
Has Role-based access on the control server
Missing CIS and STIG compliance profiles
Has Event-driven automation triggers
Missing Change audit trail per node
Has Open source configuration engine
Salt Project

by Broadcom

No reviews yet

Salt Project is an open source configuration management and remote execution tool for self-hosted server fleets, maintained by Broadcom under Apache 2.0.

Features

Has Declarative desired-state enforcement
Has Idempotent configuration runs
Has Agentless execution over SSH and WinRM
Has Agent-based scheduled convergence
Has Node drift detection and remediation
Has No-op dry run of pending changes
Missing Community module registry
Missing Dynamic inventory from cloud providers
Has Linux, Windows and network device management
Has Encrypted secrets in configuration data
Missing Rolling orchestration across node batches
Missing Web console with node inventory
Has Role-based access on the control server
Missing CIS and STIG compliance profiles
Has Event-driven automation triggers
Missing Change audit trail per node
Has Open source configuration engine
0 selected