Cloud Custodian vs Open Policy Agent

Cloud Custodian

6.9 #11 in Infrastructure Policy as Code Tools

About Cloud Custodian

Open Policy Agent

7.4 #3 in Infrastructure Policy as Code Tools

About Open Policy Agent
Cloud CustodianOpen Policy Agent
Free planYesYes
Free trialNoNo
Paid fromFreeFree
Open sourceNoNo
PlatformsLinux, macOS, self-hosted, Windowsapi, Linux, macOS, self-hosted, Web, Windows
Free planYes—
Policy languageYAMLRego
IaC formatsTerraformTerraform plan JSON, JSON, YAML
Policy testingYesYes
Admission controlYesYes
Runtime enforcementYesYes
CI/CD integrationYesYes
Policy reportingYesYes

Both are listed in Best Infrastructure Policy as Code Tools. On The Geeks Club, Open Policy Agent scores higher on our published basis.