Works with your existing Terraform & OpenTofu

Replace Terraform's state file with a control plane.

Stategraph turns Terraform state into a database. Plans run in seconds on the affected graph, not the whole state. Parallel, auditable, no code changes required.

Plans in seconds One data model Parallel by default

$ stategraph import terraform.tfstate

See it on your state Read the docs

You already know where Terraform breaks at scale

The problem is not that you need another tool on top. The problem is that every control plane for Terraform has been built around the same flat state file. Everything downstream inherits that limitation.

Workspace sprawl

Hundreds of states. No coherent view of what depends on what.

Global locks

A single workspace lock serializes the whole team behind a 15 minute run.

Slow runs

Every plan refreshes the entire state just to change three resources.

Weak visibility

You can see whether a run succeeded. You cannot query what you actually have.

Add-on sprawl

Policy, cost, drift, and inventory each become another product to pay for and wire up.

Coordination cost

Any change across states becomes a pipeline of wrappers, waits, and rollback risk.

These are not independent problems. They are symptoms of the same missing layer: a real data model underneath.

The model is the product

Terraform is a distributed systems problem pretending to be a JSON file.

Today's tools wrap the JSON file in a UI, a runner, and a pile of add-ons. Stategraph replaces the JSON file with a real database. Every capability below falls out of that single decision.

File-based
{
  "version": 4,
  "resources": [
    { "type": "aws_vpc", ... },
    { "type": "aws_instance", ... },
    { "type": "aws_s3_bucket", ... },
    ...2,847 more
  ]
}
Read it, lock it, rewrite it. Every operation touches the whole file.
Stategraph
vpc rds eks sg net pod svc
Graph of queryable resources with real relationships. Touch only what changed.
File-based control planes Stategraph
State model Flat state blob per workspace Structured, normalized database
Lock model Global workspace lock Graph-scoped, resource-level
Plan scope Refresh and plan the whole state Operate on the affected subgraph
Visibility Run history and a log viewer SQL across every resource and state
Governance Layered add-on products Capabilities that emerge from the data model
Multi-state change One workspace at a time One atomic transaction across states

One data model. Every capability flows from it.

Today's infrastructure teams stitch together half a dozen tools for plans, policy, cost, drift, inventory, and audit. Each one parses the same state file, badly. Stategraph collapses that sprawl into one control plane. Every capability below is the same database answering a different question.

STATE as a database Velocity graph-scoped plans Orchestration atomic cross-state apply Security blast-radius on the graph Compliance evidence by query Cost spend on real structure Inventory SQL across every state
Velocity
vpc rds sg eks
↓ plan scope: 2 of 4
plan skipped · 2

Plans and applies on the affected graph

Change three resources, touch three resources. Skip the 3,000 you did not touch. Disjoint subgraphs run in parallel without waiting on a global lock.

Orchestration
PLAN ✓ REVIEW ✓ APPLY

Coordinate changes without a wrapper maze

Plan and apply across states in one atomic transaction. Dependency-aware execution, run from PRs, without hand-built pipeline glue.

Security
sg.api
↓ reaches
api-1 api-2 lb.api

Reason about real infrastructure relationships

Resource-level RBAC. Blast-radius analysis on the actual graph, not a static file scan. See what a change reaches before it ships.

Compliance
✓ encryption at rest enforced
✓ policy · restricted bucket access
▸ internal · tag coverage 98%

Query and validate state for audit and governance

Compliance and internal policy run against real infrastructure data. Full attribution, full history, exportable evidence.

Cost
aws_rds.prod$4,210 ↑ aws_eks.web$2,780 aws_s3.logs$142 ↓ Δ this week +$612

Understand cost in context of actual infrastructure

Cost attached to the resource graph, not a flat line item. See spend by change, by owner, by dependency, across every state.

Inventory
SELECT type, count(*)
FROM resources GROUP BY type;
aws_instance47
aws_s3_bucket23
aws_lambda18

Treat infrastructure as queryable data

SQL across every state, every resource, every environment. Gap analysis finds unmanaged resources and drift automatically.

None of these are add-ons. They are the data model doing its job. One surface. One pricing line. One place the data lives.

Keep your Terraform. Replace the control plane.

Stategraph is not a rewrite. It runs your existing Terraform with a smarter engine underneath. Same HCL, same providers, same workflow. Better execution, better visibility, starting on day one.

Terraform & OpenTofu

Same HCL, same providers, same CLI. Drop-in for the runtime you already use.

Reversible import

Ingest your existing .tfstate and export it back anytime. Never locked in.

Zero code changes

No HCL edits. No module rewrites. No provider swaps.

Same plan / apply

The workflow your team runs today.

Swap the backend

Point your backend block at Stategraph and ship.

migrate
$ # 1. Import your existing state
$ stategraph import terraform.tfstate
✓ Imported 847 resources. Graph built.
$ # 2. Plan on the affected subgraph
$ stategraph plan --out plan.json
✓ 3 to add, 1 to change, 0 to destroy
2 independent subgraphs detected
$ # 3. Apply in parallel
$ stategraph apply plan.json
✓ Apply complete. 4 resources updated.
Read the migration guide Book a migration demo

Graph-scoped execution, measured

Same infrastructure. Same change. The data model does the work.

File-based backend

terraform apply 00:00
[VPC ] waiting
[Subnets ] waiting
[Security ] waiting
[RDS ] waiting
[ALB ] waiting
[ASG ] waiting
[Route53 ] waiting
[CloudFront ] waiting

Stategraph

stategraph apply 00:00
[VPC ] waiting
[Subnets ] waiting
[Security ] waiting
[RDS ] waiting
[ALB ] waiting
[ASG ] waiting
[Route53 ] waiting
[CloudFront ] waiting
Subgraph Plans scoped to what changed
Parallel Independent branches apply concurrently
Atomic Cross-state changes in one transaction
SQL Every resource queryable, every run

See how the graph model works →

Deploy where your policy requires

Stategraph is infrastructure software. It ships like infrastructure software. Enterprise control, security, and compliance teams get the deployment model they need, not the one the vendor prefers.

YOUR NETWORK STATEGRAPH

Self-hosted

Run Stategraph in your VPC on your PostgreSQL. State never leaves your network. Full control over upgrades, secrets, and access.

Self-hosting guide →
CLOUD REGION YOURS

Private Cloud

Single-tenant. Dedicated compute, storage, and database in your choice of region or your own cloud account. No shared infrastructure.

Private Cloud →

Frequently Asked Questions

See it on your state.

Bring a state file. In under 30 minutes you will see graph-scoped plans, parallel applies, and queryable infrastructure running against your own resources, with the add-ons you no longer need.

Book a demo Read the docs