100 Best Apps for Infrastructure Engineers
Infrastructure work spans provisioning, deployment, observability, security, and incident response. This first group covers foundational tools used across those responsibilities.
Terraform
Terraform defines and provisions cloud and infrastructure resources through declarative infrastructure-as-code configuration files. It reduces inconsistent manual provisioning by applying versioned, repeatable infrastructure changes across supported providers.
Pulumi
Pulumi lets teams define cloud infrastructure using general-purpose programming languages and reusable software components. It helps engineers avoid context switching by managing infrastructure with familiar language tooling and testing practices.
Ansible
Ansible automates configuration management, application deployment, orchestration, and recurring operational tasks using playbooks. It addresses repetitive server administration by executing standardized, agentless tasks across many managed hosts.
Docker
Docker packages applications and dependencies into portable containers that run consistently across compatible environments. It reduces environment drift by giving developers and operators a consistent application packaging format.
Kubernetes
Kubernetes orchestrates containerized workloads by managing scheduling, scaling, networking, and desired application state. It helps teams operate distributed container workloads without manually coordinating individual servers and deployments.
Helm
Helm packages Kubernetes application manifests into charts with configurable templates and release management. It simplifies repetitive Kubernetes deployments by standardizing configuration and versioned application releases.
Prometheus
Prometheus collects time-series metrics, evaluates alerting rules, and supports querying monitored system behavior. It helps engineers detect performance and availability issues through centralized metrics collection and alerting.
Grafana
Grafana visualizes data from multiple sources through dashboards, alerts, and exploratory query interfaces. It makes scattered operational data easier to interpret by presenting metrics and logs together visually.
Datadog
Datadog provides cloud monitoring, observability, security monitoring, and alerting across infrastructure and applications. It reduces tool fragmentation by bringing infrastructure telemetry, application data, and alerts into one platform.
New Relic
New Relic provides observability tools for monitoring applications, infrastructure, logs, traces, and user experiences. It helps teams investigate service degradation by connecting application performance data with infrastructure signals.
Splunk
Splunk collects, indexes, searches, and analyzes machine-generated data such as logs and event records. It speeds log investigations by making large volumes of operational event data searchable and analyzable.
Elastic
Elastic provides search, analytics, logging, observability, and security capabilities built around Elasticsearch. It helps teams centralize distributed log data for searching, dashboards, and incident investigation.
GitHub Actions
GitHub Actions automates workflows for building, testing, deploying, and maintaining code within GitHub repositories. It removes manual release steps by triggering repeatable automation from repository events and schedules.
GitLab CI/CD
GitLab CI/CD runs configurable pipelines for building, testing, securing, and deploying software changes. It helps teams standardize delivery workflows by keeping pipeline configuration alongside application source code.
Jenkins
Jenkins is an automation server that runs extensible pipelines for continuous integration and delivery. It addresses custom automation needs by allowing teams to build tailored workflows with plugins.
CircleCI
CircleCI runs continuous integration and delivery pipelines that build, test, and deploy software projects. It helps engineering teams shorten feedback loops by automatically validating changes before deployment.
Argo CD
Argo CD continuously deploys Kubernetes applications by reconciling cluster state with Git-defined configuration. It reduces deployment drift by automatically comparing desired Git configuration against live Kubernetes resources.
Flux CD
Flux CD automates Kubernetes configuration delivery through GitOps reconciliation and image update workflows. It helps operators maintain auditable cluster changes by synchronizing deployed configuration from Git repositories.
HashiCorp Vault
HashiCorp Vault stores, controls access to, and dynamically manages secrets, credentials, and encryption keys. It prevents sensitive credentials from being scattered across code and configuration by centralizing secret access.
AWS CloudFormation
AWS CloudFormation provisions and manages AWS resources through declarative templates and stack operations. It helps AWS teams reproduce environments reliably instead of creating cloud resources through consoles.
Bicep
Bicep is a domain-specific language for declaratively deploying Azure resources and related configurations. It simplifies Azure infrastructure definitions by offering concise syntax that compiles into ARM templates.
Packer
Packer creates identical machine images for multiple platforms from automated build configuration templates. It reduces server setup inconsistency by producing reusable images instead of configuring machines individually.
Vagrant
Vagrant creates and manages reproducible local development environments using configurable virtual machine providers. It helps teams avoid onboarding friction by describing local environments in shareable configuration files.
HashiCorp Nomad
HashiCorp Nomad schedules and runs containerized, virtualized, and standalone workloads across infrastructure clusters. It helps operators coordinate diverse workload types without maintaining separate schedulers for each runtime.
OpenTofu
OpenTofu is an open-source infrastructure-as-code tool for planning and provisioning infrastructure resources declaratively. It gives teams an open-source option for managing repeatable infrastructure changes through configuration files.
Chef
Chef automates server configuration through cookbooks that define and enforce desired system states. It helps teams prevent configuration drift across fleets of repeatedly provisioned servers.
Puppet
Puppet manages infrastructure configuration using declarative manifests and agents that enforce specified resource states. It reduces the manual effort of keeping operating-system settings consistent across many machines.
Salt
Salt provides event-driven automation and remote execution for configuring systems and orchestrating infrastructure tasks. It helps engineers execute coordinated changes quickly when managing distributed server environments.
AWS CDK
AWS CDK lets developers define AWS infrastructure using familiar programming languages and reusable constructs. It addresses repetitive cloud template authoring by enabling infrastructure definitions within application code.
Crossplane
Crossplane extends Kubernetes to provision and manage cloud resources through custom resource definitions. It helps platform teams offer cloud services through Kubernetes-native interfaces developers already understand.
Terragrunt
Terragrunt wraps Terraform and OpenTofu to organize modules, dependencies, and shared configuration across environments. It reduces duplicated configuration when teams manage similar infrastructure stacks across multiple accounts.
Atlantis
Atlantis runs Terraform and OpenTofu plans and applies from pull-request comments in version-controlled repositories. It gives teams a reviewable workflow for infrastructure changes instead of individual local executions.
Spacelift
Spacelift manages infrastructure-as-code workflows with policy controls, stack dependencies, and automated runs. It helps teams govern infrastructure deployments when many repositories and environments require coordinated oversight.
env0
env0 provides a collaborative platform for running infrastructure-as-code workflows and managing cloud environments. It centralizes environment provisioning so engineers can avoid inconsistent, manually tracked deployment processes.
Snyk
Snyk identifies vulnerabilities and configuration issues in application dependencies, containers, and infrastructure code. It helps engineers find security risks earlier before vulnerable code or cloud settings reach production.
Trivy
Trivy scans container images, filesystems, repositories, and Kubernetes configurations for vulnerabilities and misconfigurations. It simplifies security checks by providing one tool for several common infrastructure artifact types.
Checkov
Checkov analyzes infrastructure-as-code files for security and compliance misconfigurations before deployment. It helps prevent unsafe cloud resource settings from being merged into infrastructure repositories.
tfsec
tfsec scans Terraform code for potential security issues and cloud-provider configuration weaknesses. It gives Terraform users fast feedback on risky settings before resources are created.
Infracost
Infracost estimates cloud costs from infrastructure-as-code changes and surfaces them in development workflows. It helps teams spot expensive infrastructure changes before approving and deploying them.
TFLint
TFLint checks Terraform configurations for errors, style problems, and provider-specific validation issues. It catches common configuration mistakes locally, reducing failed plans and avoidable review cycles.
kube-bench
kube-bench checks Kubernetes clusters against security recommendations from the CIS Kubernetes Benchmark. It helps operators identify cluster hardening gaps that can be overlooked during routine maintenance.
kube-score
kube-score analyzes Kubernetes object definitions and recommends improvements to workload configuration and security. It helps developers catch problematic manifest patterns before deploying workloads into shared clusters.
K9s
K9s provides a terminal user interface for observing and managing Kubernetes resources interactively. It speeds up cluster troubleshooting for engineers who prefer keyboard-driven workflows over browser dashboards.
Lens
Lens is a desktop application for viewing, managing, and troubleshooting Kubernetes clusters and workloads. It reduces context switching by bringing cluster resources, logs, and metrics into one interface.
Rancher
Rancher manages Kubernetes clusters across environments and provides centralized access control and operations tooling. It helps teams standardize cluster administration when operating Kubernetes across multiple infrastructure locations.
Red Hat OpenShift
Red Hat OpenShift is a Kubernetes-based platform for building, deploying, and operating containerized applications. It reduces operational setup work by packaging Kubernetes with integrated platform capabilities and controls.
Istio
Istio is a service mesh that manages traffic, security, and observability between application services. It helps teams control complex service-to-service communication without embedding networking logic in every application.
Linkerd
Linkerd is a lightweight service mesh that adds reliability, security, and observability to Kubernetes services. It helps operators diagnose and secure service communication without extensive application code changes.
HashiCorp Consul
HashiCorp Consul provides service discovery, configuration, and secure service-to-service networking across distributed systems. It addresses the difficulty of connecting services reliably as infrastructure spans dynamic environments.
Cilium
Cilium provides Kubernetes networking, security policies, and observability using eBPF-based kernel technology. It helps teams enforce network controls and inspect traffic across increasingly complex container environments.
NGINX
NGINX serves web content and proxies HTTP traffic with configurable load balancing and caching. It helps teams handle high-volume web requests without building custom reverse-proxy infrastructure.
HAProxy
HAProxy distributes TCP and HTTP traffic across backend servers using health checks and routing rules. It reduces service disruption by removing unhealthy backends from load-balanced traffic automatically.
Traefik
Traefik is a reverse proxy and load balancer that discovers services from infrastructure providers. It simplifies dynamic routing when containers and services frequently appear, move, or disappear.
Kong Gateway
Kong Gateway manages API traffic through routing, authentication, rate limiting, and extensible gateway plugins. It centralizes recurring API controls instead of requiring every service to implement them independently.
Envoy
Envoy is a high-performance proxy for service networking, traffic management, and observability integrations. It helps engineers standardize network behavior across distributed services with inconsistent communication requirements.
Cloudflare
Cloudflare provides edge networking services including DNS, content delivery, security, and application protection. It helps reduce latency and absorb malicious traffic before requests reach origin infrastructure.
AWS Route 53
AWS Route 53 provides domain registration, DNS routing, health checks, and traffic-management policies. It helps teams direct users toward healthy endpoints without manually updating DNS records.
CoreDNS
CoreDNS is a flexible DNS server that uses plugins for service discovery and name resolution. It addresses internal hostname resolution needs by allowing DNS behavior tailored to infrastructure environments.
PowerDNS
PowerDNS provides authoritative and recursive DNS services with database-backed configuration options. It helps operators manage DNS zones programmatically when static zone-file workflows become cumbersome.
NetBox
NetBox models network infrastructure, IP addresses, circuits, devices, and physical connectivity in one system. It reduces uncertainty about network ownership and address allocation by maintaining a shared source of truth.
phpIPAM
phpIPAM manages IP address spaces, subnets, VLANs, and related network allocation documentation. It helps prevent address conflicts by recording subnet assignments and available IP capacity centrally.
Wireshark
Wireshark captures and analyzes network packets using detailed protocol decoding and filtering tools. It helps diagnose elusive network failures by exposing what systems actually send across connections.
tcpdump
tcpdump captures network packets from command-line interfaces for inspection, filtering, and troubleshooting. It gives engineers lightweight packet visibility on servers where graphical diagnostic tools are unavailable.
mtr
mtr combines traceroute and ping measurements to show network paths and hop-by-hop latency. It helps isolate where packet loss or latency occurs along a route to a destination.
Pingdom
Pingdom monitors website availability and performance from external locations and sends alert notifications. It alerts teams when public services become unreachable before availability issues go unnoticed.
Uptime Kuma
Uptime Kuma is a self-hosted monitoring tool for checking service availability and status pages. It helps small teams monitor endpoints without relying solely on opaque external status signals.
Statuspage
Statuspage lets organizations publish service-status updates, incident notices, and component availability information. It reduces repetitive support inquiries by giving customers a central place for outage communications.
PagerDuty
PagerDuty routes operational alerts to responders using escalation policies, schedules, and incident workflows. It helps ensure urgent alerts reach accountable people rather than remaining unattended in monitoring systems.
Opsgenie
Opsgenie provides alert management, on-call scheduling, escalations, and incident response coordination tools. It reduces missed notifications by organizing alerts around responder rotations and escalation paths.
Better Uptime
Better Uptime monitors endpoints and incident response workflows while providing public status page capabilities. It helps teams connect downtime detection with clear responder notifications and customer-facing updates.
Zabbix
Zabbix monitors servers, networks, applications, and infrastructure metrics through agents, polling, and alerting. It helps consolidate fragmented infrastructure checks into configurable monitoring dashboards and triggers.
Nagios Core
Nagios Core monitors hosts and services through plugins, scheduled checks, notifications, and status views. It helps administrators detect failed infrastructure components before routine checks reveal the problem.
Icinga
Icinga monitors infrastructure health using configurable checks, notifications, APIs, and visualization components. It helps teams tailor monitoring rules for varied environments without relying on fixed default checks.
OpenTelemetry
OpenTelemetry provides standards and tools for generating, collecting, and exporting telemetry data. It reduces vendor-specific instrumentation work by standardizing traces, metrics, and logs across applications.
Jaeger
Jaeger collects and visualizes distributed traces to analyze requests moving through service architectures. It helps identify slow or failing service dependencies hidden within multi-step application requests.
Zipkin
Zipkin collects and visualizes distributed tracing data to show request paths across interconnected services. It helps engineers isolate latency and failure sources when requests traverse many services.
Loki
Loki aggregates logs using labels and integrates with Grafana for log exploration and querying. It reduces the difficulty of correlating application logs with infrastructure metrics during investigations.
Tempo
Tempo stores distributed traces and connects trace data with metrics and logs in Grafana. It helps teams follow individual transactions without maintaining a separate trace-indexing system.
VictoriaMetrics
VictoriaMetrics stores and queries time-series metrics with Prometheus-compatible ingestion and query interfaces. It addresses scaling challenges when long-term metrics retention strains a monitoring backend.
Thanos
Thanos extends Prometheus with durable object storage, global querying, and high-availability capabilities. It helps teams query metrics across multiple Prometheus instances and retain historical data.
Mimir
Mimir provides horizontally scalable, multi-tenant storage for Prometheus metrics and PromQL queries. It helps platform teams centralize large metric volumes without separate monitoring silos.
Fluent Bit
Fluent Bit collects, processes, and forwards logs, metrics, and traces from infrastructure workloads. It simplifies moving telemetry from distributed hosts and containers to chosen observability backends.
Logstash
Logstash ingests, transforms, and routes event data through configurable input, filter, and output pipelines. It helps engineers normalize inconsistent logs before sending them to search or analytics systems.
Vector
Vector collects, transforms, and routes logs and metrics through configurable observability data pipelines. It reduces custom scripting needed to reliably route telemetry between disparate systems.
Graylog
Graylog centralizes log collection, search, dashboards, alerts, and analysis for operational teams. It helps responders find relevant events faster than searching individual server log files.
Sumo Logic
Sumo Logic provides cloud-based log analytics, monitoring, dashboards, and security insights. It helps teams investigate operational signals without operating their own log analytics platform.
Honeycomb
Honeycomb analyzes high-cardinality observability events to investigate production behavior and service performance. It helps engineers answer unexpected production questions by querying detailed request attributes.
Sentry
Sentry captures application errors, performance traces, releases, and contextual debugging information. It helps teams prioritize recurring software failures with stack traces and affected-user context.
Rollbar
Rollbar detects, groups, and reports application exceptions with diagnostic context and deployment tracking. It reduces time spent discovering new production errors after releases or configuration changes.
Bugsnag
Bugsnag reports application stability issues, errors, sessions, and release health across platforms. It helps engineering teams identify which failures most affect users and application stability.
AWS Systems Manager
AWS Systems Manager manages AWS resources through automation, inventory, parameters, patching, and remote access. It helps operators standardize routine instance administration without maintaining direct SSH access.
Azure Monitor
Azure Monitor collects and analyzes metrics, logs, traces, and alerts from Azure resources. It helps teams observe Azure workloads from a centralized service instead of scattered portal views.
Google Cloud Operations Suite
Google Cloud Operations Suite provides monitoring, logging, tracing, debugging, and alerting for Google Cloud workloads. It helps operators correlate service health signals across Google Cloud applications and infrastructure.
AWS Config
AWS Config records resource configurations and evaluates them against defined compliance rules. It helps teams detect configuration drift and identify resources that violate internal policies.
Cloud Custodian
Cloud Custodian defines policy-as-code rules to filter, report on, and remediate cloud resources. It helps teams control cloud sprawl by automating actions on noncompliant or unused resources.
Steampipe
Steampipe queries cloud APIs, SaaS services, and configuration files using SQL and plugins. It helps engineers investigate infrastructure inventories without writing provider-specific API scripts.
Backstage
Backstage is a developer portal framework for cataloging services, documentation, and engineering workflows. It helps teams locate service ownership and operational documentation when systems proliferate.
Port
Port provides an internal developer portal for service catalogs, self-service actions, and scorecards. It helps platform teams offer standardized infrastructure actions without exposing complex underlying tooling.
Rundeck
Rundeck runs scheduled and on-demand operational jobs with access controls and execution logs. It reduces manual runbook execution by giving teams controlled, repeatable operational automation.
AWX
AWX provides a web interface, scheduling, inventory management, and role-based control for Ansible automation. It helps teams coordinate Ansible job execution without relying on individual engineers' local environments.
The next entries expand into networking, incident management, cloud platforms, security, databases, and developer-focused operational tooling.