Automate large-scale, complex and mission critical IT infrastructure

Make consistent global changes securely while ensuring compliance.

Download CFEngine

Learn more about CFEngine Enterprise 3.7.3


Written in C. The leanest and fastest solution in the industry with execution time less than 1 second.


The open source configuration solution with the best security record.


The most mature solution in the industry, conducting hundreds of billions of compliance checks in large-scale production environments.


Deploy a model-based configuration change across 50,000 servers in 5 minutes.

The largest and most complex IT infrastructures use CFEngine to make consistent global changes.

Deutsche Telekom

"LinkedIn is the largest professional social network and is currently the 10th largest website in the US by traffic. Our ops team will make around 5-10 production changes per day. CFEngine provides the automation framework and gives us the ability to continue to scale operationally."

Mike Svoboda, Sr. Unix Engineer, LinkedIn


Badlock Reporting and Remediation

By now you have probably heard about the Badlock vulnerability (CVE-2016-2118)in DCE/RPC-based SAMR and LSA protocols used in the Microsoft Windows ActiveDirectory infrastructure as well as other critical security flows in Samba. With CFEngine Enterprise you can simply tag any variable or …

CFEngine 3.7.3, 3.6.7 and 3.8.2 released!

We’re happy to announce maintenance releases for all supported CFEngine release branches today! Being maintenance (aka patch) releases, the goal is to increase stability and reliability for CFEngine users and enable a safe upgrade-path. As such, the releases primarily include bugfixes and …

Latest tweets follow @cfengine

Download CFEngine Enterprise free for up to 25 hosts

Download CFEngine