Automate large-scale, complex and mission critical IT infrastructure

Make consistent global changes securely while ensuring compliance.

Download CFEngine

Learn more about CFEngine Enterprise 3.7.3


Written in C. The leanest and fastest solution in the industry with execution time less than 1 second.


The open source configuration solution with the best security record.


The most mature solution in the industry, conducting hundreds of billions of compliance checks in large-scale production environments.


Deploy a model-based configuration change across 50,000 servers in 5 minutes.

The largest and most complex IT infrastructures use CFEngine to make consistent global changes.

Deutsche Telekom

"LinkedIn is the largest professional social network and is currently the 10th largest website in the US by traffic. Our ops team will make around 5-10 production changes per day. CFEngine provides the automation framework and gives us the ability to continue to scale operationally."

Mike Svoboda, Sr. Unix Engineer, LinkedIn


CFEngine 3.9.0 non-LTS beta ready for testing!

We’re happy to announce that CFEngine 3.9.0 non-LTS beta is now ready for testing! The established CFEngine release schedule shows that the 3.9.0 final version is due in June 2016, so it’s time to test and fix any remaining issues. Please note …

Badlock Reporting and Remediation

By now you have probably heard about the Badlock vulnerability (CVE-2016-2118)in DCE/RPC-based SAMR and LSA protocols used in the Microsoft Windows ActiveDirectory infrastructure as well as other critical security flows in Samba. With CFEngine Enterprise you can simply tag any variable or …

Latest tweets follow @cfengine

Download CFEngine Enterprise free for up to 25 hosts

Download CFEngine