env zero
@envzero

env zero enables platform teams to deliver infrastructure 10x faster without losing control, with standardized, governed workflows at the speed and scale of AI.

 Boston, MA
envzero.com
Joined November 2019
410 Photos and videos
The Replit agent that deleted a production database during a code freeze wasn't compromised. Neither was the Gemini CLI run that turned a file reorg into data loss. Both had permission to do what they did. Nobody had reviewed it.
1
1
156
OIDC credentials in env zero shared one audience claim across AWS, Azure, GCP and Vault, so a token minted for one was replayable against another. v2 issues a provider-specific aud. Opt-in per credential, v1 untouched. hubs.la/Q04xpcSR0

V2 OIDC Tokens: Per-Cloud-Provider Audiences - env zero docs

OIDC credentials for AWS, Azure, GCP, and Vault can now use a provider-specific token audience instead of a single shared audience across all providers.

docs.envzero.com
64
-auto-approve applies to terraform destroy exactly the way it applies to terraform apply. It exists so pipelines don't wait on someone typing yes. Agents reach for it for the same reason. hubs.la/Q04xpd4x0

AI Agent Governance for Infrastructure Teams | env zero

AI agents can deploy and destroy infrastructure now. Learn the governance controls that stop them from causing damage or runaway cloud costs.

envzero.com
59
Infrastructure risk models assume two actors: someone who makes a mistake, and an attacker who shouldn't have access. An agent with a real credential, inside permissions you approved, reasoning its way to a destructive action, is neither.
62
🏗️ Having an amazing show at AWS Summit Tel Aviv! Come visit the env zero engineers at Booth S15 for a sneak peek at what we're building, a limited edition t-shirt, and chance to win a LEGO Star Wars Grogu. תערוכה מדהימה בכנס AWS Summit תל אביב! בואו לבקר את מהנדסי env zero בביתן S15 לקבלת הצצה למה שאנחנו בונים, חולצת טריקו במהדורה מוגבלת והזדמנות לזכות בגרוגו של LEGO Star Wars. #AWS #AWSSummit #AWSSummit2026 #AWSSummitTLV
83
Single-resource terraform import assumes you already know what to import. Most teams don't: the unmanaged resources are unmanaged because nobody knows they exist. Finding hundreds at a time, then importing them under policy: bit.ly/45J1RRf

Terraform Bulk Import: Finding Resources at Scale | env zero

How to find and import unmanaged infrastructure at scale using Terraform's native query workflow, CloudQuery, and env zero's Cloud Compass.

envzero.com
56
Nobody's deployment fails in the interesting layer. It fails because a log forwarding transport threw an error, or the remote backend returned a 503 in exactly the window you needed it. Reliability work is unglamorous, and it is most of the job.
68
Stale SSO connections are an audit finding waiting to happen. When you migrate identity providers, the new SAML or Azure AD connection works, the old one lingers because deleting it needed a support ticket. It doesn't anymore. Delete it where you created it.
84
The tell that your internal platform isn't working isn't complaints. It's the Terraform in someone's personal repo, applied from a laptop, that never comes up in standup. Teams route around friction quietly. Go find where the workarounds live.
74
If your org outgrew 1,000 members, env zero's member list was quietly lying to you. Counts, search, and SCIM reconcile all stopped at the cap. They don't anymore: member reads now come from the membership mirror instead of the provider list API.
82
Now available in env zero: Full SCIM Provisioning Read the blog 👉 hubs.la/Q04vJ0DD0
65
One of the bigger names in IaC orchestration recently published a 2,000-word comparison of their platform and env zero. We didn't ask for it, didn't review it, and didn't get a say in the framing. Read it anyway. If you're shortlisting IaC platforms right now, a comparison written by the other side is worth more than anything either of us puts on a landing page. One thing it missed by a few weeks: env zero has a free tier now. 250 runs a month, 30 environments, unlimited users, no credit card. So take the article's own advice. Stop reading comparisons, run both against your own stacks, and decide for yourselves. #InfrastructureAsCode #PlatformEngineering #InfrastructureOrchestration #OpenTofu #Terraform
2
1
53
Link to article: linkedin.com/feed/update/urn…

The choice between env zero and Spacelift comes down to one question | env zero

A great write-up from the team at Spacelift comparing two of the best solutions in the IaC orchestration space. One small correction... We do have a free tier: 250 runs a month, 30 environments,...

linkedin.com
14
🏷️ Now Available: env zero Environment Tagging Read the blog: bit.ly/4zvHbda
43
Most "free" IaC tiers cap you at 2 users and strip out the good stuff. We went the other way. The env zero Free Tier is $0 forever: → 250 runs/mo → 30 environments → unlimited users (humans + agents) → full Navigator set: drift detection + OIDC SSO envzero.com/blog/introducing…
67
Point Claude Code, Cursor, or Codex at your infra and just ask: "why did payments-staging go red, our change or drift?" It answers from real state, not guesses. The env zero Agentic Experience is live 👇 bit.ly/3S1VG7q #PlatformEngineering #DevOps #IaC #AIagents
1
580
env zero CTO Oved Lourie will be joining today's closing panel to discuss the Future of Platform Engineering at #PlatformCon on Mainstage at 5 p.m. ET!
62
Happening at #PlatformCon NYC in just 30 minutes! Kill the Slack queue: Governed cloud self-service with Google Project Factory
60
The env zero team has landed in NYC for PlatformCon. 🧪 10am: Kill the Slack queue, with Artem Artyunov in the Platform Dojo 🧠 Closing panel: the future of platform engineering, with Oved Lourie on Mainstage Stop by our booth for an EZ DOES IT hat. See you there! #PlatformCon
Made with AI
1
2
76
env zero retweeted
CloudQuery@cloudqueryio
Jun 23
"Which EC2 instances are exposed to the internet AND missing critical security patches?" CloudQuery answers in seconds. No spreadsheets, no manual joins. New: try it free for 14 days. Business email, first sync, done. No sales call. cloud.cloudquery.io/auth/pla… Watch 👇
2
3
498
Load more