DriftLatch

Idea

Hosted Terraform drift detection that opens the pull request for you, priced for teams too small for enterprise IaC platforms. DriftLatch connects to one AWS account with a read-only role, scans daily against your Terraform state, and turns every real-world mismatch into a plain-English Slack alert plus an auto-generated GitHub PR with the exact fix. No migration to a new run pipeline, no sales call, no self-hosted container to babysit.

Market gap

The free option is dead. driftctl, the open-source tool most engineers reach for first, has been in maintenance mode since June 29, 2023, after Snyk acquired and then stopped actively developing it. The paid options start where small teams stop: env0 bundles drift detection at $349/month for 100 deployments and gates real governance behind its Cloud Compass tier at $1,500/month. HCP Terraform (Terraform Cloud) does not include drift detection on its Free or Standard plans at all, and only covers infrastructure run through HCP's own pipeline. Firefly is enterprise, sales-led, multi-cloud governance, not a bolt-on for a five-person platform team.

The self-hosted free alternative, cloud-concierge, proves the demand is real (it is a maintained, capable open-source project) but it requires a team to run and operate their own container, wire their own CI, and build their own alerting. That is a real cost, just one that is paid in engineering time instead of dollars, and most small teams do not have the spare time.

Timing: two new entrants (Controlinfra and Anyshift.io) both launched on Show HN within the last 18 months specifically targeting this gap, which confirms founders keep re-discovering the same unmet demand. Neither has shipped the specific combination this idea targets: a five-minute connect, a scheduled scan, and an auto-generated PR with the actual fix, at a flat self-serve price under $150/month.

Total Addressable Market (TAM)

Bottom-up:

• ~30,000 companies verified as active Terraform users (Landbase 2026 data reports 26,680 to 37,231 verified companies; midpoint used: 30,000).
• Subtract companies already on Terraform Enterprise: only 350 verified companies (Landbase). Remaining addressable pool without enterprise IaC governance: ~29,650 companies.
• Apply a conservative filter for teams running Terraform against production accounts serious enough to care about drift risk (excludes hobbyists, sandboxes, single-resource users): 25% → ~7,400 companies.
• Blended ACV across the Starter ($79/mo) and Growth ($199/mo) tiers, weighted toward entry tier: ~$1,800/year.
• TAM ≈ 7,400 × $1,800 = ~$13.3M ARR.

SAM: Restrict to the segment DriftLatch can actually reach and serve in year one, teams of 2-20 engineers concentrated in the US, Germany, France, UK, and Switzerland (the top Terraform-adoption geographies per usage data), roughly 50% of the TAM pool → 3,700 companies × $1,800 = **$6.7M ARR**.

SOM: A realistic first-year capture at 1% of SAM through a Show HN launch, the free CLI funnel, and word of mouth in DevOps communities → 37 paying accounts × $1,800 = **$67K ARR** in year one, the normal base a two-tier self-serve dev tool needs to prove before raising pricing or expanding to GCP/Azure.

Monetization strategy

Flat-rate SaaS subscription billed per connected AWS account, self-serve signup with a credit card, no sales call. Revenue scales with the number of cloud accounts a customer connects, which tracks directly with the size of their infrastructure and their willingness to pay for continuous coverage. The free CLI is the top-of-funnel: a one-time local scan that proves the value with zero setup, then converts to the hosted, scheduled, PR-generating product.

Pricing strategy

• Starter ($79/month): 1 AWS account, daily scan, Slack alerts, read-only. Entry point for a single-team, single-account setup.
• Growth ($199/month, anchor): up to 5 AWS accounts, daily scans, auto-generated GitHub pull requests to reconcile drift. This is the plan that includes the core value prop (the PR, not just the alert) and is where most customers land.
• Scale ($499/month): up to 20 AWS accounts, priority scan scheduling, exportable scan history.

Anchor is Growth because that is the tier where the product actually saves engineering time (the PR) instead of just notifying. Starter exists purely to remove the "do I need to commit yet" friction after the free CLI scan.

Lead magnet

A free, no-signup CLI tool: npx driftlatch scan. It runs entirely on the user's machine, reads their local Terraform state and their own AWS credentials, and prints a plain-English drift report to the terminal in under two minutes. Nothing is sent to any server. This mirrors exactly how engineers already discover tools like driftctl and tfdrift, so it meets the buyer where their habit already is, and it is the natural on-ramp to "want this running every day with a PR instead of a terminal printout? Connect an account."

Social proof that the problem exists

1. driftctl, the most widely adopted open-source drift detection tool, has been in maintenance mode since June 29, 2023, following its acquisition by Snyk, with no active development and the maintainers directing users to fork it themselves: https://github.com/snyk/driftctl
2. "Controlinfra – Free AI-powered Terraform drift detection" was posted to Show HN in January 2026, a founder independently building toward the same unmet need in the same 18-month window: https://news.ycombinator.com/item?id=46685977
3. "Show HN: Anyshift.io – Terraform 'Superplan'" (January 2025) is a second, separate founder building drift and plan-visibility tooling and taking it to the same audience for validation: https://news.ycombinator.com/item?id=42712522
4. env0's own pricing writeup shows its drift-inclusive governance tier, Cloud Compass, starting at $1,500 per month, and its base platform at $349/month for 100 deployments, pricing that puts real drift governance out of reach for a small team: https://www.envzero.com/blog/8-terraform-drift-detection-tools-enterprise-teams-actually-use-in-2026
5. Market data shows only 350 verified companies are on Terraform Enterprise against roughly 30,000 verified companies using Terraform overall, meaning the vast majority of Terraform users today have no enterprise-grade drift or governance tooling at all: https://data.landbase.com/technology/terraform-enterprise/ and https://data.landbase.com/technology/hashicorp-terraform/

Competitors

• driftctl (Snyk): free, open source, the historical default. In maintenance mode since June 2023, no active feature development, users are told to fork it themselves.
• cloud-concierge (dragondrop-cloud): free, open source, self-hosted container. Detects drift, codifies unmanaged resources, and bundles cost and security scanning. Capable, but requires a team to run, patch, and wire the container into their own CI and alerting themselves.
• env0: hosted Terraform automation platform. Drift detection is bundled into its run pipeline starting at $349/month for 100 deployments, with dedicated governance and drift-risk features gated behind its $1,500/month Cloud Compass tier.
• Firefly: enterprise multi-cloud asset governance platform with drift detection as one module. Sales-led, built for large, complex multi-cloud estates, not a lightweight bolt-on.
• HCP Terraform (Terraform Cloud): HashiCorp's own SaaS. Drift detection is absent from the Free and Standard plans entirely and only appears on higher, per-resource-billed tiers, and only covers runs executed through HCP's own pipeline.
• Controlinfra and Anyshift.io: early-stage entrants (Show HN Jan 2026 and Jan 2025 respectively) validating the same gap, neither has published a combined five-minute-setup-plus-auto-PR workflow at self-serve small-team pricing.

What competitors offer now

The free tools (driftctl, cloud-concierge) give you the scan, but you run the infrastructure yourself: a container, a schedule, your own alerting, your own glue code to turn a diff into something a human reads. The paid platforms (env0, Firefly, HCP Terraform) give you a polished dashboard and support, but only if you either migrate your Terraform runs into their pipeline or pay an enterprise price built for teams managing dozens of accounts and a platform engineering function that a five-to-twenty-person team does not have. None of them, free or paid, hand you a pull request with the actual code fix already written. Every option today ends at "here is what's different," and the team still has to go write the Terraform themselves.

What can be done differently to attract customers

Stop at "here is what's different" is exactly the gap. DriftLatch's wedge is finishing the job: connect a read-only role in five minutes, no pipeline migration, and every drift scan that finds something wrong doesn't just alert, it opens a pull request with the Terraform diff or import block that fixes it, so the team's job becomes "review and merge" instead of "diagnose and write." Priced flat starting at $79/month, self-serve, no sales call, undercutting the $349-1,500/month enterprise floor by an order of magnitude. Distribution rides the same channel the two validating competitors already proved works, Hacker News and the DevOps/platform-engineering communities where driftctl users already live, entering through the free no-signup CLI scan rather than a gated demo.