Automate large-scale, complex and mission critical IT infrastructure

Make consistent global changes securely while ensuring compliance.

Download CFEngine

Learn more about CFEngine Enterprise 3.6.5

Securing the Internet of Things with CFEngine

Are you IoT ready? CFEngine can automate secure updates and systems hardening for your endpoint devices.

Find out more about CFEngine's IoT solutions


Written in C. The leanest and fastest solution in the industry with execution time less than 1 second.


The open source configuration solution with the best security record.


The most mature solution in the industry, conducting hundreds of billions of compliance checks in large-scale production environments.


Deploy a model-based configuration change across 50,000 servers in 5 minutes.

The largest and most complex IT infrastructures use CFEngine to make consistent global changes.

Deutsche Telekom
JPMorgan Chase

"LinkedIn is the largest professional social network and is currently the 10th largest website in the US by traffic. Our ops team will make around 5-10 production changes per day. CFEngine provides the automation framework and gives us the ability to continue to scale operationally."

Mike Svoboda, Sr. Unix Engineer, LinkedIn


Announcing the CFEngine Community Advisory Board

As CFEngine continues its evolution and adds to the large number of users with a stake in the future of the project, we have established a Community Advisory Board. The aim of the Community Advisory Board is to advise CFEngine AS and …

Securely deploying CFEngine on untrusted networks

CFEngine’s trust model is based on the secure exchange of keys. This exchange of keys between client and hub, can either happen manually or automatically. Usually this step is automated as a dead-simple “bootstrap” procedure: cf-agent –bootstrap $HUB_IP It is presumed that …

Latest tweets follow @cfengine

Download CFEngine Enterprise free for up to 25 hosts

Download CFEngine