Automate large-scale, complex and mission critical IT infrastructure

Make consistent global changes securely while ensuring compliance.

Download CFEngine

Learn more about CFEngine Enterprise 3.10.1


Written in C. The leanest and fastest solution in the industry with execution time less than 1 second.


The open source configuration solution with the best security record.


The most mature solution in the industry, conducting hundreds of billions of compliance checks in large-scale production environments.


Deploy a model-based configuration change across 50,000 servers in 5 minutes.

The largest and most complex IT infrastructures use CFEngine to make consistent global changes.

Deutsche Telekom
US Navy

"LinkedIn is the largest professional social network and is currently the 10th largest website in the US by traffic. Our ops team will make around 5-10 production changes per day. CFEngine provides the automation framework and gives us the ability to continue to scale operationally."

Mike Svoboda, Sr. Unix Engineer, LinkedIn


Discovering SSL Certificates and Expirations

With more and more services using SSL keeping track of the certificates in use across a global infrastructure can be challenging. The inventory reporting features in CFEngine Enterprise can be useful in identifying services using SSL as well as when their certificates …

3.11.0 Beta ready for testing!

We’re happy to announce that CFEngine 3.11.0 Beta (non-LTS) is now ready. Thanks to everyone for all of the contributions! Please test extensively and submit bug reports. 3.11.x introduces some new features and deprecates some underutilized functionality. Please note that 3.11.0 will …

Latest tweets follow @cfengine

Download CFEngine Enterprise free for up to 25 hosts

Download CFEngine