Best tools for DevOps Automation

eBPF-based networking, security, and observability for Kubernetes

Cilium is a CNCF Graduated, Apache-2.0 project for Kubernetes networking, security, and observability using eBPF. It can replace kube-proxy, enforce identity-aware L3-L7 network policies, and add Hubble flow observability plus Tetragon runtime-security signals. Current source checks support GKE Dataplane V2 using Cilium/eBPF and Azure CNI Powered by Cilium for AKS.

Fast and lightweight Docker Desktop alternative for macOS

OrbStack is a macOS application that replaces Docker Desktop with lightweight container and Linux VM management. Its docs emphasize fast starts, lower CPU and memory overhead, and native macOS integration with menu bar controls, file sharing, and network access to containers by name, with exact gains depending on workload. Supports Docker, Kubernetes, and full Linux VMs.

Distributed AI compute engine for scaling Python and ML workloads

Ray is an open-source distributed computing framework built for scaling AI and Python applications from a laptop to thousands of GPUs. It provides libraries for distributed training, hyperparameter tuning, model serving, reinforcement learning, and data processing under a single unified API. Ray's public site highlights OpenAI and other enterprise users. Maintained by Anyscale with Apache-2.0 open-source licensing.

Run GitHub Actions locally for fast feedback

Act is an open-source tool that runs GitHub Actions workflows locally using Docker containers that match GitHub's execution environment. It provides instant feedback on workflow changes without pushing to a repository, supports matrix builds, secret management, and artifact handling. Act can also replace Makefiles by using workflow files as task definitions, making it useful for both CI/CD development and local task automation across development teams.

Build, share, and run containers

Industry-standard container platform for building, shipping, and running applications in isolated, reproducible environments. Package apps with all dependencies into portable containers using Dockerfiles and images. Docker Compose orchestrates multi-container applications. Docker Hub hosts millions of pre-built images. Docker Desktop provides GUI management on Mac/Windows. Essential for local development, CI/CD, and production deployments. The foundation of modern containerized infrastructure.

Open-source observability platform for metrics, logs, and traces visualization.

Grafana is the leading open-source platform for monitoring and observability visualization. It connects to virtually any data source — Prometheus, Elasticsearch, InfluxDB, PostgreSQL, CloudWatch, Datadog, and 150+ others — to create beautiful, interactive dashboards. Used by millions of users at companies like Bloomberg, JPMorgan, eBay, and PayPal. Grafana Cloud offers a fully managed experience with generous free tier. The CNCF ecosystem standard for metrics visualization.

Serverless GPU compute platform for AI inference and training

Modal is a serverless compute platform that lets developers run AI workloads on GPUs with a Python-first SDK. Functions deploy with decorators, auto-scale from zero to thousands of containers, and bill per second. It supports LLM inference, fine-tuning, batch jobs, and sandboxes, with current GPU options including B200, H200, H100, A100, L40S, A10, L4, and T4. Modal’s 2026 Series C valued the company at $4.65B.

Identity-aware VPN and reverse proxy for zero-trust remote access

Identity-based remote access platform built on WireGuard that combines reverse proxy and VPN capabilities. Pangolin supports clientless browser access for web apps and client-based private-resource access across macOS, iOS, Windows, Linux, and Android, with zero-trust rules, peer-to-peer tunnels, automatic SSL, SSO/OIDC options, and cloud or self-hosted deployment.

Declarative GitOps continuous delivery tool for Kubernetes.

Argo CD is the most popular GitOps continuous delivery tool for Kubernetes. It continuously monitors Git repositories and automatically syncs application state to match the desired configuration. A CNCF graduated project used by thousands of organizations for deploying to Kubernetes clusters.

Run GitHub Actions on faster bare-metal runners with lower Ubuntu per-minute pricing

Blacksmith is a drop-in replacement for GitHub-hosted runners that executes Actions on bare-metal gaming CPUs and source-shaped cache infrastructure. Migration requires a one-line YAML change. Features include colocated warm caches, persistent Docker layer caching on NVMe, CI observability with log search, and Firecracker microVM isolation. SOC 2 Type 2 certified, with Ubuntu x64 pricing at $0.004/min and 3,000 free minutes/month.

Official MCP server for GitHub repo operations

GitHub MCP Server is the official Model Context Protocol server from GitHub that connects AI assistants to repositories, issues, pull requests, workflows, and code search. It exposes 100+ operations with toolset filtering, permission scoping, and audit logging, available in both remote-hosted and self-hosted Docker deployment modes.

Frontend cloud platform

Frontend cloud platform and the creators of Next.js, providing instant Git-push deployments, a global edge network, and serverless compute for modern web apps. Automatic preview URLs for every pull request, Edge Functions for low-latency dynamic content, Image Optimization, Web Analytics, and the Vercel AI SDK for building AI-powered apps. Supports Next.js, React, Svelte, Nuxt, Astro, and all major frameworks. Generous free tier for personal projects and used by enterprises like Washington Post.

Hybrid CI/CD platform with self-hosted agents and cloud orchestration

Buildkite is a hybrid CI/CD platform that separates orchestration from execution. Its SaaS control plane manages pipelines, UI, authentication, and coordination while agents run builds on self-hosted or hosted infrastructure. Current pricing lists Personal at $0, Pro at $30 USD per active user/mo, P95 billing for self-hosted agents, Test Engine, Package Registries, and hosted Mac/Linux agent options.

Cloud-scale monitoring, security, and analytics platform for modern infrastructure.

Datadog is a cloud observability and security platform that unifies metrics, traces, logs, RUM, synthetics, APM, and security signals. Current pricing pages list 1,000+ integrations for Infrastructure Monitoring, with Pro from $15/host/month and Enterprise from $23/host/month when billed annually.

Kubernetes cost monitoring and optimization platform

Kubecost is an IBM Apptio / Cloudability product for Kubernetes cost visibility, allocation, and optimization, built around the Kubecost/OpenCost ecosystem. It helps map infrastructure spend to Kubernetes namespaces, deployments, pods, labels, and teams. OpenCost remains the vendor-neutral Apache-2.0 open-source project for cloud-native cost allocation with AWS, Azure, GCP, and Prometheus integrations.

Zig-built headless browser engineered for AI agent workloads

Open-source headless browser written in Zig for AI agents, crawling, and automation. Lightpanda omits graphical rendering, keeps DOM and JavaScript execution, exposes CDP for Puppeteer/Playwright/chromedp, and adds Agent, PandaScript, and MCP workflows. Current public benchmarks claim about 9x faster execution and 16x less memory than Chrome.

No-code automation platform connecting 9,000+ apps

The most popular no-code automation platform connecting 9,000+ apps and app connections to automate workflows without writing code. Features multi-step Zaps with conditional logic, AI Copilot for natural language workflow creation, Tables, Forms, and MCP integration for AI orchestration. Task-based pricing with a free tier at 100 tasks/month. Used by businesses from solo operators to enterprise teams for eliminating repetitive work across their software stack.

Official Chrome DevTools MCP server for coding agents

chrome-devtools-mcp is the Chrome DevTools team's official MCP server that lets coding agents control and inspect a live Chrome browser with first-party Chrome DevTools Protocol fidelity. It exposes Network inspection, Performance traces, Lighthouse audits, console output, and structured DOM snapshots as typed MCP tools, so agents can debug real pages and ship reliable web performance investigations without resorting to brittle DOM scraping.

Open-source LLM observability and evaluation

Phoenix by Arize is an open-source AI observability platform for tracing, evaluating, and debugging LLM applications. It captures prompt-response pairs, retrieval context, agent tool calls, and latency data through OpenTelemetry-based instrumentation. Provides experiment tracking, dataset management, and evaluation frameworks for systematically improving AI application quality. 10K+ GitHub stars.

Open-source identity provider for self-hosted SSO and access management

Authentik is an open-source Identity Provider supporting SAML, OAuth2/OIDC, LDAP, RADIUS, and SCIM for self-hosted single sign-on. It provides customizable authentication flows, multi-factor authentication, user management, and proxy-based SSO for applications without native support. Positioned as a modern Keycloak alternative with 22K+ GitHub stars, free Open Source use, and paid Enterprise/Enterprise Plus plans.

Open-source Docker gateway for containerized MCP server orchestration

Docker MCP Gateway is Docker's open-source orchestration layer for Model Context Protocol servers. It gives MCP clients one gateway, launches catalog servers in isolated containers on demand, injects credentials, applies runtime restrictions, and routes tool requests. Catalogs and profiles let teams reuse approved server collections across clients, while Docker Desktop can run the gateway automatically with MCP Toolkit enabled.

Open-source feature flags and A/B testing platform

GrowthBook is an open-source platform for feature flags, A/B testing, and product experimentation. It includes Bayesian and frequentist statistics engines, warehouse-native analytics connecting to BigQuery, Snowflake, and Databricks, and SDKs for 15+ languages. GrowthBook supports targeting rules, gradual rollouts, and an MCP server for AI agent integration. Self-hostable via Docker.

Merge queue, CI insights, flaky-test controls, and stacked pull requests for GitHub teams

Mergify is a pull request automation platform that keeps main branches green with merge queue batching, merge protections, CI Insights, flaky-test detection, and stacked pull requests. Its Stacks workflow turns commits on one local branch into focused PR chains, helping teams review large AI-generated or feature-heavy changes without losing queue safety.

Unified code-to-cloud security platform for developers

Aikido Security is an all-in-one AppSec platform unifying SAST, DAST, SCA, CSPM, secrets detection, container scanning, IaC analysis, and runtime protection in a single developer-friendly dashboard. Cuts false positive noise by 95% through reachability analysis that evaluates vulnerabilities in actual deployment context. Features AI AutoFix for one-click remediation, CI/CD gating, and AI-powered pentesting agents. Trusted by 50,000+ organizations. Supports 50+ programming languages.

Lightweight server monitoring with Docker stats and alerts

Beszel is a lightweight, self-hosted server monitoring platform built in Go that tracks CPU, memory, disk, network, GPU, temperature, and Docker container metrics with historical data visualization and configurable alerts. Its simple hub-and-agent architecture deploys in minutes and consumes minimal resources compared to traditional monitoring stacks like Prometheus and Grafana.

LLM evaluation and prompt engineering platform

Braintrust is an AI observability and evaluation platform for tracing LLM applications, building datasets, running prompt/model experiments, scoring outputs and turning production feedback into regression tests. It fits teams that need repeatable quality gates for AI releases rather than one-off prompt demos.

Infrastructure as Code using real programming languages — TypeScript, Python, Go, C#, Java.

Pulumi is a modern Infrastructure as Code platform that lets teams define cloud infrastructure using familiar programming languages instead of DSLs. Supports TypeScript, Python, Go, C#, Java, and YAML across major clouds, Kubernetes, and a broad Pulumi Registry with Terraform-derived provider coverage. Offers testing, IDE autocomplete, reusable components, and Pulumi Cloud state/governance features.

Application monitoring and error tracking that helps developers fix issues faster.

Sentry is the leading error tracking and performance monitoring platform for developers. Captures and aggregates errors with full stack traces, breadcrumbs, and context across 100+ platforms. Used by over 100,000 organizations. Features session replay, performance tracing, and code-level profiling. A self-hosted deployment is available under FSL-1.1-Apache-2.0.

AI agent framework for web browser automation

Browser Use is an open-source AI agent framework with 99K+ GitHub stars enabling LLMs to control web browsers via natural language. Y Combinator-backed, it lets agents navigate sites, fill forms, extract data, and complete multi-step tasks autonomously. Built on Playwright with vision-based element detection, multi-tab management, cookie persistence, and self-correcting actions. Supports OpenAI, Anthropic, and local models with a simple Python API for building custom browser agents.

Automate your workflow from GitHub

GitHub's built-in CI/CD and workflow automation platform that runs directly in your repository. Define workflows in YAML triggered by Git events (push, PR, release), schedules, or manual dispatch. Massive marketplace of 20,000+ community-maintained actions for testing, building, deploying, and automating tasks. Supports matrix builds, caching, secrets, environments with approval gates, and self-hosted runners. Free for public repos with generous minutes for private repos.

AI-powered Kubernetes diagnostics in plain English

K8sGPT is a CNCF Sandbox project that scans Kubernetes clusters, diagnoses issues, and explains problems in plain English with actionable remediation steps. It codifies SRE expertise into built-in analyzers for Pods, Services, Deployments, Ingress, PVCs, CronJobs, and more. K8sGPT connects to AI backends including OpenAI, Azure OpenAI, Google Gemini, Amazon Bedrock, Cohere, and local models via Ollama, with data anonymization to protect sensitive cluster information.

Official authenticated remote MCP endpoint for Linear issues, projects, comments, and coding-agent workflows.

Linear MCP Server is Linear’s official authenticated remote MCP endpoint for agent access to issues, projects, and comments. It gives Claude, Codex, Cursor, VS Code, Windsurf, Zed, and other clients a centrally hosted way to find, create, and update Linear work items through OAuth-backed MCP without maintaining a local connector or brittle API glue.

Visual automation platform for complex workflows

Visual workflow automation platform formerly known as Integromat, built around a drag-and-drop canvas for complex multi-step workflows. Features routers for conditional branching, iterators for array processing, aggregators, webhooks, and HTTP modules for custom API calls. Best suited to power users and technical teams that need granular data transformation and workflow logic rather than only simple trigger-action automations.

Open-source monitoring and alerting toolkit — the CNCF standard for metrics collection.

Prometheus is the open-source monitoring system and time-series database that has become the CNCF standard for metrics collection in cloud-native environments. Features a powerful query language (PromQL), pull-based metrics collection, multi-dimensional data model, and built-in alerting via Alertmanager. The foundation of modern Kubernetes observability.

SigNoz is an OpenTelemetry-native observability platform for collecting and correlating logs, metrics, and traces. Teams can self-host it or use SigNoz Cloud, with dashboards, alerting, query workflows, and enterprise controls for cloud-native and AI application telemetry.

Agentic skills framework for disciplined coding-agent workflows

Superpowers is an MIT-licensed agentic skills framework and software-development methodology for coding agents. It packages repeatable workflows such as brainstorming, specs, implementation plans, TDD execution, subagent-driven development, and structured review so teams can move from ad hoc prompting to disciplined agent-assisted software delivery.

Infrastructure as Code

HashiCorp's infrastructure-as-code tool for provisioning and managing cloud resources declaratively using HCL (HashiCorp Configuration Language). Write infrastructure definitions once and deploy to AWS, GCP, Azure, DigitalOcean, and 4,000+ providers. Features state management for tracking resources, plan/apply workflow for safe changes, modules for reusability, and workspaces for environment isolation. The industry standard for multi-cloud IaC with 48K+ GitHub stars.

Open-source background jobs and AI workflows for TypeScript

Trigger.dev is an open-source platform for building and deploying background jobs, AI agents, and long-running workflows in TypeScript. It eliminates serverless timeouts with durable task execution, automatic retries, queue-based concurrency control, and elastic scaling. Used by 30,000+ developers at companies like MagicSchool and Icon.com, it processes hundreds of millions of agent runs monthly. Backed by a $16M Series A led by Dalton Caldwell's Standard Capital fund.

Open-source high-performance key/value datastore

Valkey is a Linux Foundation-backed, BSD-3-Clause open-source fork of Redis 7.2.4 for caching, queues, and real-time data workloads. Current 9.1 and 8.1.8 releases continue performance, security, module, and cluster work while preserving Redis-compatible migration paths. It has 26K+ GitHub stars and managed-service support from AWS, Google, Oracle, Ericsson, and others.

Microsoft’s public-preview runtime governance toolkit for policy, identity, sandboxing, audit, and MCP security around AI agents.

Agent Governance Toolkit is Microsoft’s MIT-licensed public-preview toolkit for governing AI agent runtimes. It adds policy enforcement, zero-trust identity, execution sandboxing, audit, reliability, and MCP security-gateway patterns around tool calls and autonomous actions, helping platform teams move beyond prompt-only guardrails while preserving architecture review requirements.

Headless browsers in Docker for automation at scale

Browserless is a headless browser-as-a-service platform that deploys Chrome, Firefox, and WebKit in Docker containers for web scraping, testing, and AI agent automation. It provides Puppeteer and Playwright-compatible APIs, a built-in MCP server for connecting AI assistants to browser automation, screenshot and PDF generation, and connection pooling for high-concurrency workloads. Available as self-hosted source-available software or managed cloud.

Autonomous Kubernetes cost optimization

CAST AI automates Kubernetes cost optimization by analyzing workloads in real time and taking direct action on clusters, including right-sizing pods, selecting optimal instance types, and leveraging spot instances automatically. The platform achieves up to 60% cost reduction without human intervention, offering a free cluster audit that identifies savings opportunities before any commitment.

Self-hosted Heroku/Vercel alternative

Open-source, self-hostable PaaS alternative to Heroku, Vercel, and Netlify with 44K+ GitHub stars. Deploy static sites, APIs, full-stack apps, databases, and 280+ one-click services on your own VPS or bare metal via SSH. Features auto Let's Encrypt SSL, Git integration (GitHub/GitLab/Bitbucket/Gitea), S3 backups, Docker Swarm support, and a REST API for CI/CD automation. Self-hosted version is free forever with no features behind paywalls.

Zero-instrumentation Kubernetes observability powered by eBPF

Coroot is an open-source observability platform that uses eBPF to automatically instrument Kubernetes applications without code changes. It provides application maps, latency analysis, log correlation, and continuous profiling with automatic anomaly detection. Replaces the need for manual instrumentation with agents that capture metrics, traces, and logs at the kernel level.

Modern data orchestration for ML and analytics

Dagster is an open-source data orchestration platform with 15K+ GitHub stars combining pipeline scheduling with software-defined assets, built-in data quality checks, and a modern developer experience. Defines data assets declaratively rather than imperatively. Features asset lineage visualization, partitioned processing, sensor-based triggers, comprehensive testing, and integrated observability. A modern alternative to Airflow for teams wanting asset-centric orchestration.

Secrets security and non-human identity governance across code, CI/CD, endpoints, CLI/IDE/API, and MCP workflows.

GitGuardian is a secrets security and non-human identity governance platform for finding, triaging, and remediating leaked credentials across repositories, CI/CD, developer endpoints, CLI/IDE workflows, APIs, and MCP-connected environments. It combines managed incident workflow with developer-side prevention, Endpoint Protection, and broader credential lifecycle governance.

Slack-native incident management with AI SRE agent

Incident.io is a Slack- and Microsoft Teams-native incident management platform with AI SRE investigation, on-call scheduling, status pages, and post-incident learning in one product. Vendor case studies cite Buffer reducing critical incidents by 70% and Favor reducing MTTR by 37%. It integrates with PagerDuty, Datadog, GitHub, Jira, and 100+ tools for incident response and operational workflows.

Cloud cost estimates for Terraform changes in pull requests

Infracost shows cloud cost changes directly in pull requests before infrastructure-as-code changes are deployed. It calculates cost impact across AWS, Azure, and GCP for Terraform, Terragrunt, CloudFormation, and AWS CDK workflows, with diffs in GitHub, GitLab, Bitbucket, and Azure DevOps. 12.4K+ GitHub stars, Apache 2.0 licensed. Used by GitLab, HelloFresh, JPMorgan Chase, BMW, and Accenture.