Best tools for DevOps Automation

The open-source automation server

Open-source automation server for building, testing, and deploying software. Jenkins is the de facto self-hosted CI/CD platform with thousands of plugins for source control, build tools, cloud providers, and notifications. Pipelines are defined as Groovy code (Jenkinsfile) and run on distributed agents. Battle-tested in enterprise environments since 2011 — the reference implementation for self-managed CI before SaaS alternatives existed.

Modern open-source server management panel

1Panel is a modern open-source Linux server management panel built with Go that provides a clean web interface for managing websites, databases, containers, and system resources. It features a marketplace with 165+ one-click app installs including Nextcloud and Bitwarden, automatic SSL provisioning with Let's Encrypt, visual Docker container management, and built-in firewall configuration. 1Panel also supports native AI agent deployment through Ollama integration.

Build full-stack web & mobile apps on AWS

AWS's TypeScript-based full-stack platform for building and deploying web and mobile applications. AWS Amplify Gen 2 lets developers define backend resources — data, auth, storage, serverless functions — entirely in TypeScript, then auto-provisions AWS resources via CDK. Includes per-developer sandboxes, fullstack branch deployments, real-time data sync, offline support, and seamless Bedrock/Redis integration.

MCP servers for AWS cloud services and workflows

AWS MCP Servers is a collection of open-source MCP server implementations from AWS Labs that connect AI coding agents to AWS services. It includes servers for AWS documentation, knowledge bases, and managed cloud workflows, enabling agents to provision resources, query docs, and manage infrastructure through the Model Context Protocol.

Browser automation CLI built for AI agents by Vercel Labs

Agent Browser is a Rust-based browser automation CLI designed specifically for AI agent workflows rather than traditional testing. Developed by Vercel Labs, it provides semantic element selection through a refs system, accessibility tree snapshots, session persistence, and authentication vaults. Unlike Playwright or Puppeteer which target test automation, Agent Browser optimizes for token efficiency and deterministic element selection that gives LLMs reliable browser interaction capabilities.

Email API service that gives AI agents their own inboxes and identities

AgentMail is a YC S25 startup that provides email infrastructure specifically designed for AI agents. It gives each agent its own email address and inbox, enabling agents to send, receive, and manage email conversations independently. With $6 million in seed funding from General Catalyst and Paul Graham, and over 500 B2B customers, AgentMail solves the identity and communication gap that arises when organizations deploy autonomous agents that need to interact via email.

Productivity app for macOS

Powerful productivity launcher and automation tool for macOS that goes beyond Spotlight with custom workflows, clipboard history, snippets, and file navigation. Workflows combine hotkeys, keywords, scripts, and actions into automation chains. Supports AppleScript, JavaScript, Python, and shell scripts. Features 1Password integration, system commands, and a rich community workflow gallery. The original Mac launcher, still preferred by many power users over Raycast.

Simple agentless IT automation

Agentless IT automation tool from Red Hat for configuration management, application deployment, and infrastructure orchestration. Ansible uses simple YAML playbooks executed over SSH or WinRM — no agent installation required on managed nodes. Modules cover Linux, Windows, network gear, cloud APIs, and containers. Idempotent execution makes runs safe to repeat. Open-source core (GPL) with Ansible Automation Platform as the commercial Red Hat offering for enterprises.

Workflow orchestration platform for data pipelines

Apache Airflow is an open-source workflow orchestration platform with 39K+ GitHub stars for authoring, scheduling, and monitoring data pipelines as Python DAGs. Used by 80K+ organizations for ETL, ML training, and data transformation. Features dynamic pipeline generation, extensive operator library for AWS/GCP/Azure, task dependencies, retries, SLA monitoring, a rich web UI with Gantt charts, and pluggable executors from local to Kubernetes. The industry standard for pipeline orchestration.

Distributed event streaming platform

Apache Kafka is the industry standard open-source event streaming platform with 30K+ GitHub stars, used by 80% of Fortune 100 companies. Handles trillions of events per day with high throughput, low latency, and built-in fault tolerance. Features real-time stream processing via Kafka Streams, connectors for 100+ data sources, exactly-once semantics, and multi-datacenter replication. Foundation for event-driven architectures, real-time pipelines, and data integration at scale.

Native Linux containers on macOS via Apple Virtualization

Apple Containerization is Apple's official Swift package for running Linux containers natively on macOS using the Virtualization framework. It provides near-native performance without Docker Desktop's heavyweight VM, supporting OCI images, container networking, and a command-line interface. The library leverages Apple Silicon hardware acceleration for minimal overhead container execution on Mac development machines.

Java diagnostic and troubleshooting tool

Arthas is Alibaba's open-source Java diagnostic tool that lets developers troubleshoot production issues without modifying code or restarting servers. It attaches to running JVM processes to inspect class loading, decompile classes, trace method invocations, monitor performance metrics, and view real-time stack traces. Supports JDK 6+ with both telnet and WebSocket interfaces for local and remote diagnostics across Linux, macOS, and Windows.

Open-source autonomous AI agent platform

AutoGPT is an open-source autonomous AI agent platform with 183K+ GitHub stars that breaks goals into subtasks and executes them independently. Features a visual Agent Builder for creating workflows without coding, persistent cloud-based agents running on triggers, a marketplace of pre-built agents, and a plugin system. Agents can browse the web, write code, manage files, and call tools autonomously while maintaining memory across sessions.

Developer productivity platform with merge queues and flaky test detection

Aviator is a developer productivity platform combining merge queues, stacked PRs, automated code review, and flaky test management. Its merge queue prevents broken main branches by testing PRs in order before merging. Flaky test detection identifies unreliable tests causing CI failures. Founded by ex-Google engineers who built internal developer tools at scale. YC-backed with $2.3M seed from Elad Gil. Used by Bosch, Benchling, and Lightspeed.

Spotify's open-source developer portal framework

Backstage is Spotify's open-source framework for building internal developer portals, now a CNCF incubating project with 27,000+ GitHub stars. It provides a unified software catalog, service documentation, CI/CD pipeline views, and a plugin architecture with 200+ community plugins. Teams use it to create a single pane of glass for service ownership, API documentation, infrastructure management, and developer self-service workflows.

Fast Rust-based formatter and linter for web projects

Biome is a Rust-based toolchain for JavaScript, TypeScript, JSX, JSON, and CSS that combines formatting and linting in a single tool running 20-50x faster than ESLint + Prettier. Provides 300+ lint rules with automatic fixes, opinionated formatting compatible with Prettier output, and import sorting. Zero configuration needed to start with sensible defaults. Designed as a drop-in replacement for ESLint and Prettier with first-class IDE support via VS Code and JetBrains extensions.

Kubernetes ChatOps bot for Slack, Teams, and Discord

Botkube is a Kubernetes ChatOps platform that brings cluster management into Slack, Microsoft Teams, and Discord. It provides real-time alerts for cluster events, enables kubectl command execution from chat, and supports automated workflows triggered by Kubernetes resource changes. Features plugin architecture for extensibility and RBAC-based access control for team collaboration.

Ephemeral preview environments for every pull request

Bunnyshell automates the creation of full-stack ephemeral environments that spin up for every pull request and tear down when merged. Each environment is a complete replica of the application stack including databases, APIs, and frontend services. Integrates with GitHub, GitLab, and Bitbucket to provide shareable preview URLs for testing, QA, and stakeholder review.

HashiCorp's Cloud Development Kit for defining Terraform with code

CDKTF (Cloud Development Kit for Terraform) lets developers define infrastructure using TypeScript, Python, Java, C#, or Go instead of HCL. It synthesizes familiar programming language constructs into standard Terraform JSON configuration. Developed by HashiCorp, it brings software engineering patterns like loops, conditionals, and abstractions to infrastructure definition with full IDE support.

Free self-hosted PaaS

Open-source self-hostable PaaS that turns any VPS into a Heroku-style platform. CapRover wraps Docker Swarm with a friendly web UI for one-click app deploys, automatic NGINX reverse proxy with free Let's Encrypt SSL, and a one-click app store for Postgres, Redis, MongoDB, WordPress, and dozens more. Define apps via captain-definition files, scale containers, view logs, and manage volumes — all without touching the Docker CLI. Free, MIT licensed.

Simple open-source personal cloud system

CasaOS is an elegant open-source personal cloud operating system that turns any hardware into a private home server with a one-line installation. It provides a beautiful web dashboard for managing Docker containers, a curated app store with one-click installs for tools like Nextcloud and Jellyfin, and built-in file management. CasaOS runs on Raspberry Pi, Intel NUC, old laptops, and cloud VMs with full support for Ubuntu, Debian, and Raspberry Pi OS.

Cross-machine dotfile manager with template support and encryption

Chezmoi manages dotfiles across multiple machines with template support for machine-specific configuration, secret encryption, and integration with password managers. It handles the complexity of maintaining consistent development environments across work laptops, personal machines, and servers. Over 15,000 GitHub stars with support for 1Password, Bitwarden, LastPass, and gpg encryption.

Cloud cost intelligence mapped to business units

CloudZero is a cost intelligence platform that maps cloud spend to engineering teams, product lines, and business units using AI-driven anomaly detection. It provides engineering-friendly insights that help developers understand the cost impact of their code changes, with per-commit cost tracking through CI/CD integration and flexible multi-cloud support across AWS, GCP, and Azure.

MCP integration for Cloudflare Workers and edge services

Cloudflare MCP Server connects AI coding agents to Cloudflare's edge platform through the Model Context Protocol. It enables agents to manage Workers, KV stores, R2 storage, D1 databases, and other Cloudflare services directly from AI assistants, streamlining edge application development and deployment workflows.

JAMstack platform for frontend developers

JAMstack deployment platform that builds and hosts websites on Cloudflare's global edge network across 300+ cities. Cloudflare Pages connects to GitHub or GitLab for automatic deployments on every push, generates unique preview URLs per pull request, supports server-side logic via Pages Functions on Workers, and includes instant rollbacks, branch deployments, and Cloudflare Access controls.

See where your AI coding tokens actually go

Open-source TUI dashboard and CLI that shows where your AI coding tokens actually go, broken down by task type, tool, model, MCP server, and project. CodeBurn reads local session data directly from Claude Code, Codex, Cursor, OpenCode, Pi, and GitHub Copilot — no wrapper, proxy, or API keys — and layers on one-shot success rates so you can see whether the AI nails work first try or burns budget on edit/test/fix retries. Ships with a macOS menu bar widget and CSV/JSON export.

Self-hosted cloud development environments for teams and AI agents

Coder provisions self-hosted cloud development environments on any infrastructure including Kubernetes, Docker, AWS, GCP, and Azure. Developers connect through VS Code, JetBrains IDEs, or browser-based editors to standardized environments with pre-configured dependencies. Features template-based provisioning, automatic shutdown, and audit logging. Over 12,800 GitHub stars with growing AI agent use cases.

Container-based CI/CD automation system

Concourse is an open-source CI/CD system built on composable primitives: resources for external artifacts, tasks for containerized work units, and jobs for orchestration. All pipelines are declarative YAML with version control, every task runs in an isolated container, and stateless workers enable horizontal scaling. Deployable via BOSH, Helm, Docker Compose, or standalone binary across any infrastructure.

Agentic IaC platform with AI-powered Terraform code generation

ControlMonkey is an agentic Infrastructure as Code platform that uses AI to automatically generate Terraform code from existing cloud resources. It detects infrastructure drift, converts ClickOps changes into version-controlled Terraform, and enforces IaC-first governance. Raised $7M seed funding to build AI-powered infrastructure management for cloud-native teams.

Kubernetes-native cloud infrastructure control plane

Crossplane is a CNCF Graduated open-source project that extends Kubernetes to manage cloud infrastructure through declarative APIs. Platform teams compose custom infrastructure abstractions as Compositions and publish them as self-service APIs. It provisions resources across AWS, Azure, GCP, and 200+ providers directly from kubectl. Used by 450+ organizations with 11,000+ GitHub stars.

Parallel test orchestration for Playwright and Cypress

Currents is a test orchestration platform that parallelizes Playwright and Cypress test suites across multiple CI machines for faster feedback. It provides intelligent test splitting, re-run strategies for flaky tests, detailed analytics dashboards, and native Playwright chunking. Achieves up to 50% test suite speed improvements through optimized distribution and parallel execution management.

Programmable CI/CD engine that runs your pipelines in containers

Programmable CI/CD engine that replaces shell scripts and YAML with a typed API across 8 languages (Go, Python, TypeScript, Java, Rust, etc.). Dagger runs every pipeline step in containers for portable, locally-debuggable, cacheable builds that work identically on any CI platform. Includes GraphQL query optimization for parallelization, OpenTelemetry observability, and Dagger Cloud for managed compute.

Containerized sandboxes for AI coding agents

Dagger Container Use provides isolated container environments for AI coding agents, enabling multiple agents to work in separate sandboxed branches simultaneously. Built by the Dagger team, it ensures reproducibility and safety for autonomous code execution by giving each agent its own containerized workspace with full toolchain access.

Single-binary workflow engine with zero dependencies

Dagu is a local-first, self-contained workflow engine that runs as a single binary under 128MB of memory with no database, message broker, or runtime dependencies. Workflows are defined in declarative YAML and can orchestrate shell commands, Docker containers, SSH sessions, HTTP calls, and SQL queries. It includes a built-in Web UI with DAG visualization and Gantt charts, plus an AI agent that creates and debugs workflows from natural language via Slack or Telegram.

Managed Docker build acceleration with up to 40x faster builds

Depot provides managed infrastructure for dramatically faster Docker image builds. It uses persistent build caches, native Intel and ARM builders, and optimized build scheduling to achieve up to 40x faster builds compared to standard Docker build workflows. Drop-in replacement for docker build that requires no Dockerfile changes. Used by major engineering teams to cut CI/CD pipeline times.

Swiss-army MCP server for local system automation

DesktopCommanderMCP is a general-purpose MCP server that gives AI agents the ability to execute local programs, read and write files, search the filesystem, and edit text files. It acts as a comprehensive local system actuator, enabling coding agents to interact with the development environment beyond just code editing.

Kubernetes dashboard with 360-degree visibility

Devtron is an open-source Kubernetes management dashboard that provides a 360-degree view of cluster resources with fine-grained RBAC for multi-cluster environments. Its upcoming agentic AI feature automates debugging and cluster optimization, while the current platform offers centralized visibility, GitOps-based deployment workflows, and security policy enforcement across distributed Kubernetes infrastructure.

Open-source IaC orchestration that runs Terraform plans and applies from pull request comments

Digger is an open-source infrastructure-as-code orchestration tool for running Terraform and OpenTofu plan/apply workflows from pull request comments. It uses the team’s existing VCS and CI runners instead of adding a separate runner fleet, supports GitHub, GitLab, and Azure DevOps style workflows, and stores PR-level locks and plan cache in the user’s cloud account.

Cloud infrastructure for developers

Cloud infrastructure provider offering Droplets (VMs), managed Kubernetes, app platform PaaS, managed databases (PostgreSQL, MySQL, Redis, MongoDB), Spaces (object storage), serverless functions, and a CDN. Known for developer-friendly docs, simple pricing from $4/month, and a clean API/CLI. Popular with startups and indie devs as a simpler AWS alternative. 1-click marketplace apps and extensive community tutorials.

Open-source PaaS alternative to Vercel, Heroku, and Netlify

Dokploy is a free open-source platform-as-a-service for self-hosting applications without cloud vendor lock-in. It provides automated deployments from Git repositories, built-in SSL certificates, database provisioning, Docker and Docker Compose support, and a clean web dashboard for managing multiple applications on your own servers. With 18,000+ GitHub stars, it fills the gap for teams wanting Vercel-like deployment simplicity on their own infrastructure.

Universal secrets management platform

Doppler is a secrets management platform that centralizes environment variables and configuration across applications, CI/CD pipelines, and cloud infrastructure. Features automatic secret syncing to 150+ integrations including AWS, GCP, Azure, Vercel, Netlify, Docker, and Kubernetes. Provides versioned secret history, access controls with audit logs, secret rotation, environment-specific configs, and a CLI for local development. Replaces scattered .env files with a single source of truth.

Open-source control plane for AI workloads across multi-cloud GPU infrastructure

dstack is an open-source platform that orchestrates AI training and inference workloads across heterogeneous GPU infrastructure spanning multiple clouds, Kubernetes clusters, and bare-metal servers. It abstracts away cloud-specific APIs so teams define GPU requirements declaratively and dstack automatically provisions the cheapest available resources from AWS, GCP, Azure, Lambda, or on-premises hardware.

Pluggable JavaScript and TypeScript linter

ESLint is the standard open-source linter for JavaScript and TypeScript with 26K+ GitHub stars. Statically analyzes code to find problems, enforce coding conventions, and automatically fix issues. Features a pluggable rule architecture with 300+ built-in rules and thousands of community plugins for React, Vue, Angular, Node.js, and more. Flat config system in ESLint v9 simplifies configuration. Integrates with every major editor, CI/CD pipeline, and build tool in the JavaScript ecosystem.

Your CI/CD scripts as code. Consistent, reproducible builds.

Build automation framework that combines Dockerfile and Makefile syntax for repeatable, containerized builds. Earthly runs every step in a container so builds produce identical results on dev laptops and CI, augmenting Make/Gradle/npm/cargo with cross-language reproducibility. Features parallel target execution, layer caching, multi-platform builds, and references across Earthfiles or repositories.

Dependency lifecycle management and risk reduction

Endor Labs is a dependency management platform that goes beyond vulnerability scanning to assess the overall risk of open-source dependencies. Evaluates maintainer activity, code quality, popularity trends, licensing, and operational risk alongside CVEs. Features reachability analysis to determine if vulnerabilities are actually exploitable in your codebase. Provides dependency selection guidance for choosing safer alternatives. Reduces alert fatigue by prioritizing truly risky dependencies.

MCP gateway and integration catalog for AI agents

Executor is an MIT-licensed integration layer and MCP gateway for AI agents. It gives Claude Code, Cursor, Codex, and other MCP-speaking clients one endpoint for connected OpenAPI specs, GraphQL APIs, MCP servers, Google Discovery sources, and custom JavaScript tools, with local, cloud, and self-hosted deployment options for teams centralizing tool access.

Cloud native runtime security for Kubernetes

Falco is a CNCF graduated open-source runtime security tool that detects unexpected behavior and threats across containers, Kubernetes, and cloud workloads in real time. Originally created by Sysdig, Falco monitors Linux kernel syscalls using eBPF and applies customizable detection rules to alert on malicious activity like container escapes, cryptojacking, unauthorized file access, and anomalous network connections. It supports 50+ alert output channels including SIEM integration.

Unified multi-cloud cost management with MegaBill

Finout unifies cloud costs from AWS, Azure, GCP, Snowflake, and other providers into a single MegaBill dashboard with AI-based anomaly detection for flagging unusual spend patterns. Priced at approximately 1% of cloud spend, it solves the multi-tool cost fragmentation problem for organizations managing complex infrastructure budgets across multiple cloud and SaaS providers.