Resourcely, the first unified configuration platform, is generally available (GA) starting today. In partnership with key early access customers, we’ve spent the last 2.5 years tackling the dreaded misconfiguration problem that is slowing companies down and exposing them to costly incidents.
With Resourcely moving out of early access, we’re making several announcements:
- General availability of core Resourcely features: Blueprints and Guardrails
- New features: Tools for building secure defaults faster with Foundry, Really, and more
- Coming soon: Automatic remediation of issues with Campaigns
- Integrations: Support for over 3,200 resources from AWS, Azure, GCP, Datadog, Spacelift, Terrateam, and more
- Customer success: Early access customer story
Read on for a complete rundown of product features now available.
Background
Resourcely was founded in 2022 by Travis McPeak and Alaeddin Almubayed, both security professionals experienced in scaling security at technology companies. Recognizing the tension between security and speed, they set out to solve this problem by applying learnings from Netflix, Robinhood, and Databricks, combined with a novel approach for embedding secure defaults into existing developer tooling. Read more about why we built Resourcely here.
General availability
Resourcely is currently made up of two core concepts: Blueprints and Guardrails. These concepts are woven together with other supporting features that elevate Resourcely beyond simply templates and policy.
- Embedded metadata for over 3,200 resources
- Collaboration
- Approval workflows
- Integration into change management & version control
- Customizable hosted UI
- User management & metrics tracking
Blueprints and Guardrails combine with these platform features make Resourcely the world’s first configuration platform that is secure-by-default.
Blueprints
Blueprints are customizable, modular templates for configuring and deploying cloud infrastructure. They are created by platform, security, or ops teams that want to give engineers a guided experience to create secure infrastructure that meets the standards of their business.
Current templates for deploying infrastructure are limited to homegrown solutions like Terraform modules that become painful to manage mega-modules. Blueprints elevate templates to true interactive, guided experiences with automatic linking of resources, metadata, hinting & defaults, context, and more.
Once Blueprints are created, anyone can use them to generate Terraform and submit a pull request through existing change management tooling such as GitHub or GitLab.
Guardrails
Guardrails are infrastructure policies, integrated into both your existing configuration and deployment processes. Defined by security, ops, and cloud teams, they prevent Terraform that violate your company’s policies from ever being merged.
Consider Access Control Lists on S3 buckets that inadvertently have caused many a data breach: with a Resourcely Guardrail preventing the creation of ACLs, merging Terraform that created an S3 bucket with an ACL would be automatically flagged and routed for approval - preventing a common data breach vector.
With Guardrails, stop misconfiguration from ever making it into production.
New Features Available
Foundry
In legacy tools, creating templates for deploying infrastructure and policies that govern the configuration of that infrastructure can require in-depth expertise. Terraform modules for templating and Rego/OPA for policy-making and enforcement are convoluted, hard to build with, and nearly impossible to maintain.
Resourcely’s Foundry is a simplified user interface for creating and managing templates (Blueprints) and policies (Guardrails). We’ve embedded metadata about most common cloud services, which means that you don’t need to constantly reference documentation or update your modules when new versions are released.
With Foundry, customizing the rules and frameworks that your team uses for configuration is fast, simple, and user-friendly.
Really, policy language for cloud infrastructure configuration
While Foundry is a GUI, under the covers Resourcely Guardrails are powered by a SQL-like policy language called Really. Unlike existing policy language, it is easy to both read and write Really - making cloud policies effective rather than an underutilized burden.
Writing Really within the Resourcely client is now easier than ever with automatic linting, autocomplete & suggestions, and a variety of preconfigured Guardrails. Read more about Really in our announcement blog.
Editing Resources
Over time, configuration requirements for a business will change. Users can now edit the resources that they create from Resourcely, regardless of a PR’s status. Editing can be applied to resource PRs in open, closed, or merged status.
Our new edit feature puts full lifecycle management into the hands of users, making sure that users aren't going through one-way doors and ensuring that their investments in secure defaults are durable.
Shopping Cart
Given Resourcely Blueprints can be modularized and reference each other, we have created the Shopping Cart to give users a simplified way of building the infrastructure that they need. Instead of using a monorepo Terraform module, the Shopping Cart allows developers to choose the discrete services that they need with built-in relationships, context, and dependencies.
Coming soon
The Resourcely team isn’t slowing down - we’ve got some key additions upcoming, and we're looking for design partners.
Campaigns
🚨Design partners wanted 🚨
Building Blueprints and Guardrails can help mitigate incidents and speed engineering teams when deploying infrastructure, but what about infrastructure that was created outside of Resourcely?
Campaigns is a feature that we’re building now, that will support automatic remediation of Terraform that doesn’t meet your standards as defined in Blueprints and Guardrails. Campaigns will identify and propose a PR fixing code that doesn’t match a Blueprint you have identified, or identify and propose a PR fixing code that violates Guardrails you have defined.
We’re actively looking for design partners to build this feature. If you are interested in the ability to automatically define standards, identify exceptions to those standards, and remediate the infrastructure exceptions, we’d like to talk to you.
Integrations
Resourcely now supports over 3,200 cloud services across providers like AWS, Azure, GCP, HashiCorp, GitHub, GitLab, ConductorOne, Spacelift, Snowflake, Datadog, JumpCloud, Snowflake, Okta, Terrateam, and more.
Check out our full integrations hub, and let us know which one you’d like to see next!
Customers
Over the last year we partnered with forward-thinking companies as early access customers. Every one of them is shipping new infrastructure configuration constantly, and as a result were experiencing misconfiguration: deleted resources, oversized servers, overly permissive roles, and more. Today we want to highlight one of them and the progress they have made:
Fortune 200 FinTech
One of our early access customers is a Fortune 200 FinTech with hundreds of engineers on staff. They struggled with inconsistent Terraform that at best was wasting significant time in building & reviewing, and at worst was accidentally deleting key cloud resources and causing externally-facing incidents.
Resourcely Guardrails were implemented across 60 applications, ensuring that the Terraform being pushed to production meets their requirements and protecting the integrity of their systems.
Blueprints are used to give developers an “easy button” for deploying infrastructure, without having to be experts in the variety of cloud services this company uses. They recently rolled out Blueprints access to all of their Terraform repos: over 3,800 of them!
With Resourcely, engineering teams at this FinTech are shipping without fear of causing destructive action, reducing incidents and speeding developer velocity.
Unified configuration platform
Resourcely is a leap forward in infrastructure, powering a secure-by-default strategy that helps teams ship faster and avoid costly incidents. Featuring two powerful, tightly integrated concepts (Blueprints and Guardrails) surrounded by a hard-to-build supporting architecture, this novel collection of tooling allows for security, ops, and platform teams to centralize their configuration control, while giving engineers an experience they enjoy by embedding natively into existing change management and deployment workflows.
The Resourcely platform is a new way of controlling & managing configuration proactively that doesn’t disrupt your current development practices - this is why Resourcely is the world’s first configuration platform.
You can read more about the problem that Resourcely solves on the recently published blog: Why we built Resourcely, and stay tuned over the next 2 weeks for more product content and announcements!
Get started with Resourcely today
Resourcely is the best way to put a stop to your misconfiguration woes causing incidents and wasting developer time. Get started by requesting your account, or kicking off your POC.
