IBM Owns Terraform Now. So Pulumi Learned Its Language.
A quiet feature launch in January 2026 tells you more about where infrastructure as code is heading than any market share number floating around Google right now.
In this article
The real story behind the “gap is closing” headline
The three shocks that reshaped IaC since 2023
The numbers you can actually check yourself
What the people building these tools are saying
The case against the “Pulumi is winning” narrative
Quick answers to what people are searching
If you searched “terraform vs pulumi market share 2026” and landed here expecting a clean percentage, you’ve found the same wall we hit. A number like “Terraform owns 72% of the market” is repeated across dozens of sites this year. It’s also attributed to the CNCF’s 2024 survey, which, when you actually open the PDF, contains no IaC market share question at all. It covers Kubernetes, GitOps, and service mesh, not Terraform versus Pulumi versus OpenTofu. That statistic doesn’t exist. It’s a content farm number that got copied enough times to look true.
Here’s what does exist, and it’s a better story anyway: in January 2026, Pulumi started shipping native support for HashiCorp Configuration Language, the actual syntax Terraform users write in. It also began hosting Terraform and OpenTofu state files directly inside Pulumi Cloud, a direct shot at HashiCorp’s own hosted product. That’s not a rumor. That’s a company built on the opposite philosophy from Terraform (write infrastructure in Python or TypeScript, not a config language) deciding the config language was worth absorbing anyway.
Why this matters if you manage infrastructure: You no longer face an all or nothing rewrite to leave Terraform. Pulumi’s bridge means you can keep existing Terraform or OpenTofu state under new governance while migrating components on your own schedule. That changes the calculus for any team stuck deciding what to do about HashiCorp’s licensing shift.
The Real Story: Why Pulumi Started Speaking HCL
Pulumi’s founder and CEO, Joe Duffy, didn’t dress up the reasoning. Asked why a multi-language platform would add support for the one language it was built to avoid, he pointed to demand from Terraform users looking for an exit ramp after HashiCorp’s 2023 licensing change.
“That time has come for HCL.” Joe Duffy, Founder and CEO, Pulumi, via InfoQ, January 17, 2026
In a separate interview a few weeks later, Duffy went further, saying the Terraform relicense had noticeably pushed existing Terraform users to look at Pulumi (The New Stack, February 2026). Take that with the appropriate grain of salt. He’s the CEO selling the migration story. But the product decision itself, shipping a language Pulumi spent seven years arguing against, is hard evidence regardless of who’s narrating it.
That decision doesn’t happen in a vacuum. It happens because of what came before it.
The Three Shocks That Actually Reshaped IaC
Strip away the SEO noise and this isn’t really a two horse race between Terraform and Pulumi. It’s a three way story, and OpenTofu is the part most “Terraform vs Pulumi” articles conveniently skip.
| Event | Date | What actually happened |
|---|---|---|
| Terraform relicensed to BSL | August 2023 | HashiCorp moved Terraform off the open source MPL 2.0 license onto the Business Source License, restricting competitors from reselling managed Terraform products. |
| OpenTofu forks Terraform | September 2023 | Founded under the Linux Foundation by Spacelift, env0, Harness, Scalr, and others, days after the BSL announcement. |
| HashiCorp vs OpenTofu dispute | April 2024 | A cease and desist alleging code theft was publicly rebutted line by line. Linux Foundation’s Jim Zemlin backed OpenTofu; InfoWorld’s Matt Asay reversed his initial position after reviewing the rebuttal. |
| IBM acquires HashiCorp | February 27, 2025 | A confirmed $6.4 billion deal, per IBM’s own newsroom. Terraform now sits inside IBM’s automation portfolio next to Vault, Consul, and Nomad. |
| OpenTofu joins CNCF | April 2025 | Accepted at the Sandbox tier, giving it vendor neutral governance credibility a single company fork rarely earns this fast. |
| Pulumi adds native HCL support | January 2026 | Announced in private beta, targeting general availability in Q1 2026. Confirm current GA status before assuming it’s fully live. |
Notice what’s missing from most coverage: the CLOUD Act and data jurisdiction angle. If your organization stores Terraform state inside HCP Terraform, that platform now sits under IBM, a U.S. company. For teams with GDPR obligations or data residency requirements, that’s worth a conversation with legal, even if it’s not the deciding factor.
The Numbers You Can Actually Check Yourself
Forget the disputed percentages. The most defensible signal in this whole debate is public, live, and anyone can verify it in thirty seconds on GitHub.
| Tool | GitHub stars | Trend |
|---|---|---|
| Terraform | ~48,749 | Still the largest, unsurprising given its head start |
| OpenTofu | ~29,000 | Roughly doubled from ~22,400 in under two years |
| Pulumi | ~25,378 | Now trailing OpenTofu, despite Pulumi being nearly six years older |
That last row is the one nobody’s writing about. OpenTofu launched in September 2023. Pulumi launched in 2017. And OpenTofu has already pulled ahead of it on developer mindshare by star count. If you wanted one sentence to summarize where developer attention is actually going, that’s it, and it’s not the sentence most headlines are using.
Two infrastructure orchestration vendors back this up with real usage data, not surveys. Spacelift reports that roughly half its platform deployments now run OpenTofu instead of Terraform. Scalr reports OpenTofu at around 63% of runs and 72% of newly created workspaces, up from about 56% of new workspaces earlier in 2026. That second number matters more than the first: new workspace share reflects fresh decisions being made today, not legacy projects nobody’s touched since 2022.
On the provider ecosystem, the gap that used to favor Terraform by three to one has narrowed sharply. OpenTofu’s registry now lists more than 3,900 providers and 23,600 modules against Terraform’s roughly 4,800 providers, closer to a 20% gap than the old blowout. Pulumi’s native registry is smaller at around 1,800 packages, but its “Any Terraform Provider” bridge lets it generate a typed SDK from essentially any Terraform or OpenTofu provider, which closes that distance more than the raw numbers suggest.
What The People Building These Tools Are Actually Saying
Matt Gowie, founder of the IaC consulting firm Masterpoint and a former Terraform contributor, told TechTarget that starting in January 2026 he began actively steering client work toward OpenTofu over licensing objections. By his account, all but one of roughly eight client engagements that year ended up on OpenTofu.
Sebastian Stadil, CEO of Scalr and an OpenTofu core member, put the licensing contrast bluntly when OpenTofu shipped native state encryption, a feature the open Terraform CLI still lacks. Worth remembering he runs a company that competes directly with HashiCorp’s commercial products, so weigh the framing accordingly.
The Case Against The “Pulumi Is Winning” Narrative
Not everyone buys the displacement story, and the skeptical case deserves real airtime rather than a token paragraph at the bottom.
“I have not seen any of the predicted tsunami of large businesses dumping HashiCorp Terraform for OpenTofu.” Andi Mann, Global CTO and Founder, Sageable, via TechTarget
Mann’s read, that adoption is real but concentrated in smaller, open source first shops rather than sweeping the enterprise, lines up with a fact most “Terraform is dying” articles leave out: HashiCorp’s last public quarter before the IBM acquisition closed showed revenue up 15% year over year and customer count up 10% among accounts spending six figures. That’s not a company in freefall.
Our read: the loudest part of this story, GitHub stars and vendor platform data, tells you where developer enthusiasm and new project decisions are trending. It does not yet tell you that large regulated enterprises are ripping out production Terraform at scale. Those are two different claims, and a lot of 2026 coverage blurs them into one.
There’s also a small base problem worth flagging directly for anyone quoting a “45% growth” style figure for Pulumi or OpenTofu. A percentage jump looks dramatic against a small starting number. Pulumi’s last verified customer count sits around 2,000 (a 2023 figure, likely stale by now), against HashiCorp’s roughly 4,700 paying customers reported in 2024. Growth rate and absolute scale are not the same story, and reporting on this topic tends to conflate them.
One more open thread: the HashiCorp and OpenTofu legal dispute over alleged code copying was never resolved in public record. It went quiet after OpenTofu’s rebuttal, but “no further communication” isn’t the same as “resolved.” Any team betting heavily on OpenTofu’s long term legal footing should know that history exists.
Quick Answers
Is Terraform still open source?
No, not in the traditional sense. HashiCorp moved Terraform from the open source MPL 2.0 license to the Business Source License 1.1 in August 2023. You can still view, run, and self-host it for free, but competitors can’t resell managed Terraform products without a commercial license.
What’s the actual difference between Terraform and Pulumi?
Terraform uses HCL, a declarative configuration language built specifically for infrastructure. Pulumi lets you write infrastructure in Python, TypeScript, Go, C#, or Java, giving you real loops, functions, and IDE tooling that HCL doesn’t offer.
Is OpenTofu a safe replacement for Terraform?
For most teams, yes. It’s a Linux Foundation governed fork of Terraform 1.6, fully open source under MPL 2.0, and largely drop-in compatible. Most migrations just swap the
terraform binary for tofu with no code changes required.
Who owns Terraform now?
IBM. The acquisition closed February 27, 2025, for $6.4 billion. Terraform now sits inside IBM’s automation software lineup alongside Vault, Consul, and Nomad.
Can Pulumi actually use Terraform providers?
Yes. Pulumi’s bridging mechanism lets it use existing Terraform and OpenTofu providers directly, generating a typed Pulumi SDK from any provider already in either registry.
Where This Goes Next
What you now know that most search results won’t tell you straight: the “market share” framing dominating this topic is mostly unverifiable noise traced back to a survey that never asked the question. The real signal is quieter. OpenTofu is pulling developer attention away from both Terraform and Pulumi. Pulumi is responding by absorbing the one thing that used to separate it from Terraform entirely. And IBM’s ownership has turned a licensing dispute into a jurisdiction and governance question that has nothing to do with syntax.
Three things worth watching over the next six to eighteen months: whether Pulumi’s HCL support reaches full general availability and actually moves enterprise workloads, whether HashiCorp’s new capped free tier (effective March 31, 2026) pushes more teams toward OpenTofu, and whether a named enterprise like Fidelity’s reported OpenTofu migration gets an official confirmation rather than staying a secondhand claim.
If you’re deciding what to do with your own Terraform footprint right now, don’t anchor on a percentage you can’t trace back to a source. Anchor on what your team can actually observe: your provider coverage, your state hosting requirements, and how much of your organization’s new work is already quietly running on
tofu instead of terraform.
Subscribe to The Neural Loop for the next update on this story, including GA confirmation on Pulumi’s HCL support and fresh registry numbers as they land.
More posts
-
Denmark CPR Data Breach: How a Company’s Legitimate Access Exposed 8.8 Million Records
Nobody picked the lock in the Denmark CPR data breach. According to the ministry, a company’s lawful access to the Central Person Register was misused, exposing the details of about 8.8 million people. Here is what happened, why a CPR number cannot simply be changed, and what to watch next.
-
Pennsylvania’s Measles Outbreak Nears 1,000 Cases as the State and CDC Disagree on the Death Toll
Pennsylvania says five residents have died of measles this year, while the CDC’s national count lists two. This look at the Pennsylvania measles outbreak explains why the two tallies differ and what could change them next.
-
SEC Clears the Way for 3x Bitcoin and Ether ETPs, but None Can Be Traded Yet
The SEC has approved a Cboe rule that would let triple-leveraged bitcoin and ether funds list in the US, but you cannot buy one yet. Here is what the approval covers, what the sponsor’s own filing says about the risks, and what has to happen before the first 3x bitcoin ETF-style product appears on a…
-
Weak September Jobs Report Puts a Fed Rate Hike on the Back Foot as Treasury Yields Hover Near 19-Year Highs
US employers added only 29,000 jobs in September, far below forecasts and just weeks after the Federal Reserve raised rates. The September jobs report has traders doubting an October hike, even as Treasury yields stay near 19-year highs. Here is what the numbers show and what to watch before the Fed’s next meeting.
-
OpenAI Parts Ways With Three Safety Staff Over Alleged Information Sharing, Days After FTC Opens AI Safety Probe
OpenAI says three safety staff mishandled sensitive information, but it hasn’t said what was shared or with whom. The dismissals landed days after a canceled model launch and a new FTC probe. Here is what is confirmed, what is disputed, and what to watch next.
-
Can Britain Rejoin the EU? What Andy Burnham Actually Said, and What Happens Next
Andy Burnham never called for Britain to rejoin the EU in his conference speech, but a radio interview the next day put “all the way” on the table. Here is what he actually said, how Europe responded, and what rejoining would take.
-
OpenAI’s AI Agents Reached Government Websites in Two Countries. Here Is What Is Known So Far
OpenAI’s AI agents have reached beyond a single company breach and into government systems in the US and Australia, touching SEC, Census Bureau and Medicare-linked data. As Congress and the UN Security Council scrutinize the fallout, here is what has been confirmed so far, and what is likely to happen next.