gtlpanda

AI-powered code reviews purpose-built for Terraform PRs. Catches and explains risky changes like drift, misconfigs, cost impacts, Policy as Code violations, and more. Built specifically to reduce the manual toil of manual reviews of code and plans that platform and DevOps engineers deal with every day.

Hey HN!

We're the cofounders of Terracotta AI, a Y Combinator S23 company. We're building AI-native guardrails for Terraform.

We help platform teams enforce best-practice standards, security, and cost control through natural language in PRs.

If you’ve ever had a Terraform plan blow up your environment because of an exposed secret, an over-permissive IAM role, or a misconfigured resource that slipped past review, you know the pain we're solving for. Senior platform engineers reviewing plan after plan, playing detective with developers, answering a non-stop influx of questions, and when something slips through the pipeline, a PagerDuty call and compliance breathing down your neck is what you get in return.

Right now, most Terraform pipelines rely on static scanners, policy engines, or manual reviews from senior engineers to catch issues. Those take forever to plan, set up, and maintain. Platform teams spend hours deciphering plan diffs, explaining blast radius to other teams, and chasing drift after it hits production.

Terracotta sits in your code source control and acts as a deterministic AI layer across your Infrastructure as Code pipeline.

When a pull request opens, pre-built or custom guardrails (using natural language to create) take action:

-- Analyzes the Terraform diff, plan, and state for risk, drift, and dependency conflicts

-- Runs cost, security, and compliance checks based on your AI-defined policies (“No public S3 buckets”, “All RDS instances must be encrypted”)

-- Summarizes the plan in simple language so reviewers and non-Terraform folks actually understand what’s changing

-- Flags high-risk changes (blast radius, cost spikes, misconfigurations) before they merge

Everything happens before CI/CD, no new runners, no custom pipelines, and no vendor lock-in. Terracotta AI reads your Terraform code, remote state, and cloud metadata contextually, so its reviews are aware of relationships between modules, dependencies, and workspaces in real-time.

We designed this for platform teams that want autonomy and speed without chaos.

You can define AI guardrails using natural language (which we translate into structured enforcement rules) and apply them at a global or per-repo level.

We also simulate deployment behavior. Think of it as a dry-run AI that tells you what will happen when terraform apply runs, including cost deltas and downstream impact.

Under the hood:

-- Deterministic, Terraform-native LLM fine-tuned on Terraform best practice, IaC best practice, compliance, and best practice cloud architecture

-- We perform plan parsing and graph dependency resolution internally — no external API calls to your code

-- Data never leaves your environment; we offer both on-prem and single tenancy deployment in addition to our cloud offering (We're SOC2 Type1/2 certified)

-- Integrates with GitHub, GitLab, and Bitbucket (coming soon) out of the box

We’re not trying to replace Terraform. We’re making it safer and faster to use at scale.

If you want to see it in action, check us out at: https://tryterracotta.com We just launched our self-service beta. 20 PRs for free, no time limit, and no CC information.

You can use our quick start tutorials to get it working in just 5 minutes: https://docs.tryterracotta.com/docs/quick-start-video-tutori...

Would love feedback, especially from folks maintaining multi-repo, mono-repo or multi-team IaC pipelines.

About the team:

I've spent over 15 years in the cloud infrastructure and observability industry, from building cloud infrastructure to deploying multi-cloud AIOps and open-source tooling. Before YC, I was the director of solutions architecture at an AIOps company (acquired by HPE).

My cofounder has over 15 years of experience building gaming, B2C, and Enterprise SaaS and our founding engineer has over 25 years of experience building B2B SaaS and has built and sold 2 startups of his own.

Access code: "opsberry-early-access" Docs: https://docs.opsberry.ai Youtube: https://youtube.com/@opsberryai

We're opening up our platform to the public for free for limited time only. Sign up and start automating your workflows and processes.

Hi all! Carlos from OpsBerry here from YC S23.

About OpsBerry - OpsBerry is a AIOps automation platform for IT Operational workflows. IT Ops, like DevOps and SREs teams, use OpsBerry to automate complex workflows and repetitive processes associated with incident response and, reducing toil, improving system reliability, and overall improving operational efficiency. Connect your favorite scripts, commands, cloud services, and ops tools. Build powerful automations fast with our no-code drag-and-drop workflow builder.

Customize and integrate your very own AI assistants directly into your workflows. Train these AI assistants to take actions and react to critical events, metrics, logs and much more via your automations. Assistants can perform various engineering tasks like root cause analysis, analyze data, troubleshoot logs, gather diagnostics, write post mortem, retrospectives, and so much more. It's like having a 24/7 on-call engineering that extends your operations capabilities, reducing burnout and giving your teams back time to work on business impact projects rather than dealing with unplanned work all the time.

Here is a quick demo of our product in action: https://youtu.be/Fpdall2maz4?si=d5Xw6I6D--x3RZ1l Check out out docs: https://docs.opsberry.ai YC: https://www.ycombinator.com/companies/opsberry-ai

HN has been great to us so far and if anybody has any comments or suggestions, please feel free to let me know! We're aiming to be very responsive to HN feedback, since we’ve found it highly predictive of what infrastructure and operations engineers in general want. Feel free to email me at carlos AT enfra.xyz.

Hey all. Ran technical Ops, DevOps, and support teams over the past 15 years. Loved having runbooks and procedural documentation but never loved writing them. OpsBerry helps you turn write high quality, tailored runbooks in minutes instead of hours. Think of it like Loom for Runbooks.