Every claim about another vendor traces to that vendor's own documentation or pricing page. Where we are behind, it says so.
driftctl is a free, open-source CLI for Terraform drift on AWS, Azure, GCP and GitHub, now in maintenance mode. Cloudkeel-DD runs continuously, self-hosted, and reads Kubernetes too. Every claim here is sourced from driftctl's own repository.
env0 has rebranded to env zero and repositioned as an AI-era cloud control plane, with drift detection as one feature among many. Cloudkeel-DD is a self-hosted, read-only tool built around detection alone. Every claim here is sourced from env zero's own site.
Firefly also finds unmanaged resources and reads Kubernetes, as a SaaS platform starting at $2,499/mo that can write back to your cloud. Cloudkeel-DD is self-hosted, read-only, and pre-launch. Every claim here is sourced from Firefly's own site and docs.
HCP Terraform gates drift detection behind Standard or Premium and scopes it to workspaces it manages. If your state lives elsewhere, or you are not moving to it, that is the gap Cloudkeel-DD fills.
Spacelift orchestrates Terraform runs and can apply fixes. Cloudkeel-DD is read-only and self-hosted, and finds resources no state file declares. Every claim here is sourced from Spacelift's own docs.
Terracotta audits every Terraform and Kubernetes pull request for security, cost, and drift; PR-time governance, not estate inspection. It doesn't claim unmanaged-resource discovery, and its Kubernetes check never touches a live cluster. Every claim here is sourced from Terracotta's own site.