Tools
DeepSource vs Pulumi IaC
DeepSource or Pulumi IaC? Their plans monthly and yearly, the capabilities their makers state, security and latest updates, side by side — read from the makers' own pages.
In short
- Both: Runs commands, Reviews pull requests, Command line, Self-hosted, API
- Only DeepSource states: Knows the whole codebase
- Only Pulumi IaC states: Inline completion, Official SDKs
DeepSource
DeepSource reviews code changes for bugs, security issues, dependencies, secrets, coverage, and infrastructure misconfigurations.
Plans
Team
- $24 per user/month
- $30 per user/month
- Unlimited repositories
- Unlimited pull request reviews
- Unlimited code formatting runs
- AI Review and Autofix™
- OSS Dependency Scanning
- Support for monorepos
Enterprise
Price on request
- Access to Enterprise Cloud
- Self-hosted deployment
- BYOK for AI Review
- Single Sign-On (SSO)
- Priority support with SLA
- Dedicated account manager
Open Source
Free
- Unlimited public repositories
- Unlimited team members
- 1,000 pull requests reviewed/month
- AI Review: Pay-as-you-go
- Autofix™: Pay-as-you-go
- 1,000 automated code formatting runs/month
Prices checked 2026-09-25 on the maker’s page.
Capabilities
- Knows the whole codebase — “Scan your entire existing codebase and track code health and security hotspots over time.” source
- Runs commands — “GraphQL API, open-source CLI, and real-time webhooks for integrating DeepSource into your workflows.” source
- Reviews pull requests — “Catch bugs, anti-patterns, and security vulnerabilities on every pull request.” source
- Command line — “GraphQL API, open-source CLI, and real-time webhooks for integrating DeepSource into your workflows.” source
- Self-hosted — “Self-hosted deployment” source
- API — “full GraphQL API and real-time webhook events.” source
Latest updates
- Reachability analysis for Java
DeepSource SCA now runs reachability analysis on Java projects built with Maven.
- Enterprise Server v5.0.2 (v5.0.2)
DeepSource SCA now runs on monorepos. AI Review expanded to ten languages. Enterprise Server now supports the Kubernetes Gateway API.
- Upgrades to AI Review Engine
AI Review has new underlying models, improved analysis pipelines, two review tiers, mention-triggered runs, and processed LOC billing.
Pulumi IaC
Pulumi IaC lets teams define, deploy, test, and manage cloud infrastructure using general-purpose programming languages.
Plans
Free
Free
- 1 user
- IaC state management
- Pulumi Deployments
- Basic Pulumi ESC
- Unlimited projects, stacks, and environments
- Up to 500 workflow minutes
Essentials
- $40 /month
- Includes 40 Credits
- Up to 500 managed resources
- Unlimited users
- Secure collaboration and CI/CD
- Neo code reviews and Slack integration
- Resource Search and Property Search
Pro
- $400 /month
- Includes 400 Credits
- Up to 2,000 managed resources
- SAML/SSO and advanced RBAC
- Organization-managed policy enforcement
- Preventative policies
- Custom policy packs
Enterprise
- $2,000 /month
- Includes 2,000 Credits
- Up to 4,750 managed resources
- Self-hosting available
- Automatic group & user sync (SCIM)
- Unlimited custom policy packs
- Policy remediation
Prices checked 2026-09-24 on the maker’s page.
Capabilities
- Inline completion — “Get autocomplete, type checking, and all your favorite IDE features.” source
- Runs commands — “Run integration tests against ephemeral environments.” source
- Reviews pull requests — “Neo code reviews and Slack integration” source
- Command line — “Use it at the command line, in app code, or in CI/CD pipelines.” source
- Self-hosted — “or self-host if required.” source
- API — “Embed Pulumi in your app.” source
- Official SDKs — “Our CLI, APIs, SDKs, and Kubernetes operator ensure your config is always accessible.” source
Security
- SOC 2 Type II — “The Pulumi platform employs industry best practices for security and is SOC 2 Type II certified.” source
- SOC 2 — “The Pulumi platform employs industry best practices for security and is SOC 2 Type II certified.” source
Latest updates
- Set Up Cloud OIDC From the Pulumi CLI
The Pulumi CLI added the `pulumi env setup` command for guided OIDC onboarding with AWS, Azure, and Google Cloud.
- Pulumi Kubernetes v4.34.0: CRDs as provider extensions (v4.34.0)
Pulumi Kubernetes v4.34.0 added the `--extension` flag to extend the provider with Kubernetes CRD manifests.
- Pulumi Context API: query your infrastructure as a graph
Pulumi launched the read-only Context API in public preview, connecting managed and discovered resources, stacks, and their relationships in a graph.