tools

Pulumi Neo

Pulumi Neo is an AI infrastructure agent that plans, executes, governs, and explains cloud infrastructure work.

Pulumi Neo lets platform and infrastructure teams describe cloud tasks in natural language. It can provision and update resources, generate Pulumi code, investigate failures, check compliance, optimize costs, and show multi-cloud context.

Neo supports approval workflows, audit trails, CLI and IDE integrations, pull-request workflows, and Slack. Pulumi Cloud Free does not include Neo; paid plans meter Neo usage at $3 per million tokens, while Enterprise supports bring-your-own model provider keys.

Features

Run infrastructure tasks from natural-language commands
Configure human approval and autonomy controls
Preview, log, and reverse infrastructure actions
Investigate failed deployments and configuration problems
Scan infrastructure for policy violations and misconfigurations
Generate Pulumi code in TypeScript, Python, Go, and more
Use Neo through the CLI, VS Code, Cursor, Claude Code, and Windsurf
Manage Neo tasks through the Pulumi Cloud REST API

Use cases

Provision multi-cloud infrastructure from a natural-language request
Diagnose a failed deployment and explain the likely cause
Review infrastructure changes in pull requests
Find expensive or underused cloud resources
Scan cloud infrastructure for compliance violations
Schedule recurring infrastructure maintenance tasks

Pros

Cons

Latest updates

2026-10-26 Manage Pulumi ESC change requests from the CLI
The pulumi env change-request command lets users review and work with ESC change requests from the CLI.
2026-10-21 AI infrastructure on tap with the Pulumi AICR provider
Pulumi introduced the AICR provider for managing AI infrastructure.
2026-10-19 Assign policy groups by stack and account tags
Policy groups now support tag matching to manage stack and cloud account membership.
2026-10-15 Pulumi ESC now issues OIDC tokens for any service
Pulumi ESC can now issue short-lived OIDC tokens for any service that accepts them.
2026-10-14 Scale your team's use of AWS IAM account access manager with Pulumi
Pulumi now supports managing AWS IAM account access manager as code through its AWS and AWS Native providers.

Capabilities

Reviews pull requests — “Neo code reviews” source
VS Code — “Neo works inside VS Code, Cursor, Claude Code, and Windsurf via MCP server, right where you already code.” source
Command line — “Neo in the CLI” source

Get it

Documentation

Security

SOC 2 Type II — “The Pulumi platform employs industry best practices for security and is SOC 2 Type II certified.” source
SOC 2 — “The Pulumi platform employs industry best practices for security and is SOC 2 Type II certified.” source

Pricing

Starting price: $40/mo
Prices checked: 2026-11-05

Free

1 user
IaC state management
Pulumi Deployments
Basic Pulumi ESC
Unlimited projects, stacks, and environments
Up to 500 workflow minutes

Essentials

$40 /month

Unlimited users
Secure collaboration and CI/CD
Neo code reviews and Slack integration
Resource Search and Property Search
OIDC and org access tokens
Webhooks

Pro

$400 /month

SAML/SSO and advanced RBAC
Organization-managed policy enforcement
Preventative policies
Custom policy packs
Neo scheduled tasks
Internal developer platform (IDP)

Enterprise

Price on request

Self-hosting available
Conformance packs for CIS, CIS Kubernetes, CMMC, HITRUST, ISO 27001, NIST, and PCI DSS
Automatic group & user sync (SCIM)
Automated audit log export
Unlimited custom policy packs
Policy remediation

Official website