Economics of HashiCorp Terraform BSL licensing and migration costs

IBM ownership and the BSL constraint

IBM owns Terraform after completing its $6.4 billion acquisition of HashiCorp on February 27, 2025. Terraform 1.6.0 and all subsequent releases use the Business Source License 1.1. This source-available license restricts companies from offering Terraform to third parties on a paid or hosted basis if that service competes with IBM products. Terraform 1.5.7 remains under the Mozilla Public License 2.0. Each version reverts to the Mozilla Public License 2.0 four years after its publication date. For version 1.6.0, this change occurs on October 4, 2027. The BSL 1.1 license prevents competitors from using newer releases, so many vendors must move to OpenTofu, which uses the Mozilla Public License 2.0. The community forked Terraform 1.5 in August 2023 following the announcement on August 10. The OpenTofu project is a CNCF Sandbox project as of April 2025. The OpenTofu manifesto gathered 33,000 GitHub stars. This license change affects companies that host Terraform for customers or include it in managed services. However, internal use by a single organization is permitted. Companies like Spacelift, env0, Gruntwork, Harness, Scalr, and Cloud Posse endorsed the fork.

Feature divergence and RUM pricing

OpenTofu and Terraform diverge on technical features. OpenTofu 1.7 introduced native state encryption for local and remote state. OpenTofu 1.8 allows for early evaluation of variables and locals in the backend configuration. OpenTofu 1.11 added ephemerality and the enabledmeta-argument. The tool also includes the -exclude flag. OpenTofu 1.9 allows users to iterate providers using for_each.

HCP Terraform uses a Resources Under Management (RUM) pricing model. This model bills based on the number of resources in an HCP Terraform-managed state file. Every security group rule, IAM policy, and S3 lifecycle configuration counts as a resource. If you manage 10,000 resources on the Essentials tier, your monthly cost is $978.48. A team with 1,800 resources in the Standard tier pays $846 per month. Small teams with under 500 resources use the enhanced Free tier. Because HCP Terraform bills on hourly peak usage, even a resource that exists for 15 minutes counts as a full hour of billing. Terraform encryption is typically handled via the backend, such as S3, whereas OpenTofu provides native client-side encryption. OpenTofu also maintains its own provider registry.

Migration paths and costs

Migrating from HCP Terraform to an alternative platform involves several technical steps. You must export state from HCP Terraform workspaces using the terraform state pull command. You also need to reconnect repositories and recreate workspace variables. If your workflow relies on Sentinel, you must rewrite policies for the Open Policy Agent engine. The migration from Terraform to OpenTofu is a binary swap for many. You install OpenTofu, run tofu init, and confirm the plan shows no changes. One common problem involves the order of encryption. Because the encryption block resolves earlier in the run lifecycle than variable loading, users with KMS key IDs in a .tfvars file may face intermittent run failures. You can choose a big bang migration or a rolling migration. The big bang approach replaces all references in a single window. Rolling migrations move one environment at a time. To audit your files, use the grep command to find hardcoded registry sources. You can also use the terraform version and terraform workspaces commands to verify your environment.

The migration cost for teams integrated with HCP Terraform remains high.

Do you have enough budget to rebuild your entire policy set?

You should evaluate your provider compatibility before you attempt a switch. OpenTofu is a credible alternative. The cost of Terraform Enterprise for self-hosted users starts from $15,000 per year. Spacelift entry paid tiers for users start at $20,000 per year.