Terracotta vs ChatGPT Plugins

Terracotta is an Infrastructure as Code governance tool that audits every pull request before merge, checking Terraform and OpenTofu changes against live cloud resources, remote state, and your team's governance policies. It installs as a GitHub or GitLab app, posts findings in the PR thread, and builds a tamper-evident audit trail regulators can export. The product targets platform engineering teams that need security, drift, cost, and compliance checks without rewriting CI pipelines.

Static scanners like Checkov or tfsec lint HCL syntax and known misconfigurations, but they never compare a plan to what is actually running in AWS. Terracotta closes that gap by correlating code, Terraform state, and live resources so drift, cross-PR conflicts, and hidden blast radius show up before anyone clicks merge. Its guardrails are written in plain English rather than Rego or Sentinel, which lowers the bar for teams that lack a dedicated policy-as-code engineer.

DevOps leads and platform engineers at regulated shops use Terracotta to block public S3 buckets, open SSH rules, and unapproved cost spikes at review time instead of in production. Security and compliance teams get a fleet-wide dashboard with drift posture, policy compliance rates, and exportable records for SOC 2 or HIPAA audits. Developers keep working inside GitHub or GitLab because findings arrive as PR comments, not another portal to check.

Beacon, Terracotta's in-PR chat assistant, answers questions about specific findings using context from the repo, plan output, and drift reports. The Platform tier adds unlimited drift repos, IAM and blast-radius analysis, Slack notifications, and a command center dashboard for $49 per engineer per month. Enterprise customers can run Terracotta self-hosted with SSO, SAML, and custom integrations for HCP Terraform or CircleCI.

OpenAI follows an iterative deployment philosophy, and as part of this approach, it is gradually releasing plugins for ChatGPT. The purpose of this gradual release is to study the real-world use of the plugins, assess their impact, and identify any safety and alignment challenges that may arise. Getting these aspects right is essential for OpenAI to achieve its mission.

Since the launch of ChatGPT, users have expressed interest in having access to plugins, and many developers are experimenting with similar ideas. OpenAI is initially rolling out plugins to a small set of users and plans to gradually increase access as it learns more. After an alpha period, API users who want to integrate plugins into their products will also have access. OpenAI is excited to build a community that will help shape the future of the human-AI interaction paradigm.

Developers who have been invited off the waitlist can use OpenAI's documentation to build a plugin for ChatGPT. Once the plugin is created, it is listed in the prompt shown to the language model, along with documentation that instructs the model on how to use each one. The first set of plugins has been created by Expedia, FiscalNote, Instacart, KAYAK, Klarna, Milo, OpenTable, Shopify, Slack, Speak, Wolfram, and Zapier.