# CFEngine vs NixOS / Nix

**Leader by vioscaleAI score:** NixOS / Nix

| Attribute | CFEngine | NixOS / Nix |
|---|---|---|
| **vioscaleAI score** | 49.1 (63% (medium)) | 54.6 (51% (medium)) |
| activity.commits_last_30d | 63 | 100 |
| adoption.dependent_repos | 0 | 0 |
| adoption.github_stars | 538 | 17,860 |
| content.faq | `[{"answer":"Provides automated configuration deployment and continuous enforcement of desired system state across large-scale infrastructures, with capabilities for security hardening and compliance verification. Available in open-source community and commercial enterprise editions. It is indexed under Configuration Management Tools.","source":"https://cfengine.com","question":"What is CFEngine?","confidence":0.6},{"answer":"CFEngine does not publish its prices. Pricing is quoted on request, across 2 plans (Community Edition and Enterprise Edition), so the figure depends on your seat count and requirements. We record this as a pricing-transparency signal rather than guessing a number. Pricing changes often, so verify at source before relying on it.","source":"https://cfengine.com","question":"How much does CFEngine cost?","confidence":0.6},{"answer":"CFEngine supports the web, Windows, Linux and a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://cfengine.com","question":"What platforms does CFEngine support?","confidence":0.6},{"answer":"Yes. CFEngine can be deployed cloud / SaaS, on-premise and self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://cfengine.com","question":"Can CFEngine be self-hosted?","confidence":0.6}]` | `[{"answer":"Nix enables reproducible, isolated package builds and declarative system configurations, ensuring that package installations cannot break existing systems and allowing rollback to previous versions. It is indexed under Configuration Management Tools.","source":"https://nixos.org","question":"What is NixOS / Nix?","confidence":0.6},{"answer":"NixOS / Nix is open source, so it can be self-hosted and used at no licence cost. It is released under the LGPL-2.1 licence. Pricing changes often, so verify at source before relying on it.","source":"https://nixos.org","question":"Is NixOS / Nix free to use?","confidence":0.6},{"answer":"NixOS / Nix supports Linux and a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://nixos.org","question":"What platforms does NixOS / Nix support?","confidence":0.6},{"answer":"Yes. NixOS / Nix can be deployed cloud / SaaS and self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://nixos.org","question":"Can NixOS / Nix be self-hosted?","confidence":0.6},{"answer":"We have independently confirmed GDPR for NixOS / Nix. Certifications we do not list are ones we have not been able to verify from public sources, which is not the same as NixOS / Nix not holding them. Always confirm compliance directly before you rely on it.","source":"https://nixos.org/community/teams/security","question":"What security certifications does NixOS / Nix have?","confidence":0.7},{"answer":"Yes. NixOS / Nix is published under the LGPL-2.1 licence, a copyleft licence, so check its terms before embedding it in a closed-source product. Licence terms can change between releases, so verify against the repository for the version you intend to use.","source":"https://github.com/NixOS/nix","question":"Is NixOS / Nix open source?","confidence":0.95},{"answer":"NixOS / Nix is available worldwide. The vendor is headquartered in the Netherlands.","source":"https://nixos.org","question":"Where is NixOS / Nix available?","confidence":0.75}]` |
| deployment.options | `{"self_hosted":true}` | `{"cloud":true,"self_hosted":true}` |
| description.long | A configuration management platform that automates IT infrastructure operations, enforces security policies, and enables compliance across systems. | A package manager and system configuration tool that uses functional programming principles to ensure reproducible builds and deployments work consistently across different machines and environments. |
| features.capabilities | `{"model":"both","hosting":"both","language":"CFEngine policy language","idempotent":true,"architecture":"agent","desired_state":true,"windows_support":true,"content_registry":true,"open_source_core":true,"policy_compliance":true,"enterprise_edition":true}` | `{"hosting":"self","language":"Nix","idempotent":true,"architecture":"declarative_os","desired_state":true,"masterless_mode":true,"windows_support":true,"content_registry":true,"open_source_core":true,"cloud_provisioning":true}` |
| integrations.count | 2 | - |
| integrations.list | `[{"name":"Git"},{"name":"Docker"}]` | - |
| language.primary | C | C++ |
| license.spdx | - | LGPL-2.1 |
| market.availability | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | `{"hqCountry":"NL","primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"linux":true,"windows":true}` | `{"cli":true,"mac":true,"linux":true,"windows":true}` |
| pricing | `{"type":"hybrid","plans":[{"free":true,"name":"Community Edition","summary":"Free, open source","features":["GitHub source access","Community support"],"description":"Open source under GPL v3, runs on Linux","contactSales":false},{"free":false,"name":"Enterprise Edition","summary":"Commercial with enterprise features","features":["Inventory & compliance reports","Web UI (Mission Portal)","APIs","Alerts & dashboards","Enhanced platform support"],"description":"Commercial license, runs on Windows and Linux","contactSales":true}],"summary":"Free open-source community edition or commercial enterprise edition","freeTier":true,"sourceUrl":"https://cfengine.com","retrievedAt":"2026-08-14T12:11:00.175Z"}` | `{"type":"open_source","sourceUrl":"https://nixos.org","retrievedAt":"2026-10-13T15:12:22.888Z"}` |
| pricing.free_tier | yes | yes |
| pricing.model | freemium | open_source |
| pricing.price_level | low | free |
| pricing.transparent | no | yes |
| reliability.status_page | - | yes |
| security.disclosure_policy | yes | yes |
| security.gdpr | - | yes |
| security.scorecard | 6.9 | 6.2 |
| security.trust_center | https://cfengine.com/blog/2022/security-holiday-calendar-part-1/ | https://nixos.org/community/teams/security |
| security.vulnerabilities | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Fcfengine%2Fcore&per_page=100","last_12m":0,"max_severity":null}` | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=conda&package_name=nix&per_page=100","last_12m":0,"max_severity":null}` |

## Capabilities (Configuration Management Tools)

| Capability | CFEngine | NixOS / Nix |
|---|:--:|:--:|
| **Core** |  |  |
| Architecture | Agent-based | Declarative-OS |
| Push / pull model | Both | - |
| Config language | CFEngine policy language | Nix |
| **Deployment** |  |  |
| Masterless mode | - | ✓ |
| Hosting | Cloud + self-hosted | Self-hosted only |
| **Correctness** |  |  |
| Idempotent | ✓ | ✓ |
| **Model** |  |  |
| Desired-state declarative | ✓ | ✓ |
| **Ecosystem** |  |  |
| Content registry | ✓ | ✓ |
| **Platform** |  |  |
| Windows support | ✓ | ✓ |
| **Scope** |  |  |
| Cloud provisioning | - | ✓ |
| **Governance** |  |  |
| Policy / compliance | ✓ | - |
| **Commercial** |  |  |
| Enterprise edition | ✓ | - |
| **Licensing** |  |  |
| Open-source core | ✓ | ✓ |

*Source: vioscaleAI. Generated 2026-10-16T21:45:17.867Z. "-" = undocumented, not absent.*