# BOSH vs Puppet

**Leader by Vioscale score:** BOSH

| Attribute | BOSH | Puppet |
|---|---|---|
| **Vioscale score** | 62.4 (78% (high)) | 47.2 (58% (medium)) |
| activity.commits_last_30d | 100 | 0 |
| adoption.dependent_repos | 131 | 12,289 |
| adoption.github_stars | 2,077 | 7,922 |
| deployment.options | `{"cloud":true,"on_prem":true,"self_hosted":true}` | `{"cloud":true,"hybrid":true,"on_prem":true,"air_gapped":true,"self_hosted":true}` |
| description.long | A tool chain for automating the release engineering, deployment, and ongoing management of complex distributed services. It supports multiple cloud platforms and can manage itself through self-hosting. | Infrastructure automation tool that maintains consistent configurations across on-premises, hybrid, cloud, and edge environments through continuous enforcement of desired state. Automatically detects and corrects configuration drift, enforces compliance policies, and generates audit-ready documentation. |
| features.capabilities | `{"model":"push","hosting":"self","language":"YAML","idempotent":true,"architecture":"declarative_os","desired_state":true,"masterless_mode":false,"windows_support":true,"content_registry":true,"open_source_core":true,"policy_compliance":false,"cloud_provisioning":true,"enterprise_edition":false}` | `{"hosting":"both","idempotent":true,"architecture":"agent","desired_state":true,"windows_support":true,"content_registry":true,"open_source_core":true,"policy_compliance":true,"cloud_provisioning":true,"enterprise_edition":true}` |
| integrations.count | 5 | 13 |
| integrations.list | `[{"name":"UAA"},{"name":"CredHub"},{"name":"OpenStack"},{"name":"vCloud"},{"name":"Amazon S3"},{"name":"Google Cloud Storage"},{"name":"Azure Storage"}]` | `[{"name":"ServiceNow"},{"name":"VMware"},{"name":"Argo CD"},{"name":"Jenkins"},{"name":"Dynatrace"},{"name":"Datadog"},{"name":"New Relic"},{"name":"Splunk"},{"name":"Grafana"},{"name":"Prometheus"},{"name":"Tenable Nessus"},{"name":"CIS Benchmarks"},{"name":"DISA STIG"}]` |
| language.primary | Ruby | Ruby |
| license.spdx | Apache-2.0 | Apache-2.0 |
| market.availability | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"cli":true,"linux":true,"windows":true}` | `{"cli":true,"mac":true,"web":true,"linux":true,"windows":true}` |
| pricing | `{"type":"open_source","freeTier":true,"sourceUrl":"https://bosh.io/","retrievedAt":"2026-08-21T13:45:40.182Z"}` | `{"type":"hybrid","plans":[{"free":true,"name":"Core","summary":"Free for <25 nodes","features":["Stable, secure, vendor-supported builds","Hardened binaries and packages","Vendor-backed SLAs"],"description":"Free tier for developers and small deployments","contactSales":false,"includedLimits":{"nodes":"<25"}},{"free":false,"name":"Enterprise","summary":"Custom pricing for 25+ nodes","features":["Web-based console interface","Role-based access control","Infrastructure management across cloud and on-premises","CI/CD pipeline tooling","ServiceNow integration"],"minSeats":25,"description":"Scalable automation for complex hybrid infrastructure","contactSales":true},{"free":false,"name":"Advanced","summary":"Custom enterprise pricing","features":["AI-powered infrastructure insights","Event-driven workflows","Automated vulnerability remediation","Priority support","Security baseline enforcement"],"description":"Enterprise platform with AI-driven insights and event-driven automation","contactSales":true}],"summary":"Free tier for <25 nodes; custom pricing for larger deployments","currency":"USD","freeTier":true,"sourceUrl":"https://www.puppet.com/pricing","retrievedAt":"2026-08-14T13:46:01.968Z"}` |
| pricing.free_tier | yes | yes |
| pricing.model | open_source | commercial |
| pricing.price_level | free | low |
| pricing.transparent | yes | no |
| release.cadence_days | 6 | - |
| release.history | `[{"url":"https://github.com/cloudfoundry/bosh/releases/tag/v283.1.6","date":"2026-08-20T03:50:27Z","type":"stable","version":"v283.1.6"},{"url":"https://github.com/cloudfoundry/bosh/releases/tag/v283.1.5","date":"2026-08-18T00:55:12Z","type":"stable","version":"v283.1.5"},{"url":"https://github.com/cloudfoundry/bosh/releases/tag/v283.1.4","date":"2026-08-13T12:05:33Z","type":"stable","version":"v283.1.4"},{"url":"https://github.com/cloudfoundry/bosh/releases/tag/v283.1.3","date":"2026-08-01T16:43:01Z","type":"stable","version":"v283.1.3"},{"url":"https://github.com/cloudfoundry/bosh/releases/tag/v283.1.2","date":"2026-07-24T08:38:03Z","type":"stable","version":"v283.1.2"},{"url":"https://github.com/cloudfoundry/bosh/releases/tag/v283.1.1","date":"2026-07-17T05:30:11Z","type":"stable","version":"v283.1.1"},{"url":"https://github.com/cloudfoundry/bosh/releases/tag/v283.1.0","date":"2026-07-13T17:49:26Z","type":"stable","version":"v283.1.0"},{"url":"https://github.com/cloudfoundry/bosh/releases/tag/v283.0.0","date":"2026-07-09T21:32:09Z","type":"stable","version":"v283.0.0"},{"url":"https://github.com/cloudfoundry/bosh/releases/tag/v282.1.17","date":"2026-06-26T01:19:54Z","type":"stable","version":"v282.1.17"},{"url":"https://github.com/cloudfoundry/bosh/releases/tag/v282.1.16","date":"2026-06-18T05:49:45Z","type":"stable","version":"v282.1.16"},{"url":"https://github.com/cloudfoundry/bosh/releases/tag/v282.1.15","date":"2026-06-11T15:05:55Z","type":"stable","version":"v282.1.15"},{"url":"https://github.com/cloudfoundry/bosh/releases/tag/v282.1.14","date":"2026-06-04T23:55:18Z","type":"stable","version":"v282.1.14"},{"url":"https://github.com/cloudfoundry/bosh/releases/tag/v282.1.13","date":"2026-05-26T08:57:46Z","type":"stable","version":"v282.1.13"},{"url":"https://github.com/cloudfoundry/bosh/releases/tag/v282.1.12","date":"2026-05-15T19:42:41Z","type":"stable","version":"v282.1.12"},{"url":"https://github.com/cloudfoundry/bosh/releases/tag/v282.1.11","date":"2026-05-08T23:20:28Z","type":"stable","version":"v282.1.11"},{"url":"https://github.com/cloudfoundry/bosh/releases/tag/v282.1.10","date":"2026-05-05T17:47:12Z","type":"stable","version":"v282.1.10"},{"url":"https://github.com/cloudfoundry/bosh/releases/tag/v282.1.9","date":"2026-05-01T16:41:36Z","type":"stable","version":"v282.1.9"},{"url":"https://github.com/cloudfoundry/bosh/releases/tag/v282.1.8","date":"2026-04-15T18:50:07Z","type":"stable","version":"v282.1.8"},{"url":"https://github.com/cloudfoundry/bosh/releases/tag/v282.1.7","date":"2026-04-09T09:35:47Z","type":"stable","version":"v282.1.7"},{"url":"https://github.com/cloudfoundry/bosh/releases/tag/v282.1.6","date":"2026-03-26T22:07:25Z","type":"stable","version":"v282.1.6"}]` | `[{"url":"https://github.com/puppetlabs/puppet/releases/tag/8.10.0","date":"2024-10-22T15:14:58Z","type":"stable","version":"8.10.0"},{"url":"https://github.com/puppetlabs/puppet/releases/tag/7.34.0","date":"2024-10-22T15:15:06Z","type":"stable","version":"7.34.0"},{"url":"https://github.com/puppetlabs/puppet/releases/tag/8.9.0","date":"2024-09-06T18:10:41Z","type":"stable","version":"8.9.0"},{"url":"https://github.com/puppetlabs/puppet/releases/tag/7.33.0","date":"2024-09-06T16:46:58Z","type":"stable","version":"7.33.0"},{"url":"https://github.com/puppetlabs/puppet/releases/tag/7.32.1","date":"2024-07-24T23:37:24Z","type":"stable","version":"7.32.1"},{"url":"https://github.com/puppetlabs/puppet/releases/tag/8.8.1","date":"2024-07-24T02:51:57Z","type":"stable","version":"8.8.1"},{"url":"https://github.com/puppetlabs/puppet/releases/tag/8.8.0","date":"2024-07-22T16:34:24Z","type":"stable","version":"8.8.0"},{"url":"https://github.com/puppetlabs/puppet/releases/tag/7.32.0","date":"2024-07-22T16:35:24Z","type":"stable","version":"7.32.0"},{"url":"https://github.com/puppetlabs/puppet/releases/tag/8.7.0","date":"2024-06-10T16:51:52Z","type":"stable","version":"8.7.0"},{"url":"https://github.com/puppetlabs/puppet/releases/tag/7.31.0","date":"2024-06-10T16:52:12Z","type":"stable","version":"7.31.0"},{"url":"https://github.com/puppetlabs/puppet/releases/tag/8.6.0","date":"2024-04-10T18:21:24Z","type":"stable","version":"8.6.0"},{"url":"https://github.com/puppetlabs/puppet/releases/tag/7.30.0","date":"2024-04-10T20:53:11Z","type":"stable","version":"7.30.0"}]` |
| security.disclosure_policy | yes | - |
| security.scorecard | 6.9 | 3.5 |
| security.vulnerabilities | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=rubygems&package_name=bosh-template&per_page=100","last_12m":0,"max_severity":null}` | `{"count":23,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=rubygems&package_name=puppet&per_page=100","last_12m":0,"max_severity":"CRITICAL"}` |

## Capabilities (Configuration Management Tools)

| Capability | BOSH | Puppet |
|---|:--:|:--:|
| **Core** |  |  |
| Architecture | Declarative-OS | Agent-based |
| Push / pull model | Push | - |
| Config language | YAML | - |
| **Deployment** |  |  |
| Masterless mode | ✗ | - |
| Hosting | Self-hosted only | Cloud + self-hosted |
| **Correctness** |  |  |
| Idempotent | ✓ | ✓ |
| **Model** |  |  |
| Desired-state declarative | ✓ | ✓ |
| **Ecosystem** |  |  |
| Content registry | ✓ | ✓ |
| **Platform** |  |  |
| Windows support | ✓ | ✓ |
| **Scope** |  |  |
| Cloud provisioning | ✓ | ✓ |
| **Governance** |  |  |
| Policy / compliance | ✗ | ✓ |
| **Commercial** |  |  |
| Enterprise edition | ✗ | ✓ |
| **Licensing** |  |  |
| Open-source core | ✓ | ✓ |

*Source: Vioscale. Generated 2026-09-01T16:45:07.231Z. "-" = undocumented, not absent.*