What is GoCD?

A self-hosted server for building and automating complex deployment pipelines with built-in workflow visualization, multi-stage orchestration, and detailed change tracking across the deployment lifecycle.

Independently observed

GoCD pricing

Plans, per-tier features and add-ons, dated and linked to live pricing. Pricing changes often; always verify at source before you rely on it.

Pricing as of verify at live pricing ↗Independently observed
Open sourceFree tier

Open Source

Free
Free

Apache License 2.0, sponsored by Thoughtworks Inc.

What GoCD does

The capabilities that matter for ci/cd tools, normalised so it lines up with every alternative. “-” means we haven't confirmed it, not that it's missing.

Deployment
Hosting
Cloud + self-hosted
Self-hosted runners
Core
Config-as-code pipelines
-
Matrix / parallel builds
Build
Container-native builds
Performance
Build caching
-
Security
Secrets management
-
Delivery
Deployment environments & approvals
-
Ecosystem
Reusable actions / marketplace
Independently observed

Platform & deployment

Independently observed
Platforms
  • CLI
  • macOS
  • Web
  • Linux
  • Windows
Deployment
  • Cloud / SaaS
  • Self-hosted

Integrations (7)

Independently observed
  • Kubernetes
  • Docker
  • AWS
  • GitHub
  • Git
  • Atlassian Stash
  • Gerrit

Security & compliance

Known vulnerabilities: 0 (0 in the last 12 months) sourcea count reflects scale & disclosure, not quality

GoCD alternatives

Other ci/cd tools we track, ranked by the same independent score.

All GoCD alternatives, ranked →

Independent · unbought · dated

The Vioscale score: one lens on the evidence

Not user reviews and not a paid placement: a confidence-weighted blend of the independent signals below (adoption, activity, security posture, and more), which you can sort and re-weight yourself. Vendors can correct their listing but can never move their rank, and stars are weighted low as a vanity metric. It is one way to read the evidence for GoCD, not the verdict.

Balanced composite 50 / 100
medium · 50%
Signal contributions to the composite score
SignalScoreWeightContributionEvidence
Development activity630.116.8
Capabilities670.095.9
Release cadence500.073.4
Security score390.083.2
Stars730.032.0
Dependent projects270.071.8
Integrations260.051.4
Security posture00.180.0-
Package downloads00.150.0-
Developer Q&A activity00.050.0-

Computed . Re-weight it by intent, or see the full method.

All data & sourcesshow ↓

Every value we hold, with its source, retrieval date, and confidence. This is the evidence behind the score: don't trust it, verify it.

Activity

AttributeValueEvidence
Commits last 30d100mediumsource · 2026-08-26 · 65%

Adoption

AttributeValueEvidence
Github stars7,430highsource · 2026-08-26 · 90%
Dependent repos41highsource · 2026-08-26 · 85%

Features

AttributeValueEvidence
CapabilitiesHosting: both · Marketplace: Yes · Matrix builds: Yes · Container native: Yes · Self hosted runners: Yesmediumsource · 2026-08-16 · 60%

Integrations

AttributeValueEvidence
Count7mediumsource · 2026-08-16 · 60%

Language

AttributeValueEvidence
PrimaryJavahighsource · 2026-08-26 · 90%

License

AttributeValueEvidence
SpdxApache-2.0highsource · 2026-08-26 · 95%

Pricing

AttributeValueEvidence
Free tierYesmediumsource · 2026-08-16 · 60%
Modelopen_sourcemediumsource · 2026-08-16 · 60%
Price levelfreemediumsource · 2026-08-16 · 60%

Release

AttributeValueEvidence
Cadence days90mediumsource · 2026-08-26 · 70%
History20 itemsmediumsource · 2026-08-26 · 70%

Security

AttributeValueEvidence
Scorecard3.9highsource · 2026-08-26 · 90%
VulnerabilitiesCount: 0 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=maven&package_name=cd.go.plugin%3Ago-plugin-api&per_page=100 · Last 12m: 0highsource · 2026-08-26 · 90%