Internal Developer Platform

GoldenPath IDP

A production-grade Internal Developer Platform with governance, automation, and self-service infrastructure: everything your engineering teams need to ship with confidence.

Talk to Us About GoldenPath
Explore GovPort

Capabilities

Governance-first delivery for platform teams

Six pillars that turn policy into repeatable delivery. Each pillar is backed by real artifacts and enforcement logic.

Governance as Code

30+ governance policies encoded as automated gates. Every PR, deployment, and architecture decision runs through deterministic validation, no manual reviews slowing you down.

  • TDD enforcement gates
  • Schema & contract validation
  • Script certification pipeline

Golden Path Workflows

Pre-approved paths through your infrastructure. Developers self-serve from certified templates, scripts, and architectures: innovation within guardrails.

  • 89+ certified scripts
  • Multi-environment promotion
  • Backstage service catalog

Living Documentation

Architecture Decision Records, runbooks, and onboarding guides that stay current through CI validation. Documentation that drifts is documentation that fails.

  • 678+ validated pages
  • 183+ Architecture Decisions
  • Auto-validated links & refs

RAG-Powered Knowledge

Ask questions about your platform in natural language. Hybrid retrieval across documentation, ADRs, and runbooks with source-attributed answers.

  • ChromaDB + Neo4j retrieval
  • Source attribution
  • Multi-provider LLM support

Security-First Design

CodeQL scanning, pre-commit hooks, dependency auditing, and secrets detection, built into the platform, not bolted on.

  • Automated vulnerability scanning
  • Pre-commit security hooks
  • Infrastructure policy enforcement

AI Agent Protocols

Structured protocols for AI-assisted engineering with guardrails, session capture, and deterministic quality gates. AI that follows your rules.

  • Agent execution protocols
  • Session capture & summary
  • Quality gate enforcement

IDP Market Lens

Compare platform choices by fit, cost, evidence, and operating model

This public comparison starts from source-backed metadata and keeps open-source baselines separate from commercial vendors.

Commercial Vendors

Managed products and SaaS platforms assessed by buyer fit, pricing model, rollout effort, and cited public sources.

8 tracked

Port

Managed internal developer portal focused on software catalog, self-service actions, scorecards, and developer workflows.

medium confidence
Cost Model
Public pricing seed captures Free, Basic at $30 per month/seat, Standard at $40 per month/seat, and Enterprise custom pricing.
Best Fit
Mid-market to enterprise platform teams that want a managed portal and have enough service ownership data to model a catalog.
Time to Implement
Initial catalog and scorecard pilot in weeks; mature rollout depends on integrations, ownership cleanup, and workflow governance.
Business Case
Best framed around reducing platform ticket load, improving service ownership visibility, and giving developers governed self-service paths.

Pain Point Alignment

  • service ownership is unclear: Catalog and scorecard workflows can make ownership and readiness visible.
  • developers wait on platform tickets: Self-service actions can shift repeated requests into governed workflows.
  • leadership lacks engineering visibility: Scorecards and catalog metadata can expose operational gaps for leaders.

Tradeoffs

  • Value depends on clean ownership metadata and disciplined catalog modeling.
  • Advanced workflow governance should be validated against the buyer's control requirements.

Last updated: Apr 28, 2026

Citations

Cortex

Commercial developer portal and engineering intelligence product tracked for catalog, scorecard, and engineering visibility use cases.

low confidence
Cost Model
Treat as quote-led until the pricing source is refreshed and normalized; do not publish exact pricing without current capture evidence.
Best Fit
Mid-market and enterprise engineering organizations that want catalog governance and engineering visibility without owning a full open-source portal build.
Time to Implement
Pilot in weeks when service ownership and integration targets are known; longer where catalog data is fragmented.
Business Case
Useful when the buying case centers on service maturity, scorecards, ownership accountability, and platform reporting.

Pain Point Alignment

  • service ownership is unclear: Catalog and scorecard workflows are relevant, but source-backed capability depth must be refreshed.
  • leadership lacks engineering visibility: Engineering intelligence positioning may align with reporting needs after source validation.

Tradeoffs

  • Pricing and capability breadth must be validated from current public pages before firm recommendations.
  • Best-fit depends heavily on existing developer tooling integrations.

Last updated: Apr 28, 2026

Citations

OpsLevel

Commercial service catalog and developer portal product tracked for ownership, scorecard, and production-readiness workflows.

medium confidence
Cost Model
Reviewed pricing evidence shows custom pricing with Standard up to 50 users and Enterprise listed for unlimited users.
Best Fit
Teams with many services and a strong need to standardize ownership, production readiness, and operational maturity.
Time to Implement
Pilot in weeks if service metadata and ownership records are available; rollout expands with scorecard scope.
Business Case
Strongest when the business case is service maturity, operational readiness, and accountability across many teams.

Pain Point Alignment

  • service ownership is unclear: Service catalog use cases directly align with ownership cleanup.
  • leadership lacks engineering visibility: Scorecard and maturity reporting claims need fresh public-source validation.

Tradeoffs

  • Catalog quality work still has to happen internally.
  • Workflow breadth should be compared directly with broader IDP products.

Last updated: Apr 28, 2026

Citations

Atlassian Compass

Atlassian's developer experience and component catalog product, tracked as a commercial IDP option for Atlassian-centered teams.

medium confidence
Cost Model
A public pricing page exists; exact plan details should be quoted only after the pricing target is refreshed.
Best Fit
Teams already standardized on Atlassian workflows that want catalog and developer experience features near Jira and Compass.
Time to Implement
Pilot can be faster inside an Atlassian-heavy environment; broader rollout depends on component ownership and integrations.
Business Case
Best framed around adding service/component visibility to existing Atlassian delivery workflows.

Pain Point Alignment

  • service ownership is unclear: Component catalog workflows may align when ownership lives near Atlassian delivery data.
  • platform APIs are missing or inconsistent: Less suitable as a full platform API abstraction without complementary platform engineering work.

Tradeoffs

  • Fit is strongest for Atlassian-centered organizations.
  • May be less compelling where the buyer wants a vendor-neutral platform control plane.

Last updated: Apr 28, 2026

Citations

Humanitec

Platform Orchestrator product tracked for enterprise platform API, environment, and workload orchestration use cases.

medium confidence
Cost Model
Treat as custom/enterprise pricing until reviewed pricing evidence is promoted.
Best Fit
Platform-mature enterprises that need a platform API/orchestration layer more than a lightweight software catalog.
Time to Implement
Pilot in weeks for a constrained workload path; production rollout depends on platform API design, environment strategy, and governance.
Business Case
Best framed around reducing bespoke deployment paths and standardizing workload configuration through a platform API.

Pain Point Alignment

  • platform APIs are missing or inconsistent: Platform Orchestrator positioning aligns with platform API standardization.
  • developers wait on platform tickets: A well-designed platform API can turn repeated environment requests into self-service flows.

Tradeoffs

  • Requires mature platform ownership and clear workload abstractions.
  • May be overpowered if the primary need is only a service catalog.

Last updated: Apr 28, 2026

Citations

Spacelift

Infrastructure orchestration product tracked where IDP needs intersect with Terraform, OpenTofu, Pulumi, and policy-controlled infrastructure workflows.

high confidence
Cost Model
Reviewed pricing evidence shows a Free plan at $0 and Starter starting at $399 per month.
Best Fit
Platform and infrastructure teams that need governed infrastructure workflows exposed safely to application teams.
Time to Implement
Pilot in weeks for existing IaC workflows; wider adoption depends on policy, module, and environment maturity.
Business Case
Best framed around policy-controlled infrastructure self-service and reducing manual IaC operations.

Pain Point Alignment

  • developers wait on platform tickets: Infrastructure workflow automation can reduce repeated provisioning requests.
  • platform APIs are missing or inconsistent: Works best when paired with a clear platform API or golden-path abstraction.

Tradeoffs

  • Not a direct service-catalog-first IDP peer.
  • Buyer fit depends on IaC standardization and governance needs.

Last updated: Apr 28, 2026

Citations

Mia-Platform

Commercial platform engineering product tracked for enterprise internal platform and developer workflow use cases.

low confidence
Cost Model
No approved official pricing evidence is available; reviewed third-party pricing discovery was rejected.
Best Fit
Enterprise platform teams looking for a packaged platform operating model rather than assembling every capability internally.
Time to Implement
Pilot timing depends on target platform scope, integration requirements, and operating-model maturity.
Business Case
Best framed around standardizing platform capabilities and developer workflows across larger engineering organizations.

Pain Point Alignment

  • platform APIs are missing or inconsistent: Platform-product positioning may align, but capability depth needs fresh source validation.
  • developers wait on platform tickets: Self-service potential depends on implemented workflows and integrations.

Tradeoffs

  • Requires careful scoping against existing platform assets.
  • Public pricing and capability claims should stay low-confidence until refreshed.

Last updated: Apr 28, 2026

Citations

Configure8

Commercial internal developer portal product tracked for catalog, scorecard, and developer self-service comparison.

low confidence
Cost Model
No approved official pricing evidence is available; reviewed third-party pricing discovery was rejected.
Best Fit
Small-to-mid or growing platform teams evaluating managed portal features without committing to a large custom build.
Time to Implement
Pilot in weeks if source integrations and ownership metadata are ready; confidence remains low until docs are refreshed.
Business Case
Best framed around faster catalog and developer portal rollout where internal maintenance capacity is constrained.

Pain Point Alignment

  • service ownership is unclear: Portal/catalog positioning may align after current source validation.
  • developers wait on platform tickets: Self-service fit needs confirmation from refreshed product and docs evidence.

Tradeoffs

  • Lower public-source confidence until docs and pricing discovery are refreshed.
  • Needs direct comparison against Port, Cortex, and OpsLevel for catalog depth.

Last updated: Apr 28, 2026

Citations

Ecosystem Baselines

Open-source or ecosystem reference points used for build-vs-buy analysis, not treated as paid SaaS peers.

3 tracked

Backstage

Open-source developer portal baseline used to reason about build-vs-buy and internal platform ownership.

medium confidence
Cost Model
No vendor SaaS license is implied; total cost comes from internal build, hosting, plugin, and maintenance ownership.
Best Fit
Platform-mature organizations with engineering capacity to own plugins, hosting, governance, and long-term portal operations.
Time to Implement
Prototype can be quick; production-grade rollout commonly depends on internal platform staffing and catalog governance.
Business Case
Best as a build baseline when customization and ecosystem flexibility matter more than managed-product speed.

Pain Point Alignment

  • service ownership is unclear: Can model ownership through a software catalog when the organization commits to metadata quality.
  • Backstage is too much to maintain internally: This is the baseline pain point that commercial products should be compared against.

Tradeoffs

  • Requires sustained internal ownership.
  • Plugin flexibility increases operating and governance responsibility.

Last updated: Apr 28, 2026

Citations

Kratix

Open-source platform orchestration baseline used for platform API and promise/workload abstraction comparisons.

medium confidence
Cost Model
No vendor SaaS license is implied; total cost comes from internal platform engineering, Kubernetes operations, and maintenance.
Best Fit
Platform-mature teams that want to build platform abstractions and have Kubernetes/operator ownership.
Time to Implement
Pilot depends on promise design and cluster/platform maturity; production use requires clear ownership.
Business Case
Best as a build baseline for teams evaluating platform orchestration and developer-facing abstractions.

Pain Point Alignment

  • platform APIs are missing or inconsistent: Promise-style abstractions can become a platform API when the team owns the model.
  • developers wait on platform tickets: Potentially reduces repeated platform requests when promises are well-designed.

Tradeoffs

  • Requires internal platform engineering capacity.
  • Not a catalog-first developer portal replacement by itself.

Last updated: Apr 28, 2026

Citations

Crossplane

Open-source control-plane baseline for infrastructure and cloud-resource abstraction comparisons.

medium confidence
Cost Model
No vendor SaaS license is implied; total cost comes from platform engineering, control-plane operations, and composition maintenance.
Best Fit
Platform-mature infrastructure teams building cloud-resource abstractions and internal control planes.
Time to Implement
Pilot depends on provider scope and composition design; production adoption requires strong platform ownership.
Business Case
Best as a build baseline where the buyer wants cloud infrastructure abstractions behind governed platform APIs.

Pain Point Alignment

  • platform APIs are missing or inconsistent: Compositions can create consistent infrastructure APIs when governed by a platform team.
  • IaC workflows are too complex for application teams: Can hide infrastructure complexity behind curated platform abstractions.

Tradeoffs

  • Not a developer portal by itself.
  • Requires Kubernetes control-plane expertise and operational discipline.

Last updated: Apr 28, 2026

Citations

Architecture Map

How the RAG pipeline fits together

Click any node to see its role, artifacts, and outputs. This map mirrors the GoldenPath governance RAG flow (vector + graph + contract).

Ingestion

2 nodes

Indexing

3 nodes

Retrieval

2 nodes

Synthesis

2 nodes

Selected node

Docs Intake

Ingestion

Role

Governance docs, ADRs, runbooks, policies.

Artifacts

  • docs/10-governance/*
  • docs/adrs/*
  • docs/20-contracts/*

Outputs

  • • raw document set
See GoldenPath details →

Governance Policies

Explore the policies that enforce quality

Expand a policy to see what it enforces and an example gate output. These are representative guardrails used in the GoldenPath delivery pipeline.

Security & Quality

Visible gates, measurable trust

These are the representative security and quality checks we run to protect platform changes. Status reflects our current delivery pipeline.

Enforced

SAST

Static analysis on PRs and main to catch security flaws early.

CodeQL
Enforced

Secrets Detection

Blocks committed secrets and sensitive tokens in CI.

Gitleaks
Enforced

SBOM Generation

Produces a software bill of materials for traceability.

Syft
Enforced

Vulnerability Scan

Scans containers and dependencies for known CVEs.

Trivy
Enforced

Policy Gates

TDD, schema validation, and contract checks block unsafe merges.

Custom CI Gates
Planned

Dependency Audit

Routine dependency audits for license and risk posture.

npm/pip audit

Want the full delivery playbook?

See how GoldenPath connects to governed execution, adoption support, and AI-assisted delivery.

How We Work
Read the Blog
Governance Framework
Talk to Us

CNCF Native

Built on open standards, not vendor lock-in

GoldenPath is built on CNCF Graduated and Incubating projects: battle-tested, community-governed, and portable across any cloud. Your team owns the platform. You're not renting it.

KubernetesGraduated

Platform API & orchestration layer

ArgoCDGraduated

GitOps continuous delivery

BackstageGraduated

Developer portal & service catalog

KyvernoGraduated

Policy enforcement & admission control

PrometheusGraduated

Metrics collection & alerting

GrafanaIncubating

Observability dashboards

Full Stack

Production-grade tools for production-grade platforms.

KubernetesArgoCDKyvernoTerraformBackstagePrometheusGrafanaGitHub ActionsHelmPythonFastAPIChromaDBNeo4jDockerReact

Ready to Build Your Golden Path?

Let's build an Internal Developer Platform that makes your engineering teams unstoppable.

Start a Conversation
Implementation Support