Provision your entire fleet from the command line.
DevRig is the CLI developers already love for bootstrapping a laptop. DevRig Enterprise scales it to thousands of machines — with policy, identity, audit and drift control your security team signs off on.
Trusted by platform teams at
Built for the whole fleet
Everything the CLI does — under central control
The same declarative configs your developers run locally, now enforced, audited and observable across every machine in the company.
Zero-touch onboarding
New hires unbox, sign in, and DevRig provisions the whole workstation — tools, dotfiles, secrets and access — before their first standup.
Policy & compliance
Define golden configs as code. Enforce disk encryption, OS baselines and required agents across every machine, continuously.
SSO & SCIM
Wire DevRig to Okta, Entra or Google. Provisioning follows your directory — access is granted on hire and revoked on offboard.
Fleet-wide audit logs
Every provision, override and secret access is recorded and streamable to your SIEM. Answer "who changed what" in seconds.
Drift detection & repair
DevRig watches for configuration drift and reconciles machines back to their declared state — or alerts you when it can’t.
Remote & air-gapped
Provision laptops shipped straight to a home office, or run fully on-prem behind your own artifact mirror. No blockers.
Config as code, secured
One manifest. Every machine. Fully attested.
Declare the workstation you want once. DevRig Enterprise signs it, distributes it, and proves compliance on demand — no snowflake laptops, no manual runbooks.
- Version-controlled policies reviewed like any other PR
- Secrets brokered at runtime from Vault — never baked into images
- Continuous attestation streamed to your SIEM and GRC tools
# fleet baseline — reviewed & signed policy: baseline enforce: disk_encryption: required os_min: "macOS 14.4" agents: [osquery, vpn, edr] provision: toolchains: [node, go, docker] secrets: source: vault://eng/runtime write_to_disk: false identity: sync: okta group: engineering
CLI vs. Enterprise
The open-source CLI is free forever. Enterprise adds the control plane.
| Capability | DevRig CLI | Enterprise |
|---|---|---|
| Declarative machine configs | ||
| One-command local setup | ||
| Centralized fleet dashboard | — | |
| SSO / SCIM directory sync | — | |
| Compliance policy enforcement | — | |
| Audit logs & SIEM export | — | |
| Drift detection & auto-repair | — | |
| SLA-backed support | — |
Give every engineer a perfect machine on day one.
See DevRig Enterprise provision a real fleet in a 30-minute demo — with your identity provider and policies.
brew install devrig · free CLI, no account required