How can we help?

Yes! Policy Engine is completely free for basic use. You can check Terraform code directly from the home page without creating an account. Creating a free account gives you access to check history, custom rules management, and the REST API with generous rate limits.

Your API key is available in your Profile page. After logging in, navigate to Profile and look for the API Key section. You can copy or regenerate your key there. Keep your API key secret — never commit it to version control.

Rate limits vary by account type:

• Anonymous: 10 requests/hour, 50 KB max code size
• Free Account: 100 requests/hour, 500 KB max code size
• Pro: 1,000 requests/hour, 5 MB max code size

If you exceed the limit, you'll receive a 429 Too Many Requests response. Check the Retry-After header to know when to retry.

Policy Engine supports Terraform HCL 0.12 and above (using the modern HCL2 syntax). The parser handles resource blocks, attribute values, nested blocks, and list/map types. Terraform 0.11 (legacy syntax) is not fully supported.

Log in and navigate to Manage Rules. You can create rules in two ways:

• Form-based: Select resource type, condition, and value — no coding required
• Code-based: Write a Python function for complex logic

Custom rules are applied alongside built-in rules in all subsequent checks. See the Documentation for examples.

Absolutely! Policy Engine has a REST API specifically designed for CI/CD integration. You can use a simple curl command in your GitHub Actions workflow, GitLab CI, Jenkins, or any other CI tool.

Add your API key as a secret environment variable and call POST /api/check with your Terraform code. See our CI/CD Integration guide for a ready-to-use GitHub Actions example.

Results are saved automatically for logged-in users. You can view all past checks in your Check History page, including detailed violations, timestamps, and resource counts.

Anonymous checks (from the home page) are not saved. Create a free account to keep a permanent record.

If you signed up with email, use the Forgot Password link on the Login page to receive a reset link.

If you signed up with Google OAuth, simply click Login with Google — no password needed. For other issues, email us at support@tfgaurd.com.