Nobuf

Terraform & OpenTofu Validator

Local IaC review

Map HCL resources and references, review IaC risks, redact Plan JSON, and compare destructive changes.

Paste Terraform or OpenTofu HCL…

Nothing is executed or uploaded. Exact validation still requires initialized modules and provider schemas in the Terraform or OpenTofu CLI.

Ready to review infrastructure code

Load HCL and optional Plan JSON to map resources, mask sensitive evidence and review destructive changes.

How to use it

  1. 01

    Load configuration evidence

    Paste or select HCL files and optionally add a machine-readable Terraform or OpenTofu plan JSON.

  2. 02

    Map configuration and change

    Inventory blocks and references, follow the dependency graph, and review create, update, delete and replacement actions.

  3. 03

    Protect and reproduce

    Apply declared sensitive masks, compare plans, export a redacted review and run exact validation with generated CLI commands.

Frequently asked questions

Does this replace terraform or tofu validate?

No. Exact validation requires the CLI, initialized modules and provider schemas. This browser tool performs syntax-aware inventory and conservative static checks.

Can it run plan or apply?

No. It accepts existing JSON plan evidence but never installs providers, contacts remote state, requests cloud credentials or changes infrastructure.

Can Plan JSON contain secrets?

Yes. Declared before_sensitive and after_sensitive paths are masked, but providers or configuration can place sensitive values elsewhere. Review every plan and export carefully.

Does the editor estimate cloud cost?

No. Prices, provider semantics, discounts and runtime usage change independently of static HCL, so the page does not present speculative cost totals.

Keep working with other focused browser utilities.

All tools

Local by default; remote data sources are clearly disclosed.

© 2026 Nobuf

Nobuf

Fast, local-first utilities powered by your browser.