Adam Jacob: Right. It’s not like I’m – so what do I know…? And I’ve spent the whole time thinking about it, so I have thoughts. So the first is that when HashiCorp started, and sort of as they grew, for them – and I think they’ve said this publicly – open source wasn’t a thing that they thought about as part of their business model. It was a thing they did, because that’s what all the infrastructure software that they used was, right? They used Chef, or they use Puppet… Mitchell never really liked Chef. But they used Puppet, they used Chef a little bit, they used all kinds of open source stuff… And that market was saturated with open source offerings and tools. So in order to get into that market, it would have been tough to build those tools in and not have them be open source. So they open sourced them. They chose the MPL, which is fine. The MPL, Mozilla Public License, applies to basically individual file copyleft.
Then the next piece of it is how exactly is it that you grow with your own community? So if you think about who’s contributing, how open were you to contributions, what was it like – you know, they’ve never been particularly open to contributions. That was – from the jump, it was sort of either Mitchell’s show, Armon’s show; they made decisions, and you sort of followed them. You can see this with the feature OpenTofu just shipped around state encryption. I don’t know when the first time there was a PR to Terraform that had state encryption for the local data, but it was a long time ago. And that PR was rejected, because it didn’t fit in with the business model. It wasn’t better for HashiCorp. That was a proprietary feature; they want you to use Vault, they wanted you to like tie into the suite… And so you know, somebody had written the code, and done the work, and sent the PR, and got the finger, right? [possibly referring to PR #28603, which was closed by the contributor; see also hashicorp/terraform #9556 —Ed.]
[41:46] That’s a pretty common refrain when you look across the board on their projects, right? They just – they hired teams, those teams worked on the software… This is always what happens. It’s not rare that the primary funder of the project is where all the engineers come from. I promise I’m getting to the answer to your question.
So from the beginning, they were pretty closed. I think one way to think about it would have been you could have started out being more open. So Terraform – there’s a plethora of competitors now in the infrastructure as code space. There’s Pulumi, there’s the CDK, there’s the Azure Resource Manager stuff… Microsoft even built another one, whose name I forget; I’m so sorry, I probably should remember. But there’s a lot of them. And part of the reason that all those things exist is because that ecosystem was so closed, right? So it did grow – HashiCorp, Terraform, lots of people used it, tons of stuff happening there… But if you wanted to build a business on top of it, if you wanted to extend it, if you wanted to collaborate in some way, if you wanted to build a derivative… A lot of those avenues felt pretty closed, because I think they were closed, right? And it meant that as the market grew, there was more space for competition, because it’s not like there was any part of the market that HashiCorp didn’t want. And the growth of that technology and the growth of their open source market covered up the low ASP.
So HashiCorp goes to market, hugely successful with Terraform… Let’s call them base hits on everything else, except for Vault, which was another home run. And Vault’s a home run for ASP, right? So Vault’s more expensive than the others, it’s a security product… like, ka-pow! So now you’ve got Terraform – homerun; Vault – homerun. Everything else is slugging along, right?
They had a press release not that long ago, yesterday maybe, where they were like rebranding the HashiCorp cloud platform, and they were talking about how Nomad was a part of it… And then it was like “But you’ve got to run it yourself. Wa-wa-wa.”
So all of that – the alternate universe theory would have said “What if HashiCorp had been more open? What if they had actually been open to, let’s call it, open governance? What if they had been open to allowing more people to use Terraform? And what if Terraform was a product they produced and they produced exclusively, and they could decide that the side of the market they wanted was the top of the market, instead of the bottom?”, which is the part of the market they care about most. So they could have decided that the price for Terraform initially, for a large swath of the longtail, was essentially free. And they could have decided that the top of that market was very expensive, closer to the ASP that they want now, or that they had hoped to capture… And while they perhaps wouldn’t have grown absolute share as quickly, I would argue that their ASP would be stronger now. And perhaps they could have driven more standardization around Terraform, for example, than they did.
Vault’s a great example of this. Vault’s ubiquitous in the enterprise, lots of people use it, which is awesome… But it didn’t… never became like a standard, in the way that like – think about like Elasticsearch or Redis. Like Redis, pfffft, Redis is like – the protocol of Redis is the protocol for caching. And that didn’t happen for Terraform, it didn’t happen for Vault either. And it’s because they were a little too closed. There was not enough of that ecosystem; you didn’t see the AWS Vault provider. You didn’t see an Azure Vault provider. GCP Vault provider. If you did, Vault would be the standard by which we all get our certificates all the time. But we don’t.
And so now they’re in a much more vulnerable position later in the game. Because now as the game gets later, you’re like “Okay, growth’s slowing. We’ve kind of reached saturation. Competition got harder. Now that competition isn’t with ourselves or with a derivative of us. It’s not “We’re competing with AWS to be the best Vault provider.” It’s “We’re competing with AWS’es proprietary key management systems in order to be better than Vault”, which they aren’t. Vault’s not better than AWS’es proprietary key management stuff; it’s not better than Azure’s proprietary key management stuff, or GCP’s, right?
[46:15] So it’s maybe better if I have lots of stuff in lots of places… But Amazon will get you there. If you’re JPMC [JPMorgan Chase], or you’re Chase, or – they’re the same thing. You’re Citibank, or you’re whatever, you’ll find a way, if that’s what you want to do.
So I think the alternate universe theory is one that says “They should have built a distribution that they sold for money, that was their brand, and they should have operated like an open upstream. And they should have let the rest of the market fill in the gaps.” But that would have implied leaving that space, and having a long-term strategy about how the right-hand side of that dollar equation turns into a giant business. I don’t think they had that strategy. I think the strategy was “This thing’s great. Everybody’s using it. Mash the gas!”, which was my strategy, too. That’s how Chef speed-ran every possible open source business model. We were like “People like it. Goooo!!!” Which – it’s a strategy in arrears only. It’s only when you look in the rear-view mirror that suddenly you’re like “How strategic was I?” In the moment, we weren’t being strategic. You just went for it. It’s not like Mitchell and Armon raised that first round of venture capital, and suddenly they became CFOs, with like a genius – right, no. No. They built software and sold. It was awesome. And they didn’t even think too much about selling it, because it was killing it. Because if you kill it, and the open source part works, you’re picking up leads like leaves; they’re everywhere. You’re just doing stuff, you’re like “Oh, my God. We got an inbound lead from Fidelity, and it just happened. I didn’t talk to them. They just showed up in my life, and were like “Hey, we’re using a bunch of this Terraform stuff. What do you got?” It’s pretty awesome, until it’s not.
And I think that misalignment of long-term incentives is how it could have been different. I think you could have aligned the long-term incentives, not really changed much about the open source part of your growth trajectory, and kept that right-hand side high. And if you had, then I think you’d be able to remain in the community, and of the community, in the way that you hoped you could have.