It's official: Firefly now supports VMware vSphere.

Starting today, teams running vSphere on-premises (alongside AWS, Azure, GCP, OCI, or any other cloud) can bring their entire hybrid estate into a single, governed, recovery-ready control plane. Every resource is visible, every environment is codified, and every deployment is managed through Firefly's unified platform: whether it lives in your data center or the public cloud.

Why vSphere, and Why Now?

The conversation around infrastructure in 2026 has shifted. "Cloud first" has given way to something more pragmatic: hybrid by design.

According to Firefly's State of IaC 2026 report, 63% of organizations are running multi-cloud or hybrid environments. But for a large share of those organizations, hybrid isn't just "two public clouds." It's a mix of public cloud and on-premises infrastructure, much of it running on VMware vSphere.

vSphere remains the backbone of enterprise virtualization for a reason. It delivers predictable performance for latency-sensitive workloads, addresses data gravity and regulatory requirements that make full cloud migration impractical, and provides the operational consistency that large IT organizations depend on. For many enterprises, certain workloads simply aren't moving to the public cloud. And they shouldn't have to.

But that creates a governance challenge that most teams haven't solved: how do you apply the same IaC discipline, drift detection, and recovery readiness to your on-premises vSphere environment that you apply to AWS or Azure? How do you treat your data center as part of your cloud estate, not a silo next to it?

That's exactly what Firefly solves.

The Hybrid Cloud Governance Gap

For teams running vSphere alongside public cloud providers, the operational reality is often painful. On-premises infrastructure has historically been managed through point-and-click tools: vCenter dashboards, manual runbooks, tribal knowledge. Meanwhile, cloud environments get Terraform, GitOps workflows, CI/CD pipelines, and automated compliance checks.

The result is two operating models running in parallel. Two governance frameworks. Two recovery approaches. And when something goes wrong in the data center, the answer is often: "We'll figure it out."

With Firefly's vSphere support, that gap closes.

Firefly extends the same automated cloud resilience it delivers across AWS, Azure, GCP, OCI, Kubernetes, and SaaS platforms to your vSphere environment, giving hybrid teams a consistent, unified system of record for their entire estate.

What Firefly Delivers for vSphere and Hybrid Teams

1. Automated IaC Generation for On-Premises Infrastructure

Teams running vSphere can already manage infrastructure as Terraform code through the VMware vSphere Terraform provider - provisioning VMs, configuring networking, managing datastores, and more. Firefly takes that foundation further.

Firefly scans your vSphere environment, discovers every resource - managed, unmanaged, or drifted, and automatically turns unmanaged resources into compliant, production-ready Terraform or OpenTofu directly from your live infrastructure. No manual codification. No guesswork about what's actually running.

For teams with years of accumulated vSphere infrastructure that was never codified, this is transformative. Your entire on-premises estate - VMs, networking configurations, storage policies - becomes version-controlled, auditable, and reproducible.

Firefly connects through the Firefly Private Connector- a lightweight relay deployed in your network, so there's no need to expose vCenter publicly. Setup takes minutes from the Firefly integrations panel, and supports vCenter 7.0 and later.

2. A Unified Control Plane Across Hybrid and Multi-Cloud

Firefly gives hybrid teams something they've never had before: a single, real-time inventory of everything running across vSphere, public cloud, Kubernetes, and SaaS. Every resource is classified. Every change is captured in real time, whether it came through the vCenter console, CLI, or Terraform.

This unified visibility is the foundation that makes cloud resilience possible in hybrid environments. You can't recover an environment you can't fully see, and for most organizations, the on-premises portion of their estate is the least visible of all.

3. Drift Detection and Remediation Across the Hybrid Boundary

In hybrid environments, drift doesn't just happen in the cloud. On-premises vSphere environments are often the most drifted, because they've historically lacked the automated governance tooling that cloud environments take for granted.

Firefly's drift detection extends to your vSphere environment, surfacing configuration changes that happened outside of IaC - manual VM modifications, network configuration changes, storage policy updates - and flagging them in real time. This works through Firefly's integration with the vCenter Events API, which continuously monitors VM lifecycle events, power state changes, and cluster events, so nothing slips through between scans. Firefly then automatically remediates drifts and brings resources back to their desired state, on-premises and in the cloud.

4. Governance and Compliance for the Full Hybrid Estate

With 600+ built-in compliance and security policies, Firefly ensures your vSphere environment meets the same governance standards as your public cloud infrastructure. Teams can enforce tagging standards, cost controls, end-of-life policies, and custom rules across every resource in the hybrid estate, and automatically remediate violations before they escalate.

For organizations managing vSphere on-premises for compliance reasons - data locality, regulatory requirements, contractual obligations - Firefly's governance layer provides the audit-ready evidence those environments demand, continuously and automatically.

5. Hybrid Disaster Recovery and Cyber Resilience: No More Siloed Runbooks

This is where the stakes are highest, and where most hybrid teams are most exposed.

Most organizations have separate DR plans for on-premises and cloud. The cloud side might be reasonably well automated. The on-premises side? Often manual runbooks, out-of-date documentation, and a quiet assumption that it won't be needed.

That assumption is exactly what ransomware and cyberattacks exploit. On-premises vSphere environments (think: less instrumented, less automated, and rarely tested for recovery) are among the most vulnerable parts of the hybrid estate. When a ransomware attack hits, the absence of IaC-based infrastructure snapshots often means there's nothing to recover from. No rebuild at all.

Firefly changes that equation by giving teams a real-time view of their resilience posture and recovery readiness across the entire hybrid estate, allowing teams to: 

  • Fix misconfigurations and maintain recovery-readiness
  • Validate backups, replication, and failover paths across on-premises and cloud
  • Expose single points of failure before they cause downtime
  • Rollback to a last-known-good state across your hybrid estate
  • Maintain audit-ready evidence for DORA, SOC 2, and ISO compliance automatically 

In addition, Firefly continuously snapshots the infrastructure as deployment-ready IaC, so when an outage or cyberattack hits, your on-premises environment can automatically be rebuilt with all dependencies - VM configurations, networking, storage - in minutes, not hours.

Only 11% of teams describe their DR posture as tested and validated. For hybrid environments, where the on-premises side is often the least instrumented, the real number is likely lower. Firefly changes that.

6. IaC-Driven Migration and Workload Mobility

For teams actively migrating workloads from vSphere on-premises to the public cloud, or evaluating whether to follow through with that, Firefly simplifies one of the hardest parts: standardizing the process.

Firefly's codification engine generates production-ready Terraform from your existing on-premises vSphere resources, then uses that code to redeploy workloads onto AWS, Azure, GCP, or any other supported cloud, with automatic dependency mapping, redundancy detection, and clean, compliant output ready to apply from day one.

This works in the other direction too. Teams keeping certain workloads on-premises for performance or compliance reasons can manage those workloads with the same IaC practice, CI/CD integration, and policy enforcement as their cloud environments, without treating the data center as a second-class citizen.

Adapting to the Hybrid Reality in 2026

The hybrid cloud isn't a transition state on the way to full cloud adoption. For most enterprises, it's the permanent operating model, and it's getting more complex, not less.

According to the State of IaC 2026 data:

  • 63% of organizations run multi-cloud or hybrid environments
  • Only 11% describe their DR posture as tested and validated
  • 30% have little to no confidence that they could restore their infrastructure within RTO

For hybrid teams running vSphere on-premises alongside public cloud, those numbers reflect a specific risk: the on-premises portion of the estate is typically the least governed, the least visible, and the hardest to recover. It's managed with different tools, different practices, and different assumptions than the cloud side. And in an era where ransomware specifically targets on-premises infrastructure precisely because it's harder to recover, that gap is a security one, and it’s a big one.

Adding more public cloud capacity without unifying governance across the hybrid boundary makes all of those numbers worse. With Firefly, you get the same resilience control plane across your entire estate, on-premises vSphere included.

Get Started with Firefly for vSphere

Bringing vSphere into Firefly's automated cloud resilience platform means giving hybrid teams the centralized governance, IaC orchestration, recovery, and cyber resilience capabilities they need, whether their workloads live in the data center, the cloud, or both.

Firefly supports vCenter 7.0 and later. Setup takes minutes via the Firefly Private Connector for on-prem vCenter environments.

  • New to Firefly? Start your 14-day free trial and get full platform access from day one, including vSphere.
  • Already using Firefly? Connect your vSphere environment from the integrations panel.

Want to see it live? Book a 30-minute demo to explore real-time cloud discovery, IaC automation, CRPM, and instant infrastructure recovery across your full hybrid estate.

‍