.png)
As Fullbay prepared to scale from a monolith to dozens of services, leadership needed confidence that infrastructure, delivery, and security would not become bottlenecks. Manual processes created unacceptable risk and limited the team’s ability to move quickly. Harness enabled Fullbay to standardize delivery, enforce governance through code, and give engineers self-service capabilities without losing control.
Fullbay transformed a traditional monolithic application? to cloud-native microservices with Harness
Fullbay, a SaaS platform serving the heavy-duty repair industry, was modernizing its entire technology stack as it transitioned from a traditional monolithic application to a cloud-native, serverless, microservices-based architecture. To support this transformation, the team needed a unified platform that could standardize infrastructure, automate deployments, integrate security early, and operate with enterprise-grade sophistication at startup scale.
“Infrastructure as Code is the foundation of our platform. If it’s not defined in code, it doesn’t exist.”
- John Norton, Chief Architect
Industry
SaaS / Fleet & Maintenance Software
Location
United States
Products Used
- Infrastructure as Code Management (IaCM)
- Continuous Integration (CI)
- Continuous Delivery (CD)
- Security Testing Orchestration (STO)
Challenge
Before Harness, both software and infrastructure delivery were completely manual. Application deployments required engineers to SSH directly into production EC2 instances and run git pull commands, often repeating the process across multiple servers. Rollbacks followed the same manual pattern, pulling a different branch or SHA. There were no CI pipelines, no standardized packaging process, and no automated security scanning.
At the same time, Fullbay was preparing to move away from a PHP monolith toward a cloud native, serverless platform built primarily on AWS Lambda. The existing delivery and infrastructure model could not scale to support dozens of independently deployed services.
Key challenges included:
- Manual, high-risk production deployments
- No repeatable CI/CD workflows
- Limited visibility into infrastructure state and changes
- No centralized SAST or SCA scanning
- Processes that could not scale with microservices
Solution
Fullbay standardized on Harness as a single orchestration platform for infrastructure, CI/CD, and security, making IaC the core organizing principle of the engineering platform.
Infrastructure as Code at the Core
All infrastructure at Fullbay is defined as code using OpenTofu and managed through Harness IaCM, giving the team Terraform-compatible workflows on an open, community-driven foundation that supports long-term flexibility without vendor lock-in.
“We started with OpenTofu from day one. It gives us everything we need from an IaC workflow, but with an open foundation that aligns with how we want to build and scale our platform.”
Harness IaCM helped the team replace manual, opaque infrastructure changes with a controlled and observable workflow. ClickOps access is intentionally restricted with RBAC, significantly reducing configuration drift and keeping environments consistent as the platform scales. To further operationalize IaC beyond version control across teams, Fullbay uses an IDP that is integrated with Harness. Engineers interact with the platform, which then triggers Harness IaCM to provision infrastructure and services. This approach enables self-service while making sure all infrastructure is created and managed through standardized, repeatable workflows.
With this approach, the Fullbay team can:
- Define approved infrastructure patterns (for example, serverless Lambda stacks) using reusable templates
- Apply environment-specific configuration, including accounts, regions, permissions, and standardized tagging
- Provision and evolve infrastructure without copying configuration or introducing drift
Fullbay modernized its infrastructure delivery by adopting OpenTofu and Harness IaCM to eliminate manual changes and enforce consistent, governed workflows at scale. The result is fast, self-service infrastructure delivery without sacrificing control or reliability.
CI/CD Designed for Scale and Maintainability
Fullbay uses Harness CI and CD across both traditional and cloud native workloads, replacing manual deployments with consistent, automated pipelines.
To avoid brittle Bash scripting, the team built an internal CLI tool that encapsulates deployment logic in a type-safe, testable codebase. Harness pipelines remain lightweight and focus on orchestration, while the containerized script performs the heavy lifting using AWS SDKs.
This approach allows Fullbay to:
- Test deployment logic independently of pipelines
- Keep pipelines simple, reusable, and readable
- Update deployment behavior by rolling new container images
Security Testing Orchestration with an AI Roadmap
Using Harness Security Testing Orchestration, Fullbay integrated open-source SAST and SCA tools directly into its pipelines. Vulnerability data is automatically deduplicated and surfaced in the Harness UI, eliminating the need for separate security platforms or log analysis. Security has moved from nonexistent to embedded in every pipeline, without slowing developers down. Today, Fullbay focuses on visibility and awareness. Next, the team plans to introduce AI-assisted remediation, helping engineers resolve vulnerabilities faster and enabling stronger enforcement policies over time.
Results and Metrics
By putting Infrastructure as Code first and using Harness as a unified CI/CD platform, Fullbay transformed how it builds and operates software.
- Deployment Velocity: Moved from manual, SSH-based deployments to automated pipelines; monthly releases today with a roadmap to tens to 50+ deployments per day as microservices mature.
- Infrastructure Coverage: 100% of infrastructure is now managed as code, with new services provisioned end-to-end through automated pipelines.
- Security Posture: Integrated SAST and SCA in CI, with centralized vulnerability visibility and a roadmap for adopting Harness’s AI-driven remediation.
“Harness lets a company our size operate with the same delivery sophistication as organizations like Amazon without the operational burden.”
By combining Harness IaCM, CI/CD, and security orchestration, Fullbay effectively built an internal platform that provides golden paths for infrastructure and delivery. Engineers consume standardized templates and workflows through self-service interfaces, while the platform team enforces consistency, security, and cost controls centrally.
What’s Next
As Fullbay continues building its next-generation platform, the team plans to expand its use of Harness with:
- Feature Flags to decouple deployment from release and support safer rollouts
- AI-driven security remediation to accelerate vulnerability resolution
- AI Verification & Rollback to safeguard deployments to production
With Harness as its infrastructure and delivery foundation, Fullbay is building a platform designed for speed, safety, and scale today and into the future.
