I want to share a decision that initially felt like a compromise but turned out to be the best choice we could have made.
18 months ago, we faced the classic build vs buy debate for our internal developer platform. Pure build felt too expensive and risky. Pure buy felt too constraining.
We chose a hybrid model. It worked brilliantly.
The Context
Company: Mid-stage SaaS, 220 engineers
Challenge: Developer productivity was becoming a bottleneck as we scaled
Stakeholders: Engineering wanted control, Finance wanted predictability, Developers wanted speed
The Pure Options (And Why They Failed Our Needs)
Pure Build (Self-Hosted Backstage):
Complete control
Unlimited customization
$1.2M+ annual cost
18+ month timeline
Maintenance burden
TypeScript skills gap
Pure Buy (Fully Managed):
Fast time to value
Predictable costs
Vendor dependency concerns
Data sovereignty questions (we’re in financial services)
Customization limits for compliance workflows
Engineering team resistance
Neither option satisfied all stakeholders. We needed a third path.
The Hybrid Solution We Implemented
Foundation (Buy): Humanitec for IDP baseline
- Portal UI and design system
- Service catalog and discovery
- Authentication and RBAC
- User management
- Basic workflow engine
- Infrastructure integrations
Custom Layer (Build): Our differentiation
- Golden path templates (our tech stack and patterns)
- Deployment workflow automation (our processes)
- Custom compliance checks (our regulatory requirements)
- Cost allocation dashboard (our business logic)
- Internal tool integrations (our legacy systems)
- Security policy enforcement (our requirements)
The Numbers
Cost Structure:
- Humanitec: $120K/year (220 engineers, enterprise plan)
- Platform team: 3 engineers ($450K/year fully loaded)
- Total: $570K/year
Compare to alternatives:
- Pure DIY: $1.1M/year (6 engineers + infrastructure)
- Savings: $530K/year = 93% ROI
Timeline:
- Production-ready in 4 months (vs 18+ for DIY)
- First golden path shipped in 6 weeks
- 78% developer adoption in 6 months
What We Buy (The Commodity Infrastructure)
We didn’t build:
Portal and UI → Humanitec provides polished, accessible, mobile-ready interface
- Would have taken 4-6 months to build
- Requires ongoing design and frontend engineering
- Professional quality out of box
Catalog System → Humanitec handles service discovery, metadata, search
- Would have taken 2-3 months to build
- Requires database design, indexing, pagination
- Scales automatically as we grow
Authentication & RBAC → Humanitec manages user auth, permissions, SSO
- Would have taken 6+ months to build securely
- Requires security expertise, audit trails, token management
- Compliance-ready out of box
Core Infrastructure → Humanitec manages hosting, monitoring, scaling, uptime
- Would require 1-2 FTEs ongoing
- Database maintenance, infrastructure ops, incident response
- 99.9% SLA without our effort
What We Build (The Differentiator)
We focused engineering capacity on:
Golden Path Templates:
- Service scaffolding for our microservices architecture
- Terraform modules for our AWS patterns
- CI/CD pipeline templates for our deployment workflows
- Business value: New services onboard in 30 minutes vs 8 hours
Deployment Automation:
- Custom approval workflows for our compliance requirements
- Integration with our change management system
- Automated testing gates specific to our quality standards
- Business value: 3x deployment frequency, 60% fewer incidents
Cost Visibility Dashboard:
- Per-service cost tracking connected to our AWS billing
- Custom cost allocation by team and project
- Budget alerts configured to our financial planning
- Business value: $45K/month in cost optimizations identified
Compliance Automation:
- Security policy checks for our regulatory requirements (SOC2, PCI)
- Automated evidence collection for audits
- Custom guardrails for data handling
- Business value: 80% faster compliance verification
Legacy System Integration:
- Connector to our mainframe system (yes, we still have one)
- Integration with our custom ticketing system
- Data sync with our HR system for team structures
- Business value: Single source of truth across tools
The Key Insight: Buy Undifferentiated, Build Competitive Advantage
Ask yourself: “Does this capability differentiate us in the market?”
Portal UI? No. Every company needs a portal. UIs don’t differentiate.
Service catalog? No. Catalog is table stakes.
Authentication? No. Security is critical but not unique.
Our service onboarding process? YES. Encodes our architecture decisions, tech choices, quality standards.
Our deployment workflows? YES. Reflects our compliance requirements and operational maturity.
Our cost allocation logic? YES. Maps to our business model and team structure.
Buy what every company needs. Build what makes you unique.
Integration Architecture (Technical Details)
For engineers wondering “how do you integrate custom work with managed platform”:
Humanitec’s Plugin System:
- Follows Backstage plugin architecture (open standard)
- Plugins written in TypeScript (standard web tech)
- APIs for extending catalog, workflows, UI
- Can develop locally, deploy to managed environment
Our Custom Plugins:
cost-dashboard: React app, queries AWS Cost Explorer APIcompliance-checker: Backend service, integrates with security toolsgolden-path-generator: Templates + wizards for service creationlegacy-connector: Adapter layer to mainframe APIs
Safety Net:
- Plugins are open source compatible
- If we ever need to migrate, plugins work on self-hosted Backstage
- We’re not locked into Humanitec’s proprietary system
The Cultural Win
Engineering team was satisfied:
- They built meaningful capabilities, not framework code
- Solved organizational problems, not React debugging
- Saw direct impact on developer productivity
- Shipped features monthly, not quarterly
Finance team was satisfied:
- Clear cost structure: $120K platform + $450K team = $570K total
- 93% ROI vs DIY option
- Predictable annual costs
- Measurable productivity gains
Developers were satisfied:
- Polished portal experience (professional quality)
- Fast onboarding (30 minutes to new service)
- Reliable automation (deployments work consistently)
- 78% adoption rate (high satisfaction)
Results After 12 Months
Productivity gains (measured via surveys + telemetry):
- Service onboarding: 8 hours → 30 minutes (94% reduction)
- Deployment time: 45 minutes → 8 minutes (82% reduction)
- Finding documentation: 15 min/day → 2 min/day (87% reduction)
- Time saved per developer: ~4 hours/week
Financial impact:
- 220 engineers × 4 hrs/week × $75/hr × 48 weeks = $3.2M annual productivity gain
- Platform cost: $570K/year
- Net benefit: $2.63M/year = 461% ROI
Positive ROI in 12 months. Paid for itself 4.6x over.
Why Isn’t Hybrid Discussed More?
I think the platform engineering discourse has a false dichotomy problem:
"Build vs Buy" frames it as binary choice.
Reality: It’s a spectrum from pure DIY to pure managed.
Most organizations should be somewhere in the middle:
- Buy the infrastructure layer (commodity)
- Build the capability layer (differentiation)
But industry narratives push extremes:
- "Build everything! Own your destiny!"
- "Buy everything! SaaS solves all problems!"
Hybrid is the pragmatic middle ground that satisfies technical, financial, and organizational needs.
For Teams Evaluating This Decision
Framework for deciding what to build vs buy:
| Capability | Commodity? | Control Need | Vendor Quality | Skill Match | Decision |
|---|---|---|---|---|---|
| Portal UI | Yes | Low | High | No | Buy |
| Catalog | Yes | Low | High | Partial | Buy |
| Auth/RBAC | Yes | Medium | High | No | Buy |
| Golden Paths | No | High | N/A | Yes | Build |
| Workflows | Hybrid | High | Medium | Yes | Build on top |
| Integrations | Hybrid | Medium | Low | Yes | Build |
If “Commodity=Yes” and “Vendor Quality=High”: Buy it
If “Commodity=No” and “Skill Match=Yes”: Build it
Everything else: Evaluate case by case
What We’d Do Differently
Honestly? Not much. The hybrid approach has been the right call.
If anything, we’d have started with managed platform even sooner instead of debating for 6 months.
Questions for the Community
-
Are others using hybrid approaches? I don’t see this discussed much in platform engineering circles.
-
How do you decide the boundary between “buy” and “build”?
-
What’s your experience with plugin architectures on managed platforms? Do they provide enough flexibility?
-
For those who went pure DIY or pure managed, would you reconsider a hybrid?
TL;DR: We chose hybrid model—buy Humanitec for foundation, build custom capabilities on top. Cost $570K/year vs $1.1M for DIY. Production in 4 months vs 18+. 78% adoption, 461% ROI in year one. Engineering team energized, finance team happy, developers productive.
Sometimes the compromise is the best solution.