4
Open Policy Agent Gatekeeper
Open Policy Agent Gatekeeper is a free, open-source policy controller for Kubernetes.
Free planOpen sourceAPILinuxSelf-hosted
7.2Free plan
Visit
5
Fairwinds Polaris
Fairwinds Polaris is an open source policy engine that validates and can remediate Kubernetes resource configuration.
Free planWebLinuxmacOSSelf-hosted
7.1Free plan
Visit
6
Google Cloud Organization Policy
Google Cloud Organization Policy gives administrators centralized, programmatic control over Google Cloud resources by applying constraints across an…
Free planWebAPILinuxmacOS
7.1Free plan
Visit
7
Conftest
Conftest is a free utility for testing structured configuration data, designed especially for CI environments.
Free planLinuxmacOSWindows
6.8Free plan
Visit
8
Open Policy Agent
Open Policy Agent (OPA) is a free, open-source policy engine for separating policy decisions from the systems that enforce them.
Free planWebAPILinuxmacOS
6.8Free plan
Visit
9
AWS CloudFormation
AWS CloudFormation models, provisions, and manages related AWS and third-party resources as infrastructure as code.
Free planWebAPILinuxmacOS
6.7Free plan
Visit
10
Google Cloud Terraform Policy Validation
Google Cloud Terraform Policy Validation checks Terraform plans against organizational security and governance constraints before infrastructure changes are applied.
Free planLinuxmacOSWindows
6.7Free plan
Visit
11
Chef Infra
Chef Infra is configuration management software for automating infrastructure setup and maintaining a defined system state.
APILinuxmacOSSelf-hosted
6.6From $4.92 a month
Visit
12
Firefly
Firefly automates cloud infrastructure through Infrastructure-as-Code and helps teams govern cloud environments and recover from outages and cyberattacks.
WebAPISelf-hosted
6.4From $2,499 a month
Visit
13
Checkov
Checkov is a free infrastructure-as-code scanner that identifies misconfigurations that may create security or compliance problems.
Free planLinuxmacOS
6.2Free plan
Visit
14
Cloud Custodian
Cloud Custodian manages cloud resources through policies written in YAML.
Free planLinuxmacOSSelf-hostedWindows
6.2Free plan
Visit
15
Google Config Sync
Google Config Sync automates configuration and policy synchronization across Kubernetes clusters.
Free planWebAPISelf-hosted
6.2Free plan
Visit
16
KICS
KICS is an open-source static code analysis solution for finding security vulnerabilities, compliance issues, and infrastructure misconfigurations in…
Free planLinuxmacOSSelf-hostedWindows
6.2Free plan
Visit
17
cfn-lint
cfn-lint is a free, open-source tool for validating AWS CloudFormation YAML and JSON templates.
Free planLinuxmacOSSelf-hostedWindows
6.1Free plan
Visit
18
Kubewarden
Kubewarden is an open-source security platform for Kubernetes workloads, with components that can be used together or independently.
LinuxmacOSSelf-hostedWindows
6.1
Visit
19
PolicyForge
PolicyForge is an open-source policy-as-code scanner for infrastructure-as-code, aimed at teams working with Terraform, Bicep, Kubernetes manifests, or Helm charts.
Free planWebLinuxSelf-hosted
6.1Free plan
Visit
20
KubeLinter
KubeLinter is a free static analyzer for Kubernetes configuration files.
Free planLinuxmacOSSelf-hosted
6.0Free plan
Visit
21
terraform-compliance
terraform-compliance is a free, open-source framework for testing Terraform infrastructure code against security and compliance policies before deployment.
Free planLinuxSelf-hosted
5.8Free plan
Visit
22
Tirith
Tirith is a free, open-source command-line tool for evaluating infrastructure documents against JSON policies.
Free planLinux
5.8Free plan
Visit
23
Nirmata Enterprise for Kyverno
Nirmata Enterprise for Kyverno is a supported, OSS-compatible distribution of the Kyverno Kubernetes policy engine.
LinuxSelf-hosted
5.5From $1,233.33 a month
Visit
24
Terraform Test Framework
Terraform Test Framework, or TF2, is a free, open-source framework for testing Terraform code and Terraform-provisioned infrastructure.
LinuxSelf-hosted
5.2
Visit

Back to Azure Policy