AWS CloudFormation models, provisions, and manages related AWS and third-party resources as infrastructure as code.
Alternatives to Chef InSpec
Chef InSpec turns compliance, security, and policy requirements into code, then tests applications and infrastructure against their desired state. Reusable profiles organize controls and can specify platform requirements and dependencies. Its resources cover AWS, Azure, AliCloud, and GCP, and tests can run locally or against cloud services and infrastructure. Results can be exported as JSON, HTML, or plain text, and InSpec can connect with Test Kitchen. Readers may look…
CIS-CAT Pro Assessor scans local or remote systems and reports their alignment with CIS Benchmarks.
Test Kitchen is a free test harness for executing infrastructure code in isolation on one or more platforms.
- 4
kube-score
kube-score statically analyzes Kubernetes object definitions and recommends changes intended to improve application security and resilience.
Free planWebLinuxmacOSSelf-hosted7.0Free plan - 5
Conftest
Conftest is a free utility for testing structured configuration data, designed especially for CI environments.
Free planLinuxmacOSWindows6.8Free plan - 6
Kubetest2
Kubetest2 is a free, open-source framework for deploying Kubernetes clusters and running end-to-end tests against them.
Free planOpen sourceAPISelf-hosted6.8Free plan - 7
Checkov
Checkov is a free infrastructure-as-code scanner that identifies misconfigurations that may create security or compliance problems.
Free planLinuxmacOS6.2Free plan - 8

KICS
KICS is an open-source static code analysis solution for finding security vulnerabilities, compliance issues, and infrastructure misconfigurations in…
Free planLinuxmacOSSelf-hostedWindows6.2Free plan - 9
KubeLinter
KubeLinter is a free, open-source tool for statically checking Kubernetes YAML files, Helm charts and Kustomize manifests for production-readiness and security practices.
Free planLinuxmacOSSelf-hosted6.2Free plan - 10
OpenSCAP
OpenSCAP is a collection of open-source tools for security compliance and automated vulnerability assessment using the Security Content Automation Protocol (SCAP).
Free planLinuxmacOSSelf-hostedWindows6.2Free plan - 11

Terratest
Terratest is a free, open-source Go library for writing automated tests for infrastructure code.
Free planLinux6.2Free plan - 12
TFLint
TFLint is a free, pluggable command-line linter for Terraform that checks configurations for possible errors and rule violations.
Free planLinuxmacOSSelf-hostedWindows6.2Free plan - 13
cfn-nag
cfn-nag is a free static analysis tool that scans CloudFormation templates for patterns that may indicate insecure infrastructure.
Free planLinuxmacOSSelf-hosted6.1Free plan - 14
cfn-lint
cfn-lint is a free, open-source tool for validating AWS CloudFormation YAML and JSON templates.
Free planLinuxmacOSSelf-hostedWindows6.0Free plan - 15

Cinc Auditor
Cinc Auditor is a free distribution of Chef InSpec for compliance and audit workflows.
Free planLinuxmacOSWindows6.0Free plan - 16
kubeconform
Kubeconform is a free command-line tool for checking Kubernetes manifests before deployment.
Free planLinuxmacOSSelf-hostedWindows6.0Free plan - 17
Serverspec
Serverspec is an open-source Ruby gem for writing RSpec tests that check server configuration against actual system state.
Free planLinuxmacOSSelf-hostedWindows6.0Free plan - 18
Sonobuoy
Sonobuoy is a free diagnostic tool for inspecting Kubernetes cluster state using non-destructive configuration tests.
LinuxmacOSSelf-hostedWindows5.9 - 19
terraform-compliance
terraform-compliance is a free, open-source framework for testing Terraform infrastructure code against security and compliance policies before deployment.
Free planLinuxSelf-hosted5.9Free plan - 20
terraform-plugin-testing
terraform-plugin-testing is a free Go module for testing Terraform providers.
Free planLinuxmacOS5.9Free plan - 215.4
- 22
pytest-ansible
pytest-ansible is a free pytest plugin for using Ansible in tests and running Ansible collection unit tests.
Linux5.4 - 23
5.4 - 24
ClusterLoader2
Self-hosted5.3 - 25
Molecule
Molecule is a free, MIT-licensed Ansible testing framework for developing collections, playbooks, and roles.
Linux5.3 - 26
HashiCorp Enos
LinuxmacOS4.6 - 27
kube-bench
Linux4.6

