Kubescape is an open-source Kubernetes security platform for coverage across configuration, vulnerabilities, compliance, and runtime activity.
Alternatives to Dockle
Kyverno is a free, open-source policy engine designed for Kubernetes.
Grype is a free, Apache-2.0-licensed vulnerability scanner for container images, filesystems, SBOMs, and individual packages.
- 4

Open Policy Agent Gatekeeper
Open Policy Agent Gatekeeper is a free, open-source policy controller for Kubernetes.
Free planOpen sourceAPILinuxSelf-hosted7.2Free plan - 5

Sysdig Secure
Sysdig Secure is a cloud-native application protection platform for cloud environments, containers, Kubernetes, hosts, and serverless workloads.
WebAPILinuxmacOS7.2From $20 a month - 6

Trivy
Trivy is a free, Apache-2.0-licensed scanner for code repositories, binary artifacts, container images, and Kubernetes clusters.
Free planLinuxmacOSSelf-hostedWindows7.0Free plan - 7
KubeArmor
KubeArmor is an open-source runtime security system for hardening cloud-native workloads and enforcing policies while they run.
Free planAPILinuxSelf-hosted6.5Free plan - 8

RapidFort
RapidFort is a software supply chain security platform for containerized applications, combining vulnerability analysis, runtime visibility, hardened…
Free planWebLinuxSelf-hosted6.4Free plan - 9

Tetragon
Tetragon is a security observability and runtime enforcement tool for Linux, containers, and Kubernetes workloads.
Free planAPILinuxSelf-hosted6.4Free plan - 10

Deepfence ThreatMapper
Deepfence ThreatMapper is a self-hosted security tool that finds threats in production environments and ranks them by exploit risk.
Free planWebAPILinuxSelf-hosted6.3Free plan - 11

Prisma Cloud SCA
Prisma Cloud SCA scans open-source packages for vulnerabilities and license-compliance issues across code, builds, deployment and runtime.
WebAPI6.3 - 12

Anchore Enterprise
WebAPILinuxSelf-hosted6.2 - 13
Google Artifact Analysis
Google Artifact Analysis provides software composition analysis and stores and retrieves metadata.
WebAPILinuxmacOS6.2$0.26 one-time - 14

Falco
Falco is an open source runtime security project for Linux and self-hosted environments.
Free planLinuxSelf-hosted6.0Free plan - 15

Red Hat OpenShift Pipelines
Red Hat OpenShift Pipelines automates application delivery on Red Hat OpenShift using a cloud-native CI/CD approach built on Tekton.
WebAPILinuxSelf-hosted6.0 - 16
Tracee
Tracee is a free runtime security and observability tool for Linux that uses eBPF to monitor system calls, network activity, and file operations in real time.
Free planLinuxSelf-hosted6.0Free plan - 17
Clair
Clair is a free, open-source service that scans container images for vulnerabilities in base operating systems, installed packages, and programming language components.
Free planAPILinuxSelf-hosted5.9Free plan - 18

Wiz Container and Kubernetes Security
Wiz Container and Kubernetes Security is a web-based service for securing containers, Kubernetes, and cloud environments from development through runtime.
Web5.7 - 19

Docker Scout
Docker Scout is a software-as-a-service tool for scanning Docker images and registries and generating software bills of materials (SBOMs).
WebLinuxmacOSWindows5.5 - 20

Aqua Security
WebLinux5.3 - 215.1
- 22
SUSE NeuVector
SUSE NeuVector is a free, open-source Kubernetes security product designed for self-hosted deployment.
Web5.0 - 234.9
- 24
Qualys Container Security
WebLinux4.8 - 25
kube-bench
Linux4.6
