Terraform is an infrastructure-as-code tool for defining and managing cloud and on-premises resources with human-readable configuration files.
Alternatives to HashiCorp Sentinel
AWS CloudFormation models, provisions, and manages related AWS and third-party resources as infrastructure as code.
Kyverno is a free, open-source policy engine designed for Kubernetes.
- 4

Open Policy Agent Gatekeeper
Open Policy Agent Gatekeeper is a free, open-source policy controller for Kubernetes.
Free planOpen sourceAPILinuxSelf-hosted7.2Free plan - 5

Fairwinds Polaris
Fairwinds Polaris is an open source policy engine that validates and can remediate Kubernetes resource configuration.
Free planWebLinuxmacOSSelf-hosted7.1Free plan - 6
Google Cloud Organization Policy
Google Cloud Organization Policy gives administrators centralized, programmatic control over Google Cloud resources by applying constraints across an…
Free planWebAPILinuxmacOS7.1Free plan - 7
Conftest
Conftest is a free utility for testing structured configuration data, designed especially for CI environments.
Free planLinuxmacOSWindows6.8Free plan - 8

Open Policy Agent
Open Policy Agent (OPA) is a free, open-source policy engine for separating policy decisions from the systems that enforce them.
Free planWebAPILinuxmacOS6.8Free plan - 9
Google Cloud Terraform Policy Validation
Google Cloud Terraform Policy Validation checks Terraform plans against organizational security and governance constraints before infrastructure changes are applied.
Free planLinuxmacOSWindows6.7Free plan - 10

Firefly
Firefly automates cloud infrastructure through Infrastructure-as-Code and helps teams govern cloud environments and recover from outages and cyberattacks.
WebAPISelf-hosted6.4From $2,499 a month - 11
Checkov
Checkov is a free infrastructure-as-code scanner that identifies misconfigurations that may create security or compliance problems.
Free planLinuxmacOS6.2Free plan - 12
Cloud Custodian
Cloud Custodian manages cloud resources through policies written in YAML.
Free planLinuxmacOSSelf-hostedWindows6.2Free plan - 13

KICS
KICS is an open-source static code analysis solution for finding security vulnerabilities, compliance issues, and infrastructure misconfigurations in…
Free planLinuxmacOSSelf-hostedWindows6.2Free plan - 14
Kubewarden
Kubewarden is an open-source security platform for Kubernetes workloads, with components that can be used together or independently.
LinuxmacOSSelf-hostedWindows6.1 - 15
PolicyForge
PolicyForge is an open-source policy-as-code scanner for infrastructure-as-code, aimed at teams working with Terraform, Bicep, Kubernetes manifests, or Helm charts.
Free planWebLinuxSelf-hosted6.1Free plan - 16
KubeLinter
KubeLinter is a free static analyzer for Kubernetes configuration files.
Free planLinuxmacOSSelf-hosted6.0Free plan - 17
terraform-compliance
terraform-compliance is a free, open-source framework for testing Terraform infrastructure code against security and compliance policies before deployment.
Free planLinuxSelf-hosted5.9Free plan - 18
Tirith
Tirith is a free, open-source command-line tool for evaluating infrastructure documents against JSON policies.
Free planLinux5.8Free plan - 19
Nirmata Enterprise for Kyverno
Nirmata Enterprise for Kyverno is a supported, OSS-compatible distribution of the Kyverno Kubernetes policy engine.
LinuxSelf-hosted5.5From $14,800 a year - 20
Terraform Test Framework
Terraform Test Framework, or TF2, is a free, open-source framework for testing Terraform code and Terraform-provisioned infrastructure.
LinuxSelf-hosted5.2 - 21
AWS CloudFormation Guard
LinuxmacOSWindows4.8 - 22
Chef InSpec
LinuxmacOSWindows4.8 - 23

Azure Policy
Azure Policy is a free web service for defining and applying rules to Azure resources.
Web4.7 - 244.6

