Chef InSpec checks applications and infrastructure against a desired state described in InSpec code.
Alternatives to kubeconform
AWS CloudFormation models, provisions, and manages related AWS and third-party resources as infrastructure as code.
CIS-CAT Pro Assessor scans local or remote systems and reports their alignment with CIS Benchmarks.
- 4
Test Kitchen
Test Kitchen is a free test harness for executing infrastructure code in isolation on one or more platforms.
Free planOpen sourceAPILinuxmacOSSelf-hosted7.2Free plan - 5
kube-score
kube-score statically analyzes Kubernetes object definitions and recommends changes intended to improve application security and resilience.
Free planWebLinuxmacOSSelf-hosted7.0Free plan - 6
Conftest
Conftest is a free utility for testing structured configuration data, designed especially for CI environments.
Free planLinuxmacOSWindows6.8Free plan - 7
Kubetest2
Kubetest2 is a free, open-source framework for deploying Kubernetes clusters and running end-to-end tests against them.
Free planOpen sourceAPISelf-hosted6.8Free plan - 8
Checkov
Checkov is a free infrastructure-as-code scanner that identifies misconfigurations that may create security or compliance problems.
Free planLinuxmacOS6.2Free plan - 9

KICS
KICS is an open-source static code analysis solution for finding security vulnerabilities, compliance issues, and infrastructure misconfigurations in…
Free planLinuxmacOSSelf-hostedWindows6.2Free plan - 10
KubeLinter
KubeLinter is a free, open-source tool for statically checking Kubernetes YAML files, Helm charts and Kustomize manifests for production-readiness and security practices.
Free planLinuxmacOSSelf-hosted6.2Free plan - 11
OpenSCAP
OpenSCAP is a collection of open-source tools for security compliance and automated vulnerability assessment using the Security Content Automation Protocol (SCAP).
Free planLinuxmacOSSelf-hostedWindows6.2Free plan - 12

Terratest
Terratest is a free, open-source Go library for writing automated tests for infrastructure code.
Free planLinux6.2Free plan - 13
TFLint
TFLint is a free, pluggable command-line linter for Terraform that checks configurations for possible errors and rule violations.
Free planLinuxmacOSSelf-hostedWindows6.2Free plan - 14
cfn-nag
cfn-nag is a free static analysis tool that scans CloudFormation templates for patterns that may indicate insecure infrastructure.
Free planLinuxmacOSSelf-hosted6.1Free plan - 15
cfn-lint
cfn-lint is a free, open-source tool for validating AWS CloudFormation YAML and JSON templates.
Free planLinuxmacOSSelf-hostedWindows6.0Free plan - 16

Cinc Auditor
Cinc Auditor is a free distribution of Chef InSpec for compliance and audit workflows.
Free planLinuxmacOSWindows6.0Free plan - 17
Serverspec
Serverspec is an open-source Ruby gem for writing RSpec tests that check server configuration against actual system state.
Free planLinuxmacOSSelf-hostedWindows6.0Free plan - 18
Sonobuoy
Sonobuoy is a free diagnostic tool for inspecting Kubernetes cluster state using non-destructive configuration tests.
LinuxmacOSSelf-hostedWindows5.9 - 19
terraform-compliance
terraform-compliance is a free, open-source framework for testing Terraform infrastructure code against security and compliance policies before deployment.
Free planLinuxSelf-hosted5.9Free plan - 20
terraform-plugin-testing
terraform-plugin-testing is a free Go module for testing Terraform providers.
Free planLinuxmacOS5.9Free plan - 215.4
- 22
pytest-ansible
pytest-ansible is a free pytest plugin for using Ansible in tests and running Ansible collection unit tests.
Linux5.4 - 23
5.4 - 24
ClusterLoader2
Self-hosted5.3 - 25
Molecule
Molecule is a free, MIT-licensed Ansible testing framework for developing collections, playbooks, and roles.
Linux5.3 - 26
HashiCorp Enos
LinuxmacOS4.6 - 27
kube-bench
Linux4.6

