17.4
Grype is a free, Apache-2.0-licensed vulnerability scanner for container images, filesystems, SBOMs, and individual packages.
Free planOpen sourceLinuxmacOSSelf-hosted
Alternatives to Mondoo CSPM
Mondoo CSPM brings AWS, Azure, and Google Cloud into one posture and remediation workflow. It continuously scans environments, ranks misconfigurations by exploitability and business exposure, and turns fixes into reviewable code changes and pull requests. People approve each agent-generated fix, while Mondoo rechecks changes and records evidence. Policy rules can be version controlled as code, and mappings cover CIS Benchmarks, PCI DSS, HIPAA, GDPR, SOC 2, ISO 27001, and…
27.2
Sysdig Secure is a cloud-native application protection platform for cloud environments, containers, Kubernetes, hosts, and serverless workloads.
WebAPILinux
37.1
Free planWebAPILinux
- 4
Trivy
Trivy is a free, Apache-2.0-licensed scanner for code repositories, binary artifacts, container images, and Kubernetes clusters.
Free planLinuxmacOSSelf-hostedWindows7.0Free plan - 5
ZeroPath
ZeroPath is an application security platform for finding and fixing exploitable vulnerabilities across code, cloud, and runtime.
WebAPILinuxmacOS6.5From $1,000 a month - 6
RapidFort
RapidFort is a software supply chain security platform for containerized applications, combining vulnerability analysis, runtime visibility, hardened…
Free planWebLinuxSelf-hosted6.4Free plan - 7
Anchore Enterprise
WebAPILinuxSelf-hosted6.2 - 8
Google Artifact Analysis
Google Artifact Analysis provides software composition analysis and stores and retrieves metadata.
WebAPILinuxmacOS6.2$0.26 one-time - 9
Harbor
Harbor is a free, open source registry for securely managing artifacts across cloud native platforms such as Kubernetes and Docker.
Free planWebAPILinuxSelf-hosted6.1Free plan - 10
Mirantis Secure Registry
WebAPILinuxSelf-hosted6.1From $9,999 a year - 11
Uptycs Container Security
Uptycs Container Security provides security controls for containers and Kubernetes across development, deployment, and runtime.
WebAPILinuxSelf-hosted6.0From $36 a year - 12
Aqua Container Security
Aqua Container Security protects container applications from image creation through runtime across platforms and clouds.
WebLinuxSelf-hostedWindows5.9 - 13
Clair
Clair is a free, open-source project for finding vulnerabilities in application container images, including OCI and Docker images.
Free planAPILinuxSelf-hosted5.9Free plan - 14
Amazon Inspector
Amazon Inspector is a cloud security service that automatically discovers workloads and code repositories, then scans them for software…
WebAPI5.8 - 15
CrowdStrike Falcon Cloud Security
WebLinuxmacOSWindows5.7 - 16
5.6Free plan - 17
Dagda
Dagda is a free, self-hosted Docker security tool for examining images and containers for vulnerabilities, malware, and other threats, while…
APILinuxSelf-hosted5.5 - 18
Docker Scout
Docker Scout is a software-as-a-service tool for scanning Docker images and registries and generating software bills of materials (SBOMs).
WebLinuxmacOSWindows5.5 - 19
FortiCNAPP
WebLinuxWindows5.5 - 20
O3 Security Image Scanner
O3 Security Image Scanner checks container images for operating-system vulnerabilities, malicious layers, embedded secrets, and permission…
Web5.3 - 21
Sonatype Container Scanner
APILinuxSelf-hostedWindows5.3 - 225.1
- 23
SUSE NeuVector
SUSE NeuVector is a free, open-source Kubernetes security product designed for self-hosted deployment.
Web5.0 - 244.9
- 25
Qualys Container Security
WebLinux4.8 - 264.6
- 274.6
- 28
Wiz Code
Web4.6